Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft
File: lGEMh1DDN98EecWg61t4tJoX_z4.mft (raw, json)
Hash identifier: chwIJdp77ikKIIhMwwGFLc/SDaymhBFMOGr+2YQN6g8=
Subject key identifier: C6:93:43:E7:57:58:FE:7B:91:F5:2F:35:3C:CC:78:DE:30:0F:AE:90
Authority key identifier: 94:61:0C:87:50:C3:37:DF:04:79:C5:A0:EB:5B:78:B4:9A:17:FF:3E
Certificate issuer: /CN=94610c8750c337df0479c5a0eb5b78b49a17ff3e
Certificate serial: 0196BC6DF7387C9F878A2CE10B510C93DA9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGEMh1DDN98EecWg61t4tJoX_z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft
Manifest number: 03B5
Signing time: Sat 10 May 2025 23:00:45 +0000
Manifest this update: Sat 10 May 2025 23:00:45 +0000
Manifest next update: Sun 11 May 2025 23:00:45 +0000
Files and hashes: 1: lGEMh1DDN98EecWg61t4tJoX_z4.crl (hash: 35d/qEMy4bPMQh8kOauAVicwW3ZQL9mtBdJ2nzXfrC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lGEMh1DDN98EecWg61t4tJoX_z4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6d:f7:38:7c:9f:87:8a:2c:e1:0b:51:0c:93:da:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94610c8750c337df0479c5a0eb5b78b49a17ff3e
Validity
Not Before: May 10 23:00:45 2025 GMT
Not After : May 11 23:00:45 2025 GMT
Subject: CN=c69343e75758fe7b91f52f353ccc78de300fae90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b5:11:e7:37:a1:8f:a8:70:5b:98:da:77:11:
a1:bb:79:2f:25:f4:b6:7e:06:49:21:bf:ca:bd:74:
af:da:e9:96:d0:75:c7:e4:b5:f6:f3:b5:17:3e:77:
1d:d5:20:91:c4:ee:75:53:5d:5e:f5:92:e4:c9:a0:
95:38:5e:b1:36:5c:2f:d0:90:d1:2e:49:13:28:43:
51:57:2a:f3:1d:51:33:db:6d:6b:78:6c:72:db:83:
cd:c1:35:9f:b0:21:a6:96:e2:08:32:36:67:36:f4:
ee:62:6d:ec:9c:dc:19:00:69:6a:b0:11:02:e6:68:
1e:44:59:a4:71:64:2e:c4:38:85:8a:25:5b:a2:82:
3f:85:4b:ff:7c:f2:7b:85:a9:5c:0e:88:66:68:ab:
6a:03:60:42:6a:0a:97:da:d4:a8:8c:c9:59:87:b4:
2c:1d:19:e9:1c:9d:50:01:83:d4:67:83:44:5c:b5:
ab:86:ed:19:26:d4:6a:b6:d2:f9:5f:bc:06:0b:97:
e7:cf:49:10:fd:4f:f1:68:87:48:db:2c:6f:28:6c:
6e:e8:9a:2e:23:a4:85:b9:82:ea:fd:0a:15:bf:09:
ce:cc:96:f1:29:25:64:6a:58:db:18:a4:c7:cd:0c:
7f:f1:58:dd:4b:ab:2a:60:b6:00:b8:46:0b:a4:14:
e5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:93:43:E7:57:58:FE:7B:91:F5:2F:35:3C:CC:78:DE:30:0F:AE:90
X509v3 Authority Key Identifier:
keyid:94:61:0C:87:50:C3:37:DF:04:79:C5:A0:EB:5B:78:B4:9A:17:FF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGEMh1DDN98EecWg61t4tJoX_z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:04:15:83:09:29:a6:29:c1:06:5b:63:08:0e:51:0d:e9:43:
3d:95:d6:fc:d5:95:05:0c:e9:20:09:c4:ff:2b:52:45:9c:4e:
72:02:f7:69:27:06:13:e2:eb:41:e9:b8:27:36:3e:13:e6:eb:
62:ac:bc:fb:dd:86:b5:e5:74:0d:15:37:4a:dc:19:c3:95:2f:
da:ee:55:25:fb:58:c1:5d:5b:95:5c:57:7a:2c:35:5c:09:e1:
19:49:bb:dd:2c:4f:cb:c5:e8:3d:9c:8b:b7:f2:28:58:a6:8f:
4e:20:9c:6e:0b:2e:8a:f2:52:94:af:40:3a:4b:82:be:dd:07:
9f:fe:fb:b3:e8:d6:b8:fe:ab:4d:3f:91:fc:01:ae:02:ef:35:
d0:e3:73:4c:4d:7c:aa:d5:c4:55:0c:3a:24:74:55:8e:be:be:
8c:33:93:80:ba:74:a0:e8:9d:f3:90:f4:11:4a:8b:97:0c:df:
be:75:33:a8:6b:f7:76:2d:64:05:1d:77:88:0a:93:df:da:89:
9a:0e:80:43:73:08:2d:22:30:c4:67:7a:e7:09:ae:d6:9c:a6:
08:40:3a:89:97:3b:e3:e5:98:ac:b6:c2:58:e7:52:6b:c0:8b:
87:96:10:72:2d:91:f1:76:17:d6:15:31:20:63:02:e4:79:95:
74:b8:36:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:12:48 2025 by rpki-client