Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.mft
File: lwhyRZO0dTF1shSBLPaJGmRfhMU.mft (raw, json)
Hash identifier: WSOx0qVslxDG/7Ft3oO2QQrxT83alJNg/IXNQ5TUM0k=
Subject key identifier: 1A:1A:BC:2D:32:44:C3:28:AF:D1:0D:6E:A9:3A:53:6E:29:C8:35:A6
Authority key identifier: 97:08:72:45:93:B4:75:31:75:B2:14:81:2C:F6:89:1A:64:5F:84:C5
Certificate issuer: /CN=9708724593b4753175b214812cf6891a645f84c5
Certificate serial: 01965BDEA6DEFC3DA9678C606C1EC79EC115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwhyRZO0dTF1shSBLPaJGmRfhMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.mft
Manifest number: 25
Signing time: Tue 22 Apr 2025 05:00:40 +0000
Manifest this update: Tue 22 Apr 2025 05:00:40 +0000
Manifest next update: Wed 23 Apr 2025 05:00:40 +0000
Files and hashes: 1: ANb8R9j2-02RgxidkX6we3ysGQE.roa (hash: PtyNaJPud8TrVLKjYWqb06NjCoREWDEBCKKVezOGEGI=)
2: lwhyRZO0dTF1shSBLPaJGmRfhMU.crl (hash: Br31ilt8Xh4qr6pswunP0AKONQ52faZolE8q1lzmirk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lwhyRZO0dTF1shSBLPaJGmRfhMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:de:a6:de:fc:3d:a9:67:8c:60:6c:1e:c7:9e:c1:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9708724593b4753175b214812cf6891a645f84c5
Validity
Not Before: Apr 22 05:00:40 2025 GMT
Not After : Apr 23 05:00:40 2025 GMT
Subject: CN=1a1abc2d3244c328afd10d6ea93a536e29c835a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e7:33:ae:86:b3:0b:24:0e:d5:28:d6:c0:c6:
9e:84:54:c2:70:40:a0:59:4f:4d:4c:9c:15:14:ce:
64:e8:fe:66:6f:f1:50:71:2c:61:c9:af:52:c9:67:
5f:bb:6e:22:c0:c4:a2:df:60:7c:04:80:80:a9:3d:
11:d2:86:0b:71:d7:f3:e2:f2:39:fb:30:f1:b2:4f:
44:0a:01:bb:e9:21:fa:e1:0a:82:a1:92:81:eb:0e:
e0:55:45:7f:5f:02:d5:db:9b:1e:67:4e:33:d0:c8:
aa:62:1a:22:6d:30:e8:12:d4:a3:5b:6b:0d:46:8b:
5d:95:e0:d6:47:08:3f:49:e4:b8:88:e2:10:a2:0a:
e4:cc:b1:32:e1:ae:0d:c1:80:b0:f3:36:dd:3e:eb:
f1:49:cf:cd:fc:4b:8e:75:59:8c:14:15:01:5f:8f:
6c:a4:fe:bf:0f:5d:6a:3a:36:de:27:ee:0b:7a:7d:
e1:a3:dc:45:bd:0a:e1:5c:d9:19:0f:54:9d:57:da:
df:9b:10:80:bd:94:00:56:41:58:fb:72:fa:9a:98:
3a:41:60:13:ed:51:96:22:0b:cc:c4:f0:b0:31:a2:
2a:86:97:ae:0a:b0:45:4a:a5:31:d8:35:71:84:10:
e1:bb:d0:9d:b3:32:14:ee:9d:80:38:c3:ae:5d:58:
06:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:1A:BC:2D:32:44:C3:28:AF:D1:0D:6E:A9:3A:53:6E:29:C8:35:A6
X509v3 Authority Key Identifier:
keyid:97:08:72:45:93:B4:75:31:75:B2:14:81:2C:F6:89:1A:64:5F:84:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwhyRZO0dTF1shSBLPaJGmRfhMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:11:f7:91:09:54:c1:e6:5e:7e:24:08:2d:6c:de:d0:5d:a7:
a6:ed:79:5a:82:b2:c8:44:28:a3:75:a9:32:59:a3:fb:43:67:
29:e1:2a:50:5c:73:76:c3:e2:df:ab:91:77:76:01:83:0e:1c:
03:28:41:db:eb:7f:00:ff:b2:17:45:22:60:53:b2:56:77:c3:
c0:2f:42:1c:e8:e2:7f:2e:66:66:db:d5:d3:cf:c1:04:af:f2:
95:ac:a4:91:c2:a4:de:bc:ef:df:a7:62:ba:21:84:d2:65:ab:
52:c6:72:c4:6b:e8:e9:3d:c6:52:ab:d9:db:0f:f7:b4:09:44:
55:a2:af:54:6a:a1:79:6a:4a:99:92:d4:04:eb:d3:14:a5:9c:
a1:2a:84:3a:81:5b:53:e8:2a:87:90:e9:73:c3:ff:eb:2a:41:
14:5b:cb:fc:73:91:20:ed:2b:be:20:d6:0d:5e:03:c5:6d:5e:
d7:96:52:38:05:72:35:4b:7b:31:ee:9f:46:a9:bd:d3:da:b9:
df:1b:9e:ac:aa:ad:ef:f7:cd:95:96:b9:87:f0:4c:78:8f:d2:
a6:88:e5:9f:20:77:a3:05:54:93:3f:71:01:d4:86:ff:c5:ca:
62:49:3b:3f:d0:f4:2a:35:a0:14:3d:cf:94:62:c6:90:ea:7e:
43:32:74:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:19:56 2025 by rpki-client