Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft
File: LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft (raw, json)
Hash identifier: lis6hftgPuJMp5j+z5BuLRmQV2W6wncIbe6tO6GlBus=
Subject key identifier: 65:35:53:ED:97:13:E5:33:32:6B:77:D7:59:3F:A3:58:79:DE:3C:CA
Authority key identifier: 2E:18:10:D5:C9:11:B4:A8:10:73:FA:E6:38:97:1B:57:7D:D7:A6:42
Certificate issuer: /CN=2e1810d5c911b4a81073fae638971b577dd7a642
Certificate serial: 01964F6CA9D05F550CF52BFFCEF519979561
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhgQ1ckRtKgQc_rmOJcbV33XpkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft
Manifest number: 0FC7
Signing time: Sat 19 Apr 2025 19:00:43 +0000
Manifest this update: Sat 19 Apr 2025 19:00:43 +0000
Manifest next update: Sun 20 Apr 2025 19:00:43 +0000
Files and hashes: 1: LhgQ1ckRtKgQc_rmOJcbV33XpkI.crl (hash: 4gZSxjq2fi0H4FWFg3Nfep2unpyIbH1onu03Obu3h10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhgQ1ckRtKgQc_rmOJcbV33XpkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:a9:d0:5f:55:0c:f5:2b:ff:ce:f5:19:97:95:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1810d5c911b4a81073fae638971b577dd7a642
Validity
Not Before: Apr 19 19:00:43 2025 GMT
Not After : Apr 20 19:00:43 2025 GMT
Subject: CN=653553ed9713e533326b77d7593fa35879de3cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f2:d3:8b:89:3d:82:a2:d7:39:1d:22:4e:87:
24:c6:63:38:92:b5:21:07:d1:c4:30:77:61:6b:fd:
18:39:51:86:a7:1b:e2:19:8a:96:3f:8e:60:6e:9a:
c3:3d:4e:5e:91:25:61:ea:51:92:60:7b:51:81:d6:
84:f9:27:fc:ee:97:f5:35:1d:2e:22:84:c1:b4:9a:
76:92:59:dd:c7:6c:b2:c4:26:94:1b:e0:dc:92:6a:
50:4c:5d:b0:db:b7:01:87:f5:dd:b9:b2:f1:5c:f0:
5a:57:d6:1e:0f:31:d8:f3:c0:44:e3:9c:9c:6f:f4:
d4:75:52:63:06:15:20:5b:ae:12:aa:4f:9b:6a:44:
b0:29:50:24:e9:d2:63:e2:2c:fe:fc:4c:93:59:d3:
03:94:3b:8e:77:10:e8:30:c1:02:63:54:09:11:85:
a0:15:43:96:0b:ea:45:d1:ef:6e:24:77:66:28:60:
f5:85:68:9c:6a:da:88:fc:7c:5a:e4:bb:9d:08:3b:
c1:9f:90:9c:37:ec:cb:d6:fa:38:35:44:1c:dd:a2:
35:4f:ec:38:59:e9:e4:da:82:e3:ee:7d:31:85:a8:
ef:95:39:d2:d9:ef:17:76:7a:d7:a0:b5:1a:2e:ce:
7a:41:71:cb:64:c8:2f:2a:1d:99:0c:77:4e:db:e8:
d4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:35:53:ED:97:13:E5:33:32:6B:77:D7:59:3F:A3:58:79:DE:3C:CA
X509v3 Authority Key Identifier:
keyid:2E:18:10:D5:C9:11:B4:A8:10:73:FA:E6:38:97:1B:57:7D:D7:A6:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhgQ1ckRtKgQc_rmOJcbV33XpkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:09:79:db:03:45:35:64:76:96:b3:5f:51:b9:6c:2a:c3:b0:
c7:ad:7a:52:df:2a:65:e7:d0:aa:0b:b1:4a:99:f6:98:40:be:
38:df:5e:ef:91:45:70:1d:83:4c:de:ba:57:f0:1a:4d:b1:fb:
72:89:a6:9c:fc:c4:d6:63:95:be:c3:dd:a7:46:42:43:8e:a1:
f4:69:f1:b8:57:a9:55:e0:76:93:05:29:e7:70:dd:bb:f4:9d:
c1:37:a6:c9:f6:de:e3:81:f1:36:4e:4b:c0:b8:7d:be:6e:45:
2e:99:b5:00:ce:4b:96:98:59:bc:ad:88:ec:48:0d:42:02:be:
7d:bd:62:59:77:6e:cf:89:b0:7f:8f:b9:7d:c8:f4:48:6a:eb:
0e:af:34:1b:dd:73:c9:29:78:3a:fd:33:bf:3b:de:63:57:ca:
07:c6:2c:9b:1c:1d:a7:59:d6:83:cd:a2:22:d7:d0:a4:8f:95:
3d:4a:2a:cf:f0:bf:1b:62:78:a1:74:63:ca:f3:6f:3e:c2:51:
fb:64:b7:3c:21:bc:7b:ca:c5:52:13:4f:d8:c9:1e:05:05:88:
cf:fd:f0:49:6a:22:e6:fe:e9:c5:0e:f4:ae:49:fd:fe:d4:72:
41:21:23:34:43:76:5a:48:d3:2f:af:ed:06:b3:2b:ef:bc:d7:
39:c3:cd:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 01:59:17 2025 by rpki-client