Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft
File: lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft (raw, json)
Hash identifier: vxuMK3uFTGlOSteiErvJh/V9kf0haQnV3rWP/6aV86A=
Subject key identifier: 3F:A9:72:97:8B:B5:5D:9C:77:69:A1:53:2F:13:FF:D7:4E:40:E9:65
Authority key identifier: 97:15:33:CB:7A:67:96:AC:5C:38:2B:38:DC:F4:59:F9:17:69:31:F4
Certificate issuer: /CN=971533cb7a6796ac5c382b38dcf459f9176931f4
Certificate serial: 01958EF382763FC6DECEC531E12E0A2F1C39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft
Manifest number: 0543
Signing time: Thu 13 Mar 2025 10:01:17 +0000
Manifest this update: Thu 13 Mar 2025 10:01:17 +0000
Manifest next update: Fri 14 Mar 2025 10:01:17 +0000
Files and hashes: 1: lxUzy3pnlqxcOCs43PRZ-RdpMfQ.crl (hash: JN/GYfimiR+X1Y8WLiGNPONvcF4FgMO5ogeAUA3IZG8=)
2: tU-16s9tq9lFPI9LdHnUudxWQ80.roa (hash: C3zkVEZCC33fk0KY3UR1pX59nVM27axL5/PozEIPAG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 10:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:f3:82:76:3f:c6:de:ce:c5:31:e1:2e:0a:2f:1c:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971533cb7a6796ac5c382b38dcf459f9176931f4
Validity
Not Before: Mar 13 10:01:17 2025 GMT
Not After : Mar 14 10:01:17 2025 GMT
Subject: CN=3fa972978bb55d9c7769a1532f13ffd74e40e965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d7:6c:86:f3:51:bd:5b:49:0c:32:2d:17:29:
f6:99:73:0c:bb:de:3f:6b:4b:2c:2e:5f:aa:9c:49:
fb:37:a0:6e:dd:90:22:4e:50:e1:fa:73:84:47:a8:
9b:38:9a:40:b5:16:8c:b8:89:c7:63:e7:51:7b:c1:
90:7d:aa:ad:e2:92:88:84:77:46:83:44:74:c5:e5:
49:e2:a2:a7:40:1f:79:c9:9b:32:a6:94:6d:10:c3:
d2:bb:07:f3:43:bd:a2:49:10:a7:45:c4:48:4b:a5:
7e:ec:b8:90:97:f8:6a:aa:77:62:9d:fc:c4:43:a2:
64:c9:d2:23:ac:87:2a:3c:f1:e7:48:57:e2:82:10:
77:2b:e6:73:54:81:e4:83:39:d0:36:a5:68:a3:eb:
4c:05:97:aa:8e:4b:3f:17:c8:1f:4c:fd:5d:fe:a0:
bb:2e:37:13:1c:1e:cd:44:81:27:9c:6f:bd:6f:0c:
fd:35:06:16:fe:17:28:4d:94:2f:43:8a:6d:30:c7:
e1:a1:50:db:b0:d8:f6:88:c6:f8:b4:06:f0:09:59:
ed:f5:6c:54:31:8d:ca:4c:e8:8e:dd:fe:05:2a:44:
75:c8:7a:c4:5f:2e:fa:3d:bc:34:5f:c7:4b:f3:aa:
db:9f:8b:52:f4:aa:98:01:72:99:19:61:ee:a1:86:
2c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A9:72:97:8B:B5:5D:9C:77:69:A1:53:2F:13:FF:D7:4E:40:E9:65
X509v3 Authority Key Identifier:
keyid:97:15:33:CB:7A:67:96:AC:5C:38:2B:38:DC:F4:59:F9:17:69:31:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ad:c4:cb:c7:84:32:e6:69:2d:9f:cd:9f:35:be:c7:a5:6a:
35:c8:b7:ce:ed:c3:c0:60:90:c2:0b:61:ae:f0:79:7a:f6:be:
24:05:8c:65:3a:28:3b:e6:ff:1f:e9:6c:68:ad:ce:49:75:31:
a6:bc:51:f4:e1:df:22:56:48:9a:3e:a0:2f:df:b1:4b:96:9d:
39:24:a7:cd:31:bc:1d:17:2e:26:f6:b1:59:0d:82:64:4e:27:
1c:0d:a8:d3:77:44:b2:44:a9:f1:01:f0:d1:99:27:97:6d:aa:
5f:66:8c:3c:02:c0:43:1a:62:f7:15:cc:bc:47:80:ee:c2:8d:
14:97:35:4b:48:22:b2:2b:24:6c:e8:e9:e2:23:f3:82:57:ca:
b9:5b:a1:95:df:a3:41:fb:86:9f:5a:53:86:39:22:3b:fc:b8:
30:65:d6:55:09:2a:10:ae:36:b4:d8:d2:71:9c:46:61:14:c9:
76:5f:58:ee:53:db:5a:21:0d:1e:8f:f9:3e:58:3b:40:f5:08:
25:dd:17:7d:1d:5d:07:58:c5:3e:39:8b:c5:63:9b:9e:c6:6c:
ca:c8:19:f8:6e:3d:4c:eb:58:94:05:ba:f5:e3:c9:a1:d8:15:
5e:ba:ce:20:96:e7:a1:93:4f:72:32:7c:59:f5:98:8c:83:1a:
d0:e6:78:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:29:12 2025 by rpki-client