Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/76a471-08e0-49e6-9537-53b55fae023d/1/LSdW5QjQEzSbJE4wfX8jliafJwg.mft
File: LSdW5QjQEzSbJE4wfX8jliafJwg.mft (raw, json)
Hash identifier: QXUKOShkjwARSZIL6E3DPMqA+mHGDKdpkSQSVGv1+zs=
Subject key identifier: A0:ED:E7:81:CB:77:41:D5:2D:EB:1A:0B:90:24:3A:B6:6F:F4:A2:B7
Authority key identifier: 2D:27:56:E5:08:D0:13:34:9B:24:4E:30:7D:7F:23:96:26:9F:27:08
Certificate issuer: /CN=2d2756e508d013349b244e307d7f2396269f2708
Certificate serial: 0196BE93001F8F4009F13BD82FE1994001F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSdW5QjQEzSbJE4wfX8jliafJwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/76a471-08e0-49e6-9537-53b55fae023d/1/LSdW5QjQEzSbJE4wfX8jliafJwg.mft
Manifest number: 11C5
Signing time: Sun 11 May 2025 09:00:26 +0000
Manifest this update: Sun 11 May 2025 09:00:26 +0000
Manifest next update: Mon 12 May 2025 09:00:26 +0000
Files and hashes: 1: LSdW5QjQEzSbJE4wfX8jliafJwg.crl (hash: HDDzai3YqAmKhDeFCUICH9gNGE71SxwBNl4KKNQS1D8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/76a471-08e0-49e6-9537-53b55fae023d/1/LSdW5QjQEzSbJE4wfX8jliafJwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/76a471-08e0-49e6-9537-53b55fae023d/1/LSdW5QjQEzSbJE4wfX8jliafJwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LSdW5QjQEzSbJE4wfX8jliafJwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:93:00:1f:8f:40:09:f1:3b:d8:2f:e1:99:40:01:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2756e508d013349b244e307d7f2396269f2708
Validity
Not Before: May 11 09:00:26 2025 GMT
Not After : May 12 09:00:26 2025 GMT
Subject: CN=a0ede781cb7741d52deb1a0b90243ab66ff4a2b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:54:56:78:57:b2:49:e2:7f:d9:8e:c3:e9:e8:
34:57:ec:1d:bb:f3:9f:97:45:69:3d:40:aa:62:41:
46:07:aa:12:f0:39:96:f3:9e:f0:86:70:b7:26:88:
44:07:e1:49:fd:d2:02:0c:61:58:e4:63:5e:69:35:
bd:5d:51:c8:54:f0:ca:ba:cc:6b:e4:5f:7e:16:2c:
28:fc:1d:38:ef:6a:7b:de:5b:63:18:83:e8:21:4f:
4d:90:3b:38:be:e7:1c:08:eb:32:8c:f9:69:cb:6d:
0b:6e:cb:fb:af:95:dd:74:95:d9:2c:d7:92:f6:69:
97:aa:07:d1:2b:c3:ed:9e:75:8f:94:36:d3:77:40:
76:7c:a8:16:a5:84:dd:f4:74:0e:85:da:1c:59:6d:
cc:77:1e:39:56:01:19:6a:52:9d:18:ff:2d:4f:74:
d7:da:b3:04:27:bd:37:2d:f2:ce:31:89:0f:45:59:
79:b9:0d:14:ac:a1:81:5e:30:2d:c8:ab:44:5b:f3:
b2:d9:58:f5:98:09:4e:53:e8:16:0e:a1:b3:27:82:
ad:c1:40:ac:b9:3a:ef:8b:a9:69:f2:16:dc:14:3b:
d5:8c:15:54:e4:e1:46:20:a4:08:67:07:1d:9b:3f:
98:dd:51:ad:c1:a1:7e:13:6b:fe:91:fc:41:73:1f:
e6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:ED:E7:81:CB:77:41:D5:2D:EB:1A:0B:90:24:3A:B6:6F:F4:A2:B7
X509v3 Authority Key Identifier:
keyid:2D:27:56:E5:08:D0:13:34:9B:24:4E:30:7D:7F:23:96:26:9F:27:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSdW5QjQEzSbJE4wfX8jliafJwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/76a471-08e0-49e6-9537-53b55fae023d/1/LSdW5QjQEzSbJE4wfX8jliafJwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/76a471-08e0-49e6-9537-53b55fae023d/1/LSdW5QjQEzSbJE4wfX8jliafJwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:b5:50:a6:cb:04:45:ab:8b:07:13:01:6f:50:c9:d0:01:dd:
ba:e7:fe:db:ce:77:7e:78:73:db:cc:31:14:60:08:f2:6e:1b:
de:c3:4a:7f:c9:2d:45:42:eb:09:7b:bf:1a:e1:aa:04:c7:b4:
1c:e9:de:ee:3d:ed:ff:e2:b9:8d:5a:a5:a0:9e:9b:82:86:e8:
48:82:5d:95:60:0f:17:87:32:79:63:81:ac:cc:c4:bf:15:e6:
77:da:d1:12:d7:25:c7:c3:6a:ac:f7:44:81:27:77:8b:d7:f1:
d6:4a:9f:ae:f4:03:d1:d8:b6:dc:40:5f:f1:ab:87:d3:ad:b8:
73:4b:4c:fd:55:f9:31:ad:2a:2b:d8:ac:3b:1a:96:2e:82:59:
f1:46:dc:17:b9:09:55:e0:7c:a0:5c:6c:ee:c1:9b:ae:60:cd:
ba:dd:85:9e:34:08:18:20:12:03:0b:d0:51:36:93:5b:3b:9b:
d1:df:a6:08:d3:9e:c5:1e:a5:64:53:f3:d2:a5:33:60:fb:43:
aa:26:ae:7f:82:b4:67:f0:73:e6:fb:5b:6a:c0:d8:f3:0a:41:
b2:69:2c:ea:12:64:ac:8a:06:0d:f6:2d:73:d5:bc:ac:77:0d:
7e:7f:a3:23:8a:0d:27:b3:aa:6b:65:4a:24:c5:9e:41:c5:6f:
70:e4:b9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:01:08 2025 by rpki-client