Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.mft
File: LpjFBqF0zyytnBpsW4HW6JiGNi0.mft (raw, json)
Hash identifier: O1hvDr+CvAZIDJeIlA+y04tzdteGYT5G/nbcBD4b89k=
Subject key identifier: EE:B5:D1:DA:7D:13:20:5E:67:68:37:AE:88:BD:BD:CE:3E:5A:FF:C3
Authority key identifier: 2E:98:C5:06:A1:74:CF:2C:AD:9C:1A:6C:5B:81:D6:E8:98:86:36:2D
Certificate issuer: /CN=2e98c506a174cf2cad9c1a6c5b81d6e89886362d
Certificate serial: 0196561397EEFB1705CC1B40BA4B6D84DAE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LpjFBqF0zyytnBpsW4HW6JiGNi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.mft
Manifest number: 1311
Signing time: Mon 21 Apr 2025 02:00:46 +0000
Manifest this update: Mon 21 Apr 2025 02:00:46 +0000
Manifest next update: Tue 22 Apr 2025 02:00:46 +0000
Files and hashes: 1: LpjFBqF0zyytnBpsW4HW6JiGNi0.crl (hash: G6bt4jUyIBl/KPc/sK1X5jl6vCeBljuWaOpH2Iaaqqw=)
2: XuUIg00P_oELwRIdekPlKjcVl2M.roa (hash: D5bbltVcpYBKzhGcnj29+Y83dlfa0xkosi+p8XbJoUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LpjFBqF0zyytnBpsW4HW6JiGNi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:97:ee:fb:17:05:cc:1b:40:ba:4b:6d:84:da:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e98c506a174cf2cad9c1a6c5b81d6e89886362d
Validity
Not Before: Apr 21 02:00:46 2025 GMT
Not After : Apr 22 02:00:46 2025 GMT
Subject: CN=eeb5d1da7d13205e676837ae88bdbdce3e5affc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:30:41:51:a9:5f:c2:ab:12:ad:81:f9:1b:1b:
f7:91:40:8c:b8:11:a9:8d:54:c2:a7:4a:d6:9e:b7:
c4:3a:f4:ce:62:7f:4e:3a:b9:2d:62:b1:27:c1:9f:
b0:08:92:73:fd:ab:4a:30:8e:6c:e6:b9:2b:f2:3c:
6f:5d:d3:4d:0e:7b:7a:b9:0a:a9:81:ce:f9:df:86:
72:b4:91:94:32:bc:f8:57:3b:d4:82:1e:7e:11:e0:
25:c3:4c:ff:81:77:9f:52:5b:5e:36:62:51:fc:83:
6c:92:c6:ed:39:54:1f:7b:4e:5b:8b:6a:5b:fc:19:
bf:42:72:8d:73:d7:e8:c4:ca:95:e6:d0:35:06:2d:
54:0c:ba:3f:05:5c:64:4c:c9:19:0d:ea:87:5f:80:
e6:55:75:c0:e3:38:32:89:f7:94:d8:b5:9b:04:07:
41:a0:7c:14:71:b0:1e:c8:12:19:a0:34:db:32:40:
ef:56:15:b3:f0:2e:08:2b:4c:c3:c8:7a:a0:99:6c:
e6:86:33:07:68:83:08:8d:60:0b:a2:61:13:91:e9:
2d:f0:69:a3:d8:a8:34:7d:7b:1f:ff:e6:3c:94:06:
80:32:6c:f0:d8:62:a3:a9:2f:c3:07:ac:05:0b:30:
f1:e7:d9:69:1b:cc:1b:88:22:48:ae:3d:07:cb:07:
3d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B5:D1:DA:7D:13:20:5E:67:68:37:AE:88:BD:BD:CE:3E:5A:FF:C3
X509v3 Authority Key Identifier:
keyid:2E:98:C5:06:A1:74:CF:2C:AD:9C:1A:6C:5B:81:D6:E8:98:86:36:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LpjFBqF0zyytnBpsW4HW6JiGNi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a6425c-0c7c-4fdf-87b2-6bba7fc31728/1/LpjFBqF0zyytnBpsW4HW6JiGNi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d8:03:e9:17:1d:69:92:30:0a:6c:2c:64:c8:d0:9b:3c:85:
26:5e:e4:f0:de:9b:d8:e9:36:bc:48:bd:7d:fe:03:7c:65:73:
e3:11:aa:0b:a3:35:c8:fe:9c:d2:22:40:09:9e:25:61:80:72:
e4:d5:6f:48:10:15:75:0f:4a:ea:5f:55:87:71:e5:6e:b1:07:
f6:2f:94:7a:10:3f:dc:94:9e:20:68:f4:58:b4:1e:49:c4:2a:
4d:76:6a:f6:83:f9:24:e4:dc:53:97:ca:ac:33:ea:27:8b:d1:
71:76:64:9c:83:cc:ef:ce:28:80:b0:d8:69:c8:91:28:39:6d:
70:82:f9:b3:4a:86:fa:19:9e:dc:31:82:61:36:5f:3a:9a:c6:
83:6e:bc:27:28:be:48:91:56:f2:7b:f4:db:7e:7c:28:0e:1d:
a7:15:ea:ef:17:b0:42:cb:13:eb:b4:65:31:9c:95:01:68:42:
b1:96:f3:a0:83:70:fe:25:9c:02:e5:bd:d8:94:4c:24:08:cd:
dc:f9:25:d7:35:55:0a:f7:19:db:9e:0e:58:a9:39:36:ea:65:
03:1d:cb:c2:16:74:b2:09:d3:8b:c6:63:6f:4e:bd:29:67:2b:
72:c0:f7:b4:85:45:0a:5e:25:8b:34:25:1c:be:39:3e:f3:e8:
ad:53:e1:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:54 2025 by rpki-client