Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft
File: lARhCLVCYUQkIsD7yAs_qYbr6To.mft (raw, json)
Hash identifier: bwjVetkUdLKTMUs8lwgmX5zJhgOurB9ugthdfU9YNgU=
Subject key identifier: 83:53:C2:29:CD:D6:E8:12:0A:2C:CD:28:65:65:FB:BF:8A:A5:3E:29
Authority key identifier: 94:04:61:08:B5:42:61:44:24:22:C0:FB:C8:0B:3F:A9:86:EB:E9:3A
Certificate issuer: /CN=94046108b54261442422c0fbc80b3fa986ebe93a
Certificate serial: 01964B9041A86621833A8F550CF5F68C52E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lARhCLVCYUQkIsD7yAs_qYbr6To.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 01:01:07 +0000
Manifest this update: Sat 19 Apr 2025 01:01:07 +0000
Manifest next update: Sun 20 Apr 2025 01:01:07 +0000
Files and hashes: 1: lARhCLVCYUQkIsD7yAs_qYbr6To.crl (hash: 3lVjpw78k+uM+EZ5YS82+kxAGzNB9H3HyB7Gy/g/WGw=)
2: sA1HdIpnNshvOPJPgaGNIhZrUb8.roa (hash: 7Bi1HUyjDkybQXNM/TN4TmwGL8in9oSgJiNHpva8HX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft
rsync://rpki.ripe.net/repository/DEFAULT/lARhCLVCYUQkIsD7yAs_qYbr6To.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:90:41:a8:66:21:83:3a:8f:55:0c:f5:f6:8c:52:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94046108b54261442422c0fbc80b3fa986ebe93a
Validity
Not Before: Apr 19 01:01:07 2025 GMT
Not After : Apr 20 01:01:07 2025 GMT
Subject: CN=8353c229cdd6e8120a2ccd286565fbbf8aa53e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:36:38:ab:18:35:ad:4f:2e:0c:cb:a4:a6:0d:
e9:a9:00:94:9f:50:30:b9:0b:ba:3e:fb:41:af:c1:
ea:f2:a7:3a:03:54:97:ea:fd:bc:a2:dd:6d:5b:a5:
12:08:5b:c8:db:ff:f4:b7:66:a7:6a:fe:67:d3:b2:
89:d8:8b:14:27:56:b3:1f:a0:94:f5:04:6a:e7:08:
19:b3:19:e4:76:79:2e:46:27:6d:a5:7b:4d:34:a3:
59:64:5b:9c:9a:95:1c:b2:56:9d:03:1e:ba:30:15:
24:83:4e:2e:32:d2:fc:e3:86:bb:e0:aa:c7:ed:3a:
9c:5e:96:a7:d2:9e:b0:92:fe:74:05:ed:02:ef:1f:
75:65:e5:b2:f7:e1:f2:d1:94:1a:74:e4:37:2b:75:
1a:e9:df:61:cf:fb:9a:87:d8:54:c7:cc:81:cf:5d:
ef:84:d0:77:48:b4:26:be:96:e6:bb:43:b3:0a:d1:
80:4e:a4:ce:76:4d:30:15:f2:4e:52:c6:17:73:ab:
77:c9:85:ed:25:8f:27:a9:e3:de:5f:69:a4:00:4f:
fa:5a:89:00:f8:fb:a8:66:1a:a7:a6:6b:fa:8e:25:
9a:e5:4a:47:87:c2:3c:38:bc:dd:35:7c:1b:97:ac:
45:54:0e:87:81:00:e7:62:73:dc:b0:18:b8:55:e8:
8e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:53:C2:29:CD:D6:E8:12:0A:2C:CD:28:65:65:FB:BF:8A:A5:3E:29
X509v3 Authority Key Identifier:
keyid:94:04:61:08:B5:42:61:44:24:22:C0:FB:C8:0B:3F:A9:86:EB:E9:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lARhCLVCYUQkIsD7yAs_qYbr6To.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:b0:2b:c3:d5:9e:68:fd:e6:bf:e4:8e:c0:5a:dd:75:ad:ab:
18:c2:46:48:7e:a8:d4:cb:ef:84:be:ba:32:bc:2c:82:48:76:
d5:dc:d1:90:10:dc:bd:6e:65:87:26:3c:3c:e9:0c:ca:15:93:
0c:e0:4f:5f:9f:a5:73:9d:26:fd:5b:ad:40:01:ea:67:cd:74:
49:0d:46:cc:62:ae:6e:4e:3b:0f:c1:ef:c4:25:2b:4b:05:01:
8e:04:1b:d8:d1:dc:5a:29:5e:36:d1:15:d9:42:e1:c8:cd:a8:
b5:7c:70:02:e6:d5:5f:1a:b5:4d:99:d3:10:02:2c:f8:e8:2c:
99:04:5f:1b:dc:9f:68:45:81:23:36:2c:13:6f:d6:4e:3c:ca:
b6:8a:d2:23:d5:98:de:5f:fe:24:e9:87:2f:f3:d7:8d:fc:82:
b5:eb:71:99:ba:4b:1c:1e:ff:68:86:62:bd:c6:81:06:de:d1:
82:9a:a1:ac:7d:eb:cc:b9:78:71:db:c0:a9:0b:73:69:74:3e:
18:e3:3d:e0:c0:1d:c1:8a:72:97:4f:64:e8:6c:7c:3b:60:f2:
f2:6d:fd:3a:50:b7:7b:81:1e:dd:7e:89:fd:7e:74:fc:0c:d2:
0c:f5:77:fe:c8:a4:4f:fa:c4:77:8f:8c:d8:8d:79:54:2e:c1:
71:b2:1f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:25:40 2025 by rpki-client