Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/991825-d4bf-48c6-9493-38cfec21b422/1/LijWjfjYqxVZsR5zmeYu3DMjyj0.mft
File: LijWjfjYqxVZsR5zmeYu3DMjyj0.mft (raw, json)
Hash identifier: ei4ohC6wkEhexoL08qt1vgMQPzgqtClusrB0Uyr+s14=
Subject key identifier: 35:97:75:BF:07:FA:D7:BD:DF:8A:AA:6D:05:22:AF:50:06:EE:57:F9
Authority key identifier: 2E:28:D6:8D:F8:D8:AB:15:59:B1:1E:73:99:E6:2E:DC:33:23:CA:3D
Certificate issuer: /CN=2e28d68df8d8ab1559b11e7399e62edc3323ca3d
Certificate serial: 01958B842C095FDCCF583343CD9D2DDACC8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LijWjfjYqxVZsR5zmeYu3DMjyj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/991825-d4bf-48c6-9493-38cfec21b422/1/LijWjfjYqxVZsR5zmeYu3DMjyj0.mft
Manifest number: 0167
Signing time: Wed 12 Mar 2025 18:00:49 +0000
Manifest this update: Wed 12 Mar 2025 18:00:49 +0000
Manifest next update: Thu 13 Mar 2025 18:00:49 +0000
Files and hashes: 1: LijWjfjYqxVZsR5zmeYu3DMjyj0.crl (hash: g0MVFjFn6ZneoO2XK3Ss8INUwEzXwlMGqWZLMPWktSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/991825-d4bf-48c6-9493-38cfec21b422/1/LijWjfjYqxVZsR5zmeYu3DMjyj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/991825-d4bf-48c6-9493-38cfec21b422/1/LijWjfjYqxVZsR5zmeYu3DMjyj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LijWjfjYqxVZsR5zmeYu3DMjyj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 18:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:84:2c:09:5f:dc:cf:58:33:43:cd:9d:2d:da:cc:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e28d68df8d8ab1559b11e7399e62edc3323ca3d
Validity
Not Before: Mar 12 18:00:49 2025 GMT
Not After : Mar 13 18:00:49 2025 GMT
Subject: CN=359775bf07fad7bddf8aaa6d0522af5006ee57f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b3:df:a4:ff:05:11:f3:39:3a:00:4c:02:fe:
a8:5a:94:47:05:8d:0b:08:9f:99:e7:15:bf:77:87:
e7:3b:04:dc:0a:98:79:8d:26:96:5d:f6:6d:4b:d3:
a4:f9:33:82:4f:8f:14:94:e8:32:cc:49:82:81:c4:
3e:19:87:0a:4b:3a:dd:b8:d2:bf:ce:af:b7:78:91:
3b:4f:38:ae:25:d3:f6:39:2d:76:92:83:9e:76:78:
c3:ba:42:ec:cc:37:e3:cf:ed:1d:ee:e6:76:22:29:
9b:32:22:c5:58:ec:66:fa:3c:34:39:fb:b7:9e:8e:
c8:de:46:a3:d2:d3:ad:8f:e1:80:76:7f:7b:2c:dc:
97:b8:df:d1:39:21:5e:10:79:2f:4a:31:0e:71:be:
93:b5:a0:cc:66:d8:6b:16:4b:78:33:84:73:73:fd:
25:67:76:37:56:2d:9e:83:d1:38:71:aa:52:08:62:
17:bf:15:a5:ef:84:29:d8:93:4f:0c:cb:49:2d:4e:
bc:d7:b6:63:f7:de:8c:9f:4a:8f:f6:ff:fb:4a:3d:
a6:14:2a:f9:8f:7d:16:e6:3f:96:3e:39:66:ae:99:
a0:36:2d:6f:7a:c7:a1:71:26:0c:88:99:01:c8:50:
f9:34:ce:79:0d:3e:3b:9b:fd:ee:a0:c3:c5:08:09:
9f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:97:75:BF:07:FA:D7:BD:DF:8A:AA:6D:05:22:AF:50:06:EE:57:F9
X509v3 Authority Key Identifier:
keyid:2E:28:D6:8D:F8:D8:AB:15:59:B1:1E:73:99:E6:2E:DC:33:23:CA:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LijWjfjYqxVZsR5zmeYu3DMjyj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/991825-d4bf-48c6-9493-38cfec21b422/1/LijWjfjYqxVZsR5zmeYu3DMjyj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/991825-d4bf-48c6-9493-38cfec21b422/1/LijWjfjYqxVZsR5zmeYu3DMjyj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:c9:cb:9c:2d:13:5d:8e:82:1e:c2:9e:4a:5e:cb:ca:83:7a:
11:f2:63:8e:f2:5d:3e:5e:ec:1c:48:10:99:72:71:0c:fc:4e:
15:2a:e0:ed:17:c9:f9:4a:e0:21:e7:ec:99:c7:ad:0e:4d:93:
12:75:3a:4d:21:ca:21:4e:52:51:d4:34:3f:c9:64:ad:79:08:
52:c4:ed:d8:d2:78:15:2d:1f:2e:b7:7a:ce:4e:5c:3e:35:9a:
10:dc:31:51:89:15:7e:0b:6c:85:a2:d0:a3:d1:ca:1e:6a:65:
4f:e7:ea:50:88:6c:25:c1:79:b9:b3:c1:9d:01:fc:2c:0e:df:
95:7e:a0:ae:c1:6b:77:3c:e4:45:a0:2c:0f:1e:81:34:84:47:
46:94:c7:6c:40:55:1a:c3:b4:46:2b:86:b7:07:6e:d6:38:bd:
cd:a2:e6:16:a3:62:45:bd:ae:c9:2f:be:55:0c:7e:1f:e5:84:
2f:f5:7c:20:df:3a:46:6f:01:00:8d:47:b1:7f:da:af:ca:ec:
68:ac:2b:71:8e:13:84:88:67:8c:27:89:3e:8e:a9:b8:d2:10:
5b:10:53:c6:ef:ad:e0:e9:92:42:50:3f:68:c0:e5:6a:19:16:
29:5a:88:e3:d2:89:02:75:7e:da:5d:3f:4b:23:f8:ed:22:28:
40:f1:61:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:55 2025 by rpki-client