Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft
File: lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft (raw, json)
Hash identifier: NbgYPm+OfmAaeOtZPVIk6ilOAm2FwGbPiWykXRg+mIs=
Subject key identifier: 6A:0A:63:7C:38:8B:E3:D3:86:FA:FC:8D:F6:32:09:3A:9B:2B:F2:6F
Authority key identifier: 96:0D:D7:CD:CE:58:8B:DA:A2:B7:A8:CB:05:6D:4D:B0:16:70:15:32
Certificate issuer: /CN=960dd7cdce588bdaa2b7a8cb056d4db016701532
Certificate serial: 019659B9C466D5D99C4FDE80821391EC66C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft
Manifest number: 0BDF
Signing time: Mon 21 Apr 2025 19:01:08 +0000
Manifest this update: Mon 21 Apr 2025 19:01:08 +0000
Manifest next update: Tue 22 Apr 2025 19:01:08 +0000
Files and hashes: 1: lg3Xzc5Yi9qit6jLBW1NsBZwFTI.crl (hash: G8kYg+qe8NrmcNHlofbs6KK9ZqtXgpNUqnaNyyRZsus=)
2: xk5JW7mEcm3gYIGJEbgbndDf_D4.roa (hash: vX0UTn7T1VcnsWTR+h1UQPipjvJLxqxVpR3OQQyE5Fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:b9:c4:66:d5:d9:9c:4f:de:80:82:13:91:ec:66:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=960dd7cdce588bdaa2b7a8cb056d4db016701532
Validity
Not Before: Apr 21 19:01:08 2025 GMT
Not After : Apr 22 19:01:08 2025 GMT
Subject: CN=6a0a637c388be3d386fafc8df632093a9b2bf26f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:09:91:d9:18:47:c7:d3:7b:c3:33:64:aa:13:
c2:b9:c5:b3:a7:9d:e7:9f:1c:9a:13:08:71:71:3d:
9d:67:2e:56:9c:5c:18:5b:d3:3b:86:7e:4c:21:19:
14:d7:36:d8:6d:43:a2:75:b9:8e:b9:e3:a7:c4:8f:
15:77:92:80:bc:11:86:57:93:97:7f:5a:d5:48:b4:
f6:6d:e2:6e:e6:a8:2b:a9:96:51:31:d7:89:95:35:
dd:2e:e9:ae:2d:1d:3a:8b:7f:e0:a6:f5:76:a7:4c:
ca:76:46:0d:34:e5:53:33:06:08:6f:e9:61:00:90:
c1:89:77:1c:ad:f2:f4:b1:6c:fb:d3:bc:c9:a6:1c:
d9:13:98:2c:10:81:b2:d1:65:76:64:5d:b8:47:98:
57:73:cd:b0:e8:74:e2:d6:c8:84:f9:b7:25:a3:6c:
3d:20:a0:cb:94:0b:2a:09:66:e5:4e:00:46:a0:d1:
62:de:6b:ae:96:d4:a3:4c:bd:64:e3:1c:e5:27:e8:
7e:f1:41:cb:c9:7b:85:ad:aa:58:bb:9f:2f:d5:0d:
8d:ad:32:86:86:5d:1d:4e:3c:e1:8e:9a:17:7f:7a:
af:91:7d:80:6c:6c:47:9c:50:0e:63:bc:7e:3f:fe:
07:6b:fa:df:14:64:8f:b9:00:05:bf:25:32:c3:65:
80:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0A:63:7C:38:8B:E3:D3:86:FA:FC:8D:F6:32:09:3A:9B:2B:F2:6F
X509v3 Authority Key Identifier:
keyid:96:0D:D7:CD:CE:58:8B:DA:A2:B7:A8:CB:05:6D:4D:B0:16:70:15:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d31230-cbdc-42c1-8732-902ff17bc494/1/lg3Xzc5Yi9qit6jLBW1NsBZwFTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:af:57:0d:f4:e8:ca:6a:8b:dc:73:82:eb:97:52:2a:43:84:
f3:a3:e7:e3:33:5b:e4:af:1c:5b:f4:fc:15:b9:18:b8:ed:12:
c6:50:2b:86:24:0a:9a:d8:ac:83:73:5a:3f:76:f0:12:57:6e:
ab:5f:b2:b3:2e:aa:6d:fe:fa:ae:5d:e4:df:e9:ed:69:1c:b3:
47:a3:d6:99:ab:91:28:4d:bc:b2:f2:d6:88:34:b8:05:b9:c6:
9e:27:45:3b:1a:7d:70:b2:4b:f7:4f:24:c4:00:e2:b7:13:5a:
1d:e4:1f:9a:ed:d8:c9:ef:28:11:95:e2:56:75:68:ee:03:b8:
24:6f:ac:73:37:03:73:fd:af:bf:e8:34:7a:62:a6:2a:2f:7b:
3a:89:b9:9b:43:ed:be:ac:8a:23:b1:cb:67:44:4e:bd:29:af:
da:eb:6c:f8:d9:1e:02:47:d6:df:cb:23:90:2a:a8:57:02:32:
b1:ef:f0:47:39:0a:a1:06:47:3f:15:06:da:a6:13:86:3c:f4:
08:cc:8e:c2:a1:aa:76:94:90:ad:fe:dd:0f:d5:e8:e8:e3:20:
04:39:b5:15:0f:ed:34:3b:31:4c:cc:6b:61:1b:cb:15:d8:f2:
d5:4b:95:1d:78:bc:51:7f:c0:9b:fe:ce:ea:59:05:b4:4c:2b:
9f:7e:62:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 21:15:32 2025 by rpki-client