Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d05895-d98b-4d6c-af87-172f66b0933c/1/SEpnLpkiPCcMFLXib_82qLzOTPI.mft
File: SEpnLpkiPCcMFLXib_82qLzOTPI.mft (raw, json)
Hash identifier: LQ26DBV9vwXU2Zl21m83ALgQ7VxxgFzfUW0uLaS0liQ=
Subject key identifier: 5E:D4:13:02:B5:67:AF:04:13:98:F8:04:3D:55:5E:60:F1:13:EC:3D
Authority key identifier: 48:4A:67:2E:99:22:3C:27:0C:14:B5:E2:6F:FF:36:A8:BC:CE:4C:F2
Certificate issuer: /CN=484a672e99223c270c14b5e26fff36a8bcce4cf2
Certificate serial: 019650489F1F5EEA5FF8668C842BE169CBE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SEpnLpkiPCcMFLXib_82qLzOTPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d05895-d98b-4d6c-af87-172f66b0933c/1/SEpnLpkiPCcMFLXib_82qLzOTPI.mft
Manifest number: 14F9
Signing time: Sat 19 Apr 2025 23:00:58 +0000
Manifest this update: Sat 19 Apr 2025 23:00:58 +0000
Manifest next update: Sun 20 Apr 2025 23:00:58 +0000
Files and hashes: 1: SEpnLpkiPCcMFLXib_82qLzOTPI.crl (hash: jepYbJX+646+Rjbi6538u5KujsLrAPVmm+Im4By7XpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/d05895-d98b-4d6c-af87-172f66b0933c/1/SEpnLpkiPCcMFLXib_82qLzOTPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/d05895-d98b-4d6c-af87-172f66b0933c/1/SEpnLpkiPCcMFLXib_82qLzOTPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SEpnLpkiPCcMFLXib_82qLzOTPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:48:9f:1f:5e:ea:5f:f8:66:8c:84:2b:e1:69:cb:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=484a672e99223c270c14b5e26fff36a8bcce4cf2
Validity
Not Before: Apr 19 23:00:58 2025 GMT
Not After : Apr 20 23:00:58 2025 GMT
Subject: CN=5ed41302b567af041398f8043d555e60f113ec3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c1:37:80:35:ce:92:bd:6f:f6:59:f3:fd:38:
09:bf:8a:4d:34:ed:a8:27:75:d2:b3:d4:84:58:78:
8d:02:ea:02:3d:12:a1:0b:b3:4f:47:bc:c4:c7:67:
26:a8:eb:b9:c3:fd:12:17:a2:86:62:8f:a2:65:0b:
e1:52:ef:c0:db:60:e6:a9:51:21:f8:52:8e:0e:1b:
30:77:54:e8:20:81:e8:d6:e9:3c:ad:a8:2d:b9:22:
48:76:00:33:2a:bf:33:5f:54:1d:8d:5c:ce:c4:54:
b7:98:e8:35:ef:41:8c:b3:7d:11:2b:8e:b7:3b:b6:
18:cf:4d:ca:20:2b:93:68:a3:ac:60:7c:ec:51:f9:
45:92:db:51:70:ee:57:7f:e4:d1:07:71:fd:63:cc:
10:80:5d:69:23:ed:48:94:64:70:9f:a4:53:4f:73:
69:e3:23:42:3d:3e:9d:81:9a:33:fc:a6:d5:3d:98:
08:af:7a:87:ea:5b:58:36:5a:7f:19:11:7e:4a:1b:
bb:64:2c:93:94:82:a7:0e:7f:eb:59:b9:18:5a:1a:
7c:b4:14:1c:9c:bb:f5:ab:66:de:2b:d8:3a:28:c1:
08:f8:fa:ae:6d:3d:c5:41:bd:82:bd:c9:58:94:43:
8b:cf:9a:67:11:70:36:26:fa:b4:bb:df:d5:c3:0f:
4f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D4:13:02:B5:67:AF:04:13:98:F8:04:3D:55:5E:60:F1:13:EC:3D
X509v3 Authority Key Identifier:
keyid:48:4A:67:2E:99:22:3C:27:0C:14:B5:E2:6F:FF:36:A8:BC:CE:4C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SEpnLpkiPCcMFLXib_82qLzOTPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d05895-d98b-4d6c-af87-172f66b0933c/1/SEpnLpkiPCcMFLXib_82qLzOTPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d05895-d98b-4d6c-af87-172f66b0933c/1/SEpnLpkiPCcMFLXib_82qLzOTPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ec:c8:0c:4d:d0:bd:90:d7:ff:6e:d5:49:9e:24:08:74:ab:
47:71:68:7c:66:fe:43:a7:1b:df:41:16:1a:fa:85:15:12:8f:
44:9e:93:39:7b:5d:a5:f4:17:91:57:13:09:c0:fa:57:cd:a5:
16:19:e6:b8:3b:cf:25:0b:d9:80:2d:97:62:d9:22:32:30:31:
33:82:6e:d5:69:b7:8d:6b:39:b5:ce:e4:52:4d:cf:30:b2:33:
9d:29:10:e0:6c:21:9c:15:43:59:79:5b:9a:a3:b0:3e:f0:29:
e4:90:07:5a:be:b2:36:a7:f8:f9:e9:89:eb:08:15:db:2b:93:
b2:10:18:e1:26:2c:c2:38:f2:57:11:4c:6a:e9:d4:bc:84:e7:
8e:4b:9a:ab:8e:32:9a:7d:d3:0b:a5:96:72:e9:39:c4:4a:bc:
a6:65:17:e2:96:40:f3:d4:78:d6:e0:69:45:f7:e0:b9:38:8f:
0f:d7:f4:37:5a:23:14:01:c8:34:7e:9b:04:a2:c3:e8:c6:04:
cb:d0:44:e0:56:1b:93:33:3f:cc:4f:0a:fe:28:40:3c:8a:c2:
bd:2a:d0:90:49:b0:b3:ec:9e:e1:2b:f2:31:40:54:d0:68:c9:
9c:3a:d5:bc:9e:87:f8:31:9a:c7:fe:97:78:06:8d:77:ee:bc:
b5:58:7c:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZQSJ8fXupf+GaMhCvhacvmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NGE2NzJlOTkyMjNjMjcwYzE0YjVlMjZmZmYzNmE4YmNj
ZTRjZjIwHhcNMjUwNDE5MjMwMDU4WhcNMjUwNDIwMjMwMDU4WjAzMTEwLwYDVQQD
Eyg1ZWQ0MTMwMmI1NjdhZjA0MTM5OGY4MDQzZDU1NWU2MGYxMTNlYzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsE3gDXOkr1v9lnz/TgJv4pNNO2o
J3XSs9SEWHiNAuoCPRKhC7NPR7zEx2cmqOu5w/0SF6KGYo+iZQvhUu/A22DmqVEh
+FKODhswd1ToIIHo1uk8ragtuSJIdgAzKr8zX1QdjVzOxFS3mOg170GMs30RK463
O7YYz03KICuTaKOsYHzsUflFkttRcO5Xf+TRB3H9Y8wQgF1pI+1IlGRwn6RTT3Np
4yNCPT6dgZoz/KbVPZgIr3qH6ltYNlp/GRF+Shu7ZCyTlIKnDn/rWbkYWhp8tBQc
nLv1q2beK9g6KMEI+PqubT3FQb2CvclYlEOLz5pnEXA2Jvq0u9/Vww9P+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF7UEwK1Z68EE5j4BD1VXmDxE+w9MB8GA1UdIwQY
MBaAFEhKZy6ZIjwnDBS14m//Nqi8zkzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0Vwbkxwa2lQQ2NNRkxYaWJfODJxTHpPVFBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kMDU4OTUtZDk4Yi00ZDZjLWFmODct
MTcyZjY2YjA5MzNjLzEvU0Vwbkxwa2lQQ2NNRkxYaWJfODJxTHpPVFBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9kMDU4OTUtZDk4Yi00ZDZjLWFmODctMTcyZjY2YjA5MzNj
LzEvU0Vwbkxwa2lQQ2NNRkxYaWJfODJxTHpPVFBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW+zIDE3Q
vZDX/27VSZ4kCHSrR3FofGb+Q6cb30EWGvqFFRKPRJ6TOXtdpfQXkVcTCcD6V82l
FhnmuDvPJQvZgC2XYtkiMjAxM4Ju1Wm3jWs5tc7kUk3PMLIznSkQ4GwhnBVDWXlb
mqOwPvAp5JAHWr6yNqf4+emJ6wgV2yuTshAY4SYswjjyVxFMaunUvITnjkuaq44y
mn3TC6WWcuk5xEq8pmUX4pZA89R41uBpRffguTiPD9f0N1ojFAHINH6bBKLD6MYE
y9BE4FYbkzM/zE8K/ihAPIrCvSrQkEmws+ye4SvyMUBU0GjJnDrVvJ6H+DGax/6X
eAaNd+68tVh8LQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:14:09 2025 by rpki-client