Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/55314e-9156-4776-9e01-570dca7ad13e/1/LDfpq5czmfAvAyfJgRoYdQDEtsk.mft
File: LDfpq5czmfAvAyfJgRoYdQDEtsk.mft (raw, json)
Hash identifier: ue4ahhiag/AqSIQg8DlgwUVTU/jRvp3//gQMkSosTBc=
Subject key identifier: 35:F7:0F:C4:A5:55:61:63:DB:44:BC:4E:3C:F7:E2:CE:CC:7D:26:C7
Authority key identifier: 2C:37:E9:AB:97:33:99:F0:2F:03:27:C9:81:1A:18:75:00:C4:B6:C9
Certificate issuer: /CN=2c37e9ab973399f02f0327c9811a187500c4b6c9
Certificate serial: 0196CFBDECE5ECA91EED73C4195B1AEADBE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDfpq5czmfAvAyfJgRoYdQDEtsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/55314e-9156-4776-9e01-570dca7ad13e/1/LDfpq5czmfAvAyfJgRoYdQDEtsk.mft
Manifest number: 0375
Signing time: Wed 14 May 2025 17:00:52 +0000
Manifest this update: Wed 14 May 2025 17:00:52 +0000
Manifest next update: Thu 15 May 2025 17:00:52 +0000
Files and hashes: 1: LDfpq5czmfAvAyfJgRoYdQDEtsk.crl (hash: GsfvPW8PvA9ivN2iu1dvfAZA4oeaNxhKpPaWGjwO3J0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/55314e-9156-4776-9e01-570dca7ad13e/1/LDfpq5czmfAvAyfJgRoYdQDEtsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/55314e-9156-4776-9e01-570dca7ad13e/1/LDfpq5czmfAvAyfJgRoYdQDEtsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LDfpq5czmfAvAyfJgRoYdQDEtsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 17:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:bd:ec:e5:ec:a9:1e:ed:73:c4:19:5b:1a:ea:db:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c37e9ab973399f02f0327c9811a187500c4b6c9
Validity
Not Before: May 14 17:00:52 2025 GMT
Not After : May 15 17:00:52 2025 GMT
Subject: CN=35f70fc4a5556163db44bc4e3cf7e2cecc7d26c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4f:01:c4:38:da:1f:8e:d9:fd:f2:f4:fc:17:
d7:67:c4:46:bb:35:d6:95:81:0a:80:74:40:c0:b8:
25:44:eb:85:ca:45:a8:4f:8c:f6:c7:80:f8:c5:b7:
4b:1d:36:c2:14:65:28:03:89:be:56:90:f1:a1:af:
9d:20:15:78:0f:4e:5e:f9:6a:ba:aa:ef:a3:c7:0c:
da:1a:fb:f6:56:12:33:36:05:7e:eb:1e:34:be:b4:
4c:5c:bb:94:d1:a2:14:23:11:d3:d2:d9:ea:f2:51:
cd:bd:77:17:71:f8:2d:f9:51:64:01:1d:45:5f:c2:
d4:69:6d:e2:55:6f:09:74:c6:4c:1b:ea:a0:2f:d5:
b2:a1:be:de:c8:72:b3:7b:f9:45:1d:1a:22:e8:5d:
da:22:7f:61:50:e0:bd:76:02:21:30:ba:96:81:01:
df:f9:21:10:d4:19:22:7d:a6:97:8c:dc:20:26:da:
cf:c3:2d:3f:34:eb:3f:2c:69:9e:92:7f:bb:e8:ad:
04:57:bf:df:d9:71:9b:d1:65:75:31:21:b8:6f:24:
e6:08:7c:3d:b8:e6:b8:f8:1d:65:55:d4:bc:a2:45:
08:8d:1a:a0:39:e0:56:36:ea:3d:23:9f:5c:bd:06:
46:1a:13:19:7e:03:e9:7f:81:e6:06:1e:81:b7:5a:
ce:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F7:0F:C4:A5:55:61:63:DB:44:BC:4E:3C:F7:E2:CE:CC:7D:26:C7
X509v3 Authority Key Identifier:
keyid:2C:37:E9:AB:97:33:99:F0:2F:03:27:C9:81:1A:18:75:00:C4:B6:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDfpq5czmfAvAyfJgRoYdQDEtsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/55314e-9156-4776-9e01-570dca7ad13e/1/LDfpq5czmfAvAyfJgRoYdQDEtsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/55314e-9156-4776-9e01-570dca7ad13e/1/LDfpq5czmfAvAyfJgRoYdQDEtsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:4f:1b:c9:2e:7f:c3:e0:af:51:a6:3b:55:c2:03:ea:c1:97:
a6:9e:e3:eb:96:71:37:2f:44:e7:aa:19:90:28:95:b0:87:1c:
6a:09:ba:40:ff:fc:6d:ef:13:bf:73:be:29:7b:50:de:c7:44:
03:28:6e:7b:f4:68:63:5c:18:d9:7d:92:d7:16:11:e5:c8:cd:
4a:3e:a7:11:ee:5a:e3:30:75:df:ff:cc:5b:cf:30:a2:21:d3:
73:55:15:79:e0:dd:6f:2a:0f:67:dd:40:fe:54:03:ab:66:99:
fc:0b:55:f5:ee:2f:56:87:1e:39:02:ec:37:99:15:44:76:22:
01:4b:2e:02:0a:e7:0d:ff:b2:e6:39:31:f5:e0:d8:9f:6c:61:
2a:d1:4e:75:d2:20:42:30:c3:d6:6a:18:e3:12:43:26:e8:7c:
9c:71:b2:5b:20:1b:4f:76:c2:72:e1:72:49:b7:c8:38:9c:43:
96:7a:43:8e:92:f3:f0:07:13:d7:7a:9f:a1:2f:9c:8e:0d:5f:
ea:fe:33:a3:26:2e:98:5f:24:12:96:15:c7:87:e9:29:52:fe:
17:97:20:25:59:7d:44:f8:f1:8b:5b:27:c4:54:c0:38:34:26:
6b:ca:76:2b:88:1a:d8:cc:77:d2:29:bb:32:36:15:5d:c6:a4:
61:b4:bc:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 03:22:55 2025 by rpki-client