Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.mft
File: LdgAjePP9i0vrKENmf8gw-h43N8.mft (raw, json)
Hash identifier: FmBfIgoiEKsdLSePtfj7Qz4/lwYIWHTsk0wf2PfKfwA=
Subject key identifier: EC:17:30:FA:87:60:93:DC:0D:7A:12:93:06:76:A2:CB:2E:17:2D:3D
Authority key identifier: 2D:D8:00:8D:E3:CF:F6:2D:2F:AC:A1:0D:99:FF:20:C3:E8:78:DC:DF
Certificate issuer: /CN=2dd8008de3cff62d2faca10d99ff20c3e878dcdf
Certificate serial: 0194C350ECBC95741C592675A4346561AB1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdgAjePP9i0vrKENmf8gw-h43N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.mft
Manifest number: 02EF
Signing time: Sat 01 Feb 2025 21:00:48 +0000
Manifest this update: Sat 01 Feb 2025 21:00:48 +0000
Manifest next update: Sun 02 Feb 2025 21:00:48 +0000
Files and hashes: 1: LdgAjePP9i0vrKENmf8gw-h43N8.crl (hash: 9SEEYy+ZVx+2NDy5+Az2ER0XYFJYCsvwiTqcXotupfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LdgAjePP9i0vrKENmf8gw-h43N8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:50:ec:bc:95:74:1c:59:26:75:a4:34:65:61:ab:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dd8008de3cff62d2faca10d99ff20c3e878dcdf
Validity
Not Before: Feb 1 21:00:48 2025 GMT
Not After : Feb 2 21:00:48 2025 GMT
Subject: CN=ec1730fa876093dc0d7a12930676a2cb2e172d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1c:22:1e:c2:90:56:17:ad:70:db:95:f2:cc:
d0:4d:1f:4d:92:4e:b8:fc:57:05:19:fe:a6:d8:3d:
c5:d1:11:cb:76:e8:eb:7b:d8:75:47:b0:71:44:a7:
63:a0:96:77:16:8e:87:26:0c:91:e4:e9:1c:e1:ea:
fa:0c:05:e4:36:52:cc:19:3a:d2:57:f2:97:54:ba:
ee:65:2f:c5:2e:4d:56:5f:e9:54:31:5f:83:22:ef:
e6:da:d5:f9:6e:5b:58:05:0f:59:c8:4c:e2:12:3f:
bd:c9:e0:34:df:eb:3c:6d:9a:88:d7:92:90:c1:49:
ce:dd:1f:c6:62:e4:54:b7:ea:cf:8d:79:b9:74:39:
a6:ff:e8:cd:48:ad:2e:fa:27:71:55:10:6d:32:97:
ef:97:93:2c:99:cb:c2:94:3a:98:03:72:d1:f4:79:
11:5e:ff:47:14:8d:42:b1:7f:fb:e4:36:e2:7e:0e:
db:b9:56:38:57:19:53:61:2c:fe:a7:eb:99:cd:de:
63:19:20:38:e0:ff:73:f2:c3:d8:9a:62:f0:c3:ca:
ed:87:46:f6:a1:54:40:71:86:df:8e:8b:52:b7:3a:
b1:16:04:38:76:fe:d6:eb:d8:78:c5:80:85:00:a2:
ec:be:23:d7:f5:4b:cb:d0:ab:fd:a4:b2:99:d2:a0:
7d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:17:30:FA:87:60:93:DC:0D:7A:12:93:06:76:A2:CB:2E:17:2D:3D
X509v3 Authority Key Identifier:
keyid:2D:D8:00:8D:E3:CF:F6:2D:2F:AC:A1:0D:99:FF:20:C3:E8:78:DC:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdgAjePP9i0vrKENmf8gw-h43N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:bc:ad:4b:94:d6:bb:72:15:54:55:ff:e9:3e:19:32:3f:a6:
3b:8c:f9:d9:de:d7:94:43:19:2e:53:20:42:ae:aa:b8:7d:9f:
89:74:8a:a3:6e:54:98:70:9a:e5:ae:44:d7:45:75:f3:9c:3d:
5e:78:a9:6c:d6:7c:6e:15:0d:c6:a1:7b:9b:ab:6f:b3:0b:c5:
d9:5d:bc:e7:9c:15:a0:a8:8c:09:bf:aa:85:c5:e2:c0:bd:cc:
2c:9c:86:28:ea:ee:e6:7a:d8:d1:cf:de:30:65:5f:a6:0f:93:
cc:1c:b3:bd:15:20:73:39:f9:a3:be:4e:5e:bf:7f:d1:60:08:
ed:5a:30:3e:1b:21:05:df:37:f7:0f:ff:6c:02:8e:7c:9c:19:
7e:aa:93:a3:1b:52:ba:a2:52:4e:f0:80:97:ab:12:52:ce:da:
0d:8a:f7:0b:a4:e9:c4:16:7b:97:9b:2b:c7:b9:43:a7:6e:f1:
87:63:97:ce:fa:dd:13:9f:f5:7e:6f:9f:08:8c:4d:bf:61:8c:
7a:64:e8:1d:eb:54:f4:35:e1:a4:c5:d2:f5:0b:07:a4:fd:14:
b2:de:75:b1:23:90:dc:92:d7:ee:9e:cb:9b:31:49:46:62:b9:
9d:b6:15:0c:15:4c:0e:4f:f4:f3:bf:92:2b:a8:ac:b7:c9:4b:
01:85:a3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:56:18 2025 by rpki-client