Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.mft
File: LqdibWANr3WTdqZQfh1oQ4aZLTE.mft (raw, json)
Hash identifier: dXG5VAN/SnS0t6aKiNGDoyq3L80lpXN8bksBMSZ3wxA=
Subject key identifier: C7:17:90:EA:9A:C4:DE:F0:58:F3:B7:94:CB:4D:83:83:70:94:40:C7
Authority key identifier: 2E:A7:62:6D:60:0D:AF:75:93:76:A6:50:7E:1D:68:43:86:99:2D:31
Certificate issuer: /CN=2ea7626d600daf759376a6507e1d684386992d31
Certificate serial: 0196C5A84F3FE74A1C7942742F79B11F0C8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LqdibWANr3WTdqZQfh1oQ4aZLTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.mft
Manifest number: 0B54
Signing time: Mon 12 May 2025 18:01:03 +0000
Manifest this update: Mon 12 May 2025 18:01:03 +0000
Manifest next update: Tue 13 May 2025 18:01:03 +0000
Files and hashes: 1: LqdibWANr3WTdqZQfh1oQ4aZLTE.crl (hash: /eLuNkiakT82ojVESEhV0CkHuMsq8gowopBdVclI/10=)
2: RnQqeSwt7hN3ORL3uVQS5JgLuZs.roa (hash: PSsACPr2ZZlu/VcCkGWefI0lMsTEK4kuZI31GIxteCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LqdibWANr3WTdqZQfh1oQ4aZLTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:a8:4f:3f:e7:4a:1c:79:42:74:2f:79:b1:1f:0c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ea7626d600daf759376a6507e1d684386992d31
Validity
Not Before: May 12 18:01:03 2025 GMT
Not After : May 13 18:01:03 2025 GMT
Subject: CN=c71790ea9ac4def058f3b794cb4d8383709440c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:74:fd:dd:17:59:30:ba:34:c8:98:70:7d:03:
e6:15:9e:41:21:b1:83:8c:00:dd:dd:24:a7:46:5a:
f8:cc:33:e4:53:8b:d4:b1:ef:a1:cb:b3:87:4a:17:
93:f2:75:b3:ef:0e:1e:56:88:07:0f:ae:53:2b:02:
25:27:53:fb:1d:e7:0f:f3:3d:66:f1:80:4c:37:e1:
08:a8:46:91:00:98:ea:1d:78:4a:70:8f:c6:05:5c:
3c:1f:48:5a:b2:f9:c4:8b:ec:94:a3:5f:31:ba:e4:
9b:8e:fa:43:5f:59:c7:a1:d4:a4:63:4f:51:20:5c:
3d:2a:a1:52:b1:d8:72:06:7e:6c:55:0a:f2:29:f6:
bb:f4:07:ff:d0:5c:13:5c:d1:0e:b6:8a:98:0d:14:
ac:83:bf:d1:f5:cf:31:1e:c1:f2:0c:a9:fe:18:70:
af:50:bd:be:35:d4:06:24:95:d3:22:8e:b7:6e:2b:
c3:24:36:b7:99:57:1f:23:ed:ef:3d:eb:50:33:88:
e5:16:fb:38:b9:c3:1b:e1:d2:2b:84:bf:2a:da:d6:
01:95:9d:4c:dd:88:ab:65:2e:14:ca:07:45:7f:94:
8b:17:f5:78:54:b2:20:cf:32:b9:2b:5c:cc:9a:b6:
26:b4:cb:c3:88:a9:d7:11:19:8f:26:84:f1:16:32:
d1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:17:90:EA:9A:C4:DE:F0:58:F3:B7:94:CB:4D:83:83:70:94:40:C7
X509v3 Authority Key Identifier:
keyid:2E:A7:62:6D:60:0D:AF:75:93:76:A6:50:7E:1D:68:43:86:99:2D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LqdibWANr3WTdqZQfh1oQ4aZLTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:3a:13:5e:3a:a6:12:17:96:98:20:85:ee:21:c0:c6:f6:84:
ea:99:ae:e1:77:ac:91:72:bf:8d:82:47:01:71:22:23:e4:f4:
40:ac:e1:84:72:dd:56:c7:b5:01:ba:4b:ac:62:20:5c:b5:e4:
4f:44:0b:d5:81:77:00:82:36:26:8d:7b:57:14:a4:82:1b:e0:
f9:29:ab:11:2f:46:95:44:9d:71:35:08:99:d6:92:72:cf:2e:
81:30:18:f4:7f:4d:bf:32:54:78:03:eb:0b:f0:2e:7f:53:de:
4b:5c:84:34:60:e7:89:e1:5e:88:43:2b:ad:98:96:37:7f:ad:
e8:c8:5e:0e:9f:1b:8c:29:58:a1:51:90:71:c5:b1:56:01:de:
89:aa:38:31:1d:2b:a3:0f:0e:64:8f:9d:a1:14:46:5f:b0:8d:
b3:ca:de:3d:ea:a9:f1:f8:a8:18:92:9e:66:37:5e:94:bb:fd:
a9:9b:96:d5:16:dd:92:4e:6d:fb:9a:93:bc:75:c9:39:aa:a1:
32:2a:90:da:a0:26:37:bb:be:47:c4:66:30:89:29:7f:21:22:
c1:9f:36:60:97:f5:c5:94:da:19:cd:23:91:2c:e6:82:73:35:
88:09:9d:a4:4f:c8:50:3d:3b:39:45:b0:16:11:28:ff:9b:ed:
40:50:dd:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:03:50 2025 by rpki-client