Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/991825-d4bf-48c6-9493-38cfec21b422/1/LijWjfjYqxVZsR5zmeYu3DMjyj0.mft
File: LijWjfjYqxVZsR5zmeYu3DMjyj0.mft (raw, json)
Hash identifier: /eM0UUkx5q0vPvuddv88hrMbxyS57vv+6XN8oF83jq8=
Subject key identifier: A7:4C:A8:E4:E2:28:CF:D1:6D:89:06:12:F4:57:43:A5:47:83:96:05
Authority key identifier: 2E:28:D6:8D:F8:D8:AB:15:59:B1:1E:73:99:E6:2E:DC:33:23:CA:3D
Certificate issuer: /CN=2e28d68df8d8ab1559b11e7399e62edc3323ca3d
Certificate serial: 0196D7ADD18D49BA4C9E8A1DC642855E819C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LijWjfjYqxVZsR5zmeYu3DMjyj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/991825-d4bf-48c6-9493-38cfec21b422/1/LijWjfjYqxVZsR5zmeYu3DMjyj0.mft
Manifest number: 0213
Signing time: Fri 16 May 2025 06:00:14 +0000
Manifest this update: Fri 16 May 2025 06:00:14 +0000
Manifest next update: Sat 17 May 2025 06:00:14 +0000
Files and hashes: 1: LijWjfjYqxVZsR5zmeYu3DMjyj0.crl (hash: VGPN/jIQjU44pypghABzB9kXAQSrJLkcPF13kWyCb34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/991825-d4bf-48c6-9493-38cfec21b422/1/LijWjfjYqxVZsR5zmeYu3DMjyj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/991825-d4bf-48c6-9493-38cfec21b422/1/LijWjfjYqxVZsR5zmeYu3DMjyj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LijWjfjYqxVZsR5zmeYu3DMjyj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 06:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d7:ad:d1:8d:49:ba:4c:9e:8a:1d:c6:42:85:5e:81:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e28d68df8d8ab1559b11e7399e62edc3323ca3d
Validity
Not Before: May 16 06:00:14 2025 GMT
Not After : May 17 06:00:14 2025 GMT
Subject: CN=a74ca8e4e228cfd16d890612f45743a547839605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:19:f7:33:64:7a:d9:15:8f:9b:30:08:90:14:
61:83:c2:62:74:22:f1:8b:6e:15:3e:bf:8c:f7:f5:
4e:b1:c2:cb:b5:99:5d:68:d6:42:f6:c5:de:f0:c8:
a6:77:e1:25:09:6d:09:e6:37:5f:d8:09:81:51:34:
16:5a:93:83:a3:c0:87:90:38:78:17:d9:6c:89:23:
a1:e5:40:7d:df:28:6c:d2:92:e7:a1:5d:d5:ba:44:
af:b4:93:76:aa:a4:d3:0b:76:10:de:d4:4c:8e:98:
07:35:0a:69:3c:74:00:b3:14:b0:f4:37:ad:46:5c:
ac:34:ec:d1:e6:44:d0:0d:30:23:b1:3d:a4:40:e2:
e9:d5:09:31:b8:9b:b7:68:75:1d:3e:de:86:82:f7:
b8:c3:f4:06:a6:3a:2b:f4:b7:25:3e:a4:ae:72:a5:
da:cd:b8:6f:9f:bd:1c:e4:02:5a:93:46:e4:52:65:
97:07:3f:5d:db:73:19:c8:99:f9:09:40:55:d7:d2:
a4:27:2d:9d:a1:fc:76:f7:e9:73:98:7d:d8:6d:9f:
ca:c1:35:b8:d4:27:16:98:af:11:d6:98:18:ae:24:
c5:6e:41:93:79:ea:5d:13:e2:85:94:93:7a:04:0c:
14:72:4e:81:06:ce:13:f0:8b:e4:db:b2:69:f0:bd:
3d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:4C:A8:E4:E2:28:CF:D1:6D:89:06:12:F4:57:43:A5:47:83:96:05
X509v3 Authority Key Identifier:
keyid:2E:28:D6:8D:F8:D8:AB:15:59:B1:1E:73:99:E6:2E:DC:33:23:CA:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LijWjfjYqxVZsR5zmeYu3DMjyj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/991825-d4bf-48c6-9493-38cfec21b422/1/LijWjfjYqxVZsR5zmeYu3DMjyj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/991825-d4bf-48c6-9493-38cfec21b422/1/LijWjfjYqxVZsR5zmeYu3DMjyj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:e1:15:75:09:4b:17:62:b2:0d:d9:4b:58:f9:87:d3:2d:00:
8b:24:9a:1f:ce:56:79:ea:c2:83:25:8e:8f:95:82:25:03:ba:
e2:f9:ff:2a:db:8b:a3:9e:ab:0e:6e:ec:2d:13:b8:e0:7b:64:
34:49:14:07:6c:83:49:69:b2:4c:1e:96:89:c2:57:e1:cd:2a:
43:d0:4e:b3:a5:14:b1:7c:e5:d8:7a:36:90:27:70:aa:ec:e2:
06:5a:7d:37:b8:0c:8f:fa:97:84:b3:b4:91:fe:db:ad:ee:46:
a5:9d:65:ea:a6:7d:b4:5b:84:98:4a:fc:d8:ba:ac:dd:01:65:
6e:9b:9e:8d:86:38:29:89:f2:1b:b8:94:b5:17:87:bd:e4:dd:
4c:a2:1c:65:57:b7:7e:ae:da:1d:3d:b9:e0:58:56:eb:40:d6:
7a:da:9b:82:2e:32:7b:49:fa:bc:e5:2e:3c:64:f0:9a:95:34:
f2:0e:f6:f7:25:44:33:00:e8:66:40:36:67:26:be:26:18:a1:
f3:5c:2f:b5:17:50:e3:86:4b:c6:53:6a:c9:a2:85:08:bf:5e:
b4:b1:68:41:1c:de:68:01:0f:89:05:a3:4a:27:44:27:4b:35:
15:ee:a3:81:78:d9:4d:d5:81:60:7f:f8:90:f4:a5:9c:6c:6c:
c6:34:4f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 17:01:23 2025 by rpki-client