Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft
File: LO_eMLilizIqQx8IKe1P8ztarBg.mft (raw, json)
Hash identifier: JKwLGU7yXDVvFhMiHW71u4jzqsK9vsmk5izTYhLAOvY=
Subject key identifier: 3A:BD:96:8F:72:E8:43:CE:FD:9E:EA:D2:D5:ED:64:D5:23:50:0C:70
Authority key identifier: 2C:EF:DE:30:B8:A5:8B:32:2A:43:1F:08:29:ED:4F:F3:3B:5A:AC:18
Certificate issuer: /CN=2cefde30b8a58b322a431f0829ed4ff33b5aac18
Certificate serial: 01963BE5DF3F6D6560B9FD2B58A1E8484C55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LO_eMLilizIqQx8IKe1P8ztarBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft
Manifest number: 14F2
Signing time: Wed 16 Apr 2025 00:00:42 +0000
Manifest this update: Wed 16 Apr 2025 00:00:42 +0000
Manifest next update: Thu 17 Apr 2025 00:00:42 +0000
Files and hashes: 1: LO_eMLilizIqQx8IKe1P8ztarBg.crl (hash: PyB3s5SF7v0aZTC2v3Z2eSUlIWr2f63wUoMk4Te1wPs=)
2: mQcxBkZ7-mWqzkv2ZtLrNKCsXXw.roa (hash: KchD7ZXPUhVAHhfHUs6iNxTS5Xs7vYjFeQVLeVV+Bu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LO_eMLilizIqQx8IKe1P8ztarBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3b:e5:df:3f:6d:65:60:b9:fd:2b:58:a1:e8:48:4c:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cefde30b8a58b322a431f0829ed4ff33b5aac18
Validity
Not Before: Apr 16 00:00:42 2025 GMT
Not After : Apr 17 00:00:42 2025 GMT
Subject: CN=3abd968f72e843cefd9eead2d5ed64d523500c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ef:4c:56:b0:de:eb:b3:47:70:a8:1e:94:85:
96:e5:88:3c:39:14:fc:93:ff:03:9c:ff:7f:ae:6c:
90:8f:aa:1c:67:54:e3:90:9d:ca:af:49:6b:0f:95:
57:22:66:d2:cb:5d:e3:1d:9e:9e:aa:cd:aa:e4:5f:
19:13:30:7b:97:e6:ea:f1:1f:19:10:79:ff:20:fb:
d8:04:8a:ba:0b:ea:35:37:3a:71:ba:50:f4:8c:95:
50:f5:d6:ce:57:e0:cf:71:77:df:19:ef:5f:28:36:
78:e2:9c:c6:0e:86:24:48:d1:d9:30:d7:df:f3:8a:
03:95:e1:ef:96:30:a2:7d:64:c1:9f:1e:10:bf:6a:
47:56:08:b4:f8:50:db:91:2d:1e:3c:e6:1f:88:f9:
e2:23:57:2a:ca:69:66:88:7f:43:91:20:f2:84:67:
7b:8a:d6:74:05:b8:f6:d2:18:be:c4:55:8a:9c:be:
d5:93:92:72:99:3e:1f:1d:b9:d7:63:11:f8:12:ce:
84:4d:e9:06:10:94:1d:3e:d0:a7:ca:f6:ec:81:36:
17:c4:ab:88:a9:d3:4c:4c:a0:cd:c9:21:6a:86:61:
59:3b:32:5c:77:fa:16:e2:68:b5:50:31:79:ca:a4:
3b:71:be:2d:ee:d2:ad:fd:06:b1:6a:50:d3:53:90:
1e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:BD:96:8F:72:E8:43:CE:FD:9E:EA:D2:D5:ED:64:D5:23:50:0C:70
X509v3 Authority Key Identifier:
keyid:2C:EF:DE:30:B8:A5:8B:32:2A:43:1F:08:29:ED:4F:F3:3B:5A:AC:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LO_eMLilizIqQx8IKe1P8ztarBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:5b:ae:82:0f:a4:36:9f:00:f5:d3:04:c0:1a:14:9e:2c:5a:
d5:38:75:1c:1f:4a:89:ff:03:f4:80:12:27:e7:4f:de:7c:7d:
20:7b:9b:c1:8c:fe:39:3c:1d:3b:ca:aa:fb:5d:e0:e8:67:dd:
db:0e:97:54:5c:ba:ed:f0:b3:e4:19:c5:27:c6:b6:eb:fc:5b:
19:d8:ae:e9:37:e2:7d:19:f8:d3:a9:7f:a4:92:26:06:73:a2:
28:d0:81:6e:a2:65:b8:aa:a1:e5:0d:a6:68:5d:d1:2f:85:4a:
22:fc:55:4d:04:cf:ca:c9:25:59:49:04:12:9b:56:35:0b:87:
95:b2:35:f6:fa:00:4d:8e:de:9a:63:11:01:99:3a:9c:20:08:
d4:8f:cb:b9:cb:dc:64:f8:30:a5:ed:40:b6:5f:48:ca:2b:b1:
3a:cb:c0:ac:aa:18:61:c4:60:a2:1d:1b:ae:47:92:c7:1a:77:
6f:71:d8:af:a5:0f:77:af:8b:a9:cb:e3:fb:ec:7f:39:d2:47:
1c:36:15:24:7e:71:12:28:74:15:4b:a4:f7:4d:7a:d6:63:47:
e6:a4:48:0b:08:bd:9e:82:a6:e8:c0:f9:18:c4:fd:51:ca:05:
b5:6d:c0:3d:7c:92:71:79:9e:93:9a:d0:1f:47:be:8f:cb:4a:
12:9d:09:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:16:28 2025 by rpki-client