Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
File: LI5SR1LthVF1oBQSyzfEqeTbYXA.mft (raw, json)
Hash identifier: X1G8tD1I7O9imKoqA+AXg/WTHpUw8G4E/vVodqVzqH0=
Subject key identifier: 7C:97:C2:D9:E0:40:4E:F7:2B:D2:F2:B3:D8:CC:8C:4F:52:9D:53:5B
Authority key identifier: 2C:8E:52:47:52:ED:85:51:75:A0:14:12:CB:37:C4:A9:E4:DB:61:70
Certificate issuer: /CN=2c8e524752ed855175a01412cb37c4a9e4db6170
Certificate serial: 0196C23982383D6D5E359407C5367A83C1FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI5SR1LthVF1oBQSyzfEqeTbYXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
Manifest number: 1534
Signing time: Mon 12 May 2025 02:01:10 +0000
Manifest this update: Mon 12 May 2025 02:01:10 +0000
Manifest next update: Tue 13 May 2025 02:01:10 +0000
Files and hashes: 1: LI5SR1LthVF1oBQSyzfEqeTbYXA.crl (hash: cfReuk28p03ErUlUFHrdR2oSa21N7QKV406urK+UEec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LI5SR1LthVF1oBQSyzfEqeTbYXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:39:82:38:3d:6d:5e:35:94:07:c5:36:7a:83:c1:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c8e524752ed855175a01412cb37c4a9e4db6170
Validity
Not Before: May 12 02:01:10 2025 GMT
Not After : May 13 02:01:10 2025 GMT
Subject: CN=7c97c2d9e0404ef72bd2f2b3d8cc8c4f529d535b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:40:01:44:53:d8:92:49:50:36:fe:30:06:aa:
27:10:d9:dd:67:e9:cb:9c:c5:b4:3c:a9:86:aa:de:
b3:6a:79:7e:34:ea:79:b9:95:e3:97:5e:51:39:94:
f5:6e:39:2a:30:62:7e:58:dc:ec:65:fd:7c:c6:60:
0c:f9:08:db:77:44:89:a1:5e:ea:03:31:ec:4a:87:
01:95:59:0f:6e:b7:68:b4:29:e2:5b:a6:ab:e4:d0:
9c:00:02:a3:78:dd:a8:d9:a7:f3:bd:c7:41:92:79:
8b:0f:31:f1:88:4f:21:39:34:f7:19:6a:03:a8:5e:
b8:a4:dd:b3:26:c2:d1:52:21:af:38:7f:14:4f:43:
d9:8e:93:af:b3:1f:20:38:6c:72:27:df:66:94:42:
1f:ad:c4:c2:a6:76:09:1d:3e:26:96:72:53:4b:e5:
10:32:bf:c8:ba:10:80:3d:ab:56:58:9f:d1:b6:ad:
4f:7c:09:54:54:e3:1c:c7:26:06:7f:fa:9b:e1:c6:
4a:72:39:b7:7e:e3:8f:b6:5a:2a:5f:81:21:1b:bb:
6e:7c:79:5c:11:ae:55:3d:f5:ac:90:29:9e:52:1e:
08:e8:81:d2:b4:f3:f5:7d:f5:4b:f1:8f:87:fe:3a:
c1:79:21:09:4a:ba:94:5d:73:c3:17:da:70:97:78:
ab:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:97:C2:D9:E0:40:4E:F7:2B:D2:F2:B3:D8:CC:8C:4F:52:9D:53:5B
X509v3 Authority Key Identifier:
keyid:2C:8E:52:47:52:ED:85:51:75:A0:14:12:CB:37:C4:A9:E4:DB:61:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI5SR1LthVF1oBQSyzfEqeTbYXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:47:13:72:f3:54:90:f3:62:8d:62:7d:50:76:e6:3f:79:bb:
3a:8a:b7:6d:50:7b:f2:dc:ff:09:40:09:5c:ca:4f:bf:d0:41:
65:8e:45:1c:31:e2:8b:48:a1:81:99:67:8e:d1:39:15:f9:88:
ae:87:ca:70:43:e6:c8:ff:29:1d:c8:51:a2:e2:74:de:51:a9:
6b:ab:c0:7c:ea:73:16:12:5a:28:94:74:39:06:90:39:6e:fe:
bb:85:3a:d1:d8:1b:53:9a:4f:4b:67:99:6e:2f:e9:ec:0e:92:
5a:cb:51:9f:5f:15:7e:c1:87:b7:13:ea:5c:f1:2e:3c:0d:29:
db:c4:cc:a2:ec:23:54:b7:45:10:7a:08:db:96:c0:92:f6:28:
02:90:78:86:c9:34:00:46:43:43:92:af:0f:f4:fb:76:6b:8d:
a8:ff:03:52:5f:de:fc:20:47:9e:09:07:f3:7c:d2:2d:c3:5f:
aa:34:6b:e0:45:26:a3:74:a9:07:f3:87:95:2a:b1:6d:a9:61:
53:75:af:5a:ad:aa:e3:8d:63:4f:a2:0d:d4:30:05:dc:b0:e7:
4c:d7:b2:95:62:02:b4:03:bf:ea:61:e6:df:49:75:e6:e1:6a:
dd:2f:be:51:c8:3e:e4:db:cb:10:cb:32:81:43:81:4b:b7:d2:
dd:7d:5a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 06:57:02 2025 by rpki-client