Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/09f928-a27f-4e3a-b7ff-9e85436191ee/1/LcVu4MxDzuIoxAzk_Ect1OvbHfw.mft
File: LcVu4MxDzuIoxAzk_Ect1OvbHfw.mft (raw, json)
Hash identifier: 8aE+vuhcEAKGI0E9oK0Ag2H3yUuhsamTTv4Vdq98h+k=
Subject key identifier: 56:DE:10:10:27:37:0D:09:27:95:7F:7A:56:5F:8E:5E:E8:50:CD:E5
Authority key identifier: 2D:C5:6E:E0:CC:43:CE:E2:28:C4:0C:E4:FC:47:2D:D4:EB:DB:1D:FC
Certificate issuer: /CN=2dc56ee0cc43cee228c40ce4fc472dd4ebdb1dfc
Certificate serial: 0196C2DDBF2F41628E0C7E0FD0B5848A4504
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LcVu4MxDzuIoxAzk_Ect1OvbHfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/09f928-a27f-4e3a-b7ff-9e85436191ee/1/LcVu4MxDzuIoxAzk_Ect1OvbHfw.mft
Manifest number: 01EC
Signing time: Mon 12 May 2025 05:00:34 +0000
Manifest this update: Mon 12 May 2025 05:00:34 +0000
Manifest next update: Tue 13 May 2025 05:00:34 +0000
Files and hashes: 1: LcVu4MxDzuIoxAzk_Ect1OvbHfw.crl (hash: vCoeWSGpn+AJOsye6t1gZ13gu57mvfrVXu0xTejZwIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/09f928-a27f-4e3a-b7ff-9e85436191ee/1/LcVu4MxDzuIoxAzk_Ect1OvbHfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/09f928-a27f-4e3a-b7ff-9e85436191ee/1/LcVu4MxDzuIoxAzk_Ect1OvbHfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LcVu4MxDzuIoxAzk_Ect1OvbHfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:dd:bf:2f:41:62:8e:0c:7e:0f:d0:b5:84:8a:45:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dc56ee0cc43cee228c40ce4fc472dd4ebdb1dfc
Validity
Not Before: May 12 05:00:34 2025 GMT
Not After : May 13 05:00:34 2025 GMT
Subject: CN=56de101027370d0927957f7a565f8e5ee850cde5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d7:2b:c6:bc:c5:1c:f2:1d:ab:c6:0c:60:6b:
86:cc:f6:81:81:70:83:f0:3a:e3:77:c2:5b:92:ab:
4e:46:48:67:61:52:97:3f:70:37:ff:a7:2d:22:e8:
ab:b9:ce:98:a0:d6:c8:1d:71:41:89:d7:86:c3:e2:
a3:7c:a0:59:59:65:30:54:13:ff:bf:c9:bd:ef:49:
e3:c0:69:3d:54:f9:5a:75:26:0b:e1:fc:d6:3c:f1:
2a:c7:63:b0:d3:f5:09:2b:1b:d6:e9:ad:38:00:8b:
59:3d:2d:d4:98:bb:79:4a:89:37:6d:f9:e8:2c:c0:
dd:91:13:1b:24:4c:94:e0:6b:c3:cb:9a:8f:6b:69:
f1:e5:3e:c1:6d:f9:12:98:95:6e:e3:5b:a0:e1:cc:
3c:07:77:50:13:ed:19:22:d9:c1:d6:3a:df:d3:44:
4d:d0:4b:9d:b3:32:f7:88:c6:ae:08:3a:7c:5b:9c:
ca:8a:21:06:30:e5:61:07:7c:2a:12:15:df:18:9e:
fd:be:21:74:42:8b:e7:54:99:1c:1b:76:63:95:f7:
bd:be:26:5f:28:f1:c5:4c:7d:ec:fb:51:87:43:fc:
62:6f:b4:49:a1:46:29:ee:6c:8e:04:fa:54:65:7e:
ae:ba:a7:0c:46:87:3a:30:5c:ee:90:30:51:02:fe:
78:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:DE:10:10:27:37:0D:09:27:95:7F:7A:56:5F:8E:5E:E8:50:CD:E5
X509v3 Authority Key Identifier:
keyid:2D:C5:6E:E0:CC:43:CE:E2:28:C4:0C:E4:FC:47:2D:D4:EB:DB:1D:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcVu4MxDzuIoxAzk_Ect1OvbHfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/09f928-a27f-4e3a-b7ff-9e85436191ee/1/LcVu4MxDzuIoxAzk_Ect1OvbHfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/09f928-a27f-4e3a-b7ff-9e85436191ee/1/LcVu4MxDzuIoxAzk_Ect1OvbHfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:41:07:d6:6a:a1:21:b8:28:2a:37:48:e7:a3:29:d6:75:2b:
ef:e6:28:ba:4b:a8:0a:92:c4:0a:b6:36:68:aa:72:3c:cd:93:
4c:49:52:1c:dd:0b:a1:3d:0c:d2:06:75:db:56:8e:aa:fa:03:
93:0e:7d:d5:56:0e:b6:94:0f:79:80:f4:5f:c8:37:4f:5b:0a:
cf:f8:41:fb:db:5c:51:70:3d:ca:67:e3:05:6a:96:30:d3:41:
6a:71:b3:2a:8a:25:59:27:e0:4c:85:ec:5c:0f:fd:a7:fe:24:
71:75:63:8a:d0:ef:ea:6e:e6:6d:f3:9e:6f:08:13:8f:59:89:
a5:84:2e:1b:4b:e2:dc:e0:80:c8:06:d2:a8:79:0d:3c:da:79:
9c:7a:73:a8:63:f8:bd:0f:37:5b:d5:5e:a2:3c:2c:89:42:2f:
51:d1:a1:d6:d7:7f:ed:a1:d3:90:e6:18:36:7f:d6:72:db:b0:
6b:72:79:8f:61:21:02:84:1d:41:00:df:49:e8:b4:7f:20:af:
4e:dc:66:a0:12:8b:fe:ed:51:de:f6:f0:8b:06:b7:5a:86:54:
5f:a8:24:e6:d1:b4:23:92:8e:27:5f:10:54:dd:8b:39:64:66:
a3:14:d1:08:8f:6a:5c:c2:e0:cc:f4:dd:80:44:12:d2:b8:54:
73:d7:5f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:01:14 2025 by rpki-client