Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.mft
File: lrvRv8ovihV4-qtbEMD8NVVhzGU.mft (raw, json)
Hash identifier: XAAcm9s9m8yzlp/gpEhmnLtsKYsL0oJd5VYBYARCLjY=
Subject key identifier: FA:21:67:4E:4A:5E:B1:F1:0D:EF:7B:EE:77:C4:14:5F:73:B5:0B:7A
Authority key identifier: 96:BB:D1:BF:CA:2F:8A:15:78:FA:AB:5B:10:C0:FC:35:55:61:CC:65
Certificate issuer: /CN=96bbd1bfca2f8a1578faab5b10c0fc355561cc65
Certificate serial: 019654CA070CB0B85FF00027CE4116545CAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrvRv8ovihV4-qtbEMD8NVVhzGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.mft
Manifest number: 0495
Signing time: Sun 20 Apr 2025 20:00:48 +0000
Manifest this update: Sun 20 Apr 2025 20:00:48 +0000
Manifest next update: Mon 21 Apr 2025 20:00:48 +0000
Files and hashes: 1: lrvRv8ovihV4-qtbEMD8NVVhzGU.crl (hash: Y1xZwRH73m+cxG3vuohPEJOomhMLhs7/9vCm4oanOgY=)
2: t9Y7BeYu12mZq7yxIRtEySM1Rtc.roa (hash: pHqieJKSJe/cYuypW4oPbapHkZUvdCP0qK0tLzbxp4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lrvRv8ovihV4-qtbEMD8NVVhzGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:ca:07:0c:b0:b8:5f:f0:00:27:ce:41:16:54:5c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96bbd1bfca2f8a1578faab5b10c0fc355561cc65
Validity
Not Before: Apr 20 20:00:48 2025 GMT
Not After : Apr 21 20:00:48 2025 GMT
Subject: CN=fa21674e4a5eb1f10def7bee77c4145f73b50b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6b:12:64:e9:0e:77:8d:be:71:08:6a:b6:2a:
a4:05:88:a8:7e:68:87:8e:d1:bc:0b:9f:84:ce:02:
e6:e1:55:a5:d9:28:83:62:59:e4:1b:5f:6f:5a:27:
b5:7f:af:56:15:0a:ff:73:4f:16:cf:0a:41:31:da:
da:a4:83:2c:0d:d9:b0:4d:83:4a:3e:37:9e:c6:ee:
69:2f:7d:1b:d8:de:e1:cb:01:93:8e:1c:75:96:ce:
63:d7:8b:67:2d:12:23:6a:3c:cf:55:89:07:7f:a0:
5f:6c:3e:d5:cc:b3:fb:67:73:f0:7b:a3:81:02:d5:
f1:87:86:35:7a:32:80:9a:fa:46:b7:72:2a:7d:a7:
13:56:ca:76:ed:9f:37:0d:21:4e:12:cf:fb:e5:97:
f4:ce:7d:93:bb:3d:fa:6b:b4:b4:fe:5e:5a:ef:a7:
32:7d:bb:d8:f4:80:58:50:76:22:5e:e7:f4:da:e6:
15:60:5e:57:ef:35:2e:80:d8:bc:54:d1:51:fc:42:
3a:1e:1a:fe:af:86:67:34:d9:77:78:ea:2b:6d:b7:
f8:42:c7:a0:ad:ed:39:9a:6a:85:c2:19:ce:56:de:
80:a7:eb:e7:74:f3:09:1e:77:a5:33:a5:4b:3f:dc:
2c:19:51:6a:36:ef:4d:5a:02:bf:51:2d:07:f6:da:
28:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:21:67:4E:4A:5E:B1:F1:0D:EF:7B:EE:77:C4:14:5F:73:B5:0B:7A
X509v3 Authority Key Identifier:
keyid:96:BB:D1:BF:CA:2F:8A:15:78:FA:AB:5B:10:C0:FC:35:55:61:CC:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrvRv8ovihV4-qtbEMD8NVVhzGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:95:c8:7b:c6:77:48:ce:6e:6b:24:5d:d2:4b:2a:25:48:db:
f6:a1:d6:a0:70:41:2a:5f:bb:07:a2:59:75:9b:ef:52:bd:af:
bb:8b:a9:27:ed:c9:bc:54:76:3b:c6:6c:0b:0d:8f:70:5f:99:
16:a3:ae:86:1d:b7:35:12:de:a1:c8:50:71:ea:81:05:80:f0:
4f:f4:f8:83:06:1d:66:b0:2b:c7:63:88:b1:25:a7:74:3a:3e:
64:a0:60:7f:23:6f:7d:14:2e:9e:f6:22:60:d4:99:ac:18:52:
e4:5a:06:b5:3c:9c:d5:5a:76:d9:2c:0b:ad:e1:76:92:07:b5:
f8:14:70:17:a0:34:33:45:2b:01:a8:99:31:dd:42:35:68:91:
a6:0e:2e:24:ea:46:e0:b2:7c:55:4f:82:45:73:c0:00:78:df:
88:e3:3e:a3:18:75:82:f0:1f:13:3e:21:9c:c2:eb:0e:19:61:
b8:1e:21:32:93:13:bc:d4:6d:5e:51:de:40:70:e3:a2:6d:bf:
7a:c0:5c:24:fb:ac:59:33:51:07:5c:2b:45:99:6c:74:6e:42:
51:6e:09:a1:a3:d0:e9:31:38:7e:26:4c:69:f2:25:b8:8c:6f:
03:98:cf:75:8f:85:5d:36:91:fd:25:31:c4:c4:83:79:d4:10:
8a:cd:18:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:48:29 2025 by rpki-client