Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft
File: lywzrtjvsmnTdEgT0oxTYJLnzzg.mft (raw, json)
Hash identifier: EKZjyx29xfzY7W13FJSVv6M538OrgTC5JdmvCNzoRk8=
Subject key identifier: 43:EF:C4:C8:20:02:1A:41:40:40:D5:1B:F0:05:F1:AF:A6:14:70:86
Authority key identifier: 97:2C:33:AE:D8:EF:B2:69:D3:74:48:13:D2:8C:53:60:92:E7:CF:38
Certificate issuer: /CN=972c33aed8efb269d3744813d28c536092e7cf38
Certificate serial: 0196553776A761582BFFF0A5929988DD8C3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lywzrtjvsmnTdEgT0oxTYJLnzzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft
Manifest number: 0ACF
Signing time: Sun 20 Apr 2025 22:00:20 +0000
Manifest this update: Sun 20 Apr 2025 22:00:20 +0000
Manifest next update: Mon 21 Apr 2025 22:00:20 +0000
Files and hashes: 1: ABgvtVRWI6brZz3FziMb4rv0_78.roa (hash: xcpeYC06fvzRoHxarxnxi+ZpU9v7tXYglNgTbxJJFa4=)
2: lywzrtjvsmnTdEgT0oxTYJLnzzg.crl (hash: 2rxso/TytEXORvMrwT011u0bFG7h6qS5WYjyD3k5tQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lywzrtjvsmnTdEgT0oxTYJLnzzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:76:a7:61:58:2b:ff:f0:a5:92:99:88:dd:8c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=972c33aed8efb269d3744813d28c536092e7cf38
Validity
Not Before: Apr 20 22:00:20 2025 GMT
Not After : Apr 21 22:00:20 2025 GMT
Subject: CN=43efc4c820021a414040d51bf005f1afa6147086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:de:9a:56:d6:ea:b4:a8:9f:00:e3:53:24:dd:
18:53:e1:8c:c1:61:e3:dd:7d:9b:42:86:54:3b:cd:
84:84:46:6f:9f:a0:d2:df:a6:de:d0:72:68:c6:f9:
a0:94:8c:e9:e9:8c:25:ee:13:67:24:ee:7e:ff:29:
11:9e:cb:3c:84:e8:02:1d:30:af:33:e1:7a:fd:dd:
4f:4e:44:9c:ea:f0:1b:eb:34:d2:3c:56:16:3a:fb:
c0:52:98:59:1d:87:61:c9:eb:ac:c8:da:c6:34:96:
2b:3a:4e:e9:82:31:b7:69:b0:13:0c:01:bd:57:10:
18:d2:43:a9:f7:97:ad:02:d9:d1:4c:ad:9e:e7:2d:
3c:0f:73:2c:bc:f7:60:01:b9:7b:9f:d3:77:a3:55:
56:3b:07:36:de:8e:7b:18:ef:4b:37:e5:cd:9f:b4:
12:f7:44:bb:6c:cf:d3:ec:bf:4d:f2:74:e1:71:d7:
fc:42:8d:0a:fc:27:4d:4a:84:72:cf:1c:6a:3b:4c:
b3:c3:04:27:44:7b:80:a6:96:aa:bc:28:ef:8c:ae:
2e:26:2a:dd:59:f2:7c:62:47:df:03:80:b4:36:21:
d7:3d:f4:f6:cb:da:7f:42:33:bf:9b:fa:30:75:70:
ca:19:a1:e2:3b:ba:83:5a:90:f1:2c:73:4a:06:41:
ca:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:EF:C4:C8:20:02:1A:41:40:40:D5:1B:F0:05:F1:AF:A6:14:70:86
X509v3 Authority Key Identifier:
keyid:97:2C:33:AE:D8:EF:B2:69:D3:74:48:13:D2:8C:53:60:92:E7:CF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lywzrtjvsmnTdEgT0oxTYJLnzzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:cd:ea:70:e4:2d:a5:52:4f:19:35:ef:93:f3:b7:48:2e:8e:
67:47:c8:f7:99:04:fa:0c:db:50:bb:bb:bf:28:37:98:ca:b7:
3c:8a:7f:cd:a0:4b:45:64:17:61:dc:5b:5a:e9:db:2f:3b:bb:
af:cb:13:a3:76:f4:2d:fc:0b:65:5e:b3:0f:b9:dd:b4:c0:fd:
a7:1a:7e:20:a6:aa:65:e5:52:cb:c1:8c:ad:6f:a1:92:64:07:
85:dc:43:73:79:c4:b4:fa:87:8e:2b:ef:cd:bb:c8:09:cb:57:
35:44:4f:5b:86:ce:8a:9b:67:2d:65:b1:f1:72:69:46:c6:f8:
ed:2b:40:46:c7:b6:3b:e7:f3:d1:31:fe:71:52:0f:03:56:b8:
6e:76:8c:a1:50:6e:29:e5:6d:8d:df:94:f2:48:f1:07:de:6f:
a7:11:14:73:a0:48:e9:f3:09:74:06:e8:67:b3:e0:89:73:1d:
93:21:9a:dd:36:d7:a2:ac:a8:06:0c:eb:ca:83:a4:3e:61:af:
db:25:55:5e:e8:86:b5:1c:5c:1a:fe:36:dd:da:ce:f7:66:d4:
bd:06:a6:f4:ca:ae:09:b3:b1:4a:6e:8f:c4:bf:79:b5:74:61:
b1:43:82:bc:02:ff:1b:43:b0:b4:7e:85:6e:ba:b1:3f:b7:c4:
a1:24:24:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:27:50 2025 by rpki-client