
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft
File: ljREADltCvTLeePJRmZnG3s5H1U.mft (raw, json)
Hash identifier: ZYootutx2+ENZZXhGqqg7GM3C8gOfOyp5i9mrHFqBeo=
Subject key identifier: 18:2F:FF:F5:B4:1B:25:F1:97:54:80:C2:D2:9D:6B:39:45:AD:F4:7C
Authority key identifier: 96:34:44:00:39:6D:0A:F4:CB:79:E3:C9:46:66:67:1B:7B:39:1F:55
Certificate issuer: /CN=96344400396d0af4cb79e3c94666671b7b391f55
Certificate serial: 01965048846AACBDF767C7049E56F8164EE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljREADltCvTLeePJRmZnG3s5H1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft
Manifest number: 0A37
Signing time: Sat 19 Apr 2025 23:00:51 +0000
Manifest this update: Sat 19 Apr 2025 23:00:51 +0000
Manifest next update: Sun 20 Apr 2025 23:00:51 +0000
Files and hashes: 1: g64CYQqOAhZ0eSWUTgojppUOmyU.roa (hash: KRvJvpAicOv96+Z1/awJqo3RuCZixmomEl8lk9HVDZo=)
2: ljREADltCvTLeePJRmZnG3s5H1U.crl (hash: tvbCRQN2OrBMlKfWRgvDw42huAzoPTfZcRzD3Rcgg9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ljREADltCvTLeePJRmZnG3s5H1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:48:84:6a:ac:bd:f7:67:c7:04:9e:56:f8:16:4e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96344400396d0af4cb79e3c94666671b7b391f55
Validity
Not Before: Apr 19 23:00:51 2025 GMT
Not After : Apr 20 23:00:51 2025 GMT
Subject: CN=182ffff5b41b25f1975480c2d29d6b3945adf47c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b0:04:d3:0b:07:99:42:22:30:78:2f:bc:25:
87:2b:60:f5:14:57:ae:89:56:25:2d:d2:f1:b0:ba:
af:b0:94:c0:d3:35:98:0b:52:c0:6b:dd:04:23:55:
60:eb:94:1a:3a:18:f0:a0:23:ac:5a:3a:28:6d:fa:
20:98:ed:81:3b:52:e0:9b:7f:a3:ad:45:44:8d:33:
78:7c:eb:79:3e:a2:91:74:f0:00:66:96:f7:4a:d4:
3a:3c:57:20:79:e4:bc:2e:9c:6c:83:1e:22:39:93:
00:7c:9a:0c:46:16:93:1d:2e:c8:b2:d4:0e:c2:b5:
70:cd:dd:a7:f3:bd:34:24:c8:bf:cd:24:d1:f8:67:
5b:80:ee:c7:29:79:75:7b:89:c0:d4:2d:3f:58:43:
ad:40:b0:ee:f8:d6:fb:15:9c:84:10:17:b7:72:79:
72:cb:8b:d4:95:6e:78:36:2d:46:2d:f3:49:94:02:
71:19:a2:93:20:21:02:50:1d:64:f5:a6:9a:77:93:
fd:fc:15:17:02:24:aa:60:2f:62:f4:75:86:c7:6b:
a4:73:c7:01:c8:bf:0e:fa:92:89:04:b2:ba:6b:23:
6c:a0:58:6e:e3:b4:3d:c0:79:f2:af:2d:0c:0a:f8:
18:59:4b:ff:8e:03:f4:b2:e2:95:13:5d:bd:10:7b:
da:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2F:FF:F5:B4:1B:25:F1:97:54:80:C2:D2:9D:6B:39:45:AD:F4:7C
X509v3 Authority Key Identifier:
keyid:96:34:44:00:39:6D:0A:F4:CB:79:E3:C9:46:66:67:1B:7B:39:1F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljREADltCvTLeePJRmZnG3s5H1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:9d:04:05:c9:1d:63:13:b7:c7:56:0f:af:d6:87:9d:78:64:
3c:b5:a5:48:41:c5:3d:86:0b:cb:d4:1c:d0:30:29:5c:f4:3a:
fa:16:ef:22:24:0d:96:86:4b:14:18:66:d8:b1:b7:df:a4:61:
cb:93:7b:6b:5d:fb:0a:a5:ba:3e:27:7a:3f:42:19:51:4f:63:
bb:fc:a1:2b:76:cd:7d:18:58:43:ca:77:0a:09:63:34:ff:58:
a9:f7:12:46:36:6b:ab:c4:a2:4e:0e:96:11:8a:87:c3:9d:4b:
fe:5e:a4:fd:e6:71:63:15:07:26:54:a3:36:a0:b6:58:00:d4:
a8:d4:3d:00:2e:15:ca:e0:8d:bc:6e:56:58:87:25:ed:92:98:
d6:3d:4d:1a:9f:b1:29:01:12:cd:fb:31:cd:d7:d0:0c:95:10:
f7:09:5c:9a:17:1d:a8:9f:e0:79:05:78:d1:c1:a3:e7:13:1e:
82:cb:65:c5:b9:4f:ed:61:b5:dc:14:24:88:af:7c:b1:cc:d4:
ba:93:24:aa:35:9b:bb:2f:7e:11:ee:cb:f0:28:53:79:d2:b6:
3d:d4:41:14:a9:7b:0d:c6:86:1d:67:fb:bb:3e:3e:c3:0e:30:
61:01:f3:57:b6:ab:81:77:f5:33:d5:05:55:a9:82:93:63:f5:
bc:c0:5d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:16:41 2025 by rpki-client