Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
File: LdOuI8tG7pwhlQ78tg3voJS6VUg.mft (raw, json)
Hash identifier: K01TpP5pJmWSMOHpyXwdz+ohabL4Gl2bQPfTsJYj1VI=
Subject key identifier: E0:5A:43:DB:EF:DD:95:E4:AA:F0:A7:2A:E9:40:86:A5:D3:BB:DC:F8
Authority key identifier: 2D:D3:AE:23:CB:46:EE:9C:21:95:0E:FC:B6:0D:EF:A0:94:BA:55:48
Certificate issuer: /CN=2dd3ae23cb46ee9c21950efcb60defa094ba5548
Certificate serial: 019754FEA92DCBC2F4EE93395A2371CAAED6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
Manifest number: 1583
Signing time: Mon 09 Jun 2025 14:01:04 +0000
Manifest this update: Mon 09 Jun 2025 14:01:04 +0000
Manifest next update: Tue 10 Jun 2025 14:01:04 +0000
Files and hashes: 1: LdOuI8tG7pwhlQ78tg3voJS6VUg.crl (hash: h6UnNNpBjZ9lisg3P5Q+LK0/YiQ1eqFxSB+3C/MVPRs=)
2: NR5q24H1ufzbYF2XouLHFu4YVgE.roa (hash: P7YBV+TAXY1ntVvPbNeFWy4DC2dZewmJse8AyIIurOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:fe:a9:2d:cb:c2:f4:ee:93:39:5a:23:71:ca:ae:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dd3ae23cb46ee9c21950efcb60defa094ba5548
Validity
Not Before: Jun 9 14:01:04 2025 GMT
Not After : Jun 10 14:01:04 2025 GMT
Subject: CN=e05a43dbefdd95e4aaf0a72ae94086a5d3bbdcf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ad:3c:5d:33:7e:b3:12:03:5a:84:ee:05:6e:
55:31:fb:8b:2c:00:be:24:a9:6a:2b:60:f4:59:07:
47:90:0c:17:f4:92:24:50:a1:75:e9:7c:71:b2:53:
36:09:2e:2b:17:9f:05:fa:f6:d4:28:44:d3:de:d8:
25:63:7f:90:2a:ac:da:68:98:32:f8:91:de:c6:02:
10:3f:e4:55:31:ee:14:8f:fe:d5:4e:35:d5:be:25:
aa:21:d5:62:60:d6:63:fa:08:78:08:c8:79:b3:e9:
04:47:ab:df:81:3a:4a:64:a7:f2:25:81:24:50:0f:
d5:8f:ec:3b:78:30:94:5e:01:67:5f:41:c6:b4:99:
81:bc:bd:32:f4:9e:4d:70:f4:bc:b8:75:46:56:78:
84:21:d4:6f:cc:6d:66:4b:5b:19:43:e4:df:93:0b:
88:48:14:7f:b0:cc:db:87:ec:1a:e8:90:11:e5:71:
fa:7e:b7:81:ec:0a:e5:74:1e:46:cc:79:23:65:7d:
2d:5b:75:a1:8c:e0:19:24:aa:1a:3f:27:91:57:b7:
9e:ef:b1:90:ff:7a:8f:4f:4e:8e:29:f1:d3:31:de:
25:50:84:96:08:13:02:f7:44:10:5d:46:23:02:2f:
15:77:d5:92:8a:3f:76:da:2b:6c:13:f8:56:b9:2a:
9b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:5A:43:DB:EF:DD:95:E4:AA:F0:A7:2A:E9:40:86:A5:D3:BB:DC:F8
X509v3 Authority Key Identifier:
keyid:2D:D3:AE:23:CB:46:EE:9C:21:95:0E:FC:B6:0D:EF:A0:94:BA:55:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:f0:6b:8c:2c:6c:78:87:ea:f1:72:eb:9a:46:43:5d:0c:76:
ed:2d:84:87:67:bf:5b:12:28:5a:d3:dd:de:86:bc:e1:ee:0a:
b6:74:a5:a0:ce:01:81:7e:b5:eb:c3:22:ed:09:c9:af:48:4a:
f0:bd:80:02:cf:b9:a5:9d:9c:7f:b3:71:e1:e5:ac:1f:4d:90:
b8:3b:b1:6f:42:90:4b:99:c8:26:0b:be:62:92:2a:76:c9:97:
74:7c:ee:e0:7f:7b:e8:58:7c:5b:b7:61:a0:60:a3:a0:39:d6:
bc:ce:08:91:d8:76:99:42:64:48:00:47:77:a0:b2:e9:d5:69:
09:35:8f:3f:57:25:25:2c:f8:0e:15:42:8c:39:7f:a7:42:59:
73:8c:4d:36:9d:80:2c:df:04:f9:d5:05:84:45:35:7c:e4:57:
25:5a:59:1c:97:30:83:6c:44:91:15:4b:ae:11:df:71:03:a7:
e4:9d:15:ac:a7:eb:d9:c1:50:f0:d7:7d:69:f5:76:b7:43:8f:
66:2a:48:3f:90:ac:04:c6:14:e2:45:05:c4:24:cb:36:cb:71:
83:65:db:25:bb:20:06:a0:31:18:e7:63:bb:ee:6b:66:2f:9a:
0d:65:e6:fd:e1:72:66:f3:e5:61:ea:4f:39:57:13:95:68:3f:
9f:17:d3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 00:48:37 2025 by rpki-client