Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
File: lER-sxl6ox5-aEnxavVaslMB-oI.mft (raw, json)
Hash identifier: 7WB7/JCPDpQL07sbUvm6FeBsPulMp/PwBYX7OlhrWcc=
Subject key identifier: EF:A6:FB:88:B1:60:C9:2B:D8:D4:51:1A:D1:E8:36:6D:09:5D:D8:F7
Authority key identifier: 94:44:7E:B3:19:7A:A3:1E:7E:68:49:F1:6A:F5:5A:B2:53:01:FA:82
Certificate issuer: /CN=94447eb3197aa31e7e6849f16af55ab25301fa82
Certificate serial: 01963F547C7F1D04ABB55D49133A34835263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lER-sxl6ox5-aEnxavVaslMB-oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
Manifest number: 046B
Signing time: Wed 16 Apr 2025 16:00:23 +0000
Manifest this update: Wed 16 Apr 2025 16:00:23 +0000
Manifest next update: Thu 17 Apr 2025 16:00:23 +0000
Files and hashes: 1: lER-sxl6ox5-aEnxavVaslMB-oI.crl (hash: So9Aw+lXaU5swKfxX6c4udJDoyOsAzfJS0JY7Dwj2Vk=)
2: o3HDa5Hn0JXB7VWawD3Vzcdyd5k.roa (hash: di4+72seaNK8FCueSsPtQY60+2j8OsXpOCEk2d98xmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lER-sxl6ox5-aEnxavVaslMB-oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:54:7c:7f:1d:04:ab:b5:5d:49:13:3a:34:83:52:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94447eb3197aa31e7e6849f16af55ab25301fa82
Validity
Not Before: Apr 16 16:00:23 2025 GMT
Not After : Apr 17 16:00:23 2025 GMT
Subject: CN=efa6fb88b160c92bd8d4511ad1e8366d095dd8f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1a:93:97:e7:ed:64:89:47:0c:bd:e1:1d:af:
ee:44:90:9c:bb:5a:a5:54:03:f4:8f:76:77:42:3c:
2b:ff:0a:ad:f8:d0:8d:7e:d8:21:a0:fe:a8:51:03:
68:af:99:5a:4b:75:72:59:67:47:e7:17:42:e5:fa:
3e:fe:da:a6:68:f0:0b:49:16:ee:e8:19:c0:7b:14:
37:f8:0e:89:cc:d7:da:3b:50:c9:d3:3d:d6:d6:c6:
bf:fe:dd:0c:58:1f:70:00:aa:ca:c7:0e:88:59:ee:
05:28:69:a0:0c:98:ab:fe:a8:a1:5a:b9:2e:46:65:
72:f8:02:ce:86:f6:4a:cf:80:4c:19:13:57:ec:da:
09:40:a6:f1:44:b7:c9:f5:94:50:a2:e1:0d:4d:f0:
56:f4:d8:8f:08:d5:95:9b:1e:10:c7:7e:d0:01:7a:
ff:c7:e4:88:7a:0f:e0:40:56:25:50:11:e6:32:cb:
78:5a:5a:d1:aa:7a:dd:ea:53:25:3d:4e:cb:1e:43:
f6:79:20:4b:af:a0:70:6b:d7:7d:b9:17:77:ed:0d:
de:a3:79:a9:a0:4f:c6:da:04:82:7c:5e:e5:8c:ce:
68:97:5b:62:34:b5:66:9a:ef:f8:a9:c0:a6:61:2c:
a1:07:b7:f9:7f:43:e2:1b:93:a9:50:9d:b5:13:22:
5b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A6:FB:88:B1:60:C9:2B:D8:D4:51:1A:D1:E8:36:6D:09:5D:D8:F7
X509v3 Authority Key Identifier:
keyid:94:44:7E:B3:19:7A:A3:1E:7E:68:49:F1:6A:F5:5A:B2:53:01:FA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lER-sxl6ox5-aEnxavVaslMB-oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:9a:dc:73:fb:77:18:85:ba:a6:c2:82:82:61:5d:87:ce:19:
24:15:60:51:96:8b:36:68:11:fb:2a:f0:97:2e:04:56:ee:0d:
34:32:12:2e:b2:cf:e1:32:6b:e3:c3:82:4a:91:4c:8c:07:3e:
e7:3b:1b:68:12:98:fe:8b:ed:e7:fd:ad:aa:7a:fc:e3:50:81:
df:a8:ee:56:03:db:b8:9e:3b:7a:77:ab:98:42:c4:fa:4c:1e:
ca:17:21:37:25:ae:cf:4e:0f:7e:d3:11:89:6a:35:f3:81:6f:
df:01:31:9c:15:03:30:46:80:c3:f4:7c:ed:39:6f:c0:ed:1e:
f4:1e:f5:cc:53:89:76:c3:96:b7:22:48:a4:7c:05:e7:b0:73:
9f:29:8f:4c:8a:cf:d0:ad:e7:1e:c8:18:5a:6a:7e:2b:dc:91:
98:46:60:21:f5:81:01:71:f4:86:d0:7b:ad:18:6b:07:6d:e2:
58:12:26:52:13:58:95:bf:1c:1e:dd:bc:95:c5:a9:2d:e0:8c:
e7:24:07:d8:23:fe:ff:3a:f6:e2:74:97:c9:3a:5f:8c:90:8d:
d2:6c:a5:7b:1c:cb:77:20:02:04:dc:9b:c5:e2:5c:45:0d:92:
52:5d:4a:f8:6c:e9:c4:97:e9:c7:db:f7:db:2e:95:46:2a:5b:
53:1c:9f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:58:52 2025 by rpki-client