Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/7929f4-ec35-4d9c-92a8-0eb45ef62d8d/1/LxW3OnwtEx7BTr2QcXGLVMP7ppI.mft
File: LxW3OnwtEx7BTr2QcXGLVMP7ppI.mft (raw, json)
Hash identifier: ld7lVc50ikLp4ocdzTv2OGEB01QpcpX2hjMOFZ4p+04=
Subject key identifier: 98:45:AB:E1:2F:07:B1:4C:7E:3F:D7:C9:E9:1E:F6:2A:2F:C2:A7:A0
Authority key identifier: 2F:15:B7:3A:7C:2D:13:1E:C1:4E:BD:90:71:71:8B:54:C3:FB:A6:92
Certificate issuer: /CN=2f15b73a7c2d131ec14ebd9071718b54c3fba692
Certificate serial: 0196BB9258622285986DD6BA35195CC985DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxW3OnwtEx7BTr2QcXGLVMP7ppI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/7929f4-ec35-4d9c-92a8-0eb45ef62d8d/1/LxW3OnwtEx7BTr2QcXGLVMP7ppI.mft
Manifest number: 0247
Signing time: Sat 10 May 2025 19:00:52 +0000
Manifest this update: Sat 10 May 2025 19:00:52 +0000
Manifest next update: Sun 11 May 2025 19:00:52 +0000
Files and hashes: 1: LxW3OnwtEx7BTr2QcXGLVMP7ppI.crl (hash: SR90UEyFZ3WAhtXejU4gmG371E7vPoR9XlAMyNxeXQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/7929f4-ec35-4d9c-92a8-0eb45ef62d8d/1/LxW3OnwtEx7BTr2QcXGLVMP7ppI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/7929f4-ec35-4d9c-92a8-0eb45ef62d8d/1/LxW3OnwtEx7BTr2QcXGLVMP7ppI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxW3OnwtEx7BTr2QcXGLVMP7ppI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 19:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:58:62:22:85:98:6d:d6:ba:35:19:5c:c9:85:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f15b73a7c2d131ec14ebd9071718b54c3fba692
Validity
Not Before: May 10 19:00:52 2025 GMT
Not After : May 11 19:00:52 2025 GMT
Subject: CN=9845abe12f07b14c7e3fd7c9e91ef62a2fc2a7a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:de:1b:a5:a6:4e:58:9d:03:a9:ed:fc:b4:57:
da:af:a5:6b:f6:77:09:50:b8:3b:45:18:b1:40:a2:
58:a0:d9:d0:5a:0d:11:a7:7c:1a:12:1f:63:80:c4:
58:92:89:ec:fd:e4:5c:88:75:0a:9d:9b:2f:6b:84:
26:3b:71:a5:4b:2a:b5:e3:c1:ed:7b:7b:76:0e:a4:
82:c0:ee:de:ac:94:23:87:5b:d4:fa:2d:99:07:aa:
8e:ab:60:07:aa:9a:5c:cd:f1:7e:e6:65:7d:ab:9a:
3a:ff:86:3d:21:6e:02:58:53:ce:51:54:83:f2:dc:
c5:6c:50:b9:02:a1:3a:2e:db:9e:09:cd:e2:7d:3a:
0a:24:f8:e7:04:e0:50:4c:b2:99:af:d7:2f:86:23:
ec:8f:7f:38:c7:2a:a0:ba:05:6a:c9:5f:d9:45:85:
92:44:cd:9b:09:53:b2:3a:77:f5:7e:4b:3a:0d:bf:
7a:46:b5:28:29:65:f1:b3:94:82:63:dd:a9:20:f3:
ce:5a:b9:93:70:0e:17:1b:f1:0a:b0:22:e7:a8:b7:
87:a7:04:9b:ac:f8:83:4e:71:8a:f8:00:8a:57:6b:
32:ab:d8:6e:04:99:7b:cd:41:b5:b0:37:59:53:e5:
b1:e8:0a:b0:2f:e0:d5:e7:d2:45:eb:32:89:c6:84:
db:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:45:AB:E1:2F:07:B1:4C:7E:3F:D7:C9:E9:1E:F6:2A:2F:C2:A7:A0
X509v3 Authority Key Identifier:
keyid:2F:15:B7:3A:7C:2D:13:1E:C1:4E:BD:90:71:71:8B:54:C3:FB:A6:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxW3OnwtEx7BTr2QcXGLVMP7ppI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7929f4-ec35-4d9c-92a8-0eb45ef62d8d/1/LxW3OnwtEx7BTr2QcXGLVMP7ppI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7929f4-ec35-4d9c-92a8-0eb45ef62d8d/1/LxW3OnwtEx7BTr2QcXGLVMP7ppI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:68:d4:1c:8c:c8:b1:68:40:fa:b0:c6:c6:61:48:92:78:13:
da:1d:b1:dd:42:ba:c2:27:c0:ff:81:2b:33:05:e3:87:08:b7:
24:e6:cc:88:49:33:34:b8:54:e7:0c:4f:ed:c4:ac:29:cb:20:
2f:1c:9c:df:3b:27:45:ca:1a:15:65:ca:f2:49:e0:05:e4:be:
98:a7:e1:13:5f:2b:a9:d5:b3:86:c3:5f:a7:3d:31:8d:24:88:
d5:a4:d9:34:4a:0a:70:a2:d4:50:dd:08:ed:ab:d5:30:b6:dc:
9b:8b:04:73:3d:34:cf:6f:a1:5a:b7:eb:3b:1e:ff:76:42:6d:
f3:a4:43:39:03:c1:e1:9e:4e:12:b8:ef:bc:c1:d7:46:f7:2d:
a2:04:56:4b:99:cd:c9:bd:42:65:b6:26:f3:74:fa:4b:86:5f:
1e:5d:e7:9f:b2:ee:d0:30:01:13:05:d1:b3:9a:0a:45:3e:26:
05:64:18:59:72:51:82:44:c3:10:3c:b1:49:5f:fd:36:f5:c7:
84:2e:f1:cc:34:60:5b:14:e9:6b:9b:28:9a:79:d5:80:fd:2b:
f2:b6:be:35:9f:6d:66:1d:75:6b:9e:73:10:da:7d:13:d5:7c:
e2:0e:5c:63:d7:b2:37:3d:28:39:91:f0:78:42:34:13:15:93:
38:1b:03:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:15:07 2025 by rpki-client