Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/edcd12-3be2-4629-a559-e72fbddb7746/1/lwVGLL_Idkd35toxtZXXzL_jgkM.mft
File: lwVGLL_Idkd35toxtZXXzL_jgkM.mft (raw, json)
Hash identifier: uN0MoAtlWAu8rsEd3OaeELREqbawsrO8EWw4xR155dA=
Subject key identifier: D6:F3:44:08:56:11:69:4D:CC:61:F1:17:46:97:18:D5:C3:EB:0C:55
Authority key identifier: 97:05:46:2C:BF:C8:76:47:77:E6:DA:31:B5:95:D7:CC:BF:E3:82:43
Certificate issuer: /CN=9705462cbfc8764777e6da31b595d7ccbfe38243
Certificate serial: 01964C34C63E761C8766B3CB0AAFA726BF90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwVGLL_Idkd35toxtZXXzL_jgkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/edcd12-3be2-4629-a559-e72fbddb7746/1/lwVGLL_Idkd35toxtZXXzL_jgkM.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 04:00:49 +0000
Manifest this update: Sat 19 Apr 2025 04:00:49 +0000
Manifest next update: Sun 20 Apr 2025 04:00:49 +0000
Files and hashes: 1: 9EmaRE56MhxkySrgldeCqIzjdb4.roa (hash: 1f+hqjqOUpzqbgERzyV2EMzT2kIlImzsUPPui1WSWLA=)
2: lwVGLL_Idkd35toxtZXXzL_jgkM.crl (hash: ZubPDdqne0Pe1gOnZgiR/4+QoEVBM4Y28/ag3dHwbDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/edcd12-3be2-4629-a559-e72fbddb7746/1/lwVGLL_Idkd35toxtZXXzL_jgkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/edcd12-3be2-4629-a559-e72fbddb7746/1/lwVGLL_Idkd35toxtZXXzL_jgkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lwVGLL_Idkd35toxtZXXzL_jgkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:34:c6:3e:76:1c:87:66:b3:cb:0a:af:a7:26:bf:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9705462cbfc8764777e6da31b595d7ccbfe38243
Validity
Not Before: Apr 19 04:00:49 2025 GMT
Not After : Apr 20 04:00:49 2025 GMT
Subject: CN=d6f344085611694dcc61f117469718d5c3eb0c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:21:6c:8c:1f:aa:23:f9:c1:92:d2:2d:c3:74:
2c:81:00:9a:d3:76:e4:27:aa:b4:bd:03:c0:ac:4d:
15:92:a6:68:a1:e4:74:9f:34:fb:f7:a3:ee:20:7e:
0e:11:4b:db:c2:81:09:69:38:28:27:33:a6:1c:b3:
09:3c:04:9e:5d:a2:05:7e:c0:69:4d:b0:02:2f:1c:
4a:1f:9b:16:0d:f3:2b:6b:92:0a:ff:72:9a:31:e2:
5f:43:15:63:f3:73:49:59:c6:55:a2:09:6c:b9:8d:
86:1d:fe:15:56:47:34:dd:50:e1:d8:ea:a5:e4:c5:
77:c4:b9:da:a7:8c:ca:03:86:97:9f:f1:29:59:00:
c5:57:02:18:fc:8a:a5:49:02:23:a6:92:0a:65:3b:
75:91:1e:2a:cd:24:2e:2e:d0:b5:7e:4a:ed:8d:f2:
77:b8:3b:a6:37:18:35:e8:3e:fc:65:99:79:4c:3d:
f5:02:97:76:f2:7d:c9:3f:dd:61:b8:43:70:01:63:
98:99:26:84:ff:69:2b:1c:cd:38:c9:39:12:fa:76:
e9:11:bb:41:ec:d0:0e:a9:ba:d8:5a:0a:9e:3b:87:
96:a4:cd:39:23:fe:e7:a1:8b:a5:09:d4:3b:c8:d2:
52:45:65:7f:5e:56:fc:28:14:0c:81:b3:0f:ef:8e:
25:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F3:44:08:56:11:69:4D:CC:61:F1:17:46:97:18:D5:C3:EB:0C:55
X509v3 Authority Key Identifier:
keyid:97:05:46:2C:BF:C8:76:47:77:E6:DA:31:B5:95:D7:CC:BF:E3:82:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwVGLL_Idkd35toxtZXXzL_jgkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/edcd12-3be2-4629-a559-e72fbddb7746/1/lwVGLL_Idkd35toxtZXXzL_jgkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/edcd12-3be2-4629-a559-e72fbddb7746/1/lwVGLL_Idkd35toxtZXXzL_jgkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:40:6d:4a:5e:df:7d:09:49:dc:3a:9a:17:fc:45:51:c3:d2:
d1:5d:e0:7c:6a:8a:9e:90:3d:ff:4b:59:9f:05:3a:5d:2d:c3:
f8:c3:f9:23:63:27:f0:1d:45:35:2e:5d:8e:ef:64:52:0b:c1:
ef:ad:5f:59:ee:44:67:51:78:fe:6f:ba:11:9d:d2:46:77:b9:
40:2f:bc:28:8d:27:8c:cb:32:2c:5f:25:40:cc:ed:51:e1:66:
45:e6:9e:d3:43:ab:92:e3:d5:7c:44:90:3d:a9:37:ce:78:f3:
58:95:65:8f:9c:53:cc:3a:6d:14:ff:1b:17:17:eb:b2:18:67:
14:0c:de:b8:05:74:6b:8b:64:94:60:6f:33:f1:6d:0f:26:d9:
8d:bb:48:da:4e:a3:2d:ae:0f:6d:d3:c3:8a:63:63:a9:53:b2:
85:eb:6d:c6:15:c6:40:95:c9:d8:78:50:80:86:20:09:9e:30:
8b:c4:1d:6d:44:35:9c:f3:78:bb:0c:e3:f2:f9:6d:a9:87:16:
af:8b:9e:be:0a:23:10:bc:78:17:a9:7c:b5:92:c6:83:a0:52:
e7:f5:d5:5f:11:d0:d6:dc:2a:1b:a7:d8:33:47:f2:10:d9:b7:
80:13:11:42:9f:fa:85:16:ab:28:0b:a8:f1:2d:82:04:a3:e8:
d3:67:7c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:36:12 2025 by rpki-client