Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft
File: LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft (raw, json)
Hash identifier: wsLlMadKx4evbAZLQjopsl8bXEuK0K+BCiBfpixn52g=
Subject key identifier: DF:10:F0:6B:FC:CE:0F:E5:B3:9B:BB:17:0C:15:0E:88:E9:8F:A4:0C
Authority key identifier: 2D:67:6A:61:DC:F4:D2:22:BA:66:CD:A1:94:30:F6:1E:61:1D:8A:AE
Certificate issuer: /CN=2d676a61dcf4d222ba66cda19430f61e611d8aae
Certificate serial: 0196C0B8BE2B3AC27DFA2B82783C4BF3A228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft
Manifest number: 0EDE
Signing time: Sun 11 May 2025 19:00:54 +0000
Manifest this update: Sun 11 May 2025 19:00:54 +0000
Manifest next update: Mon 12 May 2025 19:00:54 +0000
Files and hashes: 1: 7QVUt99h4511Posn9SqYvc2xLnE.roa (hash: KZzP7wYv+qefiRKZJehC5hXDNsrAKMVyaBPRSBqjrBQ=)
2: A2pZ4GSYS3kMwEo0-T0NRpkCuHk.roa (hash: tY5Ee/lDMytpmHRZG6292ahYyC+mhzE73yr+WRYQTjo=)
3: LWdqYdz00iK6Zs2hlDD2HmEdiq4.crl (hash: KkBpLPLF3Sotn2vSCcA8ZplOdT9YVeMEK3755iIORSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:be:2b:3a:c2:7d:fa:2b:82:78:3c:4b:f3:a2:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d676a61dcf4d222ba66cda19430f61e611d8aae
Validity
Not Before: May 11 19:00:54 2025 GMT
Not After : May 12 19:00:54 2025 GMT
Subject: CN=df10f06bfcce0fe5b39bbb170c150e88e98fa40c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:70:26:65:cd:ec:04:42:b6:49:73:25:7a:37:
0b:47:15:c1:da:74:8a:86:b0:cb:6e:1e:ac:a6:fe:
cd:89:9c:bd:9b:b5:c8:7a:73:d1:80:2b:ab:23:8e:
b8:9d:25:64:12:73:ea:b0:11:0e:a0:7e:57:8a:5d:
bb:24:af:01:4e:8e:db:8a:67:9c:c5:28:8d:2a:61:
4a:f7:fc:2f:3b:44:f5:d9:1e:17:f2:f7:35:66:05:
85:ae:c8:78:fd:6f:4d:8a:55:08:fc:46:7e:f4:e1:
56:71:46:f9:ff:4c:e4:7a:cc:8c:92:88:cb:e1:df:
0a:2e:00:a6:12:09:a2:ba:9c:b8:f6:e0:e9:59:28:
01:63:64:95:00:b9:fe:fd:7d:f0:5e:18:4f:0d:4c:
cd:67:33:ca:b0:ed:f9:38:36:d5:12:67:7a:b8:63:
64:d3:60:ed:a9:c9:a9:68:9f:7e:9e:d8:53:f8:a5:
fe:6c:8e:b3:c9:83:17:5d:e8:23:64:0a:74:aa:7d:
c5:aa:1b:1b:04:ac:c5:89:6f:fa:e0:67:36:5e:d6:
80:1d:e4:4d:93:3f:33:a5:9d:15:4d:8a:9b:53:d1:
d2:3f:d2:de:44:9c:dd:9e:03:6c:9a:39:5d:a0:bf:
72:a8:d9:4f:ff:d7:28:3a:fb:f2:87:ee:fe:cc:9c:
69:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:10:F0:6B:FC:CE:0F:E5:B3:9B:BB:17:0C:15:0E:88:E9:8F:A4:0C
X509v3 Authority Key Identifier:
keyid:2D:67:6A:61:DC:F4:D2:22:BA:66:CD:A1:94:30:F6:1E:61:1D:8A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:7f:58:e0:fc:54:ae:cb:a2:8f:54:a3:32:ac:fc:22:fb:c8:
64:a9:09:31:1a:c8:67:0e:7d:9f:27:1b:61:ae:d4:37:28:a7:
40:29:12:e1:ee:d4:7b:f3:d0:be:c0:8b:3a:a8:e2:48:cd:f4:
c8:b3:03:ef:53:8f:bc:f9:58:cd:f0:84:db:07:6f:ec:56:36:
95:38:17:a8:11:40:d5:1d:dd:c7:93:e2:4b:cf:24:74:cc:ae:
5e:86:92:c1:d9:c6:16:c5:9c:fe:aa:57:6e:fe:0b:38:82:6f:
f8:51:f0:53:fa:99:99:cf:46:4c:11:c0:3e:98:0b:9d:a2:a3:
fd:b0:a0:f5:d2:ed:ca:00:5f:b9:3e:ca:85:73:7d:d6:5e:42:
73:00:88:45:4c:e6:bb:80:91:c7:e2:97:03:5d:47:04:95:89:
0f:23:c1:9f:c4:d6:2f:51:c9:61:d4:9e:eb:40:4f:a0:06:17:
f2:1f:14:54:b7:31:ae:14:52:c4:45:ec:58:be:0a:ae:62:a3:
86:30:34:5f:27:eb:2e:c0:21:6e:e7:44:b6:63:6c:0c:7d:ba:
cc:ed:38:22:0e:f4:70:32:5d:d0:7f:39:d1:ce:32:bc:28:e3:
23:7d:61:4b:3f:44:8c:9d:12:e3:84:cb:3a:12:1a:23:97:d0:
51:bc:07:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:11:14 2025 by rpki-client