Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
File: lLHL_0vZcPon_e_Uv2iwLWjSud0.mft (raw, json)
Hash identifier: 7wyJ2zFBNBTPT5E9traaIn+5MzsfT2U5/w9iTND+y0U=
Subject key identifier: B7:49:EC:1A:C3:1F:F6:92:8D:99:E9:F6:5C:3F:10:1F:D6:86:7D:A8
Authority key identifier: 94:B1:CB:FF:4B:D9:70:FA:27:FD:EF:D4:BF:68:B0:2D:68:D2:B9:DD
Certificate issuer: /CN=94b1cbff4bd970fa27fdefd4bf68b02d68d2b9dd
Certificate serial: 01965DCD4C760AC1256017DBC97576300B4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
Manifest number: 14BE
Signing time: Tue 22 Apr 2025 14:00:57 +0000
Manifest this update: Tue 22 Apr 2025 14:00:57 +0000
Manifest next update: Wed 23 Apr 2025 14:00:57 +0000
Files and hashes: 1: 1-tC0rjZV1jihIqCSqr691PhK46c.roa (hash: OZRRaNXEuVkMUwrYkvaXW28rMwl6+wF4euV4WCbSFTw=)
2: lLHL_0vZcPon_e_Uv2iwLWjSud0.crl (hash: P5W6FmjM6zbqcQyb4twqED/3D/9jDgqHGXTXY2SMKk8=)
3: wXXOQ9H2b6IyrY2B0lg-XuD_B8I.roa (hash: cgMdX3AAi5D4nzcU3HSWbT0lY1xCqmK5843fX99UXkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:cd:4c:76:0a:c1:25:60:17:db:c9:75:76:30:0b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94b1cbff4bd970fa27fdefd4bf68b02d68d2b9dd
Validity
Not Before: Apr 22 14:00:57 2025 GMT
Not After : Apr 23 14:00:57 2025 GMT
Subject: CN=b749ec1ac31ff6928d99e9f65c3f101fd6867da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:85:bb:69:85:31:ea:38:62:15:a5:bf:be:d9:
69:90:37:ef:0b:2f:0c:d5:14:e4:77:e0:7e:46:67:
9d:7f:27:95:48:c8:1a:dd:98:e3:42:b9:b8:e3:06:
d7:c3:c4:13:d8:68:c6:39:98:7d:c5:28:36:e6:9b:
cc:fb:c8:16:ea:cf:33:82:7f:9c:cb:1b:94:b4:a6:
5f:17:86:a7:e2:0c:c4:a8:43:d4:72:ed:c4:a8:70:
08:20:16:fd:f4:ba:dd:97:86:61:3a:15:c3:aa:ee:
90:7e:30:d9:e1:1b:13:65:1c:6a:06:26:79:75:b7:
db:7a:a7:a1:83:d4:a7:7f:83:22:e3:2b:af:2d:62:
b7:25:a2:9f:cf:ec:8b:af:12:68:3c:68:53:51:59:
9f:c8:e1:08:d8:fd:55:51:ce:fd:f1:86:08:3f:62:
97:61:a7:83:24:f0:fe:b8:e4:06:2c:42:3d:a8:1d:
6d:86:bd:d3:ca:1f:d4:af:6f:b8:5d:38:7c:84:6c:
d1:d8:5d:57:80:56:a4:0a:18:e4:e0:a3:22:ca:20:
24:d9:ce:6d:6e:9f:b4:33:ae:1f:54:9b:50:69:78:
27:87:f5:35:f9:2a:f7:42:ae:8a:3e:c8:a2:b8:f3:
5f:a6:4a:d2:d1:d0:85:c9:04:74:20:74:8d:48:3a:
b3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:49:EC:1A:C3:1F:F6:92:8D:99:E9:F6:5C:3F:10:1F:D6:86:7D:A8
X509v3 Authority Key Identifier:
keyid:94:B1:CB:FF:4B:D9:70:FA:27:FD:EF:D4:BF:68:B0:2D:68:D2:B9:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:27:60:e1:cd:fd:1b:12:22:2f:3b:0f:0c:69:55:80:c9:52:
d0:34:bb:86:21:45:3e:4a:5c:35:14:0c:d6:ec:41:5d:b3:d0:
da:45:d5:fa:75:bd:43:51:22:91:2b:a0:f8:7f:6e:41:7f:77:
a3:3f:b2:cc:d2:42:43:cf:68:da:4b:d7:77:df:76:3e:ed:5b:
c9:73:62:b0:48:9c:f6:48:3c:de:1a:95:1b:fe:5e:bc:38:40:
30:2c:b9:4b:13:39:96:a7:7b:06:a9:e9:57:a9:d4:66:22:28:
66:e2:b8:f6:f0:ab:8d:98:d9:93:a6:8d:de:e4:eb:70:43:5d:
39:33:43:f0:bb:25:39:d2:57:d6:8b:37:1a:e8:1a:1d:02:c2:
2c:05:91:cb:ef:23:de:c0:cc:bf:6b:b1:90:93:bb:7f:f9:38:
ba:fa:ad:55:40:94:cd:a5:94:89:da:7c:5b:c4:37:0e:d3:c1:
3a:04:4e:71:ca:5e:e6:17:41:f2:ef:a8:16:cb:cd:3d:9e:f4:
7a:d9:8a:94:44:25:d3:f1:2c:85:50:e9:c6:8b:7b:b9:c5:69:
c1:1b:65:af:19:00:0b:bb:35:4e:c8:22:da:e1:e2:b9:14:10:
f6:62:d8:84:8b:f3:4c:d9:e3:62:e7:bd:73:90:d1:75:7b:e6:
5d:6b:11:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:42:49 2025 by rpki-client