Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft
File: l1cFIHWWHp2Qwn0HElpLRGyv15A.mft (raw, json)
Hash identifier: R6MYH0i5tPH0QeFH4a6qIHzaadveMB7JuekvWRjHCrs=
Subject key identifier: E3:03:7B:89:5C:50:6C:79:C3:A8:59:24:82:01:38:59:37:69:48:23
Authority key identifier: 97:57:05:20:75:96:1E:9D:90:C2:7D:07:12:5A:4B:44:6C:AF:D7:90
Certificate issuer: /CN=9757052075961e9d90c27d07125a4b446cafd790
Certificate serial: 01965537F2FF98E2B5096AF61A8C84A3B11E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1cFIHWWHp2Qwn0HElpLRGyv15A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft
Manifest number: 14FF
Signing time: Sun 20 Apr 2025 22:00:52 +0000
Manifest this update: Sun 20 Apr 2025 22:00:52 +0000
Manifest next update: Mon 21 Apr 2025 22:00:52 +0000
Files and hashes: 1: l1cFIHWWHp2Qwn0HElpLRGyv15A.crl (hash: jHonQ/RQY/IMQ86ySquOy9CCAYjfUHDl2nsqbrSiH5Y=)
2: o0fIx97OGcsRRnK7KSw7A2DAbfQ.roa (hash: jueR7BseKB+mo6nBgD9zHG3rXsmYJFkETDCtwwn00LE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1cFIHWWHp2Qwn0HElpLRGyv15A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:f2:ff:98:e2:b5:09:6a:f6:1a:8c:84:a3:b1:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9757052075961e9d90c27d07125a4b446cafd790
Validity
Not Before: Apr 20 22:00:52 2025 GMT
Not After : Apr 21 22:00:52 2025 GMT
Subject: CN=e3037b895c506c79c3a859248201385937694823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:b6:83:a1:72:4f:7b:db:26:d1:c9:59:f0:cf:
e9:41:2b:cf:38:61:01:62:d4:04:9b:ce:d5:49:09:
34:a9:f4:92:5d:7e:e2:f3:81:fb:20:e6:fa:1f:b1:
d6:18:9b:29:45:c0:0c:22:10:d5:50:c4:bb:df:07:
b5:c7:9f:16:b0:98:33:89:01:df:d0:6b:6c:73:31:
1d:18:04:63:92:7a:53:94:02:77:06:a8:29:16:6f:
39:0f:f4:20:32:dd:ab:92:01:80:35:d8:9e:8a:00:
f0:66:54:e7:31:3e:95:2a:48:0c:25:31:07:86:80:
9f:73:5c:18:9e:9b:e4:13:db:68:4d:57:44:b4:92:
a7:87:62:5b:df:00:74:19:48:ce:87:d6:59:c9:4a:
1f:79:0f:fe:6d:fc:bc:79:7b:58:88:9b:71:fe:d6:
2f:25:9a:58:b0:d1:29:bf:8c:de:24:ca:c1:61:93:
54:c5:13:7c:1d:b0:61:de:53:c2:e5:c0:f2:f5:38:
28:f2:e0:e6:ae:73:ae:b1:9e:67:90:5b:3b:5a:cb:
27:28:d1:81:98:6a:b9:aa:1e:02:8b:42:d6:b0:eb:
98:12:1e:e9:62:68:df:f9:c6:99:11:93:29:9b:e6:
2e:1d:a4:b3:fb:58:9f:3b:cb:be:8d:3e:af:8c:50:
b7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:03:7B:89:5C:50:6C:79:C3:A8:59:24:82:01:38:59:37:69:48:23
X509v3 Authority Key Identifier:
keyid:97:57:05:20:75:96:1E:9D:90:C2:7D:07:12:5A:4B:44:6C:AF:D7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1cFIHWWHp2Qwn0HElpLRGyv15A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:15:8d:9f:03:a8:f9:7f:3f:92:0f:7e:af:f1:5a:b9:85:68:
df:05:f0:78:40:37:57:08:65:72:f0:77:fa:14:11:87:72:53:
39:2e:f5:33:9d:54:f6:a0:8b:70:34:2e:15:93:a9:9a:6f:91:
b3:60:b7:da:14:61:b9:af:16:ce:cc:bf:c8:95:ef:83:4c:bb:
c2:bc:7b:22:8a:e4:23:d7:af:a5:94:8c:dd:ca:ab:dc:f9:05:
74:63:dc:a7:8c:26:fd:d7:46:4c:ec:6d:06:1c:34:53:2b:98:
01:06:e4:33:d0:59:f4:7b:5c:82:6a:47:b1:d9:f2:27:1e:35:
e3:e7:e1:97:68:11:2b:8d:60:eb:91:5f:c7:2c:8a:9a:9c:14:
79:7e:87:c2:67:f8:06:9d:26:59:7e:86:e6:c2:57:a6:1b:a5:
35:47:32:2f:46:d5:69:44:7e:d4:07:02:f0:e5:4f:82:1e:12:
03:3d:64:ea:01:46:61:9a:8d:9b:25:95:0e:ed:26:bc:da:9b:
9b:d2:dd:ab:85:a1:e0:e5:7a:e4:9e:a1:db:e4:86:30:28:1d:
e8:83:f9:ec:83:66:d9:ee:22:d7:15:2e:d7:c8:e9:69:53:e9:
a4:6d:1b:bf:93:85:63:ce:df:91:aa:ba:a8:f0:4e:ac:b4:70:
b7:63:ec:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:51:05 2025 by rpki-client