Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
File: lV_PknmKnbswq9K5-im_qIBCIPM.mft (raw, json)
Hash identifier: omsnoUVbY+BLb1BRCGdu8uzaaOepYETjv+utic05Go8=
Subject key identifier: 5C:71:B6:0D:48:BD:BB:76:7D:8C:5B:DD:DD:57:98:44:9E:44:F0:28
Authority key identifier: 95:5F:CF:92:79:8A:9D:BB:30:AB:D2:B9:FA:29:BF:A8:80:42:20:F3
Certificate issuer: /CN=955fcf92798a9dbb30abd2b9fa29bfa8804220f3
Certificate serial: 01962527EC27E34AFCB513D00E6AA384DE4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
Manifest number: 14E5
Signing time: Fri 11 Apr 2025 14:01:35 +0000
Manifest this update: Fri 11 Apr 2025 14:01:35 +0000
Manifest next update: Sat 12 Apr 2025 14:01:35 +0000
Files and hashes: 1: 6qs9s6ZANN0Vr7Mtzl0BbrvUZX0.roa (hash: pQeqqx4HL54a4q+hUpmIGa67TaWduN/H5CstOlna1UE=)
2: EoYtqT19_jZmc_n7cEwpjSGtOsU.roa (hash: hkkAotU6XOY6iCyCcpO+yZgNMC6GRacfrcfYwvynbjI=)
3: hFLTgVwi-T4tOA6wOS4qAN2FLxM.roa (hash: dz5XmeHfe6/lu7MZUkt8y4gu+wWol7zuYfpW+/5fyrM=)
4: lV_PknmKnbswq9K5-im_qIBCIPM.crl (hash: QtzMx/tG0Sdh49RumoA3QJYaiLjVXoUXbQs9sqwN/jY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 14:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:25:27:ec:27:e3:4a:fc:b5:13:d0:0e:6a:a3:84:de:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=955fcf92798a9dbb30abd2b9fa29bfa8804220f3
Validity
Not Before: Apr 11 14:01:35 2025 GMT
Not After : Apr 12 14:01:35 2025 GMT
Subject: CN=5c71b60d48bdbb767d8c5bdddd5798449e44f028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:12:59:bb:90:f1:b7:79:9d:44:d9:c2:9f:fe:
14:30:d3:9b:a6:89:46:c1:f9:d9:4d:4d:05:2f:b6:
25:83:8d:9e:67:57:0e:a2:96:03:8c:43:fc:cb:e5:
b3:0d:c7:d1:e3:a3:de:e7:a1:7b:11:3b:54:45:73:
65:ad:f1:93:7e:65:33:c2:e8:1b:78:1f:2e:23:f7:
b4:30:7b:46:48:83:e8:7d:cf:f7:c4:6a:51:ce:f7:
0e:f3:ff:3b:46:83:fa:59:b4:0c:af:f4:3b:4a:15:
71:ba:93:5a:cb:7d:0c:45:f9:70:12:e8:c2:bc:89:
68:02:a9:86:96:cd:df:44:f7:19:16:aa:24:d3:38:
ca:42:21:8e:d6:40:7b:dc:aa:e7:98:17:43:d8:0e:
35:fb:a0:ec:49:c3:22:b7:00:bc:f0:e5:82:d3:5b:
32:47:9e:ea:8a:fe:d1:4b:79:e3:49:75:69:ca:72:
7b:ed:d5:e6:bd:5e:e2:44:bb:f4:ee:fc:0b:b6:0d:
31:27:60:03:40:3f:60:01:3c:48:20:1b:5f:dc:da:
f4:9c:ec:93:89:6b:18:55:b7:47:6c:49:db:7f:f7:
99:f3:8d:e8:6c:47:37:73:c2:47:8f:81:b1:19:2c:
bb:5b:23:f1:4c:dd:a6:52:46:a0:22:ad:88:b1:83:
83:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:71:B6:0D:48:BD:BB:76:7D:8C:5B:DD:DD:57:98:44:9E:44:F0:28
X509v3 Authority Key Identifier:
keyid:95:5F:CF:92:79:8A:9D:BB:30:AB:D2:B9:FA:29:BF:A8:80:42:20:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:63:98:14:ab:3e:81:59:37:39:58:0c:df:37:11:b2:69:af:
ac:7e:5a:67:1e:97:39:bb:c0:0c:f9:73:f0:37:15:70:77:04:
60:04:ef:ec:ef:75:f1:25:89:54:5e:b1:d3:27:91:9d:f3:bc:
5f:84:ae:9a:46:aa:7c:9c:47:ec:da:56:f0:be:f0:63:2a:91:
40:18:7e:79:ea:8c:4f:70:49:07:51:eb:cc:20:65:26:ef:c0:
09:bc:f2:77:39:a8:2e:4d:e3:19:c4:b3:62:c7:50:bb:8a:1b:
3e:38:fa:e0:7c:4f:39:26:01:b4:d5:da:57:c6:00:4c:22:a5:
ec:cb:af:e7:c2:51:c0:fe:d5:39:a0:77:32:0c:1d:0b:ac:bb:
61:15:04:0d:54:18:88:44:3d:ae:fc:a9:f5:25:f9:be:25:87:
57:5d:19:f0:71:5c:20:58:74:38:05:02:b9:e6:2a:4b:a6:c8:
81:d9:90:07:6f:f1:a0:9b:6b:13:ab:8a:fe:eb:ea:c4:a1:fc:
92:eb:81:1a:5c:d3:5a:a2:8a:d2:6c:b1:d7:26:df:f3:c8:45:
f9:98:e1:fa:db:a7:df:91:d9:2d:78:0c:53:93:d7:63:01:6d:
f8:df:d6:fb:d8:7e:6b:74:b4:04:96:69:d4:c4:a2:3e:dd:4d:
1c:42:e3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:49:57 2025 by rpki-client