Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
File: lPNHF_8y_ix2RK610O6iMBYX8SQ.mft (raw, json)
Hash identifier: xCVZhRYXQdM5liUsT41tPL0E1Hj9DyrrcFF6ad8wZ2I=
Subject key identifier: D6:B1:80:8C:3A:B2:48:2B:77:D6:6F:28:76:3D:48:E4:EF:07:1F:60
Authority key identifier: 94:F3:47:17:FF:32:FE:2C:76:44:AE:B5:D0:EE:A2:30:16:17:F1:24
Certificate issuer: /CN=94f34717ff32fe2c7644aeb5d0eea2301617f124
Certificate serial: 01964CA22792C4F7A8AA512CDED2F4684D44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
Manifest number: 047B
Signing time: Sat 19 Apr 2025 06:00:17 +0000
Manifest this update: Sat 19 Apr 2025 06:00:17 +0000
Manifest next update: Sun 20 Apr 2025 06:00:17 +0000
Files and hashes: 1: lPNHF_8y_ix2RK610O6iMBYX8SQ.crl (hash: t5DGAwJpOUcLzB9bXRjFkdCIMNd4sPPk0rlICNvJpFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:a2:27:92:c4:f7:a8:aa:51:2c:de:d2:f4:68:4d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f34717ff32fe2c7644aeb5d0eea2301617f124
Validity
Not Before: Apr 19 06:00:17 2025 GMT
Not After : Apr 20 06:00:17 2025 GMT
Subject: CN=d6b1808c3ab2482b77d66f28763d48e4ef071f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:07:3c:36:cb:63:96:0e:e0:bb:cc:e5:56:76:
e8:51:0a:24:7f:c2:84:35:6d:de:a5:76:ea:d6:c5:
86:20:de:0f:9e:e8:d4:24:1b:79:13:fb:30:45:83:
ae:5d:54:77:8f:fe:85:b7:44:92:77:5d:61:57:64:
9d:87:1e:ca:23:23:c2:80:3a:1c:c1:7c:23:a2:ca:
93:b9:04:bd:88:ee:33:e1:4f:dd:96:ee:75:e8:d7:
3c:ce:fb:85:9d:a8:ef:d2:5e:9c:66:fa:f6:da:16:
6a:ff:17:5e:e3:29:5d:b8:69:6f:77:74:c5:b2:99:
ee:04:a5:d5:7a:25:f3:f5:64:06:6e:07:bb:bb:6d:
90:82:f2:8b:60:0b:34:a5:bf:b9:28:72:0f:31:b2:
b1:ff:8e:c9:43:58:83:41:53:30:ed:3d:43:4a:57:
86:01:ed:a6:1a:07:15:c4:55:dc:ac:d5:9f:fa:b6:
25:5d:21:62:b5:9c:46:82:a8:37:b7:23:38:3a:44:
e2:60:f7:ac:a6:f8:a1:46:15:f9:30:37:7e:df:3d:
fc:c8:ed:96:f6:32:89:33:25:86:16:3a:f4:34:29:
1e:36:a0:25:24:59:37:1a:60:90:f7:78:33:d2:29:
3a:91:de:26:24:cd:f5:ec:f8:94:b3:03:87:06:14:
2e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B1:80:8C:3A:B2:48:2B:77:D6:6F:28:76:3D:48:E4:EF:07:1F:60
X509v3 Authority Key Identifier:
keyid:94:F3:47:17:FF:32:FE:2C:76:44:AE:B5:D0:EE:A2:30:16:17:F1:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:15:70:1a:ab:a8:b1:ef:1c:c7:8e:7e:6e:21:ea:c4:7a:f9:
c2:1e:6d:86:17:40:57:11:cc:bc:72:35:ea:87:59:ed:29:41:
a1:46:c8:73:32:f4:06:8c:df:46:e3:a4:36:bd:c5:16:f9:d3:
0d:4a:e8:c0:42:2a:33:81:a3:34:1e:f6:22:7b:5a:0f:8b:73:
e2:c9:0a:f0:8b:30:5b:03:cb:3e:c1:d0:be:96:80:71:7f:1b:
2d:f8:29:2d:e3:dd:71:96:26:a2:59:cb:15:c5:ad:74:6c:29:
02:b8:66:65:5b:01:ae:45:de:38:ac:ce:6f:40:6b:9d:08:15:
30:d2:88:42:6c:69:37:70:21:1f:2a:e8:2a:a8:ea:c5:9a:fb:
74:dd:1c:6e:b6:82:0d:07:1e:aa:3b:40:87:fd:a5:37:cf:ad:
f9:03:1d:35:f3:d0:78:1b:81:0c:07:34:e6:40:01:1f:80:08:
be:76:bc:f8:f7:9b:74:04:f2:3d:9c:fc:ca:4c:b0:09:b0:08:
54:9d:57:62:1c:d9:75:2f:e3:ec:a2:d6:df:0e:9a:6b:f5:4d:
97:b1:84:1a:c7:95:97:59:0f:2d:88:63:8e:29:37:32:3c:b3:
4c:90:e7:72:e9:8f:2d:29:37:d3:0d:3a:82:30:dd:06:1f:f0:
18:96:ca:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:26:26 2025 by rpki-client