Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.mft
File: Li8BGtqu7EZbGCrucJw2fIfljzg.mft (raw, json)
Hash identifier: 5DnNUFESwod5YfYnvK73r8fZ38/llqL30kJrXIJ7gQk=
Subject key identifier: BE:38:EC:09:62:40:D6:2D:EF:91:B4:00:64:26:FE:26:60:7D:FC:B0
Authority key identifier: 2E:2F:01:1A:DA:AE:EC:46:5B:18:2A:EE:70:9C:36:7C:87:E5:8F:38
Certificate issuer: /CN=2e2f011adaaeec465b182aee709c367c87e58f38
Certificate serial: 0196A79D49B44EC1C7B9D3757849EF9AA554
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li8BGtqu7EZbGCrucJw2fIfljzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.mft
Manifest number: 0935
Signing time: Tue 06 May 2025 22:00:25 +0000
Manifest this update: Tue 06 May 2025 22:00:25 +0000
Manifest next update: Wed 07 May 2025 22:00:25 +0000
Files and hashes: 1: Li8BGtqu7EZbGCrucJw2fIfljzg.crl (hash: KkAfattSWmrfE9O9Rt5CE2Uss6Ss22X+KqQ+Qr5fLdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Li8BGtqu7EZbGCrucJw2fIfljzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a7:9d:49:b4:4e:c1:c7:b9:d3:75:78:49:ef:9a:a5:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e2f011adaaeec465b182aee709c367c87e58f38
Validity
Not Before: May 6 22:00:25 2025 GMT
Not After : May 7 22:00:25 2025 GMT
Subject: CN=be38ec096240d62def91b4006426fe26607dfcb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0e:45:b3:07:4d:47:3f:2e:a3:89:ed:ce:3e:
e6:55:e3:bd:5c:c7:cf:20:65:8c:9c:04:c5:0e:cf:
81:a6:05:db:40:fb:e9:33:81:06:c6:61:a4:58:bb:
f1:e7:d3:9e:35:4e:b5:a5:ca:08:ce:58:a8:eb:51:
20:9f:1e:a8:ac:a0:1c:1f:7e:21:99:d7:0f:f9:e1:
86:ca:1c:e8:46:6b:ae:a3:d3:e6:ae:8d:7b:3d:1f:
2f:42:07:2f:33:00:72:76:f3:73:29:20:8c:0f:a5:
17:50:d4:da:68:2b:31:2b:58:72:d5:53:5f:9a:b9:
b4:78:a5:87:d7:d7:f4:e4:b1:80:91:fb:09:c5:21:
e0:7a:84:f4:70:b3:53:42:18:1e:a0:9f:0f:b6:fb:
6c:7f:1d:2d:56:b1:d8:55:17:56:34:17:ff:2f:c5:
dd:ee:46:3a:36:34:19:0f:88:20:af:01:a0:0f:2a:
c3:5a:05:e1:4b:43:d6:7c:18:b7:3a:79:a8:50:63:
01:f0:5e:09:80:06:8d:10:4b:23:91:78:a2:c8:13:
06:95:55:f9:ad:e9:b2:7d:dc:a2:de:85:52:54:09:
09:8d:25:19:ef:57:36:29:ac:fc:07:2b:f8:b1:d8:
76:dc:2f:3d:9d:39:75:68:01:f2:30:15:a3:38:cb:
86:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:38:EC:09:62:40:D6:2D:EF:91:B4:00:64:26:FE:26:60:7D:FC:B0
X509v3 Authority Key Identifier:
keyid:2E:2F:01:1A:DA:AE:EC:46:5B:18:2A:EE:70:9C:36:7C:87:E5:8F:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li8BGtqu7EZbGCrucJw2fIfljzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:1a:52:d1:f9:c2:44:e7:ab:21:dd:d7:ad:3f:a1:06:0c:07:
ed:78:1a:60:c2:c6:af:70:ce:08:c7:65:d9:48:05:54:92:79:
88:5f:c5:08:00:a6:72:c7:1a:c6:60:c9:c3:bc:4d:3a:67:e8:
92:7b:4a:46:65:3a:15:99:f7:50:6b:e9:0a:59:df:f8:95:4a:
22:84:fa:67:ff:42:dd:e5:d3:5b:c9:9d:80:9c:01:fc:d9:f6:
20:1f:06:af:01:35:cc:31:6d:df:20:f5:49:58:ff:1a:47:4c:
a3:25:89:b4:c4:ff:07:0c:15:f3:b9:64:8c:1d:66:a9:63:50:
65:ef:4f:07:c0:e2:70:7e:fc:6d:8d:dd:7d:30:15:8e:2f:1c:
48:27:40:cb:be:c9:8c:70:a2:c7:e6:e0:bc:5b:3a:6c:67:77:
10:03:5f:3d:21:c6:1f:5e:22:2d:5b:7b:8a:5c:f4:62:b3:b6:
69:ab:f6:04:ee:9b:be:97:60:62:8c:9d:3b:79:2e:d1:00:df:
c2:f9:35:a8:62:09:46:91:88:28:d2:08:de:70:ef:60:c0:b2:
8b:20:d3:a2:63:6c:fb:a6:85:da:85:7c:22:70:86:7a:23:91:
f6:17:e5:65:f3:25:80:56:4e:79:f6:a6:f2:36:8f:5e:71:63:
8e:8b:47:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 23:52:25 2025 by rpki-client