Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft
File: lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft (raw, json)
Hash identifier: rHeRJpkYZ2QYpOohGEMR0R8gktk1XCCTvcwtWtZYpdI=
Subject key identifier: F4:39:5B:E4:B3:77:4C:20:E1:83:B6:56:2C:E8:3E:4A:AC:1B:D8:7A
Authority key identifier: 94:81:E9:46:CF:C8:E1:9C:16:67:AF:37:5D:10:A1:E4:04:2F:0E:B9
Certificate issuer: /CN=9481e946cfc8e19c1667af375d10a1e4042f0eb9
Certificate serial: 019655DCD67EB114324D3C86A8982210DD9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIHpRs_I4ZwWZ683XRCh5AQvDrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft
Manifest number: 0415
Signing time: Mon 21 Apr 2025 01:00:58 +0000
Manifest this update: Mon 21 Apr 2025 01:00:58 +0000
Manifest next update: Tue 22 Apr 2025 01:00:58 +0000
Files and hashes: 1: lIHpRs_I4ZwWZ683XRCh5AQvDrk.crl (hash: LR2OrWCPxD2H+BEHg9ajLkgSvIpRIlEFOSl9XydAPCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lIHpRs_I4ZwWZ683XRCh5AQvDrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:d6:7e:b1:14:32:4d:3c:86:a8:98:22:10:dd:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481e946cfc8e19c1667af375d10a1e4042f0eb9
Validity
Not Before: Apr 21 01:00:58 2025 GMT
Not After : Apr 22 01:00:58 2025 GMT
Subject: CN=f4395be4b3774c20e183b6562ce83e4aac1bd87a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:82:83:01:54:c6:0e:e3:dd:c7:ff:64:fc:17:
19:ba:6d:78:f3:62:49:bf:7e:54:cb:76:89:e0:7c:
69:b2:3a:e5:41:77:9c:6e:6f:e1:9b:91:a2:58:4b:
fd:de:c1:a7:13:7a:30:fb:92:b1:13:af:f1:47:db:
66:ac:a4:be:f9:01:23:2b:47:fb:e1:00:8c:e3:52:
70:db:4f:33:b4:37:d6:6b:b1:9e:6d:d8:44:96:53:
8b:96:a7:95:e4:d3:6b:3a:0d:ee:1c:de:fa:fd:a0:
c7:7c:22:2c:17:2b:51:5e:1d:99:35:89:95:89:d8:
a1:52:a6:43:01:f0:e4:09:70:2e:34:c5:59:e8:ff:
36:18:d9:64:c5:b7:32:8d:01:dd:fb:ac:46:a8:4e:
f3:6c:32:1b:3f:92:0e:53:ec:b2:ba:aa:b6:98:82:
de:cb:b4:3a:f5:15:7a:9d:40:82:f8:ed:01:75:56:
6a:61:64:48:3c:c4:83:9e:32:6d:91:7a:57:1b:55:
32:1b:63:44:e5:95:71:cd:d6:6f:80:d7:d5:3b:de:
8d:cf:f5:9f:fe:5d:fd:88:f2:cb:ee:1f:cf:fe:2d:
82:8d:b6:87:d8:84:f3:ea:8a:b6:a2:67:97:58:30:
0b:82:ed:b4:1b:e3:d8:54:91:c3:e2:c4:25:aa:0c:
de:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:39:5B:E4:B3:77:4C:20:E1:83:B6:56:2C:E8:3E:4A:AC:1B:D8:7A
X509v3 Authority Key Identifier:
keyid:94:81:E9:46:CF:C8:E1:9C:16:67:AF:37:5D:10:A1:E4:04:2F:0E:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIHpRs_I4ZwWZ683XRCh5AQvDrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:63:24:93:f9:3b:1c:50:fb:6a:ee:84:1c:7a:7f:b3:4e:3d:
64:df:a0:ad:05:4a:cb:a2:41:71:b2:55:ab:c2:02:8a:a3:92:
19:0a:8f:70:82:94:1c:83:94:4d:e6:3e:25:f1:0a:07:e7:c0:
9d:06:21:ee:99:bc:86:7d:f6:b2:a0:38:8a:ce:e2:8d:85:2b:
c3:92:23:98:39:64:47:e5:04:48:2b:f3:07:54:63:c1:f8:08:
4b:71:b4:9b:d5:a1:19:04:cc:ed:6a:8e:70:d8:1a:54:9c:9f:
63:d4:c9:b0:df:14:9a:b8:7f:6c:2a:4f:55:ab:15:42:7a:6e:
cc:af:0c:f3:67:22:d7:a9:25:b0:0a:6b:c6:04:2a:5c:93:f0:
bf:d0:81:13:13:5c:fe:88:53:db:fa:1e:a2:00:fe:b2:26:64:
25:08:5e:11:24:d1:6f:35:6f:4e:fb:93:06:7b:80:32:48:e0:
c9:4b:f9:77:4f:66:a7:53:b9:bc:a1:35:48:2c:af:61:2c:b3:
7d:9c:52:0a:79:f3:95:47:fa:b0:b3:9a:ac:f1:c5:66:c4:2a:
ba:48:0e:7b:ed:d8:32:ee:e3:fc:41:11:69:45:c0:07:fe:8c:
3e:fd:0d:fa:86:ad:ea:ec:46:03:0d:4e:bb:d3:51:ae:37:c5:
77:eb:92:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:59:09 2025 by rpki-client