Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft
File: LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft (raw, json)
Hash identifier: JW2OaEiCgqo2K1WV8FInpBLN1+J0YYCWfCEFu5TLEnU=
Subject key identifier: A5:13:47:C6:CA:73:04:5E:00:4B:63:AE:45:E4:CB:0C:FE:52:87:6D
Authority key identifier: 2C:57:1D:68:8A:A5:03:A2:E5:66:BB:C8:76:DF:0B:A4:55:C5:77:ED
Certificate issuer: /CN=2c571d688aa503a2e566bbc876df0ba455c577ed
Certificate serial: 0196AE44760BB10AB16EB3C8499B3AD8087A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LFcdaIqlA6LlZrvIdt8LpFXFd-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft
Manifest number: 1535
Signing time: Thu 08 May 2025 05:00:44 +0000
Manifest this update: Thu 08 May 2025 05:00:44 +0000
Manifest next update: Fri 09 May 2025 05:00:44 +0000
Files and hashes: 1: LFcdaIqlA6LlZrvIdt8LpFXFd-0.crl (hash: Uz2ZnN32nanbQOqRjG1sir3eD7Cut8hM981LJrhD+kQ=)
2: jw6vhP1XSWL-mJ5DdRhBrk5Uzas.roa (hash: Kw3hAcXjhw+zjLuWTzYjCzsx/BTtTlyQ/NHsrLRcPPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LFcdaIqlA6LlZrvIdt8LpFXFd-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:44:76:0b:b1:0a:b1:6e:b3:c8:49:9b:3a:d8:08:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c571d688aa503a2e566bbc876df0ba455c577ed
Validity
Not Before: May 8 05:00:44 2025 GMT
Not After : May 9 05:00:44 2025 GMT
Subject: CN=a51347c6ca73045e004b63ae45e4cb0cfe52876d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:42:92:61:bf:a8:7d:02:11:e5:aa:12:1e:03:
e2:d5:12:49:dd:5b:d4:ae:5b:59:26:c6:f5:b1:7d:
74:e4:4e:d5:21:dc:b0:ec:13:dc:e8:fe:00:c9:6e:
51:2c:8d:a2:fa:0a:22:5e:8c:2c:7c:af:3b:2e:8b:
9c:e9:59:06:37:1a:7d:4a:2d:48:4b:d1:df:35:c2:
8d:b8:a7:42:b3:96:23:97:47:2f:a6:6b:53:b5:85:
99:c6:b7:9b:62:3f:a8:a0:8f:f0:24:d7:62:1f:58:
76:d2:a9:81:20:22:60:22:15:d2:c5:0c:ab:ef:31:
2e:6f:33:27:63:c9:cb:19:38:1a:8e:b8:4e:c4:ce:
23:fb:df:c6:15:23:1e:27:71:42:6f:c9:43:00:4d:
03:21:ee:88:aa:0f:6f:df:57:ed:26:70:74:a5:4d:
9e:43:36:d8:3f:21:7b:39:64:a6:29:d0:e5:e1:72:
9e:67:d1:ac:26:e9:a6:a9:26:90:65:1c:e0:12:00:
0d:ac:d9:67:bd:5b:c7:2c:47:c9:a1:18:4a:c2:2b:
28:af:32:60:f6:fe:66:99:59:23:b3:f6:60:d1:f7:
c3:86:fd:37:b3:b1:d5:b7:00:e8:66:58:67:22:51:
ab:98:32:8c:91:78:8a:50:4c:a6:fa:d5:ea:96:9b:
c1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:13:47:C6:CA:73:04:5E:00:4B:63:AE:45:E4:CB:0C:FE:52:87:6D
X509v3 Authority Key Identifier:
keyid:2C:57:1D:68:8A:A5:03:A2:E5:66:BB:C8:76:DF:0B:A4:55:C5:77:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LFcdaIqlA6LlZrvIdt8LpFXFd-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d6:01:6b:6a:6f:85:79:15:00:32:39:d3:6a:65:ae:8a:33:
e8:60:75:fa:fe:a2:77:82:27:72:94:3e:43:a2:f2:e1:7d:2e:
72:9c:36:91:3f:cc:16:89:9b:2a:fd:45:9f:a3:b5:99:7e:82:
96:7b:46:14:87:58:e0:d3:ff:a7:2a:29:5f:f3:6b:53:b0:58:
89:a2:f1:d8:63:6d:59:02:ab:a4:61:40:bd:f4:b4:33:77:a3:
a7:47:1f:9d:19:f9:77:f6:3e:ff:db:ee:6d:01:2a:cc:37:b9:
05:24:f1:18:94:e7:bb:fc:8e:94:0f:06:31:01:b6:7d:93:f9:
94:df:af:ee:12:ef:3d:35:fd:72:24:45:c9:fa:8c:f3:a1:53:
04:59:2c:a5:7c:7b:8c:68:a2:5f:4c:78:d8:fa:b0:80:6a:97:
40:c1:08:d5:e1:64:7c:25:c6:be:65:f8:a0:dc:d5:00:07:ef:
90:71:45:92:d1:8f:dc:d5:75:6c:54:ed:e8:8e:6a:ee:57:1e:
16:a5:39:ad:87:10:d0:ba:8c:5a:4c:8b:78:16:42:e9:03:f9:
5a:cf:ec:a2:08:5d:5e:bf:91:d1:6b:b2:84:82:5a:75:0e:04:
e5:b3:fe:7b:b8:b5:09:26:06:63:d1:1e:50:4c:af:7b:be:35:
27:3f:9e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 08:15:01 2025 by rpki-client