Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.mft
File: LJ5JliBz-e-2akswNQbaY0FWdFA.mft (raw, json)
Hash identifier: fPsIj6wvuK3mEYp19afCIMSq7qOHr+N2Xpmvw0yGBQY=
Subject key identifier: 44:30:1A:09:30:E2:0C:85:C9:CB:58:FD:8D:66:08:A9:AB:9C:97:9C
Authority key identifier: 2C:9E:49:96:20:73:F9:EF:B6:6A:4B:30:35:06:DA:63:41:56:74:50
Certificate issuer: /CN=2c9e49962073f9efb66a4b303506da6341567450
Certificate serial: 0196AE0DD10C37E600BB6C76977B59EA3928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJ5JliBz-e-2akswNQbaY0FWdFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.mft
Manifest number: 04B3
Signing time: Thu 08 May 2025 04:01:03 +0000
Manifest this update: Thu 08 May 2025 04:01:03 +0000
Manifest next update: Fri 09 May 2025 04:01:03 +0000
Files and hashes: 1: LJ5JliBz-e-2akswNQbaY0FWdFA.crl (hash: p7FvRTomL9giCUwbfvIMu5yRdTqKeqYJ8X0wDWuZozA=)
2: VnFuwyOVc-8FDMBGZlBiQ-irUzE.roa (hash: tRAgQjQoKta45RiBiGyMeDtAGjPlZ73eJ8Ph4HOTmxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LJ5JliBz-e-2akswNQbaY0FWdFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:0d:d1:0c:37:e6:00:bb:6c:76:97:7b:59:ea:39:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c9e49962073f9efb66a4b303506da6341567450
Validity
Not Before: May 8 04:01:03 2025 GMT
Not After : May 9 04:01:03 2025 GMT
Subject: CN=44301a0930e20c85c9cb58fd8d6608a9ab9c979c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8c:3b:0a:2d:39:2a:fe:46:03:92:e5:45:4d:
69:f7:c0:72:b7:4a:4f:65:51:a9:ec:c0:f0:d8:4d:
04:54:a3:8a:54:2e:97:1a:46:8b:26:0c:d5:16:f3:
95:48:84:55:17:80:95:75:08:63:d5:ce:58:58:05:
85:42:25:80:05:d3:26:2a:19:2d:64:b2:2f:2e:f0:
c4:f6:ea:e8:54:f8:11:91:a0:03:ba:19:93:65:e2:
fc:8c:55:0f:4d:49:30:4f:64:1f:7e:13:63:0f:81:
e3:17:11:08:cf:d4:b0:8d:fe:11:55:4a:c4:88:a0:
1d:ce:04:03:e3:36:a9:12:6f:0e:1f:cd:7f:24:9f:
c6:af:dd:05:d3:4b:fb:56:30:bb:7f:ea:5c:07:c6:
69:f4:16:a9:cc:ce:34:77:d0:e2:c9:5d:5f:ed:76:
9b:1e:5e:3f:09:12:c2:87:cf:6c:96:e9:c7:30:53:
7e:92:df:1b:e9:da:a8:f7:88:df:c9:5b:6a:15:19:
2b:2f:f1:8b:5e:7a:4a:90:23:68:f3:f4:18:54:2c:
81:05:b2:a1:df:db:07:38:68:b9:4c:5b:35:11:61:
bf:ce:06:5e:a5:26:23:6c:af:02:df:9e:ad:65:bf:
24:8e:61:06:c7:4d:2b:8f:c6:68:12:a4:5b:f9:30:
10:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:30:1A:09:30:E2:0C:85:C9:CB:58:FD:8D:66:08:A9:AB:9C:97:9C
X509v3 Authority Key Identifier:
keyid:2C:9E:49:96:20:73:F9:EF:B6:6A:4B:30:35:06:DA:63:41:56:74:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJ5JliBz-e-2akswNQbaY0FWdFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/776552-e0c2-4b7c-9891-21cd290c03f3/1/LJ5JliBz-e-2akswNQbaY0FWdFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:dd:3a:65:5b:ef:23:3d:ef:e5:e0:53:9c:a8:a2:8d:2c:fe:
3a:6a:40:e4:81:28:5e:95:48:ea:0f:c1:bf:e0:2a:ca:74:6d:
88:63:f1:19:77:10:ad:e6:39:90:6b:99:ca:65:73:2e:51:e8:
5f:7b:f7:19:8c:38:4b:ff:20:34:a3:77:fc:01:ab:66:5c:4b:
e1:fd:fc:c1:dd:e4:9d:a9:c0:24:6e:f4:6d:0d:79:c2:91:45:
3f:e6:ca:74:56:9f:76:43:32:be:0b:b4:a5:66:6a:2b:08:f2:
c9:f8:a8:4e:e7:d0:7a:c1:f6:04:01:b7:73:69:54:a8:76:8a:
85:38:54:53:56:e5:eb:10:0e:f9:7f:57:16:4b:b9:b8:b1:09:
e2:01:f5:7d:19:5b:d3:ce:29:cc:13:cf:31:f7:28:4f:3c:a4:
00:fe:ed:c1:b7:ee:91:b7:02:a0:9e:e5:44:85:76:e2:1f:f6:
11:61:2f:34:9e:18:1f:77:f5:32:64:61:b1:40:7c:7a:98:58:
13:8b:5d:6b:be:18:7c:ab:35:2b:97:de:a7:28:3c:94:f8:4c:
67:17:d0:47:74:e9:d6:42:98:61:79:65:2f:d7:d0:74:f5:bd:
a9:04:ae:37:7e:13:ca:4b:e5:44:9b:3b:bc:a1:b0:38:fd:ad:
a6:87:26:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 12:40:15 2025 by rpki-client