Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.mft
File: lOvBA1TTG_33wdg1EN8N1mzoNaw.mft (raw, json)
Hash identifier: GrY+xGXPl7pRDY8fFxMgcLJGMLVZVAp47+9wYqLMKLE=
Subject key identifier: 15:04:08:42:9E:FD:4A:B7:EF:D3:F7:8C:71:B4:F9:88:E4:D8:DD:66
Authority key identifier: 94:EB:C1:03:54:D3:1B:FD:F7:C1:D8:35:10:DF:0D:D6:6C:E8:35:AC
Certificate issuer: /CN=94ebc10354d31bfdf7c1d83510df0dd66ce835ac
Certificate serial: 01964D7EF6B7841F6C1AFCCE107CD19C3A88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOvBA1TTG_33wdg1EN8N1mzoNaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.mft
Manifest number: 14F6
Signing time: Sat 19 Apr 2025 10:01:28 +0000
Manifest this update: Sat 19 Apr 2025 10:01:28 +0000
Manifest next update: Sun 20 Apr 2025 10:01:28 +0000
Files and hashes: 1: lOvBA1TTG_33wdg1EN8N1mzoNaw.crl (hash: OnjQKqezD5QkR9xTTRDkPiZVw+b8kDMfvCUhQm5WVCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lOvBA1TTG_33wdg1EN8N1mzoNaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:f6:b7:84:1f:6c:1a:fc:ce:10:7c:d1:9c:3a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94ebc10354d31bfdf7c1d83510df0dd66ce835ac
Validity
Not Before: Apr 19 10:01:28 2025 GMT
Not After : Apr 20 10:01:28 2025 GMT
Subject: CN=150408429efd4ab7efd3f78c71b4f988e4d8dd66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:59:56:dc:49:28:a3:43:83:32:81:c8:2f:58:
ed:61:73:09:42:be:bc:d6:0d:6b:3b:b7:a2:26:c4:
27:98:21:d8:6d:af:ae:0a:9a:9b:76:5f:60:b0:21:
30:c3:85:c4:0d:7c:80:2a:8c:50:cb:eb:36:d2:57:
03:d5:c8:8c:2e:69:4c:3f:1d:ad:a3:a6:3d:83:7a:
ed:84:2d:7d:94:bd:5c:9b:3b:f4:97:23:7a:db:6b:
4d:4a:13:bd:2f:3e:01:57:02:c7:c4:dc:1f:93:0a:
52:ad:f6:ea:ca:41:f3:47:6e:72:e5:db:8b:16:0c:
5c:85:5d:c3:30:bf:f6:37:4f:8c:fc:c8:1f:16:fc:
f8:63:79:20:3f:a2:23:c9:c1:7d:3f:1f:e5:1c:39:
72:d7:18:e8:4b:7d:e5:a4:0f:fe:a9:27:c7:a1:84:
06:f1:7d:ec:db:5a:2e:de:b9:b7:8f:da:21:46:d5:
a0:9b:b3:0a:49:a0:82:a7:7b:aa:9b:40:9c:46:11:
16:7c:5e:28:9c:8f:3b:c9:1f:37:62:1f:2d:73:2a:
26:b3:52:de:56:81:bb:fe:6d:3b:8a:d7:54:fb:d0:
bd:9e:2e:c4:d5:fe:97:cc:8a:68:17:e4:cf:0e:7a:
12:31:de:27:a5:81:51:36:3d:43:28:ab:8c:05:8a:
42:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:04:08:42:9E:FD:4A:B7:EF:D3:F7:8C:71:B4:F9:88:E4:D8:DD:66
X509v3 Authority Key Identifier:
keyid:94:EB:C1:03:54:D3:1B:FD:F7:C1:D8:35:10:DF:0D:D6:6C:E8:35:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOvBA1TTG_33wdg1EN8N1mzoNaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:b7:6c:e4:26:ee:f4:c2:ab:34:6c:6b:47:a0:c9:af:59:05:
ab:1f:ca:eb:2b:3e:61:f9:08:e7:fa:4b:0c:aa:57:5f:cf:48:
3c:20:de:72:a6:4f:1e:56:3c:99:84:3f:57:f1:75:6a:a9:89:
27:29:2a:f2:ca:dd:d3:ee:1b:c7:1f:c2:83:1c:60:7a:01:f9:
ba:1b:48:b7:cd:6c:c2:8f:35:34:9f:02:d4:c3:a8:e2:5d:b3:
2b:d7:b8:1f:7a:90:06:61:2b:3e:e2:02:93:18:c5:79:f6:06:
37:77:56:4e:29:f6:68:1a:f0:f0:ef:34:00:83:c3:a1:d1:88:
1a:d4:58:0f:23:e9:b1:13:52:03:15:f7:ec:be:16:d4:2c:ff:
dc:57:90:45:53:c9:b8:8c:dc:86:f5:9a:f6:89:0a:7e:22:29:
3f:9a:d7:2b:f8:fe:df:f0:f6:a5:92:25:a1:69:2c:4c:10:19:
e3:43:28:a8:fd:97:5c:4b:2c:8b:08:43:40:dd:fe:58:60:78:
e6:ac:3d:36:6c:96:49:af:96:5e:13:bf:3f:0a:cf:a8:1a:40:
26:8f:39:95:fb:f7:cc:06:6b:b6:0a:52:bb:b4:e2:3c:fa:e9:
42:f8:be:bb:0e:46:b9:24:ea:78:b3:05:a4:9b:6f:58:99:89:
02:ef:61:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:21:35 2025 by rpki-client