Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
File: lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft (raw, json)
Hash identifier: cIgBHVHYAcdd7dq/AGqZoPBspCOYhOGfjNvIrCmXYDg=
Subject key identifier: 3B:5F:64:46:73:3D:99:52:36:CD:9B:28:16:B5:15:54:8A:AD:00:8A
Authority key identifier: 94:F5:19:C4:EC:F1:5F:5F:C1:E0:6E:AA:6E:03:F9:CB:03:95:6C:AA
Certificate issuer: /CN=94f519c4ecf15f5fc1e06eaa6e03f9cb03956caa
Certificate serial: 0196537FDBECF647D1CD57AAD810D86F6B86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
Manifest number: 04B6
Signing time: Sun 20 Apr 2025 14:00:10 +0000
Manifest this update: Sun 20 Apr 2025 14:00:10 +0000
Manifest next update: Mon 21 Apr 2025 14:00:10 +0000
Files and hashes: 1: AlvpwmlHKsdZ888v6OW9e2qX7Cs.roa (hash: 0uWxwNIZbut6gct98ZOv80/LRPh9PRZxkpCS9vIEkzY=)
2: lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl (hash: 6+dMN5XZ/dJXjVZfI9nWKAsOcQRNSL/dfv2Qk+VmF5M=)
3: mhy_PjfAH7Am8DYx1tO3WTSt-G0.roa (hash: I3P915hVSsXgQ5UO/istQ1xrxwtkn+jwbAOJufOB6ts=)
4: oGXIgL4XeGgFsoOzE_plr2AX24g.roa (hash: h9S8MEgqkl0Mx1T5bmYSQIXTjB58xAGkLJVMidxjJTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:7f:db:ec:f6:47:d1:cd:57:aa:d8:10:d8:6f:6b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f519c4ecf15f5fc1e06eaa6e03f9cb03956caa
Validity
Not Before: Apr 20 14:00:10 2025 GMT
Not After : Apr 21 14:00:10 2025 GMT
Subject: CN=3b5f6446733d995236cd9b2816b515548aad008a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6e:40:79:f8:f1:b0:b3:8b:2a:5e:bc:1b:d1:
3e:1b:e4:b1:04:fa:09:21:3e:b9:de:6e:75:72:91:
a0:f0:a2:c5:98:c0:16:2d:48:73:74:2c:fb:7f:3d:
0d:6b:01:ea:c3:2e:10:78:b7:71:bd:de:2c:3c:40:
4b:09:12:4d:11:71:22:81:29:27:8d:48:0c:b4:9c:
ec:ff:91:7c:74:60:fe:b9:74:f6:bc:60:97:a0:91:
17:17:b6:70:fd:c4:53:54:9d:9d:57:06:91:ef:d1:
61:59:5a:c9:8c:aa:f1:75:cb:d2:20:21:a6:b8:12:
1d:87:c5:14:6f:7e:bd:39:b6:8a:69:19:a0:17:77:
c5:94:39:47:47:11:8d:8a:00:54:85:f2:62:19:b6:
db:8e:45:d6:fa:80:d7:cf:09:a1:09:42:4d:0d:ef:
de:3a:eb:53:06:62:c3:bf:18:3f:7e:56:89:63:c2:
1d:c4:f2:fc:40:9f:ce:fe:7d:67:35:79:27:87:56:
58:a6:76:df:30:4c:8c:97:b0:46:75:50:a8:bb:fe:
45:a3:75:4b:5a:b7:fa:98:78:8c:f9:3d:a7:90:d2:
75:d1:b9:b9:e8:46:6b:38:18:ed:99:81:75:ea:64:
5e:2c:1f:37:7f:79:b2:93:24:4d:04:15:16:ff:f2:
c4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5F:64:46:73:3D:99:52:36:CD:9B:28:16:B5:15:54:8A:AD:00:8A
X509v3 Authority Key Identifier:
keyid:94:F5:19:C4:EC:F1:5F:5F:C1:E0:6E:AA:6E:03:F9:CB:03:95:6C:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f7:19:3a:ed:29:8c:6d:5e:15:b9:2e:7c:38:b6:85:c8:b9:
0d:c8:40:4c:da:2b:aa:16:3d:0f:02:0d:16:f7:3b:9f:4a:c3:
0b:1e:bb:3a:19:51:84:91:45:4d:55:0a:3e:85:20:cd:bc:c7:
7c:a7:ef:df:c2:dc:70:2f:95:0a:8b:cd:ef:6c:36:92:b1:31:
8e:f7:87:84:12:7e:b5:03:88:2d:ff:ec:62:db:87:a0:5e:7f:
ca:c2:a4:ef:d3:6a:e9:c1:19:2d:15:c8:10:c9:b3:a6:28:8c:
1b:1b:56:5d:54:b9:7d:a3:ac:ad:04:6d:34:98:6c:24:5e:42:
14:95:5d:ef:0b:93:0c:48:c3:a6:12:f4:27:43:be:1e:ba:97:
21:b5:cd:65:77:2c:ce:c8:c7:2d:10:f3:9b:30:15:fe:59:ce:
53:b9:ca:90:e7:0b:77:14:e3:ba:9c:34:77:b4:58:c0:bd:6c:
56:cc:a2:ae:77:0e:b1:97:37:45:ff:82:7d:19:03:e1:d6:9d:
c6:1b:be:bd:61:94:97:0f:e8:98:a9:1c:17:9a:b9:40:0a:79:
c4:2e:ba:a4:89:29:d6:d5:8a:2a:e7:e5:10:de:ac:d6:97:da:
97:e6:2b:24:d6:32:62:ca:5d:4d:f4:d8:45:54:27:a3:32:ed:
d6:2d:e8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:42:36 2025 by rpki-client