Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
File: LkFFfaHqbHmxtr6lLGSnobXylkg.mft (raw, json)
Hash identifier: KDbFpVESQualMhi3IPgxjrLiIW+Gi30HBPHb7J7xiv4=
Subject key identifier: 21:19:9A:F5:AB:FB:CF:66:8F:FE:3C:A3:6E:98:2D:30:4B:A1:2F:E2
Authority key identifier: 2E:41:45:7D:A1:EA:6C:79:B1:B6:BE:A5:2C:64:A7:A1:B5:F2:96:48
Certificate issuer: /CN=2e41457da1ea6c79b1b6bea52c64a7a1b5f29648
Certificate serial: 019643D6BF9B1A241956AB9A972606403775
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
Manifest number: 14F7
Signing time: Thu 17 Apr 2025 13:01:09 +0000
Manifest this update: Thu 17 Apr 2025 13:01:09 +0000
Manifest next update: Fri 18 Apr 2025 13:01:09 +0000
Files and hashes: 1: LkFFfaHqbHmxtr6lLGSnobXylkg.crl (hash: Qva8U6nEJFyy5hB1osl+psBtSR4W1LMiml5ydSNHOYg=)
2: RIRzVPPhcE8vA4XvF5JriP-fYwY.roa (hash: WtatU7VzUfyqgkJxN/FnJMt83P40z2B19888ZIjTAHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d6:bf:9b:1a:24:19:56:ab:9a:97:26:06:40:37:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e41457da1ea6c79b1b6bea52c64a7a1b5f29648
Validity
Not Before: Apr 17 13:01:09 2025 GMT
Not After : Apr 18 13:01:09 2025 GMT
Subject: CN=21199af5abfbcf668ffe3ca36e982d304ba12fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:89:8c:4b:30:a9:8d:fc:35:74:78:5e:f4:2c:
83:3b:cf:3a:b0:e2:50:bb:59:b0:fe:b7:d5:2d:e7:
50:d8:f7:be:cb:69:a2:8e:83:38:1d:33:0c:3f:16:
5e:82:9e:65:e2:5d:92:3b:b0:81:95:b4:92:f5:ac:
0d:6b:18:1f:b4:75:19:2b:74:af:e1:16:2a:0e:42:
72:4c:2b:cb:04:32:8d:71:ef:8a:98:c8:0f:eb:fe:
1c:36:5f:a6:a5:d7:8d:5c:52:41:41:1c:ae:be:0d:
7c:81:ee:4d:d4:f7:9b:53:62:c4:86:33:af:1f:13:
c7:72:e4:cd:47:f0:e9:02:6c:ac:45:bd:7e:40:e0:
59:a7:dd:34:63:a5:4d:d1:2d:ef:b5:8c:e8:3e:7b:
9f:51:f0:fd:79:53:ad:a4:f9:1b:49:26:8d:c3:a1:
69:9b:33:cb:17:0b:59:03:3c:af:27:49:6b:68:40:
13:9f:b5:93:b6:94:43:0d:20:57:89:15:5c:ab:33:
b2:29:6d:b9:13:20:92:45:a4:5e:a0:17:9d:45:3d:
1e:a6:97:52:1d:97:61:96:50:86:97:2c:0f:b2:19:
99:3f:c0:86:72:9c:34:62:85:a2:bc:45:1c:de:c9:
d6:5d:ca:64:6d:16:18:2d:3d:a9:c3:36:45:4c:e1:
d5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:19:9A:F5:AB:FB:CF:66:8F:FE:3C:A3:6E:98:2D:30:4B:A1:2F:E2
X509v3 Authority Key Identifier:
keyid:2E:41:45:7D:A1:EA:6C:79:B1:B6:BE:A5:2C:64:A7:A1:B5:F2:96:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b8:22:8f:43:df:d7:5f:4f:c9:ab:67:b4:a7:d5:41:53:e6:
c5:83:53:da:c0:38:e8:77:81:91:86:a4:18:de:56:d7:13:a7:
36:d7:63:31:5b:a4:5e:5d:78:c2:4d:ab:3e:fc:8a:99:ea:10:
24:11:34:30:0a:c5:bf:f6:72:d8:4f:0b:5c:fc:fc:02:8a:4f:
9a:d9:7e:15:b5:3a:a8:79:b6:74:52:d5:1d:a0:b4:30:cb:c6:
61:eb:7b:36:c3:24:e9:e2:8c:ba:70:e8:89:15:a7:ba:28:02:
bd:bd:a0:c3:0a:a6:e6:4a:be:25:d8:d6:5e:e0:5c:34:2f:f8:
06:a6:45:6a:74:69:cc:f1:02:7e:5d:24:77:94:21:16:8f:48:
e3:78:db:bf:ac:06:2a:b0:87:2a:c0:b9:55:f0:8c:a0:28:d9:
4e:eb:53:26:ea:d7:9c:56:7d:05:9e:78:df:20:cd:42:dd:3e:
03:4e:c0:51:0b:ca:33:a1:ff:ca:e8:6c:1c:ed:9e:d1:b0:84:
0c:50:31:ae:f4:41:d1:97:81:36:b4:ce:ad:29:ae:58:d2:49:
2c:7c:c3:e1:a4:3e:e1:5f:01:98:15:d2:ac:ba:f3:70:25:4b:
37:13:71:99:5e:7c:86:e5:90:28:cf:9b:cd:53:0f:91:c1:92:
4a:70:56:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:30:36 2025 by rpki-client