Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft
File: lpblIk_vUX9NzGbBQQNSzIq_si4.mft (raw, json)
Hash identifier: 1luh/HJJrFxNzLManbovNUiMRHBIyX+C+OUJi1LvKUo=
Subject key identifier: 14:ED:A3:FC:14:FA:A2:42:49:60:A5:C8:88:34:3E:07:BC:30:EC:7C
Authority key identifier: 96:96:E5:22:4F:EF:51:7F:4D:CC:66:C1:41:03:52:CC:8A:BF:B2:2E
Certificate issuer: /CN=9696e5224fef517f4dcc66c1410352cc8abfb22e
Certificate serial: 01958C60FDD05E3EFC385CF2356CE0C067C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lpblIk_vUX9NzGbBQQNSzIq_si4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft
Manifest number: 1422
Signing time: Wed 12 Mar 2025 22:02:01 +0000
Manifest this update: Wed 12 Mar 2025 22:02:01 +0000
Manifest next update: Thu 13 Mar 2025 22:02:01 +0000
Files and hashes: 1: lpblIk_vUX9NzGbBQQNSzIq_si4.crl (hash: IOB3m3RTn8Ytav7mco71kSoUh16V5vOAL975wc9HMps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lpblIk_vUX9NzGbBQQNSzIq_si4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:fd:d0:5e:3e:fc:38:5c:f2:35:6c:e0:c0:67:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9696e5224fef517f4dcc66c1410352cc8abfb22e
Validity
Not Before: Mar 12 22:02:01 2025 GMT
Not After : Mar 13 22:02:01 2025 GMT
Subject: CN=14eda3fc14faa2424960a5c888343e07bc30ec7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a0:2e:59:27:4e:69:f7:02:b9:f9:45:5a:13:
1f:41:de:01:8f:ff:e8:00:85:4b:66:56:eb:f5:b8:
1a:2f:d4:ab:f8:c0:f8:f1:22:ef:04:2c:44:a7:be:
a7:e2:b2:3e:89:11:a1:55:3f:e4:0c:a3:85:b5:49:
25:40:db:65:dc:df:89:07:69:7d:45:56:a0:3b:6d:
b3:5f:47:d9:57:48:7d:1f:05:7a:ad:39:84:0a:c8:
4a:c9:d2:41:47:11:bb:88:1a:d9:88:56:49:fe:3f:
ae:f2:55:91:8d:11:0e:9b:13:f7:96:b8:b2:2c:ac:
09:73:05:64:4d:7d:5b:d7:29:a7:4d:42:54:9e:bc:
f7:9d:ec:82:41:ed:99:fb:ed:c0:b3:74:33:46:25:
92:4d:bc:7c:7d:dd:f2:84:9e:47:56:34:f2:26:65:
b8:37:98:0d:61:f5:5f:07:1e:7e:7c:1b:78:0d:3a:
40:4c:a0:4c:2e:9c:90:92:d9:7e:b2:89:42:be:32:
93:6c:40:d5:11:bc:86:be:09:f6:1a:f1:0c:e2:b9:
49:b7:64:59:04:4d:7b:93:89:01:0b:72:c2:a6:3b:
cd:49:62:cd:7d:30:6a:f0:96:74:71:7f:ec:8b:14:
5d:f8:ec:0b:37:34:2d:e3:63:a7:71:cc:9a:07:d9:
53:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:ED:A3:FC:14:FA:A2:42:49:60:A5:C8:88:34:3E:07:BC:30:EC:7C
X509v3 Authority Key Identifier:
keyid:96:96:E5:22:4F:EF:51:7F:4D:CC:66:C1:41:03:52:CC:8A:BF:B2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lpblIk_vUX9NzGbBQQNSzIq_si4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:4e:f8:76:d8:17:31:25:1d:13:78:06:89:b8:06:67:57:69:
18:30:3f:04:77:47:ed:ca:b2:b7:5d:5a:c3:c8:92:dc:99:03:
4e:4d:89:50:16:b9:42:97:de:d2:fb:7d:16:5d:45:26:15:af:
e4:8c:7f:eb:11:65:3f:3b:da:43:3f:b2:ef:fb:a3:c6:c6:2c:
f8:f4:33:df:76:52:4a:08:10:4c:5b:85:00:93:ef:70:21:26:
fd:98:7a:a3:6e:fa:e5:d3:6c:e1:a7:ae:f8:ad:50:f0:4f:36:
3a:f3:5b:a9:18:94:0f:b9:22:89:3a:33:50:8d:a6:69:80:64:
99:47:66:53:40:24:6e:35:d0:4a:6a:8b:25:91:07:ad:1d:7d:
05:ed:f9:18:a1:d7:70:ad:96:50:8f:95:7e:5f:3f:7b:80:1b:
bb:e4:98:ba:22:44:b7:33:1a:bd:77:5f:92:c6:52:32:cc:04:
4c:b7:df:ec:a1:d8:be:cb:0c:9c:a7:c6:a4:f0:41:ea:98:72:
5a:2e:56:45:d8:f6:4e:21:7d:27:94:70:59:95:2d:fd:9b:98:
d8:38:33:c2:45:60:ff:85:a2:59:7d:ef:1b:73:91:df:c9:94:
6b:ed:3f:21:18:45:07:8c:3a:73:6a:ef:48:b8:b9:c8:51:b9:
b9:be:70:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:53:25 2025 by rpki-client