Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
File: LED81TmHsgn4rznKEhHycGCokC4.mft (raw, json)
Hash identifier: y6Y5gTA+ijpNjAezmWeH8GAmHZaX30D5/PB1Mkoo4sA=
Subject key identifier: 27:B8:AE:F8:3D:92:21:A0:AB:C1:A9:CE:68:A1:01:C3:57:11:1D:A5
Authority key identifier: 2C:40:FC:D5:39:87:B2:09:F8:AF:39:CA:12:11:F2:70:60:A8:90:2E
Certificate issuer: /CN=2c40fcd53987b209f8af39ca1211f27060a8902e
Certificate serial: 019653B73B789C56A55985DF87DEE58F8CC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
Manifest number: 0FCF
Signing time: Sun 20 Apr 2025 15:00:39 +0000
Manifest this update: Sun 20 Apr 2025 15:00:39 +0000
Manifest next update: Mon 21 Apr 2025 15:00:39 +0000
Files and hashes: 1: LED81TmHsgn4rznKEhHycGCokC4.crl (hash: 2GZ2ihGNgoV20NqJdIecJFBf0Nrj7v26R7hzdWwPeJw=)
2: dxYsy90KXOXYJr1C_txNtkhoQyI.roa (hash: ki8NvWzR6fAVOnACkZG0hx623eUXEmIvNGBU1taAI6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:3b:78:9c:56:a5:59:85:df:87:de:e5:8f:8c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c40fcd53987b209f8af39ca1211f27060a8902e
Validity
Not Before: Apr 20 15:00:39 2025 GMT
Not After : Apr 21 15:00:39 2025 GMT
Subject: CN=27b8aef83d9221a0abc1a9ce68a101c357111da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:21:67:8e:a5:10:35:2c:9b:7b:f4:55:3b:96:
29:4e:62:f0:1b:17:8d:88:16:a0:5b:3e:21:89:7b:
b7:44:f3:20:46:a1:06:63:24:24:0d:84:0c:7c:58:
27:12:11:bd:e6:9b:c0:2e:9e:ba:cb:76:13:f1:2a:
af:d9:13:85:35:fa:e9:46:47:56:f4:cf:3c:39:8f:
b6:60:38:1d:57:5c:ad:4a:95:a6:3b:3a:54:66:dd:
31:85:fb:d1:5b:9c:66:c6:2b:be:1d:f6:7e:34:a6:
4e:6b:00:0b:b6:9a:e8:bd:c0:40:49:97:3b:67:cd:
4e:86:e4:0a:10:34:58:d8:71:71:d6:9f:f1:05:6c:
9c:88:e7:51:b2:d0:34:8c:f9:cc:0f:f6:36:78:b1:
76:8a:2f:77:69:20:c4:68:92:7e:4e:01:14:90:b7:
f7:8f:7e:f8:7b:1f:12:c4:7e:06:4a:5c:43:02:71:
9b:ba:67:b3:0f:e8:c9:2a:21:e2:a2:fc:ba:20:54:
b4:01:73:d5:b8:fc:6a:a7:27:8c:f1:d0:f8:17:2d:
35:62:17:b4:d4:ae:a8:6c:b1:57:f1:30:70:38:fd:
ad:8b:4d:cd:d9:98:06:33:78:76:dc:b2:71:8b:02:
c2:f6:3c:19:64:a0:19:a8:b1:d2:04:7e:17:5c:4c:
53:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B8:AE:F8:3D:92:21:A0:AB:C1:A9:CE:68:A1:01:C3:57:11:1D:A5
X509v3 Authority Key Identifier:
keyid:2C:40:FC:D5:39:87:B2:09:F8:AF:39:CA:12:11:F2:70:60:A8:90:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LED81TmHsgn4rznKEhHycGCokC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/709fc9-68ef-411e-a1cc-e1e807ecd4df/1/LED81TmHsgn4rznKEhHycGCokC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:16:f3:5d:01:bf:3e:eb:e1:3c:b5:e4:af:bc:2b:23:ec:db:
70:19:67:79:29:21:84:27:02:c6:a1:c2:97:7d:97:60:cb:03:
11:49:f3:8f:33:3f:b2:d1:bb:59:2a:11:fd:a7:b7:60:1a:b6:
57:7f:fb:c9:a3:f1:95:6c:2f:5f:9c:c8:0e:d9:39:1b:f5:82:
0c:c8:10:ed:02:dc:78:5a:d6:68:03:e5:64:7a:d6:f0:92:15:
d9:8e:c6:c7:44:7f:ae:a3:34:e7:41:89:7a:ed:31:ef:c6:c3:
77:75:b9:79:2a:93:d6:b2:52:10:f4:01:8d:3c:9a:05:68:de:
f0:87:3e:72:b8:fe:4f:cc:da:c5:d6:0a:fa:39:bf:bb:b8:8c:
2d:f8:89:db:e0:b4:36:fa:65:35:81:39:58:07:25:98:6b:1d:
1b:12:d2:27:1a:98:d3:41:74:53:05:9d:26:99:cf:fd:72:85:
ff:14:06:a4:1a:ce:74:7f:dd:69:4a:e9:b1:43:01:16:c8:30:
82:e0:81:4d:17:c9:d9:ad:87:47:34:f3:3e:ca:11:ff:07:4e:
7d:a2:0e:57:c8:2d:31:10:ae:0e:aa:c2:f0:4c:1c:e0:66:a7:
e8:51:02:79:3c:25:3d:96:aa:1f:19:7d:98:44:5b:aa:78:8d:
7a:80:8c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:47:36 2025 by rpki-client