Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.mft
File: lcGSBnFsXHnTW_FZJNszI6TsGMg.mft (raw, json)
Hash identifier: U15jsSrIK2o3FQOiGUT2++lMyrnVcUREj/xZd2yQEX8=
Subject key identifier: E4:65:08:0F:E0:42:BE:94:39:57:0D:4D:D6:C5:95:BE:4D:A8:8F:01
Authority key identifier: 95:C1:92:06:71:6C:5C:79:D3:5B:F1:59:24:DB:33:23:A4:EC:18:C8
Certificate issuer: /CN=95c19206716c5c79d35bf15924db3323a4ec18c8
Certificate serial: 0196BE2526113A12CD5B3FAD68AA20C58A0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lcGSBnFsXHnTW_FZJNszI6TsGMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.mft
Manifest number: 1104
Signing time: Sun 11 May 2025 07:00:27 +0000
Manifest this update: Sun 11 May 2025 07:00:27 +0000
Manifest next update: Mon 12 May 2025 07:00:27 +0000
Files and hashes: 1: lcGSBnFsXHnTW_FZJNszI6TsGMg.crl (hash: b+gy4v9+/vK5OZkx+irVj2Uqxlf553sxLjhkBlNXjFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lcGSBnFsXHnTW_FZJNszI6TsGMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:26:11:3a:12:cd:5b:3f:ad:68:aa:20:c5:8a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95c19206716c5c79d35bf15924db3323a4ec18c8
Validity
Not Before: May 11 07:00:27 2025 GMT
Not After : May 12 07:00:27 2025 GMT
Subject: CN=e465080fe042be9439570d4dd6c595be4da88f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:63:c6:d6:20:96:77:fe:26:64:da:42:2c:d6:
28:49:77:cc:36:5f:83:f3:1e:33:ac:0a:45:44:37:
fc:4b:8e:cd:96:91:27:92:79:b7:70:6d:4b:6f:85:
a2:fb:1a:18:91:f0:f3:45:b7:96:09:69:31:e5:dd:
5a:a4:ea:79:18:4e:b6:fc:d6:8f:20:c3:75:64:40:
71:89:3c:4d:c1:19:3c:71:e2:b9:77:83:e1:fe:f1:
e4:e8:bb:4f:ca:37:71:05:10:0a:09:e8:ce:7f:9e:
cc:c7:df:6b:2b:aa:44:cb:18:ed:0b:a7:62:5a:f8:
14:0d:95:3a:c9:7a:f3:28:63:b2:73:8e:53:42:da:
a0:d4:7b:80:5e:3a:df:e9:63:4a:53:5b:5e:af:67:
96:88:8b:5a:12:c9:f5:32:77:d4:c7:8e:14:e7:3f:
82:97:81:33:53:15:01:2d:28:2b:3b:d9:6d:3b:7d:
8e:c5:5c:6e:92:f8:04:6c:ba:38:b5:8f:8c:ad:8b:
10:7e:30:b6:12:7f:02:42:68:9a:4d:50:b3:b8:4f:
e3:39:9e:82:b6:d8:f1:7e:bf:28:0b:a8:f1:cd:d2:
8f:57:37:66:f3:9e:c8:61:af:35:20:66:71:41:13:
2e:79:94:75:7c:65:6d:46:50:55:3c:75:f1:16:a2:
6f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:65:08:0F:E0:42:BE:94:39:57:0D:4D:D6:C5:95:BE:4D:A8:8F:01
X509v3 Authority Key Identifier:
keyid:95:C1:92:06:71:6C:5C:79:D3:5B:F1:59:24:DB:33:23:A4:EC:18:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcGSBnFsXHnTW_FZJNszI6TsGMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3feed9-ce5f-4a22-99b9-a4a9cc471599/1/lcGSBnFsXHnTW_FZJNszI6TsGMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:63:9b:03:6e:c9:ef:c4:f0:8c:31:c7:f2:94:b9:62:54:2e:
81:bd:7c:f3:4d:b9:4b:60:eb:26:55:2b:e0:78:3c:05:cb:1e:
e7:fa:00:30:3e:5a:e5:6e:1d:11:8a:ce:61:61:2a:98:d3:a4:
8d:43:df:9a:f2:01:7d:df:44:ac:7f:cf:47:08:51:a1:69:11:
40:0a:7d:21:d3:c1:37:c8:28:e3:6a:b5:45:0a:5f:f0:26:2f:
a0:dc:20:96:5e:3c:11:4d:4a:92:f9:08:55:37:dd:0b:8e:13:
c7:cc:2d:6e:a1:93:e7:74:41:7a:e9:41:d5:db:9a:e3:e3:ad:
72:7f:0b:a6:f0:db:8b:4a:53:82:ce:28:73:32:1f:10:dc:18:
fc:28:e4:6b:29:2b:f0:c7:d2:f0:e3:67:12:cd:a8:66:b3:86:
82:df:13:e9:3b:5e:4c:94:f5:97:a1:18:eb:dc:b8:d9:b7:f6:
a5:51:24:a2:a3:3a:23:f4:9b:32:f3:53:93:fe:5f:0a:5f:e8:
cb:d2:22:86:61:ab:9f:53:8c:74:e2:24:d5:da:ad:92:73:07:
68:42:a4:b5:22:e6:1a:ee:18:74:69:e7:fa:6a:5b:8a:05:b8:
6d:49:47:52:00:30:e1:ae:dc:5e:12:32:41:86:a4:96:46:d7:
91:fd:80:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:27:52 2025 by rpki-client