Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b47217-3d58-4109-9a18-347b3052b3cc/1/lopFBwJlXLHBL1GJM9k877nt4j4.mft
File: lopFBwJlXLHBL1GJM9k877nt4j4.mft (raw, json)
Hash identifier: yuj8Orq2gwzZqNh+SpLz7CNo3EvjjQsswe9Vmyh8JE8=
Subject key identifier: 7F:AE:46:59:83:EB:C9:E7:83:D3:E8:ED:DD:39:28:08:57:D6:02:B8
Authority key identifier: 96:8A:45:07:02:65:5C:B1:C1:2F:51:89:33:D9:3C:EF:B9:ED:E2:3E
Certificate issuer: /CN=968a450702655cb1c12f518933d93cefb9ede23e
Certificate serial: 0196C2DDDCF0728BDE04C371A039099897EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lopFBwJlXLHBL1GJM9k877nt4j4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b47217-3d58-4109-9a18-347b3052b3cc/1/lopFBwJlXLHBL1GJM9k877nt4j4.mft
Manifest number: 0209
Signing time: Mon 12 May 2025 05:00:42 +0000
Manifest this update: Mon 12 May 2025 05:00:42 +0000
Manifest next update: Tue 13 May 2025 05:00:42 +0000
Files and hashes: 1: lopFBwJlXLHBL1GJM9k877nt4j4.crl (hash: bonWXA2OcpBuA5pjNFPDPxD8C4uQYJbLkfmtHz1nf7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b47217-3d58-4109-9a18-347b3052b3cc/1/lopFBwJlXLHBL1GJM9k877nt4j4.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b47217-3d58-4109-9a18-347b3052b3cc/1/lopFBwJlXLHBL1GJM9k877nt4j4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lopFBwJlXLHBL1GJM9k877nt4j4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:dd:dc:f0:72:8b:de:04:c3:71:a0:39:09:98:97:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=968a450702655cb1c12f518933d93cefb9ede23e
Validity
Not Before: May 12 05:00:42 2025 GMT
Not After : May 13 05:00:42 2025 GMT
Subject: CN=7fae465983ebc9e783d3e8eddd39280857d602b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ca:e5:98:df:bc:35:23:c5:c8:3b:bf:a5:0e:
16:26:e2:95:cf:95:7f:1d:47:7b:14:0e:3e:5c:08:
72:73:8a:f7:0e:d1:ce:84:12:48:6f:50:a4:6b:23:
ca:cc:b2:85:30:b3:a7:83:7a:84:c8:b6:40:94:bb:
a5:2b:9e:05:e9:ff:c2:46:f4:69:99:1c:84:ef:d3:
38:00:8f:97:0a:29:40:76:69:38:d3:55:af:85:ca:
6a:73:a1:98:e9:a6:bd:cc:ac:3c:9a:0d:60:c6:5f:
e6:94:d9:f8:37:20:e9:50:8a:1c:e0:49:cb:29:37:
ef:33:0a:9c:60:c9:63:21:cf:68:58:c2:c8:ca:c6:
29:2b:92:be:5d:0c:bd:49:12:c0:ef:f0:92:cd:a9:
cb:ae:02:0e:ef:c6:4b:61:d5:62:e2:cf:65:1b:01:
f9:89:f9:8b:8c:42:88:fb:07:ef:76:49:52:1f:ef:
a7:f4:e4:27:5b:58:a0:a5:04:fe:a4:36:1e:69:82:
40:54:11:bb:3a:3f:9e:7d:21:47:ce:d1:64:42:e0:
1c:72:80:1a:af:a2:63:f2:e9:62:30:c8:df:03:61:
26:69:e4:02:33:aa:27:00:34:4a:3c:28:12:5b:3d:
44:70:98:b4:0a:8c:c3:ef:93:d2:c0:df:88:12:7f:
b3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:AE:46:59:83:EB:C9:E7:83:D3:E8:ED:DD:39:28:08:57:D6:02:B8
X509v3 Authority Key Identifier:
keyid:96:8A:45:07:02:65:5C:B1:C1:2F:51:89:33:D9:3C:EF:B9:ED:E2:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lopFBwJlXLHBL1GJM9k877nt4j4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b47217-3d58-4109-9a18-347b3052b3cc/1/lopFBwJlXLHBL1GJM9k877nt4j4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b47217-3d58-4109-9a18-347b3052b3cc/1/lopFBwJlXLHBL1GJM9k877nt4j4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:b8:1b:26:2a:b2:68:43:5d:34:13:9b:9d:5c:de:b1:f9:fb:
73:99:04:78:48:03:62:d8:bd:28:13:de:74:06:67:55:d6:61:
02:78:7e:cc:e6:dc:a8:46:85:df:1c:8e:68:28:e0:cb:34:e7:
c1:a9:d5:fe:ea:80:e5:c2:0e:99:6b:14:b2:a8:58:28:74:13:
3b:06:a7:7b:1b:83:7c:4c:bd:a8:1b:d3:71:3d:bc:f4:fe:8e:
77:21:e2:07:53:9b:1f:00:ec:5f:57:94:91:f6:7f:5c:57:54:
51:60:c3:d7:b4:22:ae:ec:13:1c:bb:5a:b3:d6:dc:d7:c9:c4:
89:1f:45:8d:37:e1:6d:58:d6:f3:06:85:00:70:72:58:3e:54:
18:44:86:8d:1f:cd:38:3b:12:d2:39:1d:9c:2d:52:b6:33:3f:
a1:50:3d:00:5e:e8:03:45:7f:49:df:02:e4:e6:4c:bf:3a:36:
6e:cb:a6:a8:a2:a1:c5:c4:1c:b7:0c:63:9f:f0:93:fc:2a:98:
0f:d8:c6:ab:66:a2:cb:00:84:7c:7b:02:27:df:95:21:2e:b4:
16:7c:39:0e:f4:04:c2:fe:bf:fe:b0:c0:0f:57:94:7c:d9:cd:
b5:27:3c:88:97:ef:f1:e8:d3:c1:57:48:34:64:40:a5:b1:ec:
4c:78:aa:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:22:27 2025 by rpki-client