Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft
File: Lg4zjXPnWEaEVmMvW8quB68NhzE.mft (raw, json)
Hash identifier: bNT2AH8uTBqoSzs9z3n+FC9QcmhlKL14YPXdGhviWGM=
Subject key identifier: 1F:46:00:B5:A7:08:A3:76:49:6C:0C:E1:F1:5B:80:05:D2:10:BD:D0
Authority key identifier: 2E:0E:33:8D:73:E7:58:46:84:56:63:2F:5B:CA:AE:07:AF:0D:87:31
Certificate issuer: /CN=2e0e338d73e758468456632f5bcaae07af0d8731
Certificate serial: 019656EF37884CCA4D0F5C9B1EF33D43F473
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lg4zjXPnWEaEVmMvW8quB68NhzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft
Manifest number: 14C1
Signing time: Mon 21 Apr 2025 06:00:39 +0000
Manifest this update: Mon 21 Apr 2025 06:00:39 +0000
Manifest next update: Tue 22 Apr 2025 06:00:39 +0000
Files and hashes: 1: Lg4zjXPnWEaEVmMvW8quB68NhzE.crl (hash: xHsx+knZwqEsT61Fv9b/zOdzqo56hRpYvyBJyF1/Gi4=)
2: zikRvY768723iyo08jZe02hR3F0.roa (hash: M9gppb+fjlRMhi68GyyEsDrKEHbWqY+OImTK0xt739Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lg4zjXPnWEaEVmMvW8quB68NhzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:ef:37:88:4c:ca:4d:0f:5c:9b:1e:f3:3d:43:f4:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0e338d73e758468456632f5bcaae07af0d8731
Validity
Not Before: Apr 21 06:00:39 2025 GMT
Not After : Apr 22 06:00:39 2025 GMT
Subject: CN=1f4600b5a708a376496c0ce1f15b8005d210bdd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b0:d1:4a:40:6d:d3:0d:8f:c0:42:29:d9:d4:
38:c6:ed:d1:48:46:b8:40:9f:b0:d9:c4:1a:88:0b:
df:d1:94:f3:b3:1c:6f:b8:05:60:be:94:f2:7f:85:
80:d5:0b:c3:c3:58:55:be:e3:a6:05:3d:d0:0f:68:
0c:ed:03:ae:77:d8:ac:77:a6:cb:d0:7a:fe:bc:22:
06:4a:41:0c:69:58:ea:e3:cd:62:76:2f:25:f5:d1:
8a:bf:c7:50:7b:4b:01:4c:3e:c9:31:3c:a2:1b:b7:
f1:89:95:b3:19:2a:89:a8:0e:5c:f6:ac:4d:fa:70:
ad:2f:af:92:c1:2e:21:8d:76:21:24:66:1c:8f:55:
90:f2:8f:e9:ee:97:67:2e:5d:21:8d:25:0d:e2:89:
00:4f:b1:61:96:6e:a5:eb:a6:45:33:84:c9:88:51:
ed:f5:56:c2:86:33:38:9e:60:b7:72:16:68:41:31:
64:a5:75:1c:97:d2:db:cd:5e:aa:d9:59:84:58:f6:
51:f2:56:52:ef:fc:37:03:3e:3f:7b:10:58:44:e0:
43:d5:7b:06:eb:05:44:02:41:ac:a5:e9:26:93:43:
af:76:dd:4a:3f:1d:86:dc:9b:06:77:fb:2d:28:f9:
ef:26:89:f1:f0:65:19:8d:4c:a3:0c:5b:47:a4:b6:
be:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:46:00:B5:A7:08:A3:76:49:6C:0C:E1:F1:5B:80:05:D2:10:BD:D0
X509v3 Authority Key Identifier:
keyid:2E:0E:33:8D:73:E7:58:46:84:56:63:2F:5B:CA:AE:07:AF:0D:87:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lg4zjXPnWEaEVmMvW8quB68NhzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e2:b9:2f:aa:97:6b:ca:93:51:e5:ab:7a:08:94:44:f7:02:
9d:53:63:59:38:13:05:69:7e:fa:0e:08:a4:0e:85:98:c5:de:
87:70:d4:ab:98:90:82:60:fc:c9:1f:04:e5:1a:b1:e1:a8:05:
61:e2:9f:a0:20:e3:8b:be:8c:35:a3:05:11:0c:2a:46:14:18:
4a:7e:bf:9c:5d:41:7f:08:9e:2a:e1:54:2d:c6:74:93:62:88:
94:66:77:0b:60:a6:08:d6:01:51:50:6f:44:4c:e5:ba:d2:b1:
37:b8:fb:56:e3:c0:d1:dd:ca:82:c7:88:60:5e:54:4e:33:dd:
52:ac:ef:cb:00:62:66:41:7a:99:c9:55:03:62:02:3c:c2:53:
fd:84:be:a3:54:fa:25:1a:9e:38:57:c3:21:3a:c0:1f:42:2b:
c6:ee:55:28:9d:29:5e:00:a4:c5:39:b5:bd:6f:89:5b:c7:55:
28:ee:ae:2d:2a:86:1b:a1:05:20:f0:e1:f9:d1:3e:e2:b5:cd:
08:fe:e4:d0:1e:68:b4:e6:1f:73:5f:12:c6:83:32:db:3e:47:
92:6d:43:e9:59:e3:3f:8a:b0:4f:4b:61:5a:53:ce:d3:6c:c1:
26:28:df:25:34:87:92:7e:e6:b0:5a:9b:d3:38:4c:65:5c:c7:
0d:37:d5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:38:05 2025 by rpki-client