Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.mft
File: lNtLHp7Wi7XDMiiuMOnN0lKzL7g.mft (raw, json)
Hash identifier: pRPYciZAQJWwMN0J6rLFgxw7SiThEADuXYFPDe8qSUA=
Subject key identifier: 13:C8:5F:99:D6:65:D9:CF:09:F2:D6:2D:7F:02:34:CD:37:42:36:41
Authority key identifier: 94:DB:4B:1E:9E:D6:8B:B5:C3:32:28:AE:30:E9:CD:D2:52:B3:2F:B8
Certificate issuer: /CN=94db4b1e9ed68bb5c33228ae30e9cdd252b32fb8
Certificate serial: 0196586FE5787173A9D3CD2FD286EDA64A14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 13:00:50 +0000
Manifest this update: Mon 21 Apr 2025 13:00:50 +0000
Manifest next update: Tue 22 Apr 2025 13:00:50 +0000
Files and hashes: 1: lNtLHp7Wi7XDMiiuMOnN0lKzL7g.crl (hash: EyUV04pWehuJPT5xVB6POejz5N8gNeoMzTCjK2tUn/Q=)
2: q0ApgfDR6MUFo5SmPdczTTS0Xsc.roa (hash: scfCeq11ilCac8clsFq/zmbEUDIqGanHD8OiJk8YEiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:6f:e5:78:71:73:a9:d3:cd:2f:d2:86:ed:a6:4a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94db4b1e9ed68bb5c33228ae30e9cdd252b32fb8
Validity
Not Before: Apr 21 13:00:50 2025 GMT
Not After : Apr 22 13:00:50 2025 GMT
Subject: CN=13c85f99d665d9cf09f2d62d7f0234cd37423641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:35:1f:89:27:8d:a9:70:b6:3e:ce:df:82:cb:
7f:57:7d:0e:64:e2:8d:bc:93:84:04:2c:ef:ae:82:
32:0c:67:50:5c:12:16:41:c5:64:0a:55:c1:50:5d:
00:db:fb:05:a0:1c:ad:81:96:73:d7:d1:bf:90:06:
de:1e:3c:d5:93:63:36:b3:27:e5:80:91:5f:12:34:
e6:ee:44:6e:b4:1f:7d:6e:68:cf:79:f2:09:9e:b4:
1e:7b:06:9f:60:c5:ed:15:bf:e4:9a:dc:11:39:d8:
53:83:95:58:48:8d:92:b8:20:eb:59:bc:73:aa:1c:
80:47:81:d8:d1:c7:9c:32:bb:e3:26:b8:d4:a2:51:
0b:49:dd:17:89:f5:12:98:66:00:22:dd:09:b5:aa:
9a:4b:a5:33:46:c7:2f:c4:21:c6:2e:49:b7:fc:9c:
b4:ce:89:8c:d6:e1:ce:42:5a:7b:f1:64:38:95:d8:
fa:44:f4:c1:a3:3f:0d:53:3d:a6:ca:4a:2a:f4:50:
6e:5c:6a:67:56:47:13:19:c9:5a:38:f3:06:a5:2e:
08:27:f6:15:99:80:6c:b7:6b:de:a1:b2:ca:d3:e9:
9a:bd:3f:70:cd:55:97:15:07:ff:6b:a3:79:f4:4c:
ce:bc:80:a4:c8:d9:86:d9:df:67:0d:eb:11:7d:60:
2e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C8:5F:99:D6:65:D9:CF:09:F2:D6:2D:7F:02:34:CD:37:42:36:41
X509v3 Authority Key Identifier:
keyid:94:DB:4B:1E:9E:D6:8B:B5:C3:32:28:AE:30:E9:CD:D2:52:B3:2F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/20f805-df63-4631-99bd-a256177739c6/1/lNtLHp7Wi7XDMiiuMOnN0lKzL7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:2e:e7:ea:a0:a5:2e:c0:a7:39:9b:4e:0f:91:53:c9:2e:15:
8f:23:bb:82:e9:9e:67:f6:7d:f0:4c:8d:69:46:69:9d:4c:67:
29:b1:d0:4f:54:86:43:6a:6e:fb:93:33:f0:f7:9e:0e:fa:64:
ff:d5:53:fd:1d:5c:fe:d5:39:21:61:66:c6:7a:1f:8e:e5:34:
ca:62:8b:f6:a7:8c:32:96:94:b1:9f:f6:c2:70:83:2c:c4:c7:
98:c0:28:d7:70:33:93:26:26:8d:ca:61:1b:ee:b8:84:87:7c:
fb:d8:41:45:c1:b5:73:20:ed:c2:99:ac:fe:32:32:77:56:05:
94:df:74:c2:70:f4:0f:11:f7:9c:ff:a9:85:d2:44:37:e1:55:
9a:54:ad:e4:61:19:57:49:a5:2b:0b:14:c5:46:55:81:75:5b:
6c:e8:d1:07:64:fa:85:7c:a0:38:bb:cc:76:52:c9:1c:57:b9:
9c:3b:48:90:f2:a0:75:83:a5:8a:77:21:a1:7a:27:a9:6a:44:
5d:36:9c:cd:0c:db:75:f0:99:4e:32:bd:c8:37:57:d7:e5:c6:
70:a5:05:96:e3:4d:0c:5c:75:19:56:7f:24:b0:86:58:ef:01:
6f:c2:ae:0a:6c:45:ea:f6:d5:ed:36:58:08:1f:df:1a:f3:c4:
78:4a:03:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:03:17 2025 by rpki-client