Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft
File: L28OoBJ6bjkhlWljgL5bsEdLAd8.mft (raw, json)
Hash identifier: G1VYKEQw+WQCx5RoYu+nQXN7uD437yaJuiCK8frOAKM=
Subject key identifier: 81:B1:6F:A1:1D:74:83:EA:8F:39:6B:38:62:48:F2:BD:AB:11:A8:C4
Authority key identifier: 2F:6F:0E:A0:12:7A:6E:39:21:95:69:63:80:BE:5B:B0:47:4B:01:DF
Certificate issuer: /CN=2f6f0ea0127a6e392195696380be5bb0474b01df
Certificate serial: 019653EE7D123EB6C1300FC9FC17E674BA58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L28OoBJ6bjkhlWljgL5bsEdLAd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 16:01:00 +0000
Manifest this update: Sun 20 Apr 2025 16:01:00 +0000
Manifest next update: Mon 21 Apr 2025 16:01:00 +0000
Files and hashes: 1: L28OoBJ6bjkhlWljgL5bsEdLAd8.crl (hash: Pf1TB5zWvroIfZD87M9vStXcMT/GjQub0v/h4sdrVls=)
2: vqiF7KHwgC4hKANJve3WilTtCaA.roa (hash: ViWg/cb4ZOWXmU8DGPzhe6lMZyYPSAoJx2DnUl9cMUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/L28OoBJ6bjkhlWljgL5bsEdLAd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:7d:12:3e:b6:c1:30:0f:c9:fc:17:e6:74:ba:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6f0ea0127a6e392195696380be5bb0474b01df
Validity
Not Before: Apr 20 16:01:00 2025 GMT
Not After : Apr 21 16:01:00 2025 GMT
Subject: CN=81b16fa11d7483ea8f396b386248f2bdab11a8c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e5:9c:b9:64:40:2d:7e:e5:e0:62:2c:f8:91:
4c:bf:62:44:47:0b:a5:08:46:e5:6a:80:05:fa:a9:
58:94:1b:d6:3e:c9:04:ee:e4:ab:f0:d1:2c:38:b8:
f9:5c:69:7b:d0:79:95:90:de:bb:39:1e:6d:21:76:
d6:3a:a9:6a:e9:cc:4b:5c:76:07:74:b0:f7:0f:48:
32:64:89:61:92:9a:30:a0:13:70:e3:e5:30:40:a9:
e4:40:88:9b:af:85:10:1f:a7:75:9f:ee:f4:25:58:
3b:b2:57:6d:1b:55:7c:f0:64:8e:e1:b8:1d:c7:5a:
db:6b:fe:ca:36:36:af:23:e0:e3:42:fd:18:3d:bc:
5d:0c:b0:fb:b3:68:39:8b:f3:e5:ac:b2:50:c3:86:
77:a6:f5:ef:6c:80:dd:ed:12:eb:72:1c:c5:ad:33:
27:07:40:8b:1c:0c:59:af:b5:83:d1:09:7d:cc:e6:
55:8a:a1:11:d9:65:cc:69:2a:18:ae:c0:ae:d7:a4:
48:0e:fc:c5:cc:d3:47:a2:77:51:22:9a:fa:e2:a9:
79:f0:bb:d8:14:8e:22:28:96:7f:59:08:85:b0:ea:
73:c4:1b:85:f3:4e:05:a8:4d:4c:52:d2:0d:c7:30:
6a:73:ce:21:6e:9e:e1:68:1a:ac:7f:20:f9:f7:eb:
5e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B1:6F:A1:1D:74:83:EA:8F:39:6B:38:62:48:F2:BD:AB:11:A8:C4
X509v3 Authority Key Identifier:
keyid:2F:6F:0E:A0:12:7A:6E:39:21:95:69:63:80:BE:5B:B0:47:4B:01:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L28OoBJ6bjkhlWljgL5bsEdLAd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:b6:74:b2:82:8a:4c:b9:e2:50:07:b5:e7:76:ed:65:8b:e6:
37:ce:11:89:f9:79:54:77:40:53:07:2a:de:92:c6:e5:92:36:
c2:99:bb:a6:5c:15:ae:91:88:a1:4d:57:1c:0e:25:77:74:40:
1e:29:d5:0c:7e:da:92:61:6b:f2:3c:82:ba:b3:4a:9b:d1:61:
90:44:b7:af:75:26:ac:05:36:33:aa:68:b5:f5:39:cc:b9:f6:
18:05:9e:de:8c:6a:58:3f:ef:ce:28:e3:d0:69:42:e2:06:ab:
05:0b:e3:b8:74:a2:03:a7:51:14:fc:04:4e:2c:b8:30:5f:74:
c5:73:e4:5d:12:ba:2a:cc:17:ef:95:82:d7:67:56:54:8b:f0:
81:e7:dc:05:3a:a6:82:73:aa:5f:9b:bb:7a:e4:c9:03:44:b3:
49:b5:0a:b2:af:6b:4c:20:f8:8b:55:df:08:a6:98:2b:cd:66:
2b:27:f0:17:5e:ca:b5:18:ee:7b:63:27:f9:00:8e:d1:52:ff:
6a:eb:4c:d6:89:84:6e:25:19:f0:1f:e5:2a:ab:7b:6c:c6:41:
c8:ac:23:f1:b5:dc:99:c2:fd:d2:75:76:ca:98:83:96:36:b3:
09:9f:8a:03:2c:80:77:c6:d9:4f:3e:00:b2:d7:e7:c5:49:fb:
df:10:4e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:18:14 2025 by rpki-client