Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
File: llpqv9sIdPL-wiYs3qM3Otyy3FU.mft (raw, json)
Hash identifier: yCbcmiDNOmQrzshqkpi5VJDhFE2HXjgbaKsOclnwAxI=
Subject key identifier: 4C:00:A7:B7:53:91:EA:0D:48:C3:F5:0F:00:87:FB:1E:10:B0:66:AC
Authority key identifier: 96:5A:6A:BF:DB:08:74:F2:FE:C2:26:2C:DE:A3:37:3A:DC:B2:DC:55
Certificate issuer: /CN=965a6abfdb0874f2fec2262cdea3373adcb2dc55
Certificate serial: 019610FC515940D185CF41708DCB2B2900DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
Manifest number: 0C40
Signing time: Mon 07 Apr 2025 16:01:33 +0000
Manifest this update: Mon 07 Apr 2025 16:01:33 +0000
Manifest next update: Tue 08 Apr 2025 16:01:33 +0000
Files and hashes: 1: jx2XkRRJ1Pen6eLqWGsTXmBaP9o.roa (hash: yl4Uer3PsgYBYL8law/V2acfxxr/ONbHAHnzrh/MmEQ=)
2: llpqv9sIdPL-wiYs3qM3Otyy3FU.crl (hash: 2QXZH2UmO1lI9DFpnhMwcVdaqqlsFrOtzGE9OlBCkIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:fc:51:59:40:d1:85:cf:41:70:8d:cb:2b:29:00:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965a6abfdb0874f2fec2262cdea3373adcb2dc55
Validity
Not Before: Apr 7 16:01:33 2025 GMT
Not After : Apr 8 16:01:33 2025 GMT
Subject: CN=4c00a7b75391ea0d48c3f50f0087fb1e10b066ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:5d:6f:ec:3c:a9:7a:6e:44:6c:f2:47:c3:81:
e1:e1:44:83:c9:ce:d9:1e:18:b0:21:38:3b:76:2a:
e2:30:7f:87:a2:e6:2e:80:8d:42:ef:64:9f:8d:37:
54:fa:87:1d:99:a6:75:4e:87:57:3e:a6:96:64:f1:
d0:05:c1:b1:93:ca:e9:0d:7a:af:7a:3b:d2:5a:a3:
d5:46:ee:c5:30:45:71:f4:ac:a5:d9:c6:ae:11:50:
6a:63:69:fb:bb:3d:b4:f2:fb:27:0b:87:d9:ad:51:
cc:4c:90:c3:f6:a2:53:d3:b0:6f:95:45:d4:30:4e:
31:ae:3e:fa:72:f3:de:09:97:45:79:33:1f:46:07:
85:86:a2:e6:ab:d5:0d:48:0a:18:99:ef:7e:f0:0a:
d8:cd:4f:ad:1d:32:36:7f:ba:e6:51:71:46:1a:1a:
68:94:29:a1:45:a3:56:0a:d2:bf:f9:c8:13:63:06:
2a:9f:82:53:8b:00:8f:9a:ea:e2:cc:4b:0a:c0:a6:
33:9c:e4:82:32:77:fe:34:ee:16:e6:e5:7b:ef:50:
d7:33:c8:ce:67:0e:62:66:9c:a5:d3:a4:af:14:2f:
16:cb:d6:e6:ed:92:de:cc:bb:12:d3:24:a1:c7:22:
1d:fc:72:4d:f7:07:c7:78:77:7e:ab:e6:11:aa:bf:
81:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:00:A7:B7:53:91:EA:0D:48:C3:F5:0F:00:87:FB:1E:10:B0:66:AC
X509v3 Authority Key Identifier:
keyid:96:5A:6A:BF:DB:08:74:F2:FE:C2:26:2C:DE:A3:37:3A:DC:B2:DC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:2c:aa:ba:b2:41:7a:1d:35:01:44:30:66:d0:cd:ac:41:f8:
99:83:2b:d8:eb:35:3f:6a:d6:8a:77:8c:57:47:80:4c:a5:a4:
0a:5a:d3:f4:a5:69:ec:b9:57:4e:89:67:28:31:cc:73:50:04:
e4:4e:a3:b6:dc:f4:c1:fe:c2:7a:2b:1f:ca:d2:29:da:f9:cf:
57:41:e4:b9:79:cd:44:39:42:17:12:92:18:c4:b1:aa:e7:0a:
52:3b:58:69:82:e1:02:bf:61:97:81:dc:bc:91:22:de:0d:f0:
5d:81:d8:05:84:c7:fa:3a:58:ed:0c:87:a7:b7:bc:68:5f:4b:
f7:f0:7f:64:f6:1f:00:2f:30:e1:6a:2d:90:7c:a1:a7:20:94:
d2:19:69:2b:cc:60:26:e9:9d:ec:55:5c:97:12:f5:d9:d4:cd:
14:e3:e6:3e:46:76:dc:d5:f4:fd:4d:df:49:cc:81:a9:e9:bb:
b2:3c:db:77:6e:5c:15:0d:be:fc:21:03:0f:35:eb:c4:e3:6a:
d7:c1:3f:5b:9e:d7:a6:2d:a9:6b:e8:e4:65:cd:4d:ef:0c:3f:
24:08:c5:a9:98:4e:89:4d:7a:57:c7:89:73:71:9b:30:3b:17:
4a:5d:28:03:4e:7d:a2:a3:43:39:b1:1d:ab:4b:8c:7c:8c:98:
5c:7c:7b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:16:11 2025 by rpki-client