Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
File: L28Hzq0GpPgRVHYAusAvrwzAhMk.mft (raw, json)
Hash identifier: 5WG9nnyByXpw+x+bx0CKSCfY2xh0pRO+Ris8g7DEscY=
Subject key identifier: BD:DA:CE:78:20:F2:58:CF:6A:B7:E6:1A:41:F3:CE:F8:B5:B1:DE:93
Authority key identifier: 2F:6F:07:CE:AD:06:A4:F8:11:54:76:00:BA:C0:2F:AF:0C:C0:84:C9
Certificate issuer: /CN=2f6f07cead06a4f811547600bac02faf0cc084c9
Certificate serial: 019656810A57510042D50469D852E0587034
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
Manifest number: 14FF
Signing time: Mon 21 Apr 2025 04:00:19 +0000
Manifest this update: Mon 21 Apr 2025 04:00:19 +0000
Manifest next update: Tue 22 Apr 2025 04:00:19 +0000
Files and hashes: 1: L28Hzq0GpPgRVHYAusAvrwzAhMk.crl (hash: /paTcYqZmRlCKMrvLDR7HaXRQmLnmHMthl1q86r4KvA=)
2: QqgdIg6hSu9l0qkAmT27rSaYEpI.roa (hash: Zj7N5jWJe1MnRgbFLlzVoeaeQcOnvfzk+fyv1HdeicI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:81:0a:57:51:00:42:d5:04:69:d8:52:e0:58:70:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6f07cead06a4f811547600bac02faf0cc084c9
Validity
Not Before: Apr 21 04:00:19 2025 GMT
Not After : Apr 22 04:00:19 2025 GMT
Subject: CN=bddace7820f258cf6ab7e61a41f3cef8b5b1de93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:de:15:63:33:ed:0f:e5:99:49:30:31:c6:79:
83:91:bd:40:e6:ce:fb:84:91:5a:b4:68:dc:15:9f:
ed:f3:05:c5:a2:4e:21:5c:08:8f:1c:a1:81:ac:20:
1e:e4:cd:b6:8b:6c:eb:ca:5b:36:2a:3f:cd:35:c8:
ee:4d:a3:06:65:44:b9:0f:16:25:c4:51:e1:57:00:
64:b9:fa:b3:56:92:05:00:68:09:65:2d:5e:a3:bd:
19:f1:72:a5:a1:0f:73:81:d9:fe:11:25:bd:f3:31:
d4:db:e6:19:50:76:b2:dd:ac:ac:b2:d4:94:41:d0:
a6:fc:0a:a2:fb:d6:8b:f3:38:49:41:82:e0:42:75:
cb:62:21:a9:1e:79:e6:19:d3:f6:4c:e9:9a:54:92:
e2:2f:6c:90:b0:e9:59:97:a4:93:e0:80:cb:81:10:
4a:b9:75:ca:b9:ff:dd:da:2f:9f:4c:26:1d:3a:82:
71:48:63:c2:2a:2b:fa:a0:3c:b5:e0:69:7c:9a:1b:
56:f5:22:55:fb:18:36:a6:a9:d3:4e:27:5c:df:b1:
b4:43:2f:82:29:1c:26:1d:7d:66:49:b9:4c:87:fb:
d0:b0:8c:a3:d0:bc:11:52:e7:8c:2f:05:0d:87:7f:
d5:f8:51:cb:a4:05:29:47:00:e0:6e:3b:7d:05:d2:
b9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:DA:CE:78:20:F2:58:CF:6A:B7:E6:1A:41:F3:CE:F8:B5:B1:DE:93
X509v3 Authority Key Identifier:
keyid:2F:6F:07:CE:AD:06:A4:F8:11:54:76:00:BA:C0:2F:AF:0C:C0:84:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L28Hzq0GpPgRVHYAusAvrwzAhMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ead6c4-9fe1-4fee-9760-047cbc310ccb/1/L28Hzq0GpPgRVHYAusAvrwzAhMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:09:78:95:95:66:c2:fc:02:b9:9b:22:fb:f4:d2:bf:23:b6:
3c:4a:d1:65:88:b5:46:5c:94:00:0b:44:c1:06:35:8c:ea:06:
bc:27:11:b7:be:ad:24:90:ca:ba:0d:49:f1:d7:7b:16:fc:00:
a5:b0:ae:9f:52:32:40:e8:db:bc:d3:32:5d:0e:67:f3:28:5d:
42:17:5b:fe:68:fc:92:d5:2a:0d:a4:d9:be:49:69:a9:c8:2c:
9e:01:71:39:b6:9b:07:e7:78:e9:aa:ec:d5:fa:1a:bc:b3:f2:
dc:cd:b5:9c:50:81:32:9c:72:43:fc:c3:d6:a1:00:a9:94:48:
ac:c7:8d:c9:ed:42:19:55:9d:42:c7:7c:1a:0b:07:52:2b:f5:
e2:cf:6a:5b:a3:4a:a3:fd:ce:42:1c:af:1b:8a:96:f8:b5:86:
5e:2c:9b:0a:4c:79:50:1c:00:17:08:93:5e:d9:f1:34:27:20:
f1:fa:e1:2b:27:f0:62:8d:19:43:da:a2:52:ef:45:e6:55:ef:
8f:9a:4f:af:87:e6:60:aa:7a:db:4e:e6:8e:0b:a0:a8:03:a5:
6e:88:85:d6:09:70:84:8b:9e:50:71:54:bb:7c:b9:fe:8c:c0:
7c:33:16:4d:4f:e3:59:5c:5e:93:e0:e9:bd:0a:f7:ad:53:3b:
aa:44:c1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:34:16 2025 by rpki-client