Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
File: lELO0S17sEnNHN-N97palXZVOGw.mft (raw, json)
Hash identifier: WHxGmiwt0ON6U7hjJCJZF7/gjSdOV9kB9YoriZ5aWZ8=
Subject key identifier: 68:8B:9A:A6:96:DA:D4:86:CC:EF:B0:B2:0F:5B:E5:DE:E1:74:30:D0
Authority key identifier: 94:42:CE:D1:2D:7B:B0:49:CD:1C:DF:8D:F7:BA:5A:95:76:55:38:6C
Certificate issuer: /CN=9442ced12d7bb049cd1cdf8df7ba5a957655386c
Certificate serial: 01965DCD2BB7726399E2A794BACCCC09BC40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
Manifest number: 1501
Signing time: Tue 22 Apr 2025 14:00:49 +0000
Manifest this update: Tue 22 Apr 2025 14:00:49 +0000
Manifest next update: Wed 23 Apr 2025 14:00:49 +0000
Files and hashes: 1: lELO0S17sEnNHN-N97palXZVOGw.crl (hash: z/5OSI9RjJ91cD1h3EHLVhuJW+Aayzlh0rWrSa/vVPw=)
2: y1M_0IPPUhADZVWuik8Z4f_wo9M.roa (hash: eHKjTvDyh23zI8FCfLLfE/ibDHPOekWU95t2XI4Bzzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:cd:2b:b7:72:63:99:e2:a7:94:ba:cc:cc:09:bc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9442ced12d7bb049cd1cdf8df7ba5a957655386c
Validity
Not Before: Apr 22 14:00:49 2025 GMT
Not After : Apr 23 14:00:49 2025 GMT
Subject: CN=688b9aa696dad486ccefb0b20f5be5dee17430d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:71:78:47:33:a8:a3:f4:72:f5:00:3c:39:69:
d0:31:e1:c5:c6:77:95:7f:86:ea:b3:c6:09:5b:a5:
90:04:f4:2f:63:3b:dc:0d:34:d5:25:7c:a3:c4:f9:
f4:b9:8d:84:8f:46:54:21:7c:1b:66:d0:c1:69:c4:
38:47:17:14:72:2e:a1:0e:57:28:a2:f9:d8:96:52:
a4:26:ef:cb:58:50:5e:89:62:9d:41:2b:5b:af:27:
03:88:c5:c4:8f:bd:20:6d:4c:5e:ea:5a:69:e0:6e:
f1:14:af:76:e5:c2:4a:23:09:56:ed:2b:d1:75:31:
7c:40:c7:b7:df:42:33:b7:01:de:d2:40:c9:e9:4b:
4d:30:ed:1c:54:06:0c:7e:46:80:f9:13:d5:e8:b9:
45:e8:47:67:61:c5:8b:51:db:13:d0:de:e8:c0:05:
a9:02:ee:a2:8e:5f:53:20:df:f9:bf:1d:d4:fd:2b:
21:cd:de:ea:8d:1e:41:e2:68:d7:ef:a3:05:b0:da:
a5:73:4b:2a:93:26:a7:05:32:e1:2c:38:1d:ef:0b:
cf:0c:6b:8b:95:81:2a:b5:1c:b9:5a:ce:2d:b6:f6:
67:b0:59:4c:07:e4:22:a1:5c:31:24:69:af:71:a6:
41:ab:c0:69:42:8f:00:8a:a2:5c:be:70:ee:a1:bb:
db:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8B:9A:A6:96:DA:D4:86:CC:EF:B0:B2:0F:5B:E5:DE:E1:74:30:D0
X509v3 Authority Key Identifier:
keyid:94:42:CE:D1:2D:7B:B0:49:CD:1C:DF:8D:F7:BA:5A:95:76:55:38:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:45:d4:d8:ab:87:7b:a1:e5:88:73:57:f7:43:01:6f:2d:40:
bc:82:94:57:47:1d:36:80:d5:42:ab:e4:cb:1c:ef:3f:ec:fa:
da:7d:6a:72:e0:56:27:4c:73:7e:09:06:fc:68:ed:3d:94:67:
7d:a2:00:91:32:c2:03:54:70:4a:34:40:0e:c3:f4:6e:83:54:
77:7b:70:37:1e:28:6e:bb:16:74:08:e2:fd:60:a6:85:c1:88:
cf:c8:32:d5:96:fa:b5:ba:9e:fd:ae:39:38:29:2b:1a:99:ba:
05:cc:60:d4:45:53:a6:44:b3:a6:fe:5e:24:dd:15:c0:2d:2b:
74:49:5d:37:64:c7:61:7f:af:a8:08:1b:62:b0:ea:d2:87:b1:
b1:5e:ac:40:61:ef:8f:80:ff:2a:e3:42:f9:7a:d9:f3:88:17:
7f:a2:dc:9a:ec:34:83:2d:b8:d4:d7:bc:80:72:a9:2c:ee:f1:
ce:a3:50:6f:d1:0e:f0:7b:cc:0c:0c:b3:73:9b:23:d7:b7:9c:
a2:98:a3:53:b2:3c:da:eb:b9:bd:e8:98:14:89:7b:60:27:23:
8a:0e:82:e1:91:dc:16:c9:79:00:40:3d:14:14:89:9d:fd:f3:
bf:94:1f:b7:69:ea:07:69:d9:28:56:38:ae:6a:41:0f:96:3e:
6b:89:98:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:56:24 2025 by rpki-client