Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.mft
File: LdgAjePP9i0vrKENmf8gw-h43N8.mft (raw, json)
Hash identifier: X7PrdnpA7E6VUMQN6ZNFfqig/McbVxSp1OaogZop6x0=
Subject key identifier: EE:94:FE:F3:F9:C1:CA:12:12:4B:F9:C6:6D:AB:3F:28:B2:90:C7:37
Authority key identifier: 2D:D8:00:8D:E3:CF:F6:2D:2F:AC:A1:0D:99:FF:20:C3:E8:78:DC:DF
Certificate issuer: /CN=2dd8008de3cff62d2faca10d99ff20c3e878dcdf
Certificate serial: 0196BD499585467F10CEC889B03CDFB8E60D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdgAjePP9i0vrKENmf8gw-h43N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.mft
Manifest number: 03F5
Signing time: Sun 11 May 2025 03:00:38 +0000
Manifest this update: Sun 11 May 2025 03:00:38 +0000
Manifest next update: Mon 12 May 2025 03:00:38 +0000
Files and hashes: 1: LdgAjePP9i0vrKENmf8gw-h43N8.crl (hash: /vp1VnCg4CwNKdjqiicgpOZ0YMncquDLss2j+UwzOWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LdgAjePP9i0vrKENmf8gw-h43N8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:49:95:85:46:7f:10:ce:c8:89:b0:3c:df:b8:e6:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dd8008de3cff62d2faca10d99ff20c3e878dcdf
Validity
Not Before: May 11 03:00:38 2025 GMT
Not After : May 12 03:00:38 2025 GMT
Subject: CN=ee94fef3f9c1ca12124bf9c66dab3f28b290c737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:70:e6:7c:84:0f:ae:10:39:fb:31:94:be:32:
dc:c3:52:9c:6c:3b:de:6d:e7:4c:84:ba:14:de:50:
45:b4:fd:03:81:ef:b1:ee:c7:04:a6:64:eb:36:c0:
3d:4b:86:4f:8d:56:2d:9a:3d:75:e7:20:49:ac:bc:
95:7d:0c:83:82:87:0e:38:1a:a5:a2:fa:c2:c5:c1:
00:e1:5c:0c:cd:50:b3:88:2d:68:ab:c0:d0:4f:ee:
39:e2:fc:d5:ca:fb:19:8b:51:8f:9d:c4:07:ae:96:
53:61:3b:99:e2:58:4e:d5:77:4e:8d:c3:0b:5b:37:
ff:12:19:58:45:29:a6:4f:75:e0:dd:c2:03:fe:01:
2d:b1:5a:b0:36:b8:a8:20:7e:23:32:21:8f:fc:50:
04:c9:31:13:31:e6:17:b9:46:fe:5a:bf:d5:95:20:
57:ee:4e:19:28:f2:c4:6f:fd:1a:fb:ed:6e:70:7f:
01:f5:1d:2d:d1:78:4e:1c:85:6f:11:a4:ba:91:7f:
78:48:ee:f1:41:2f:2c:35:a1:20:44:13:26:8c:47:
07:74:98:9f:1f:f7:ef:58:5f:2b:5b:10:60:1f:c9:
04:0f:11:e1:5d:5e:bc:4e:f0:22:65:e9:98:a3:9e:
ba:7e:bf:6a:2a:47:40:31:20:8c:cf:fd:eb:93:0f:
56:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:94:FE:F3:F9:C1:CA:12:12:4B:F9:C6:6D:AB:3F:28:B2:90:C7:37
X509v3 Authority Key Identifier:
keyid:2D:D8:00:8D:E3:CF:F6:2D:2F:AC:A1:0D:99:FF:20:C3:E8:78:DC:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdgAjePP9i0vrKENmf8gw-h43N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e67956-de18-40c4-b013-951e5afae9e7/1/LdgAjePP9i0vrKENmf8gw-h43N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:55:dd:e2:08:aa:dc:ca:a3:b6:26:09:da:f0:35:e2:b6:20:
ad:78:04:a2:c0:20:f1:47:72:d9:e2:9d:8f:9e:95:26:d5:d1:
94:b8:bc:0b:9f:79:64:ae:46:02:54:d0:0e:20:a4:b7:ba:0c:
dc:fe:92:71:cd:7d:d1:78:c3:b4:d5:cc:63:7d:09:39:85:9a:
4d:f8:0b:d8:d9:0e:76:eb:fd:73:c7:af:a1:4f:a4:7c:18:bd:
d3:a8:48:34:87:47:e9:d8:9f:b4:96:96:9a:48:7d:09:c5:08:
98:07:b3:df:ed:9d:d3:bf:38:28:46:cc:a0:f5:08:58:ec:85:
f5:08:19:9e:76:67:a5:74:53:da:2b:69:97:71:2e:f1:e3:7d:
7a:7d:54:04:ae:a2:f9:d4:6e:43:b4:ff:fd:b4:60:a8:12:6b:
11:97:ef:2e:31:d1:fb:3a:77:2b:a4:2d:01:dc:56:96:9c:01:
66:0f:9d:9e:dd:3c:00:18:74:68:32:46:36:3f:98:b3:f8:2d:
57:cf:f3:df:b2:b3:0b:2e:08:6e:f5:8b:d9:5d:71:f3:e4:3c:
2d:73:ee:13:dc:40:59:85:7e:61:41:0b:7a:36:d9:61:0f:e5:
ce:d9:7c:09:3f:6b:b8:e3:a5:8d:27:12:62:79:7f:8c:de:13:
fb:80:2c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:36:23 2025 by rpki-client