Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
File: LoXNafYRaXriRpasdl1Wt13406E.mft (raw, json)
Hash identifier: dm5NPGLtSDPteuRWeGq4bM4pZrUo4S+B35JQatJ81EQ=
Subject key identifier: C3:EF:C6:CD:14:2E:01:63:54:4E:4A:63:40:0A:9A:35:DC:E8:8C:AE
Authority key identifier: 2E:85:CD:69:F6:11:69:7A:E2:46:96:AC:76:5D:56:B7:5D:F8:D3:A1
Certificate issuer: /CN=2e85cd69f611697ae24696ac765d56b75df8d3a1
Certificate serial: 0196A3C0DE3A98B4DE01C30ABD29AE5C61CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
Manifest number: 043C
Signing time: Tue 06 May 2025 04:00:48 +0000
Manifest this update: Tue 06 May 2025 04:00:48 +0000
Manifest next update: Wed 07 May 2025 04:00:48 +0000
Files and hashes: 1: LoXNafYRaXriRpasdl1Wt13406E.crl (hash: /LKyZEtFrVqJo4KgeHVSH+Tfpl/tRsekHky004C669Y=)
2: V4UHEu5lFuhdZwHH6lxxX4Rsnp4.roa (hash: QxXsgkZ9Y9z5B4JIZIQ9pTgrtbYM89E088MqJxxgyOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:c0:de:3a:98:b4:de:01:c3:0a:bd:29:ae:5c:61:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e85cd69f611697ae24696ac765d56b75df8d3a1
Validity
Not Before: May 6 04:00:48 2025 GMT
Not After : May 7 04:00:48 2025 GMT
Subject: CN=c3efc6cd142e0163544e4a63400a9a35dce88cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:12:31:ad:74:e6:e8:2e:85:ce:e8:37:0f:e9:
15:5e:de:20:54:fd:67:14:8f:b0:2c:75:d5:32:29:
1d:bd:99:7f:8d:cd:20:25:74:f7:e0:0d:ca:2a:7d:
7b:bc:1b:6a:81:77:23:88:01:8b:84:22:91:4c:38:
d1:82:2b:aa:33:5a:97:d8:b0:05:64:d1:4f:7a:d4:
20:aa:e1:66:6a:49:7f:5e:cd:a5:e7:01:ba:5e:87:
9e:fc:f0:21:ed:a4:41:40:a1:69:02:fb:d3:4a:c7:
ce:1c:57:0d:2c:d2:5b:a0:58:b7:61:92:22:aa:18:
9b:ac:ee:d4:54:4f:8b:57:b5:6a:9e:d9:26:39:22:
0e:f2:dd:29:a4:0e:28:93:10:2d:52:ff:3c:08:66:
20:bf:86:af:5d:ba:ca:d1:56:76:6b:13:71:c1:32:
40:63:c4:44:33:4f:b9:1a:67:d0:b9:31:50:d1:b0:
c7:e8:e0:4e:f2:77:e4:d5:5d:8c:ff:8c:0a:6a:f5:
75:ab:45:ca:31:a4:56:81:6f:57:64:eb:c5:f7:0f:
da:b1:41:ee:d2:19:87:f3:14:c4:1f:75:9f:ac:c5:
9f:55:df:8c:b4:9f:a7:ee:d3:ba:7b:08:9c:94:d5:
35:d8:44:01:14:3f:2b:bd:80:55:56:da:8b:46:82:
59:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:EF:C6:CD:14:2E:01:63:54:4E:4A:63:40:0A:9A:35:DC:E8:8C:AE
X509v3 Authority Key Identifier:
keyid:2E:85:CD:69:F6:11:69:7A:E2:46:96:AC:76:5D:56:B7:5D:F8:D3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:39:0c:b8:16:15:d6:22:14:61:20:98:c2:60:72:e4:e8:5d:
77:93:a7:0a:92:a1:02:3a:43:e0:ca:bd:3c:a8:16:ae:6d:f6:
8f:b8:36:33:5e:80:3c:57:6f:8b:09:03:53:43:23:a0:e5:e0:
c1:c0:33:ee:c1:f0:c8:72:7f:0c:08:a7:4b:85:23:07:80:c8:
39:24:2f:74:70:f7:a8:28:a9:df:22:0f:a8:db:d3:a7:1b:84:
86:b0:ee:18:47:3e:c1:1d:32:4c:9a:b6:73:14:1b:53:ff:c3:
65:dc:44:73:42:58:4a:6c:b2:04:78:3f:4b:22:ea:4d:d3:0c:
98:c5:85:23:f9:fd:a9:89:ac:1b:b7:4b:ec:9a:34:0b:0b:ff:
98:cf:81:12:9b:61:c4:f3:a6:d8:6e:70:9b:89:12:31:04:ea:
fc:cc:c2:94:8d:fd:09:72:3b:ac:47:1e:3c:53:8e:d6:46:ad:
36:70:6b:17:3f:66:9e:8b:af:84:b8:2c:d1:f0:ba:b9:7b:7b:
72:d4:e5:eb:85:7b:08:2a:50:17:3e:64:41:d8:9d:14:1a:dc:
8c:98:6f:81:14:24:88:26:e4:f5:b7:00:9f:d9:41:b9:49:6c:
14:a6:e5:bd:8a:4b:2a:a2:0a:25:ce:a0:6e:39:ae:af:49:af:
52:bb:2b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 06:02:29 2025 by rpki-client