Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft
File: LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft (raw, json)
Hash identifier: vPT2X3UiriLWx9CiqRTB1fLZNdvwzrP28o1ImR18M60=
Subject key identifier: B5:C9:BA:B6:E7:DD:10:CC:31:7A:4A:C4:05:16:95:6A:0E:8C:EA:88
Authority key identifier: 2E:73:8C:F3:2E:6E:4F:94:02:20:F3:B8:28:F0:7B:77:E8:13:D0:96
Certificate issuer: /CN=2e738cf32e6e4f940220f3b828f07b77e813d096
Certificate serial: 019654C9C17EFF7AE8B7209726FE00BED754
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnOM8y5uT5QCIPO4KPB7d-gT0JY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft
Manifest number: 044C
Signing time: Sun 20 Apr 2025 20:00:30 +0000
Manifest this update: Sun 20 Apr 2025 20:00:30 +0000
Manifest next update: Mon 21 Apr 2025 20:00:30 +0000
Files and hashes: 1: 1-CqksZEngiad9GJ1laZb9kmUhDs.roa (hash: RFGoumzL1Ot9LozFC8/pBRuEEMi1Nkwj8cBdnCtnZ+Y=)
2: LnOM8y5uT5QCIPO4KPB7d-gT0JY.crl (hash: 25nfiHzt4Ir/pgTCS2AIAiEyULijKCz00Zd8yj7vOPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LnOM8y5uT5QCIPO4KPB7d-gT0JY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:c1:7e:ff:7a:e8:b7:20:97:26:fe:00:be:d7:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e738cf32e6e4f940220f3b828f07b77e813d096
Validity
Not Before: Apr 20 20:00:30 2025 GMT
Not After : Apr 21 20:00:30 2025 GMT
Subject: CN=b5c9bab6e7dd10cc317a4ac40516956a0e8cea88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8d:98:6f:69:6b:6f:38:41:2b:81:e2:b0:6e:
39:8d:1d:a2:b7:d1:fb:eb:39:48:a9:4c:aa:ab:48:
36:8b:48:bf:64:38:aa:6c:43:3f:2b:5b:54:e2:52:
9f:6c:6a:20:05:a6:26:7d:78:68:52:95:95:48:14:
09:aa:f5:15:b5:5b:30:ae:34:1a:1b:93:5d:06:16:
98:dc:52:5e:1b:bb:ef:b3:44:6d:91:72:38:ac:01:
b5:24:a6:86:5d:39:20:63:3b:d4:33:2c:31:28:67:
0c:fd:81:42:1c:f3:b7:f8:47:f6:51:5c:14:57:f9:
37:4f:4d:c8:0e:62:32:00:42:18:4d:81:b6:08:36:
cd:5d:bd:d1:b4:5b:27:9a:5b:a7:f9:6c:60:a9:6e:
4b:fa:81:92:24:db:8a:78:59:ad:f0:eb:2a:f0:7c:
6d:d9:fc:aa:97:c2:12:a5:12:94:96:87:62:0e:0c:
55:66:4a:39:41:ca:65:98:d8:2a:41:c2:3f:53:8b:
0a:71:d2:b2:e5:a9:2d:ab:9c:0f:85:55:c2:c1:44:
b2:f0:35:ac:13:dc:72:90:b5:f6:05:76:02:5d:3e:
34:db:34:0e:ad:bf:63:e8:be:00:5e:a4:58:e0:6c:
4e:3d:10:8d:05:fb:ab:55:eb:8a:42:0b:84:33:85:
1c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C9:BA:B6:E7:DD:10:CC:31:7A:4A:C4:05:16:95:6A:0E:8C:EA:88
X509v3 Authority Key Identifier:
keyid:2E:73:8C:F3:2E:6E:4F:94:02:20:F3:B8:28:F0:7B:77:E8:13:D0:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnOM8y5uT5QCIPO4KPB7d-gT0JY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:0e:f6:65:e5:16:bc:4d:01:d2:1f:6d:ed:2c:16:57:02:95:
b2:1a:44:7e:ef:87:1b:96:61:27:b0:ee:13:9f:e2:b0:24:96:
d7:51:bf:57:37:3d:19:f3:84:b0:96:c1:a2:d6:3f:c3:12:95:
88:a3:04:aa:38:98:c7:7a:a3:1a:2d:01:b0:04:8b:74:df:f1:
3d:ae:40:23:f2:e0:ac:d8:74:bb:7b:81:0a:98:e0:db:4c:ca:
4c:fd:41:c4:a2:ee:c5:52:de:2a:33:32:d0:ee:03:9d:f4:f6:
74:34:2d:36:39:de:15:39:56:7b:6e:b8:48:44:ad:d0:5a:a8:
6b:22:9e:36:80:0c:45:33:be:5f:28:11:c5:3e:66:fd:c2:dd:
89:64:ed:54:2b:5d:68:e9:b9:00:fe:97:ca:39:2b:bd:d1:e6:
da:2e:13:92:69:64:e6:c4:fa:ef:dc:04:60:91:c4:e0:49:43:
05:b0:66:da:df:41:5e:cd:ba:3b:d5:dd:aa:af:50:47:44:e7:
09:4a:d8:0b:85:af:fd:2a:0c:6d:ca:c0:c0:86:78:d5:6c:6e:
54:4c:f3:ec:21:6c:70:c7:c3:29:19:45:ff:14:bb:1a:b5:b0:
3f:f7:a1:28:ef:d2:9a:53:05:f9:53:c4:b1:64:f5:4e:7c:b7:
f6:f0:0b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:15 2025 by rpki-client