Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft
File: _LteLg_Zgy1zse-Pnkhv_QCz14k.mft (raw, json)
Hash identifier: qj7D5jgu1CClrc3IJECfKyUxF4ebuuSS/JFPLcDhH0c=
Subject key identifier: 18:BA:A4:1D:01:06:7B:75:B6:B8:69:0B:36:4E:74:F6:86:BB:E7:ED
Authority key identifier: FC:BB:5E:2E:0F:D9:83:2D:73:B1:EF:8F:9E:48:6F:FD:00:B3:D7:89
Certificate issuer: /CN=fcbb5e2e0fd9832d73b1ef8f9e486ffd00b3d789
Certificate serial: 0195794709149E3ECD6B686DA2B7E870DEE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LteLg_Zgy1zse-Pnkhv_QCz14k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft
Manifest number: 148D
Signing time: Sun 09 Mar 2025 05:00:53 +0000
Manifest this update: Sun 09 Mar 2025 05:00:53 +0000
Manifest next update: Mon 10 Mar 2025 05:00:53 +0000
Files and hashes: 1: IK8VN_iyq26ReyybdZRgLTbp_h4.roa (hash: dThLkrPmFPQLdA53lP5J5dXCbHy3K9TicE7H7Mr22pg=)
2: _LteLg_Zgy1zse-Pnkhv_QCz14k.crl (hash: bUtFpjp/kooj3hGAWnnJMLWu8wU6tw0Lv3NRKTqQdjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft
rsync://rpki.ripe.net/repository/DEFAULT/_LteLg_Zgy1zse-Pnkhv_QCz14k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:79:47:09:14:9e:3e:cd:6b:68:6d:a2:b7:e8:70:de:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcbb5e2e0fd9832d73b1ef8f9e486ffd00b3d789
Validity
Not Before: Mar 9 05:00:53 2025 GMT
Not After : Mar 10 05:00:53 2025 GMT
Subject: CN=18baa41d01067b75b6b8690b364e74f686bbe7ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:53:44:43:65:08:8e:65:cd:66:1c:21:e9:3e:
b1:1b:8d:84:e3:ab:08:e5:0f:bc:fd:9b:94:79:9d:
79:2f:69:2c:a1:92:ad:c7:c9:a9:e0:68:69:e2:02:
4e:63:83:4c:2e:e7:f3:3d:6f:bc:f8:68:f2:82:76:
52:d9:00:9e:cf:01:c1:b3:31:46:47:f7:3b:b7:15:
56:e6:0d:74:3a:49:57:23:8d:97:3f:a1:4a:ba:4c:
06:98:a3:b7:59:24:ed:75:f8:db:07:7b:53:f7:5d:
29:ee:92:35:d5:77:a7:cd:ab:2d:73:60:9e:d6:dc:
ee:08:8e:e7:c0:92:0b:d4:70:ab:5f:db:81:b5:d1:
3c:a3:e6:73:26:83:16:bc:ee:85:a7:c8:28:b5:fe:
2c:3e:7a:ab:35:cb:d5:c6:83:03:d6:2b:13:72:dc:
ea:4c:e5:e9:21:80:de:e6:3b:60:5f:43:a9:c4:72:
04:53:88:5c:ce:27:e4:71:0c:e9:54:db:87:f5:82:
e0:d6:93:e2:af:ff:8d:8c:c0:23:c8:07:f2:9c:e7:
86:f5:60:b2:6b:c5:9b:8e:e2:8f:2a:af:8b:36:d1:
ff:aa:52:70:8c:41:d6:a5:d4:ac:5a:53:51:a5:e3:
bb:82:b9:25:1b:12:7e:e5:6e:fc:9d:d2:2d:6b:9c:
c9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:BA:A4:1D:01:06:7B:75:B6:B8:69:0B:36:4E:74:F6:86:BB:E7:ED
X509v3 Authority Key Identifier:
keyid:FC:BB:5E:2E:0F:D9:83:2D:73:B1:EF:8F:9E:48:6F:FD:00:B3:D7:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LteLg_Zgy1zse-Pnkhv_QCz14k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:93:dc:33:10:44:e5:23:c2:59:2b:c0:88:f3:ec:14:a4:00:
25:9d:0f:f7:6f:c4:8f:78:78:70:1d:29:54:51:6b:82:0f:fe:
0c:c8:6c:2e:38:19:00:97:2a:03:3f:33:f7:e6:20:85:3b:a0:
78:9d:00:91:ba:ed:28:01:ee:50:75:e7:0d:5c:83:7d:15:20:
65:4c:00:53:32:2b:12:6c:6b:f2:43:2d:0a:a6:42:a4:70:5e:
9e:2a:98:29:10:68:cd:93:76:42:1b:4a:f1:02:5c:c4:f4:08:
8e:88:b9:b7:c8:ed:f1:09:fa:97:38:4b:1b:60:31:bd:92:a2:
29:30:7b:c7:60:3f:d8:ad:11:49:c0:c5:96:3c:58:2d:2f:0d:
69:6e:9e:0f:aa:05:0f:cc:58:ee:4b:4b:21:b8:1b:af:ab:75:
0f:1e:88:f3:60:ef:34:53:da:34:bc:26:b9:ed:72:7d:29:2a:
c1:ff:c9:63:68:25:86:33:ff:d0:17:1a:9c:f3:f7:18:cf:38:
2f:33:a1:a4:b5:84:18:cf:0f:b4:3b:19:c2:b1:5b:d0:46:b5:
f2:aa:ae:c4:c5:f7:04:f8:b3:fc:dc:b5:c1:8c:5c:c7:d4:61:
46:eb:bf:dc:4c:df:7a:c7:11:4a:02:05:59:d2:59:8c:1b:37:
44:fd:90:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 11:47:57 2025 by rpki-client