Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/50ac12-fd93-4939-a2ef-41ca2d3aae71/1/LJgiAI2cxwEtYDBCmyjYWNu6ykM.mft
File: LJgiAI2cxwEtYDBCmyjYWNu6ykM.mft (raw, json)
Hash identifier: /8FQjKEsrSYN55acltdL5yXyLSq11HDPEB5T+795YOk=
Subject key identifier: AF:7E:82:B9:38:3D:B8:2A:8C:CE:B1:F4:21:A5:83:EE:C2:F9:4C:C9
Authority key identifier: 2C:98:22:00:8D:9C:C7:01:2D:60:30:42:9B:28:D8:58:DB:BA:CA:43
Certificate issuer: /CN=2c9822008d9cc7012d6030429b28d858dbbaca43
Certificate serial: 0196B7B5EF49ABB4D3090B67255AF51BA7A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJgiAI2cxwEtYDBCmyjYWNu6ykM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/50ac12-fd93-4939-a2ef-41ca2d3aae71/1/LJgiAI2cxwEtYDBCmyjYWNu6ykM.mft
Manifest number: 0C91
Signing time: Sat 10 May 2025 01:01:15 +0000
Manifest this update: Sat 10 May 2025 01:01:15 +0000
Manifest next update: Sun 11 May 2025 01:01:15 +0000
Files and hashes: 1: LJgiAI2cxwEtYDBCmyjYWNu6ykM.crl (hash: L6D4e7vbBy+zkMU7D1iOkxSDu3lC4QqZYAH4EYkcO2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/50ac12-fd93-4939-a2ef-41ca2d3aae71/1/LJgiAI2cxwEtYDBCmyjYWNu6ykM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/50ac12-fd93-4939-a2ef-41ca2d3aae71/1/LJgiAI2cxwEtYDBCmyjYWNu6ykM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LJgiAI2cxwEtYDBCmyjYWNu6ykM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 01:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b5:ef:49:ab:b4:d3:09:0b:67:25:5a:f5:1b:a7:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c9822008d9cc7012d6030429b28d858dbbaca43
Validity
Not Before: May 10 01:01:15 2025 GMT
Not After : May 11 01:01:15 2025 GMT
Subject: CN=af7e82b9383db82a8cceb1f421a583eec2f94cc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fc:14:c7:1e:4c:29:1a:28:f0:9d:aa:e7:72:
ea:ce:79:2c:60:5c:c4:63:3c:d2:15:c1:c0:b8:2d:
3e:ad:6e:5f:7a:d5:58:d2:bd:45:a5:a4:d7:3c:97:
98:93:fc:6a:87:a8:dc:2b:6c:3b:65:4d:59:d1:20:
80:fb:3f:34:3c:e9:d1:89:77:ac:5f:64:43:b0:23:
f7:36:05:4a:c1:d5:a5:3e:e3:3c:4b:96:0e:91:00:
d2:95:52:1c:13:6c:d0:7b:f7:3b:ed:cd:65:0e:ee:
1e:d3:5c:42:7c:05:12:ae:d2:fb:25:bc:92:51:aa:
17:3d:8b:c6:a9:25:71:25:90:b3:30:23:2d:05:e3:
6e:3c:dd:bd:44:13:50:de:a3:48:1a:38:de:7d:9e:
8f:bc:f8:1b:0e:97:ee:07:20:6b:08:84:ea:db:bd:
41:76:35:06:bc:ab:e9:99:3b:4d:13:47:25:41:d1:
44:10:00:e8:66:6b:79:28:5d:f1:9b:6a:15:6c:d6:
ef:cf:14:fd:9d:30:7d:d5:d2:02:d4:d4:58:4b:26:
ea:55:4a:49:58:e2:ec:4b:e6:9f:1e:44:35:bc:88:
07:d2:2f:6a:d3:b5:36:55:d6:96:53:eb:98:89:5b:
0e:f9:13:9c:67:0c:60:1a:f5:4f:06:7b:72:26:92:
09:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:7E:82:B9:38:3D:B8:2A:8C:CE:B1:F4:21:A5:83:EE:C2:F9:4C:C9
X509v3 Authority Key Identifier:
keyid:2C:98:22:00:8D:9C:C7:01:2D:60:30:42:9B:28:D8:58:DB:BA:CA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJgiAI2cxwEtYDBCmyjYWNu6ykM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/50ac12-fd93-4939-a2ef-41ca2d3aae71/1/LJgiAI2cxwEtYDBCmyjYWNu6ykM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/50ac12-fd93-4939-a2ef-41ca2d3aae71/1/LJgiAI2cxwEtYDBCmyjYWNu6ykM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:a8:99:06:c0:38:eb:af:34:d2:82:9d:52:22:89:2d:36:de:
a5:cf:c9:d6:13:8e:3f:23:1a:33:3b:7a:f0:ff:ae:a4:99:df:
8c:39:01:a4:77:87:8a:eb:10:e0:18:f4:8d:fc:02:31:c3:6d:
01:8f:bd:b3:3c:77:3c:8d:d0:8d:aa:9a:fc:64:af:ba:d8:fb:
a2:0d:3e:a4:aa:6d:91:80:3f:15:e7:90:b6:13:5e:dd:69:ab:
f2:e9:2d:29:22:87:8d:d3:fc:c3:de:dd:b5:8e:b0:7c:29:9f:
49:71:31:98:83:a9:f3:ad:a8:82:58:c9:db:82:78:5e:bc:3f:
37:95:a1:af:9c:f7:26:35:e8:2b:3b:bb:1c:a1:00:b6:75:2a:
8c:a9:e2:a8:df:03:18:f9:0f:87:46:04:84:69:96:7d:2b:c1:
11:b6:c0:b5:db:dd:55:77:78:f7:54:4a:cb:ec:1b:45:95:c7:
e2:d3:8b:32:ce:c8:3e:31:cc:13:45:ae:c0:f4:c4:b7:8f:72:
80:51:88:f4:a4:fa:c7:bd:72:4c:0e:ac:a0:3d:6e:25:df:34:
5f:35:c4:2f:a3:ba:98:f5:26:17:d4:70:d6:3b:c8:f3:b6:f4:
d2:40:eb:b2:25:b6:a7:10:fb:87:9f:27:39:a7:59:33:75:e1:
86:72:c5:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa3te9Jq7TTCQtnJVr1G6eiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjOTgyMjAwOGQ5Y2M3MDEyZDYwMzA0MjliMjhkODU4ZGJi
YWNhNDMwHhcNMjUwNTEwMDEwMTE1WhcNMjUwNTExMDEwMTE1WjAzMTEwLwYDVQQD
EyhhZjdlODJiOTM4M2RiODJhOGNjZWIxZjQyMWE1ODNlZWMyZjk0Y2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivwUxx5MKRoo8J2q53LqznksYFzE
YzzSFcHAuC0+rW5fetVY0r1FpaTXPJeYk/xqh6jcK2w7ZU1Z0SCA+z80POnRiXes
X2RDsCP3NgVKwdWlPuM8S5YOkQDSlVIcE2zQe/c77c1lDu4e01xCfAUSrtL7JbyS
UaoXPYvGqSVxJZCzMCMtBeNuPN29RBNQ3qNIGjjefZ6PvPgbDpfuByBrCITq271B
djUGvKvpmTtNE0clQdFEEADoZmt5KF3xm2oVbNbvzxT9nTB91dIC1NRYSybqVUpJ
WOLsS+afHkQ1vIgH0i9q07U2VdaWU+uYiVsO+ROcZwxgGvVPBntyJpIJzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK9+grk4PbgqjM6x9CGlg+7C+UzJMB8GA1UdIwQY
MBaAFCyYIgCNnMcBLWAwQpso2FjbuspDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEpnaUFJMmN4d0V0WURCQ215allXTnU2eWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi81MGFjMTItZmQ5My00OTM5LWEyZWYt
NDFjYTJkM2FhZTcxLzEvTEpnaUFJMmN4d0V0WURCQ215allXTnU2eWtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi81MGFjMTItZmQ5My00OTM5LWEyZWYtNDFjYTJkM2FhZTcx
LzEvTEpnaUFJMmN4d0V0WURCQ215allXTnU2eWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqKiZBsA4
66800oKdUiKJLTbepc/J1hOOPyMaMzt68P+upJnfjDkBpHeHiusQ4Bj0jfwCMcNt
AY+9szx3PI3Qjaqa/GSvutj7og0+pKptkYA/FeeQthNe3Wmr8uktKSKHjdP8w97d
tY6wfCmfSXExmIOp862ogljJ24J4Xrw/N5Whr5z3JjXoKzu7HKEAtnUqjKniqN8D
GPkPh0YEhGmWfSvBEbbAtdvdVXd491RKy+wbRZXH4tOLMs7IPjHME0WuwPTEt49y
gFGI9KT6x71yTA6soD1uJd80XzXEL6O6mPUmF9Rw1jvI87b00kDrsiW2pxD7h58n
OadZM3XhhnLFjw==
-----END CERTIFICATE-----
Generated at Sat May 10 08:55:58 2025 by rpki-client