Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
File: li68oqtiGOHxrgaHwxREVP1dmWs.mft (raw, json)
Hash identifier: 9Z5FHvyY01s92Y49lq4zXqT69YbOvYW0G551NaCFhRk=
Subject key identifier: 00:4E:0F:D1:26:A3:39:18:79:BA:EC:4C:18:AB:B1:87:D6:1B:06:0E
Authority key identifier: 96:2E:BC:A2:AB:62:18:E1:F1:AE:06:87:C3:14:44:54:FD:5D:99:6B
Certificate issuer: /CN=962ebca2ab6218e1f1ae0687c3144454fd5d996b
Certificate serial: 01960BD63DD40C7CDAEF61DA9B59F03F4DEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
Manifest number: 1469
Signing time: Sun 06 Apr 2025 16:01:51 +0000
Manifest this update: Sun 06 Apr 2025 16:01:51 +0000
Manifest next update: Mon 07 Apr 2025 16:01:51 +0000
Files and hashes: 1: li68oqtiGOHxrgaHwxREVP1dmWs.crl (hash: GIyGquNsnrr70JjfpV9PG44qC90bwZ+gf962oCseJuo=)
2: o2GAlRjqrWRT3XBGB9RwTDs_Ew0.roa (hash: HIy6rjCdEt9bpDveV9D2228Lv0B3K1QWnfoHF9Amb5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0b:d6:3d:d4:0c:7c:da:ef:61:da:9b:59:f0:3f:4d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962ebca2ab6218e1f1ae0687c3144454fd5d996b
Validity
Not Before: Apr 6 16:01:51 2025 GMT
Not After : Apr 7 16:01:51 2025 GMT
Subject: CN=004e0fd126a3391879baec4c18abb187d61b060e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:90:9c:2d:c0:03:15:53:c1:e1:7f:27:2f:a6:
ac:07:3d:81:f1:4d:2f:0a:46:ab:7d:a7:12:48:bc:
b9:39:ba:30:30:7a:65:3e:63:68:fa:dc:1b:63:23:
be:84:fd:a5:44:c9:81:d3:d3:e1:9a:02:d7:9a:a3:
95:9b:6c:2c:0a:14:fc:5c:85:9d:d9:4d:5d:16:77:
96:9b:61:75:b0:39:76:4b:1a:f2:46:ea:f0:a7:14:
07:60:46:e1:fa:e9:ce:63:87:23:53:a1:4b:a6:27:
36:95:e7:1b:76:78:25:a1:3e:bf:90:fe:f6:f4:6c:
ff:a6:25:3c:99:b6:33:41:88:0f:af:0f:d6:27:d6:
db:6c:c6:fb:d3:54:f3:38:b2:cd:26:ae:b3:fd:fc:
05:21:83:f1:90:1e:c5:26:05:bb:31:7e:ff:e4:ed:
61:93:d3:e4:c9:94:99:10:b2:72:cd:2d:56:74:97:
23:0a:d0:d0:ed:c0:e0:f4:ab:ec:d7:19:78:0b:f9:
95:17:1c:a8:ae:ce:0e:5f:21:47:cf:02:ef:b4:ce:
76:28:4a:33:21:a4:f2:0a:8b:60:35:78:ef:2f:f7:
33:28:c4:0b:bf:f0:ea:d7:c2:46:45:9a:15:29:ad:
3f:18:ac:45:11:c5:58:5c:51:2d:73:44:7a:55:05:
57:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4E:0F:D1:26:A3:39:18:79:BA:EC:4C:18:AB:B1:87:D6:1B:06:0E
X509v3 Authority Key Identifier:
keyid:96:2E:BC:A2:AB:62:18:E1:F1:AE:06:87:C3:14:44:54:FD:5D:99:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:57:8b:8f:df:cd:12:b3:26:b0:91:e1:98:d0:82:98:a0:74:
18:f9:89:c1:33:e8:68:1b:e8:72:6d:e3:21:4c:3d:a3:4d:89:
a2:a8:ac:2a:96:7e:24:e2:f5:08:ff:81:38:0f:4b:eb:36:b6:
f2:68:7f:9b:08:88:aa:35:e2:f7:ab:6f:20:2e:4e:15:e4:7f:
04:7c:88:21:5b:fd:54:0d:4a:ce:d2:de:86:d6:88:da:7b:1c:
a4:af:5a:44:c2:a2:cc:de:d4:b2:14:53:d1:b9:2b:cf:cc:8c:
c2:24:05:f5:fc:c9:09:2f:b0:ac:98:66:6a:f6:be:80:64:a7:
bf:2b:1b:71:22:5b:28:b5:83:cf:69:f9:2e:48:dc:0f:3e:01:
99:96:84:81:2c:6d:c4:b8:ed:65:66:5c:fd:9b:54:77:c1:67:
ea:f9:a6:a5:f3:07:fb:91:b2:42:8e:22:70:e4:20:86:0f:1d:
2d:01:5f:4a:fc:2b:46:4a:49:f5:8f:1e:82:5e:4b:13:5e:b8:
17:88:00:11:0a:a9:21:33:c9:2d:a1:04:4b:5f:90:55:68:c7:
a8:67:22:70:1a:17:7b:dc:e7:dd:0f:53:e4:53:18:09:6b:88:
31:90:eb:02:cc:13:4e:8a:01:71:ab:97:27:65:4d:3c:11:be:
da:53:62:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:35:07 2025 by rpki-client