Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft
File: LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft (raw, json)
Hash identifier: 8+xOD09b4fb5nrXQ64AKp4ZFNzErefMWjk6rLxriu00=
Subject key identifier: 15:39:C7:CF:A6:D5:CE:5F:27:1B:44:80:32:7A:92:18:3C:3C:5C:AC
Authority key identifier: 2E:18:10:D5:C9:11:B4:A8:10:73:FA:E6:38:97:1B:57:7D:D7:A6:42
Certificate issuer: /CN=2e1810d5c911b4a81073fae638971b577dd7a642
Certificate serial: 0196AFFBD8D191540C4F119398294B64E6DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhgQ1ckRtKgQc_rmOJcbV33XpkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft
Manifest number: 0FF9
Signing time: Thu 08 May 2025 13:00:39 +0000
Manifest this update: Thu 08 May 2025 13:00:39 +0000
Manifest next update: Fri 09 May 2025 13:00:39 +0000
Files and hashes: 1: LhgQ1ckRtKgQc_rmOJcbV33XpkI.crl (hash: DQhrNRAiIpFFL3iceAsYrlZjufzCh9k3JwZy/FE6tEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhgQ1ckRtKgQc_rmOJcbV33XpkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 13:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:fb:d8:d1:91:54:0c:4f:11:93:98:29:4b:64:e6:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1810d5c911b4a81073fae638971b577dd7a642
Validity
Not Before: May 8 13:00:39 2025 GMT
Not After : May 9 13:00:39 2025 GMT
Subject: CN=1539c7cfa6d5ce5f271b4480327a92183c3c5cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:06:17:52:73:50:dd:aa:da:7b:d7:76:83:f3:
78:18:0d:6f:d5:0a:8a:fc:d3:7f:3a:e5:f0:b3:c3:
da:05:ed:c4:4f:be:29:6e:c9:4d:1e:aa:b3:c3:cb:
59:5f:6f:e5:92:6e:d4:52:2d:ff:0e:6e:78:67:57:
66:82:c9:64:3e:bd:e4:53:ca:44:aa:85:3d:ff:7c:
d8:cc:33:47:ce:14:e8:c1:60:95:5f:ce:da:88:50:
72:41:43:bb:47:2d:a7:26:b8:33:48:bf:5e:75:5c:
78:90:1f:ce:19:c2:da:52:6e:8f:a7:ba:0f:cd:e2:
ae:0b:78:19:4d:98:b0:50:f2:a7:cb:dc:67:8f:03:
39:e0:b1:bf:c3:43:80:dd:d0:ee:4b:be:3c:42:2b:
1d:ba:5d:d0:79:21:dd:e6:c2:df:64:4f:2f:f2:7d:
08:45:7d:58:12:fe:d4:a6:69:ca:d6:e1:2f:d9:8c:
d2:6c:b1:7f:8c:1b:75:e4:b2:79:64:8d:46:e3:1f:
8a:b7:2b:8b:df:07:a3:f0:3c:61:2c:74:8c:99:e7:
d7:7d:79:f0:e0:77:d3:ca:8c:2f:4a:15:e7:fd:5b:
57:dc:ce:aa:f1:08:cb:45:05:68:30:d4:0a:b4:a9:
59:4c:1d:70:ff:9a:9a:e6:78:6d:92:b9:ae:fe:45:
21:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:39:C7:CF:A6:D5:CE:5F:27:1B:44:80:32:7A:92:18:3C:3C:5C:AC
X509v3 Authority Key Identifier:
keyid:2E:18:10:D5:C9:11:B4:A8:10:73:FA:E6:38:97:1B:57:7D:D7:A6:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhgQ1ckRtKgQc_rmOJcbV33XpkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/68ce51-bd3e-4cd1-bcc2-dd2a584a62bb/1/LhgQ1ckRtKgQc_rmOJcbV33XpkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:00:b7:f5:42:17:a4:ef:e2:fc:14:c4:9f:0d:43:94:f3:b5:
09:41:d4:d4:95:d1:be:0a:8a:12:e9:3f:11:df:59:57:7a:48:
00:e7:1c:8d:9d:f7:28:1f:68:e0:f4:69:0a:e0:de:8d:da:16:
63:af:38:e5:9f:18:5f:8d:6b:94:30:d2:aa:d5:e6:d0:e6:3d:
eb:d5:ea:92:10:e6:7e:44:f0:fe:7e:c3:5c:20:c9:95:12:f4:
68:95:4d:dd:3a:d2:c6:1c:95:0c:6c:98:49:cf:22:48:f0:bf:
03:83:29:7b:ac:6c:5a:dd:af:e0:15:a5:f0:8c:ea:ce:8b:08:
3e:0c:ec:2b:30:dc:5c:17:bc:9c:6e:b4:aa:4c:ec:10:2f:35:
4c:a8:43:2b:b6:f8:14:cb:08:f4:5f:b6:56:24:c8:17:48:49:
16:e7:0c:b7:4f:9e:24:f3:cb:e0:56:4a:e0:46:75:55:8f:bc:
ed:31:9b:7d:4c:6c:9a:e1:d6:ec:bb:a6:d7:94:72:75:7c:7c:
fc:d4:19:d8:27:14:85:44:12:3d:35:9b:af:df:89:7e:ca:59:
47:55:f8:05:ca:1d:82:70:5e:a1:1a:c4:3b:f2:9f:88:c2:94:
2e:e2:7f:3a:1a:52:36:af:48:90:86:22:a9:59:b7:1a:99:09:
c1:36:98:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 22:30:25 2025 by rpki-client