Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft
File: lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft (raw, json)
Hash identifier: 4OcrWKxxDfmhQpF4HOm+LI1OcStwXHQQlU7QiAHSepE=
Subject key identifier: FC:3B:74:E8:6A:EC:CB:6A:1E:6C:0F:BB:DC:B2:BB:68:31:4E:A0:D9
Authority key identifier: 96:0E:68:C8:38:9B:09:DC:34:54:64:A4:00:AF:27:65:68:E7:F9:6A
Certificate issuer: /CN=960e68c8389b09dc345464a400af276568e7f96a
Certificate serial: 0196D74040F6801114FD4E42DB0A12AC7ADD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lg5oyDibCdw0VGSkAK8nZWjn-Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft
Manifest number: 0DC3
Signing time: Fri 16 May 2025 04:00:34 +0000
Manifest this update: Fri 16 May 2025 04:00:34 +0000
Manifest next update: Sat 17 May 2025 04:00:34 +0000
Files and hashes: 1: lg5oyDibCdw0VGSkAK8nZWjn-Wo.crl (hash: aqrdTX7NT+Vz7qiIvpxdr0DDSH2pUGgkirYVVG971ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lg5oyDibCdw0VGSkAK8nZWjn-Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d7:40:40:f6:80:11:14:fd:4e:42:db:0a:12:ac:7a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=960e68c8389b09dc345464a400af276568e7f96a
Validity
Not Before: May 16 04:00:34 2025 GMT
Not After : May 17 04:00:34 2025 GMT
Subject: CN=fc3b74e86aeccb6a1e6c0fbbdcb2bb68314ea0d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a1:5c:29:fb:d9:ae:5d:c9:37:f5:59:5a:59:
1f:65:12:26:af:7f:d0:83:68:6d:fb:59:54:10:70:
21:b4:55:cb:71:50:5e:fd:78:5e:d8:14:92:c0:5e:
e5:b5:60:02:bb:d7:d4:4c:85:d0:f7:32:a8:d7:cd:
53:7d:56:a7:d5:5a:d5:ca:52:c9:23:4f:34:92:06:
32:17:6c:74:94:ae:df:2a:8a:22:ce:35:d7:c9:bb:
b9:7a:9b:50:a3:1d:cd:64:40:8b:c2:30:80:34:f6:
b0:f6:73:90:54:d8:ee:09:41:a8:f6:3e:1e:51:45:
b7:d5:cd:58:41:1c:2e:a7:8e:7f:14:25:08:0d:65:
40:7d:80:15:59:4f:71:f4:ee:5f:28:54:97:51:0c:
f4:99:59:d6:b6:25:ae:eb:8c:53:d4:d6:72:73:37:
79:13:53:42:23:60:46:88:19:ef:21:f2:31:ab:a4:
e2:f2:f6:55:76:db:38:68:c3:ce:03:bf:f8:ae:73:
e5:ce:fd:e2:14:41:23:1d:bf:af:e6:7e:e1:eb:87:
57:a4:2f:66:5f:c9:c4:ed:b6:4a:4a:3a:3c:54:e4:
7b:3f:d5:97:f6:41:48:90:9b:08:cb:2a:5f:d2:33:
62:8a:d6:34:89:65:d8:4b:d8:7e:74:0c:87:41:17:
22:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:3B:74:E8:6A:EC:CB:6A:1E:6C:0F:BB:DC:B2:BB:68:31:4E:A0:D9
X509v3 Authority Key Identifier:
keyid:96:0E:68:C8:38:9B:09:DC:34:54:64:A4:00:AF:27:65:68:E7:F9:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lg5oyDibCdw0VGSkAK8nZWjn-Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ff:15:f5:72:f9:07:c9:21:a7:09:0e:c0:c5:2d:97:47:fd:
83:0c:a8:ca:bb:09:26:d5:52:7a:c2:40:78:9c:10:35:f5:69:
a1:05:82:55:cd:ec:7d:b1:d2:7a:b4:a9:91:77:35:51:31:21:
6e:f9:a0:c2:1b:81:2b:c1:da:37:83:d3:0e:65:70:ff:8a:ce:
fb:e1:8b:c8:21:e3:a8:b1:30:1e:aa:69:7c:3e:24:0b:6e:73:
b5:dd:19:2d:33:17:b4:f2:24:a1:50:f3:bd:30:85:09:47:12:
31:6a:43:30:97:0f:b2:4f:52:9e:19:a6:d4:3e:ba:ec:67:cc:
08:f4:a6:27:25:6b:36:df:71:1e:1d:c5:18:6a:90:e2:8c:77:
91:38:c9:08:57:d0:a7:1c:d1:06:7a:c8:a3:3a:89:c4:b9:e7:
e4:cf:25:f3:b1:fa:b5:1b:43:6f:54:f1:ff:d7:a5:87:89:d5:
28:b7:97:51:28:57:46:f2:08:ce:9d:90:11:6f:f6:46:b3:52:
bd:98:71:7c:a6:ec:d4:87:50:5e:06:09:dc:1b:90:8e:49:99:
d8:cf:00:22:04:8b:8e:e8:4e:6b:dc:0b:b5:16:27:b6:fc:d9:
5c:11:fc:00:0e:61:86:27:9b:53:72:9a:7f:05:3d:ed:b9:bc:
8c:30:ee:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 08:16:07 2025 by rpki-client