Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
File: LI-oUz3MgguhrW-ysvAWEBBTHbk.mft (raw, json)
Hash identifier: 3MBCzZ6N1c2kHwwYChKvUtyhjOBSBQ/JtOoX7tWIUlc=
Subject key identifier: C9:70:F6:F6:88:F8:E4:24:CE:EE:E0:5C:89:E2:B5:34:06:86:C7:01
Authority key identifier: 2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
Certificate issuer: /CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Certificate serial: 01969F75AB38ACA04C6E34BAB976BFBF891B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
Manifest number: 0725
Signing time: Mon 05 May 2025 08:00:10 +0000
Manifest this update: Mon 05 May 2025 08:00:10 +0000
Manifest next update: Tue 06 May 2025 08:00:10 +0000
Files and hashes: 1: LI-oUz3MgguhrW-ysvAWEBBTHbk.crl (hash: 8+PsK47aUzA+TMwi2HFXfqqybqpfxtJ5GLs5Yg9qGG0=)
2: LoUtlaJ5mypaBQZ7Vl2VxjfI8z8.roa (hash: mjZMaLb9m8sq6wgkMHrxy81dzJq4evg/mUOP+NJvNIc=)
3: hwLQQhvfkTPO9tfiU3xWDktqf98.roa (hash: ARLJwTBnOck1jpPDB5YSuCoDfjoyKgo2AkGDb71eUiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:75:ab:38:ac:a0:4c:6e:34:ba:b9:76:bf:bf:89:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Validity
Not Before: May 5 08:00:10 2025 GMT
Not After : May 6 08:00:10 2025 GMT
Subject: CN=c970f6f688f8e424ceeee05c89e2b5340686c701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:49:e6:3b:fa:d4:b8:c5:2f:0b:bb:d4:fc:a1:
48:5f:9c:1f:06:2c:b6:0f:b0:f7:5c:81:8f:04:78:
97:7d:fb:69:7b:d8:c7:14:2b:73:c1:e1:b3:97:5a:
7a:51:bd:c2:71:8f:e4:8e:65:5b:32:f9:d0:60:b1:
46:a0:a5:6c:0b:43:b1:b6:6c:1e:c0:a6:6f:09:f3:
86:e6:46:f7:b6:79:f9:ef:32:aa:bc:85:10:90:77:
da:5a:e5:47:5e:9e:89:eb:db:1e:87:7e:fb:1c:35:
61:74:40:6b:4c:9e:f7:a7:d9:55:17:94:62:78:73:
21:be:9f:ac:bb:2a:1d:65:94:40:a3:26:d5:3d:07:
63:99:c5:5f:ae:27:93:92:99:46:b4:ca:e4:ea:50:
8d:27:05:5f:74:5b:46:d4:52:2c:03:08:c4:c0:ca:
0e:67:e4:3f:67:e6:8b:02:56:05:94:26:bd:11:26:
fc:29:3c:ad:31:c2:99:1f:bc:fe:15:08:f2:54:a5:
98:2d:0c:1f:96:82:49:ad:10:b9:fc:7a:f1:86:e7:
ee:8b:37:ad:81:8c:b3:67:e8:b8:58:5f:ac:d7:d8:
91:e2:d8:96:5a:8f:63:8c:86:02:18:b4:16:96:d3:
cc:4a:54:70:6b:16:73:b1:34:b1:78:30:44:d1:81:
66:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:70:F6:F6:88:F8:E4:24:CE:EE:E0:5C:89:E2:B5:34:06:86:C7:01
X509v3 Authority Key Identifier:
keyid:2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:7e:5d:3f:97:de:98:8c:85:07:c2:1f:7f:64:74:f1:b2:3e:
54:d7:50:f7:41:32:31:2b:19:3d:b2:07:3c:30:d7:4f:81:01:
a1:f5:9b:a5:6b:d3:8d:8f:10:6f:bf:d0:78:00:20:11:6e:d1:
12:84:55:c7:80:18:61:d2:0d:46:34:b0:47:52:2f:fb:07:af:
2b:b9:c9:8b:3d:bb:04:58:60:5b:e8:90:d7:45:2d:61:fc:5e:
e2:b2:3d:25:a7:08:b3:99:fb:10:72:cf:71:9a:a8:34:ca:9f:
eb:7d:65:7e:94:e3:d3:fd:06:17:1a:1f:62:3a:d1:36:2b:fc:
34:83:ea:ee:e5:ba:39:64:c7:1a:1f:32:4c:96:2c:7d:51:08:
8d:c2:a4:8e:9f:24:d7:34:a3:e5:01:e0:87:ae:35:fd:23:83:
1b:26:d7:7f:8c:e8:d6:92:03:f7:c6:a3:cc:a6:e9:52:89:57:
74:94:65:6d:3b:d5:3f:ad:f3:b8:4d:89:5c:7d:f2:bf:8b:62:
6b:ef:ed:79:f4:63:76:18:6f:0b:42:26:0e:1a:b2:9b:e1:99:
8b:e0:ac:47:54:0c:da:78:e8:6c:00:10:c2:e6:7e:9f:da:ad:
9a:ba:ed:34:a2:ec:0c:5f:f0:06:01:7a:5e:79:ef:fa:41:6a:
ac:a9:41:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 14:46:03 2025 by rpki-client