Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.mft
File: LKzIXJmo4dt9HFImfC3b08OeGLI.mft (raw, json)
Hash identifier: 5Kz8T3BxbsB4wbEyyvkk760NW/AjAQBGng6weLmyZlk=
Subject key identifier: CB:BF:A4:BC:B0:BF:54:8F:4C:52:E0:A4:89:87:AF:15:83:31:B4:9B
Authority key identifier: 2C:AC:C8:5C:99:A8:E1:DB:7D:1C:52:26:7C:2D:DB:D3:C3:9E:18:B2
Certificate issuer: /CN=2cacc85c99a8e1db7d1c52267c2ddbd3c39e18b2
Certificate serial: 0196A2773A6872F2DB9D23A73FA55A0A925F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKzIXJmo4dt9HFImfC3b08OeGLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.mft
Manifest number: 0C3D
Signing time: Mon 05 May 2025 22:00:44 +0000
Manifest this update: Mon 05 May 2025 22:00:44 +0000
Manifest next update: Tue 06 May 2025 22:00:44 +0000
Files and hashes: 1: LKzIXJmo4dt9HFImfC3b08OeGLI.crl (hash: V+wJmXzioSSbtMyXmw0sWPat57K6WtEbQSYRvAGkooY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKzIXJmo4dt9HFImfC3b08OeGLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 22:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:77:3a:68:72:f2:db:9d:23:a7:3f:a5:5a:0a:92:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cacc85c99a8e1db7d1c52267c2ddbd3c39e18b2
Validity
Not Before: May 5 22:00:44 2025 GMT
Not After : May 6 22:00:44 2025 GMT
Subject: CN=cbbfa4bcb0bf548f4c52e0a48987af158331b49b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:44:98:14:8b:a1:f4:fe:26:26:97:98:cc:57:
6c:34:b5:8d:7f:ac:b9:1f:c8:ea:ad:00:67:ab:ae:
26:e2:3b:b7:ac:1e:4e:68:de:ac:f8:f1:ce:16:87:
05:98:de:00:47:ec:0b:45:4e:3d:2b:73:86:79:90:
b9:b0:ea:28:b6:04:72:ba:49:ec:a2:b4:04:7a:fa:
7f:8c:18:1e:ec:5d:26:86:bb:a3:e6:cf:02:cf:0d:
cf:a6:60:ee:d9:53:bf:be:40:fa:bd:bc:86:34:de:
fb:be:d4:8c:03:c2:39:dd:e3:07:07:33:ad:b3:11:
0d:52:e6:77:e5:c8:34:54:50:be:de:81:f3:a7:d3:
96:43:af:1e:b0:88:67:15:02:af:cd:c2:e4:c5:7e:
0b:38:8c:f2:b4:d7:95:b2:c4:0b:9a:07:48:72:0f:
4e:38:2e:b3:de:55:f1:4e:fb:d1:c6:57:c5:4b:a4:
34:9b:51:ee:04:1f:4b:f1:b3:f4:51:48:4b:63:78:
23:63:bc:36:2a:ae:5a:5f:4f:75:8f:a7:ee:96:d1:
08:b7:35:fc:68:9a:c8:b2:0a:da:87:b2:ba:f0:85:
8c:89:af:e0:06:d3:80:3c:66:43:3a:32:70:98:4f:
c8:c0:64:26:91:47:b5:94:d0:fa:75:9b:5e:a6:c6:
55:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:BF:A4:BC:B0:BF:54:8F:4C:52:E0:A4:89:87:AF:15:83:31:B4:9B
X509v3 Authority Key Identifier:
keyid:2C:AC:C8:5C:99:A8:E1:DB:7D:1C:52:26:7C:2D:DB:D3:C3:9E:18:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKzIXJmo4dt9HFImfC3b08OeGLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:9d:56:d1:1d:c1:bc:04:6c:28:8d:66:4f:83:e7:51:6b:97:
04:bd:bf:d8:6e:72:81:8e:70:22:02:ad:f2:c1:a5:0c:3f:ee:
d0:fe:11:5e:07:64:c9:f0:57:54:33:5d:4d:fe:fd:2e:3b:15:
e9:a7:f8:7b:e5:1b:25:8c:68:c9:02:35:96:f5:9d:d4:ff:7c:
ef:6c:64:0b:56:90:f0:2f:f3:01:bb:20:3b:c3:d9:0b:78:60:
bf:e4:2f:7b:c6:be:46:f2:5e:ee:9c:05:a7:f9:de:9c:e5:6f:
0c:f0:fa:c9:e2:b8:ed:5f:77:86:e3:41:ff:38:47:2a:1a:b8:
9d:f9:1b:ae:10:a3:b8:b9:67:5a:35:e4:20:31:f9:05:99:31:
ef:4a:88:ea:ba:4e:8a:b3:13:8a:83:7e:65:70:44:81:70:ce:
e0:5f:2a:fa:56:4f:21:90:e4:26:29:8a:37:a8:12:d8:9a:6b:
25:1f:f3:bb:e2:8b:9b:86:59:42:0c:18:9e:c2:76:6f:93:14:
a1:53:53:8d:1b:f6:02:0a:d0:8c:42:00:32:92:59:bd:2c:d0:
4a:e8:10:fc:77:cd:9f:dd:58:e9:dd:96:d7:48:bc:4a:6b:a5:
84:75:30:9d:04:50:c0:1f:49:5b:e7:f4:ba:d0:0a:c6:5b:9e:
5a:12:31:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 06:35:28 2025 by rpki-client