Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
File: LdOuI8tG7pwhlQ78tg3voJS6VUg.mft (raw, json)
Hash identifier: EbV4lWMkYoiXrY0Q+AxhXwYtN9eD9BuzSbt8RREvoL4=
Subject key identifier: 2B:D4:58:70:E4:EF:4D:96:07:46:88:30:09:8D:04:9D:EB:B5:DF:E6
Authority key identifier: 2D:D3:AE:23:CB:46:EE:9C:21:95:0E:FC:B6:0D:EF:A0:94:BA:55:48
Certificate issuer: /CN=2dd3ae23cb46ee9c21950efcb60defa094ba5548
Certificate serial: 019646A069D1E764602A7ED3BFEBB93EDCA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
Manifest number: 14F7
Signing time: Fri 18 Apr 2025 02:00:40 +0000
Manifest this update: Fri 18 Apr 2025 02:00:40 +0000
Manifest next update: Sat 19 Apr 2025 02:00:40 +0000
Files and hashes: 1: LdOuI8tG7pwhlQ78tg3voJS6VUg.crl (hash: LkXPmgbW3aoanPlAd831n6zeLzr/n7spcq825pAcR4M=)
2: NR5q24H1ufzbYF2XouLHFu4YVgE.roa (hash: P7YBV+TAXY1ntVvPbNeFWy4DC2dZewmJse8AyIIurOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:a0:69:d1:e7:64:60:2a:7e:d3:bf:eb:b9:3e:dc:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dd3ae23cb46ee9c21950efcb60defa094ba5548
Validity
Not Before: Apr 18 02:00:40 2025 GMT
Not After : Apr 19 02:00:40 2025 GMT
Subject: CN=2bd45870e4ef4d9607468830098d049debb5dfe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:28:5e:56:07:40:79:3a:b0:4f:c7:32:48:8f:
9a:fd:a5:2b:4e:30:6d:34:0a:70:2b:c4:2f:9d:c5:
44:7e:0a:93:f1:f7:d6:f8:2a:2b:74:3e:b8:9a:4b:
40:ee:71:01:ce:20:6e:fd:0e:eb:37:7c:9e:21:f3:
30:bc:8d:23:dc:45:fe:09:57:23:9a:a6:39:50:02:
e0:2c:80:de:06:1e:f9:57:71:a5:4b:42:3e:09:93:
8f:a2:13:02:52:3c:1b:7d:a4:ed:9e:3d:89:58:38:
9a:63:8b:85:7f:b8:72:2d:bc:d7:e6:ff:31:ee:45:
4c:8e:7e:a5:37:7a:a6:79:ea:5e:c3:41:f4:52:86:
5a:88:51:c8:43:5a:ce:9a:46:28:4f:07:a6:a3:b3:
54:b8:47:12:e6:75:a7:e1:0c:0d:6c:93:e9:8f:d4:
cd:39:df:56:50:f5:a4:e2:b7:e1:be:66:35:12:ed:
8c:fb:46:e0:64:9e:a6:73:a0:03:05:fa:a1:70:14:
2e:a2:42:10:31:81:2d:f1:20:f5:38:b0:54:40:84:
3c:ba:c7:c8:01:6d:02:80:ab:b4:1b:a4:ab:e3:8c:
fc:04:a4:f6:b0:52:f6:54:95:a8:30:ac:20:3d:90:
c1:89:32:24:64:0f:41:d1:cf:9c:eb:6d:c5:d6:8c:
78:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D4:58:70:E4:EF:4D:96:07:46:88:30:09:8D:04:9D:EB:B5:DF:E6
X509v3 Authority Key Identifier:
keyid:2D:D3:AE:23:CB:46:EE:9C:21:95:0E:FC:B6:0D:EF:A0:94:BA:55:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:27:57:9e:00:d5:a2:d6:97:4b:76:f0:15:74:da:1a:4d:7c:
fe:2b:93:c1:79:58:4a:60:6f:ba:75:1f:83:4c:42:27:b9:8d:
7e:0f:b1:84:6b:56:90:22:64:09:bb:ac:11:85:39:48:1c:4f:
67:54:36:c5:62:c3:f5:37:08:3f:91:8c:b9:57:97:9c:8f:2b:
5c:90:ad:4c:2a:21:d8:9b:58:4c:1b:e5:cb:be:bf:80:4d:b5:
8f:15:7a:c9:b8:24:a7:80:fe:cd:ec:f2:b1:94:df:48:da:24:
bb:9c:2f:94:79:36:80:55:99:4d:c9:c7:d0:90:13:6f:20:94:
8f:c2:9c:a0:91:44:02:5d:44:e8:21:fc:5f:91:43:49:14:8a:
d5:ed:31:3b:08:8a:fb:6c:33:e6:fa:22:91:4b:6d:ad:ee:cc:
28:0e:b0:96:b0:e4:a1:d6:ef:c4:9a:3d:5a:51:f6:5e:18:d8:
03:5f:6a:e0:93:85:e0:40:ba:04:47:d1:94:b7:4f:9e:f9:0f:
3d:2a:9a:31:bd:89:c2:41:bf:42:b7:30:23:74:20:3f:f7:9f:
fc:95:f6:1b:ef:18:6b:84:65:bb:30:02:40:1a:53:be:8d:f5:
04:50:c4:a4:e2:fe:2e:28:7d:19:42:27:7f:ba:d6:01:18:10:
71:73:7c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 08:23:30 2025 by rpki-client