Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft
File: L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft (raw, json)
Hash identifier: fGc61N3w0zUfXlT/npxEOGh01t+eu/MQw8Si93G/PMk=
Subject key identifier: ED:AF:85:10:63:CD:3D:BC:D3:9F:1C:E2:DC:C2:ED:CC:AA:D0:6D:1A
Authority key identifier: 2F:FB:64:1D:3C:A2:EC:11:57:F4:77:32:17:89:CE:C0:CC:5F:29:A4
Certificate issuer: /CN=2ffb641d3ca2ec1157f477321789cec0cc5f29a4
Certificate serial: 0196428D3389B027CF9D397E6D3252CA49D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft
Manifest number: 05A2
Signing time: Thu 17 Apr 2025 07:01:12 +0000
Manifest this update: Thu 17 Apr 2025 07:01:12 +0000
Manifest next update: Fri 18 Apr 2025 07:01:12 +0000
Files and hashes: 1: L_tkHTyi7BFX9HcyF4nOwMxfKaQ.crl (hash: aNyXzsE5sc7vAoEg3SHSU1mtmfFi3prfEeMOKVqUqsE=)
2: upvfUH_YjoaPJNTn3nKwVUkJlqc.roa (hash: GMdb4SO6ufP1WGhwXYRzniR/Z7eY9kD3nmj07BQxDnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:8d:33:89:b0:27:cf:9d:39:7e:6d:32:52:ca:49:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ffb641d3ca2ec1157f477321789cec0cc5f29a4
Validity
Not Before: Apr 17 07:01:12 2025 GMT
Not After : Apr 18 07:01:12 2025 GMT
Subject: CN=edaf851063cd3dbcd39f1ce2dcc2edccaad06d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:de:36:cb:35:67:15:b9:8b:e7:2c:db:b4:7f:
4b:7c:eb:15:cf:76:68:3e:c1:d8:dc:83:b4:41:d8:
e7:05:ed:c7:92:39:7f:15:6c:6c:34:ca:31:bf:3c:
8a:ca:d9:66:93:b1:4c:07:c7:57:91:95:80:ea:a6:
1e:8e:16:e0:ab:a4:8f:e6:23:92:f3:6d:84:4c:b7:
b1:dc:78:be:27:89:ff:4b:d9:d5:82:ee:fe:0b:96:
20:cf:79:8c:0a:6d:35:61:1d:6b:43:ae:cb:a2:ac:
f6:85:41:31:e4:0a:8c:3e:af:bc:44:62:77:b1:87:
8e:9c:36:9a:e8:fd:38:30:06:8b:ab:33:dd:ec:61:
1f:6d:36:c7:03:21:1c:38:64:da:d7:46:9c:ae:5b:
8b:b2:a4:32:55:2e:d2:08:8c:0b:98:d0:8f:f2:69:
11:e7:56:2a:1e:c7:3e:78:4e:66:e0:01:c7:6c:4b:
f2:36:e9:2c:6d:8c:79:93:38:dc:4b:36:50:15:25:
90:23:41:f2:05:1a:50:e3:bc:75:40:4a:2a:bc:c6:
f5:5e:59:3c:13:68:9b:9f:08:c8:8a:99:7e:9e:34:
48:9f:c6:96:d1:32:ae:dc:1a:b7:af:37:f4:f6:e9:
7b:47:89:a7:81:e6:65:1a:96:9b:34:de:6f:bb:78:
9e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:AF:85:10:63:CD:3D:BC:D3:9F:1C:E2:DC:C2:ED:CC:AA:D0:6D:1A
X509v3 Authority Key Identifier:
keyid:2F:FB:64:1D:3C:A2:EC:11:57:F4:77:32:17:89:CE:C0:CC:5F:29:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b06fe0-3690-437d-8924-071daa05dabf/1/L_tkHTyi7BFX9HcyF4nOwMxfKaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ae:a7:5e:17:78:b9:fd:44:7e:af:af:db:7a:71:46:b7:14:
76:eb:55:3b:f8:5b:9a:1e:19:9e:da:2b:50:2f:02:19:1c:ee:
54:cc:f1:85:15:34:66:4b:b9:09:d6:96:4f:34:a3:68:3b:02:
d5:39:90:58:03:0e:ee:af:17:bc:3b:d4:b6:36:f1:b7:81:d3:
37:f4:c3:49:0f:a5:a2:b7:9c:73:71:f4:97:81:90:70:0b:13:
f1:ff:9a:ee:c5:3f:1a:40:51:24:8a:07:62:82:49:14:3e:de:
f6:c7:7d:f7:73:ab:c7:18:f3:d5:28:69:fb:41:d1:db:20:40:
a5:a8:a8:9e:a9:fc:89:3e:1d:4a:43:f5:7f:03:24:eb:03:02:
ee:0f:da:f2:4a:cc:aa:39:56:eb:0f:ca:b6:40:e3:f6:0e:80:
49:c4:f8:10:84:bd:6c:4c:0c:62:50:8b:b1:69:1a:e6:87:20:
49:17:43:64:ea:ba:56:53:89:a4:08:14:e3:b4:cb:43:7d:a2:
02:76:76:03:e1:3c:a4:10:22:4a:5a:d7:a8:1c:1f:98:96:c3:
1e:15:be:00:e5:6d:1b:e8:cc:34:f9:dd:65:b2:72:3f:56:cf:
60:0c:04:90:fb:fc:30:24:d2:0c:96:22:b4:44:fd:b6:a5:b1:
64:57:40:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:08:42 2025 by rpki-client