Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft
File: lGEMh1DDN98EecWg61t4tJoX_z4.mft (raw, json)
Hash identifier: 4YYRlxP8uyWONptt8+b75qG86WWXinNZYq+JklQdbH4=
Subject key identifier: 10:90:93:23:2C:75:7C:4D:5D:1A:DC:46:D2:36:52:47:A9:93:5E:DB
Authority key identifier: 94:61:0C:87:50:C3:37:DF:04:79:C5:A0:EB:5B:78:B4:9A:17:FF:3E
Certificate issuer: /CN=94610c8750c337df0479c5a0eb5b78b49a17ff3e
Certificate serial: 019646A033B52F9DAFD8351F07BFF7A9BFED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGEMh1DDN98EecWg61t4tJoX_z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft
Manifest number: 0378
Signing time: Fri 18 Apr 2025 02:00:26 +0000
Manifest this update: Fri 18 Apr 2025 02:00:26 +0000
Manifest next update: Sat 19 Apr 2025 02:00:26 +0000
Files and hashes: 1: lGEMh1DDN98EecWg61t4tJoX_z4.crl (hash: d47EodyYLWU/EF1EWOVGxSyNuymc++v4vDd5qT3pKE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lGEMh1DDN98EecWg61t4tJoX_z4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:a0:33:b5:2f:9d:af:d8:35:1f:07:bf:f7:a9:bf:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94610c8750c337df0479c5a0eb5b78b49a17ff3e
Validity
Not Before: Apr 18 02:00:26 2025 GMT
Not After : Apr 19 02:00:26 2025 GMT
Subject: CN=109093232c757c4d5d1adc46d2365247a9935edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:88:5a:e7:ff:ec:d9:a3:d4:f6:3e:cd:6f:08:
a6:59:b1:9e:d2:46:7f:f5:73:95:37:04:4d:25:ec:
52:a8:07:85:29:47:fe:fd:c4:18:eb:5f:37:8f:65:
2e:1a:c4:cc:43:2c:4b:7e:f1:d2:5f:a2:d4:da:c3:
b3:ec:66:c9:37:49:7d:c7:10:92:16:04:60:26:e2:
fe:0b:5a:0b:d7:a0:d0:58:ac:ae:c7:f3:d0:5e:51:
82:1f:71:7d:9b:46:ea:77:89:13:f9:ba:fd:c2:0e:
a9:49:95:7f:77:5d:54:ce:07:5e:c3:5c:7b:f1:04:
82:20:29:ed:b2:30:72:28:a9:66:03:79:ca:a2:45:
0b:ff:f8:84:63:88:e9:e7:10:0e:db:cf:b9:53:6b:
62:46:ef:8d:90:b3:a1:60:8b:06:ad:bd:3c:8a:48:
18:18:5e:18:79:ce:8b:41:ff:4c:75:2e:b2:74:a6:
57:c0:6c:6e:88:96:47:24:87:52:1c:dd:f9:8b:42:
3b:b2:7c:be:e2:f1:04:22:d6:f7:e5:86:de:36:16:
02:27:11:01:0d:26:a9:98:12:2d:94:29:8c:95:e5:
ae:5d:10:74:f2:7f:af:0d:dc:79:85:52:1e:3c:f8:
36:da:c4:e7:4e:60:82:bb:c5:39:f4:e8:33:a8:d7:
9c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:90:93:23:2C:75:7C:4D:5D:1A:DC:46:D2:36:52:47:A9:93:5E:DB
X509v3 Authority Key Identifier:
keyid:94:61:0C:87:50:C3:37:DF:04:79:C5:A0:EB:5B:78:B4:9A:17:FF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGEMh1DDN98EecWg61t4tJoX_z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:b3:40:50:1d:36:14:29:47:79:86:62:c7:a5:3b:5d:29:45:
51:11:f6:e1:70:84:5b:0c:8e:cb:ef:b6:0e:58:20:29:50:ca:
61:95:5a:a9:8f:b1:78:ae:ba:2c:5f:4d:27:07:91:af:1e:10:
6e:8d:18:8e:4b:84:61:93:12:ab:71:bc:bc:aa:16:db:47:b6:
7a:cb:d3:61:c5:0e:29:14:62:4f:9c:66:2a:40:3d:0d:e0:f4:
53:1d:e9:f2:44:dc:d4:c7:43:f3:43:6d:7d:86:e1:88:a0:a5:
c1:80:f9:46:2f:23:d0:4b:56:1b:21:d8:36:c8:7f:b7:9c:b5:
02:df:29:b2:97:6f:0c:4f:c8:c3:ba:d1:c4:17:0e:4e:5e:88:
76:c0:97:eb:a1:09:d7:11:76:bf:d6:5b:31:0f:05:68:be:b0:
ed:06:f1:79:31:24:03:e8:9f:05:41:d0:3d:c5:f5:10:e4:41:
db:cb:86:83:2f:82:7c:74:0d:f2:8f:56:7b:89:b4:a4:c2:ed:
b8:46:c7:e2:0a:13:ce:f6:5c:6a:72:c9:78:d4:43:7f:0a:ec:
20:ce:79:c9:85:0b:83:66:57:56:c9:f0:67:9e:b7:21:ff:51:
1e:5b:fb:7e:67:ca:26:b5:c7:7b:42:a3:a3:d9:6b:b8:57:b4:
ff:dd:98:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:22:30 2025 by rpki-client