Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft
File: L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft (raw, json)
Hash identifier: YNOSq0deDT/82qunN5nrrahBdzYztS//zYn9a+g45f4=
Subject key identifier: 47:AB:D9:42:EA:54:C3:D9:D6:14:3C:08:9C:7E:21:40:F8:05:18:CB
Authority key identifier: 2F:E0:AA:7B:FA:E1:24:74:02:AB:B6:C8:9B:75:BB:23:F0:F0:F1:20
Certificate issuer: /CN=2fe0aa7bfae1247402abb6c89b75bb23f0f0f120
Certificate serial: 0196C34BA64FD11D9162B2124E03B987BBD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft
Manifest number: 1532
Signing time: Mon 12 May 2025 07:00:36 +0000
Manifest this update: Mon 12 May 2025 07:00:36 +0000
Manifest next update: Tue 13 May 2025 07:00:36 +0000
Files and hashes: 1: L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.crl (hash: nj/cWCSe88nibT5REOB5mANjf3vZW//7/LGGSpF1jWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft
rsync://rpki.ripe.net/repository/DEFAULT/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4b:a6:4f:d1:1d:91:62:b2:12:4e:03:b9:87:bb:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fe0aa7bfae1247402abb6c89b75bb23f0f0f120
Validity
Not Before: May 12 07:00:36 2025 GMT
Not After : May 13 07:00:36 2025 GMT
Subject: CN=47abd942ea54c3d9d6143c089c7e2140f80518cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:36:35:b7:8c:dd:0b:32:66:ef:be:fd:9f:e3:
39:72:82:0c:7e:e9:73:da:51:4e:08:94:be:bc:66:
31:05:04:09:f8:af:e3:e2:43:08:47:3d:5f:c1:19:
a6:7b:00:d2:a0:2f:3f:20:fc:fb:5e:7d:92:b9:00:
bd:70:d3:39:7b:67:f8:d5:3c:85:82:3d:28:12:f1:
e9:39:d2:50:64:86:4c:52:46:28:0d:de:49:04:06:
c9:29:59:c4:d4:7f:a0:9d:1e:20:d2:be:97:e5:20:
87:91:f5:5d:2b:b1:9c:ee:3f:c6:14:a9:d6:64:8b:
36:0f:b2:90:29:d1:5d:a4:95:a8:a9:2c:7d:d9:a5:
66:95:5f:d4:96:24:6d:df:a9:7c:82:38:aa:ac:3a:
ca:2a:9b:4d:ef:77:1d:5e:45:44:ec:3a:4b:c9:a0:
b4:7c:49:e1:dd:bf:33:82:fb:73:dc:38:32:08:2e:
0a:ac:ea:93:0d:0b:d6:07:09:d3:2e:d2:d9:d4:b4:
e2:0f:27:6a:70:1f:8b:a1:51:88:d7:b4:62:04:a5:
14:dc:1f:b2:9f:59:d3:9c:b5:13:de:37:0a:44:e3:
b5:91:fa:fa:a2:e8:5c:90:a3:33:84:ef:b1:42:4e:
39:3c:b8:9a:b7:9f:2c:fe:c4:f7:7a:20:bd:40:14:
5f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:AB:D9:42:EA:54:C3:D9:D6:14:3C:08:9C:7E:21:40:F8:05:18:CB
X509v3 Authority Key Identifier:
keyid:2F:E0:AA:7B:FA:E1:24:74:02:AB:B6:C8:9B:75:BB:23:F0:F0:F1:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f9:12:d7:68:7d:d5:79:eb:fe:34:2d:cf:15:c2:8e:eb:d1:
ea:4b:99:f9:02:ce:f1:4f:36:1e:e2:94:57:0e:49:22:89:0d:
c8:5e:e2:d0:76:bb:3b:05:5d:38:ef:bd:e5:f1:99:a3:e4:93:
13:d9:03:d3:a2:d1:49:85:c9:b9:7e:07:e5:e6:31:36:2f:15:
1f:64:a3:28:45:45:52:75:03:22:ac:d7:87:43:b5:80:69:fc:
d0:0e:1b:37:63:63:f6:08:e8:93:73:44:18:c2:71:f6:d5:af:
47:8e:f8:a4:a9:23:8a:6d:7a:8d:5d:cd:71:c1:2a:f3:ad:b2:
4d:fd:2d:09:77:a8:c8:43:30:ac:05:3d:c3:77:5b:f5:2d:c0:
7b:30:82:14:fc:a8:8f:c7:85:4c:3b:41:09:3a:30:3e:87:92:
f2:17:6e:d3:da:15:c3:b6:76:c5:33:3c:c5:dd:7a:59:53:e7:
15:44:c0:50:30:29:b7:7a:6e:0e:50:aa:fc:c4:82:27:f3:47:
76:a7:8b:0e:be:2f:45:d1:ec:00:58:2e:e9:95:f1:91:08:d5:
0f:48:4d:7c:c3:1e:bf:3b:d5:82:6e:50:bc:9f:0b:ae:be:7e:
e7:4b:8e:76:8d:8e:eb:45:3d:e8:d5:97:ec:c9:a3:61:0f:0a:
8a:e6:f3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:46:52 2025 by rpki-client