Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/2c513c-aa3a-48aa-ac9c-22242b9ab2b3/1/LyCNidN2_IiDt9BxMb00pwWa7_o.mft
File: LyCNidN2_IiDt9BxMb00pwWa7_o.mft (raw, json)
Hash identifier: EmVCI3rr/SPWmsXPKEEy5wzrIisWqQWKz+HVI8FT9vs=
Subject key identifier: 09:A7:B9:06:5E:99:04:51:05:BF:BE:7F:D5:0D:72:C3:28:4A:79:69
Authority key identifier: 2F:20:8D:89:D3:76:FC:88:83:B7:D0:71:31:BD:34:A7:05:9A:EF:FA
Certificate issuer: /CN=2f208d89d376fc8883b7d07131bd34a7059aeffa
Certificate serial: 0196A8B019779E8B9888CB01CD24B9CD78BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyCNidN2_IiDt9BxMb00pwWa7_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/2c513c-aa3a-48aa-ac9c-22242b9ab2b3/1/LyCNidN2_IiDt9BxMb00pwWa7_o.mft
Manifest number: 14B9
Signing time: Wed 07 May 2025 03:00:35 +0000
Manifest this update: Wed 07 May 2025 03:00:35 +0000
Manifest next update: Thu 08 May 2025 03:00:35 +0000
Files and hashes: 1: LyCNidN2_IiDt9BxMb00pwWa7_o.crl (hash: ipZDXWG3Me1w4fl5sPDHak5yG7UQgpIHnEmQ6mpZzZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/2c513c-aa3a-48aa-ac9c-22242b9ab2b3/1/LyCNidN2_IiDt9BxMb00pwWa7_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/2c513c-aa3a-48aa-ac9c-22242b9ab2b3/1/LyCNidN2_IiDt9BxMb00pwWa7_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyCNidN2_IiDt9BxMb00pwWa7_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:b0:19:77:9e:8b:98:88:cb:01:cd:24:b9:cd:78:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f208d89d376fc8883b7d07131bd34a7059aeffa
Validity
Not Before: May 7 03:00:35 2025 GMT
Not After : May 8 03:00:35 2025 GMT
Subject: CN=09a7b9065e99045105bfbe7fd50d72c3284a7969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:76:e0:1a:df:5e:36:c7:86:53:e3:26:32:1d:
ac:a7:36:61:3b:86:6e:80:72:d6:82:13:72:68:96:
c6:43:ff:f4:94:9a:53:65:c1:18:11:77:94:c7:ea:
e8:49:96:0e:a5:2d:fb:f9:d7:96:94:d2:ed:08:ac:
a0:92:f5:b9:68:05:c9:2d:e1:5f:9a:7c:ab:64:be:
3d:fb:e0:dc:77:c2:fa:e6:13:d5:36:31:8d:03:ff:
2d:83:83:ee:cc:fe:2a:d6:95:6b:8f:ec:1f:9b:e9:
37:c4:83:21:72:a6:d3:6b:c2:5c:6f:9e:d9:b5:2e:
b6:93:95:82:3c:ea:d0:fd:d5:94:d1:19:c5:6f:61:
c7:19:3a:81:30:bb:e0:47:4c:77:8d:ee:89:1b:57:
3e:f6:2a:45:a3:ff:04:3a:d0:5b:a7:d3:3b:cf:2f:
54:28:e5:0a:70:48:41:15:c2:ff:95:4b:39:b2:d9:
b6:b2:b4:6d:76:36:f1:87:0d:03:15:a7:b8:34:9f:
67:63:51:10:0c:78:61:0f:3e:de:6f:cd:05:a4:99:
c1:f3:d3:35:f2:1b:2c:c3:40:c8:30:6e:39:a6:e5:
6b:15:d9:e2:eb:66:4e:07:50:89:b1:39:c9:78:e0:
94:7b:d6:30:a3:30:d8:e7:d6:31:be:3a:70:3f:e8:
3d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A7:B9:06:5E:99:04:51:05:BF:BE:7F:D5:0D:72:C3:28:4A:79:69
X509v3 Authority Key Identifier:
keyid:2F:20:8D:89:D3:76:FC:88:83:B7:D0:71:31:BD:34:A7:05:9A:EF:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyCNidN2_IiDt9BxMb00pwWa7_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c513c-aa3a-48aa-ac9c-22242b9ab2b3/1/LyCNidN2_IiDt9BxMb00pwWa7_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c513c-aa3a-48aa-ac9c-22242b9ab2b3/1/LyCNidN2_IiDt9BxMb00pwWa7_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:10:f1:e3:26:66:e4:c7:fd:3f:ce:65:6c:46:88:d7:6b:41:
ed:c4:69:69:00:60:2e:a0:d9:31:ff:ed:1c:7e:88:8a:e7:23:
8f:7f:ca:f8:b4:2a:ca:8c:f2:33:f0:6f:88:57:f9:f9:a8:9d:
c5:0f:db:75:d3:64:47:d1:31:0a:15:84:41:49:9a:25:f8:b8:
ad:68:bc:3b:82:07:87:11:30:07:15:80:22:a2:e4:16:d0:fa:
c7:56:56:5c:49:24:7c:6f:4c:13:67:10:c8:3b:86:25:84:a4:
f8:e1:3f:5c:b1:e5:a9:bf:50:05:ee:72:c6:b4:82:04:20:b4:
a1:4b:da:44:8a:bd:23:1a:5f:53:58:61:82:71:fa:ce:9b:4e:
65:93:42:c5:b4:03:d7:59:35:3c:0c:c1:c0:98:f8:11:3f:4e:
2b:38:97:e2:2e:59:c1:ed:0f:a2:4a:c1:13:0e:9b:20:ec:a0:
f4:24:6f:bb:83:a9:fe:20:02:bb:09:d5:71:61:3c:16:16:62:
3a:da:a1:5c:ca:06:45:2d:22:91:8d:f9:ab:f2:e5:fc:24:db:
14:57:d4:27:57:df:fd:c2:14:16:f5:56:15:1d:f0:a8:b0:a8:
ed:22:61:0b:46:d9:af:8c:da:24:fa:0e:8b:78:2f:c7:8e:68:
1f:a3:f9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 10:37:03 2025 by rpki-client