Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.mft
File: LjC09SIqRoXFTNJcTLjW-TIzrHs.mft (raw, json)
Hash identifier: rP06xi4MVrptp66x1toDkZgk+Xcsk+jzmb1c9Zgr1E0=
Subject key identifier: 6B:50:EA:E5:6E:DF:15:FA:BC:A7:2D:D0:C2:14:90:E1:29:3A:FF:F0
Authority key identifier: 2E:30:B4:F5:22:2A:46:85:C5:4C:D2:5C:4C:B8:D6:F9:32:33:AC:7B
Certificate issuer: /CN=2e30b4f5222a4685c54cd25c4cb8d6f93233ac7b
Certificate serial: 0196BE932CA99297D00650BCEAA2612DE1F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjC09SIqRoXFTNJcTLjW-TIzrHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.mft
Manifest number: 029F
Signing time: Sun 11 May 2025 09:00:38 +0000
Manifest this update: Sun 11 May 2025 09:00:38 +0000
Manifest next update: Mon 12 May 2025 09:00:38 +0000
Files and hashes: 1: LjC09SIqRoXFTNJcTLjW-TIzrHs.crl (hash: IASEJwpV5mmpubwCPURiS6gh/wCmigaMtaXWNuJiAHw=)
2: tUeDOLxh54YzVxv0XUKXGVzFhsg.roa (hash: guDk4R7GTLiv83MGpogrsbl+v0V3XO0MlUq9mf/rxx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjC09SIqRoXFTNJcTLjW-TIzrHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:93:2c:a9:92:97:d0:06:50:bc:ea:a2:61:2d:e1:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e30b4f5222a4685c54cd25c4cb8d6f93233ac7b
Validity
Not Before: May 11 09:00:38 2025 GMT
Not After : May 12 09:00:38 2025 GMT
Subject: CN=6b50eae56edf15fabca72dd0c21490e1293afff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5b:0e:ec:eb:44:a6:37:ab:69:7e:18:ce:6a:
cd:53:1c:4a:d3:f0:cf:88:a7:69:6a:10:37:36:dd:
d3:b2:7f:40:d7:75:d8:b0:57:dc:21:20:8c:8d:75:
18:cb:23:98:3a:d5:0f:fc:4b:3c:8f:86:b3:0a:2f:
08:0d:dd:33:cf:f7:2b:ca:0d:92:85:4a:31:f0:e0:
bd:63:c7:2a:4c:59:b9:a0:f9:cb:16:3a:4e:ea:ce:
66:c5:dd:d6:95:c5:ca:86:94:54:56:9c:fc:94:da:
cb:2a:d1:ea:d0:29:d3:a7:fe:cc:8d:2f:04:78:a3:
e1:37:cf:c5:34:a7:a5:9d:f4:99:4c:42:b1:aa:97:
2e:bb:b2:b4:28:68:f3:86:53:49:35:5a:94:58:51:
2f:31:e8:24:fd:b9:3c:77:99:9c:6c:4b:b7:f0:68:
d2:77:ed:ce:bb:1e:21:2a:1f:dd:31:b2:63:f2:0a:
f8:34:f0:7f:01:07:5a:3d:27:4a:fb:0b:a3:65:13:
d1:3a:89:55:ab:7d:83:63:42:6d:9a:fa:17:00:aa:
35:11:21:e6:2a:d1:fa:dd:b2:78:c6:40:0e:05:5b:
59:3f:05:54:73:06:0f:31:7f:90:3e:79:e3:9c:87:
e1:9c:27:b9:57:ae:44:db:76:9f:d7:ea:33:27:f0:
81:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:50:EA:E5:6E:DF:15:FA:BC:A7:2D:D0:C2:14:90:E1:29:3A:FF:F0
X509v3 Authority Key Identifier:
keyid:2E:30:B4:F5:22:2A:46:85:C5:4C:D2:5C:4C:B8:D6:F9:32:33:AC:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjC09SIqRoXFTNJcTLjW-TIzrHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ee4c8a-1eb2-4518-8b5b-8616a310e803/1/LjC09SIqRoXFTNJcTLjW-TIzrHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:dd:5a:d4:09:82:8a:7d:58:bd:c2:c4:4c:75:75:bb:5c:b2:
74:80:8a:30:fa:29:77:68:2a:91:c1:50:e7:65:e1:86:04:2b:
fb:3f:99:44:38:15:44:b5:4c:ca:c5:7f:41:85:13:0d:07:f4:
5c:37:c2:0d:ae:32:bc:fc:52:65:a8:e4:7f:aa:e3:c9:96:c8:
88:74:b7:1f:72:5c:e2:23:3d:fd:86:37:d3:c5:a8:ff:e1:b6:
a5:ba:1a:33:3d:23:25:93:81:03:74:a5:66:f3:e5:81:cf:90:
7a:8a:f6:30:38:fa:18:68:da:1f:0f:8d:a2:07:43:91:56:67:
c3:84:38:16:df:9f:72:1f:75:62:8e:5d:27:6e:4b:ec:8a:83:
0e:59:7f:d7:1c:89:52:c5:8c:6a:7b:fe:d2:c8:a2:0c:7a:fe:
a7:25:c6:01:6e:e1:17:f5:19:d9:8d:8d:27:97:0e:5b:72:ac:
05:64:b0:95:12:3c:cf:03:7b:7c:ee:a8:57:9c:de:55:65:cb:
53:a7:f0:39:b3:de:cb:00:db:2b:8f:c0:94:7d:c1:9a:00:be:
0d:5e:75:8a:ff:f0:5e:04:44:e4:51:50:dc:f9:e3:2c:d2:9a:
94:77:47:e1:0d:6a:f9:4a:d2:a4:fd:c2:fb:f8:b3:de:7b:c8:
55:4b:68:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:41:22 2025 by rpki-client