Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
File: LWmLr5_z7uvmYoSIn79onU5oPIE.mft (raw, json)
Hash identifier: 1/QxgOL0U7BVjYi5JKBFhzcL/HT43QVLmALv6zzXmTE=
Subject key identifier: A3:84:0E:80:D0:09:47:B2:B6:70:31:20:5C:13:F3:E4:59:01:FA:40
Authority key identifier: 2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81
Certificate issuer: /CN=2d698baf9ff3eeebe66284889fbf689d4e683c81
Certificate serial: 01964EFEAE50C6681F41AECA1E5F9062715E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
Manifest number: 0D84
Signing time: Sat 19 Apr 2025 17:00:35 +0000
Manifest this update: Sat 19 Apr 2025 17:00:35 +0000
Manifest next update: Sun 20 Apr 2025 17:00:35 +0000
Files and hashes: 1: LWmLr5_z7uvmYoSIn79onU5oPIE.crl (hash: 6eAYqSSitOYenVzjGp8SiH5tsxPTt2LJoRfFhnahXXc=)
2: k4aTxBF_DmBio83fOwNHIHkeyiA.roa (hash: IVVbmDsKyhVLGaHbxiyIMsj1K/TNy+QiBpkicXXI0O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:fe:ae:50:c6:68:1f:41:ae:ca:1e:5f:90:62:71:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d698baf9ff3eeebe66284889fbf689d4e683c81
Validity
Not Before: Apr 19 17:00:35 2025 GMT
Not After : Apr 20 17:00:35 2025 GMT
Subject: CN=a3840e80d00947b2b67031205c13f3e45901fa40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:57:8d:81:8e:73:ff:d0:4b:f4:6f:af:9a:f8:
a7:6d:d0:3d:ab:13:14:da:6d:b3:a8:c8:76:8e:55:
f6:d8:cd:69:e7:47:54:08:02:b2:9c:6f:2f:3d:9b:
f9:1e:ab:14:19:de:07:03:75:30:e7:ce:75:5b:6c:
f9:2f:c3:59:b5:5d:69:75:f1:cf:c4:eb:e7:b8:e4:
08:62:63:c7:94:fa:1b:4e:33:62:fd:2a:7a:9e:28:
e1:eb:23:d5:8a:be:c2:dd:a3:e9:74:ba:0b:e4:97:
6c:fc:ba:3d:81:a3:a7:20:37:dd:91:0a:9b:b2:94:
da:99:3d:65:8a:af:b4:04:d9:29:b4:c9:35:f9:c3:
96:e5:b4:ed:04:01:8f:41:d9:fe:e4:be:f1:a3:1f:
36:aa:42:47:ac:fd:06:3e:23:a0:a0:26:a4:4d:cc:
4d:be:06:06:12:e8:ad:9c:5c:b5:66:be:73:b2:48:
12:3f:7f:28:ae:db:92:aa:9f:5b:db:1d:b5:7c:db:
b2:2b:d2:76:4c:55:c4:a4:01:ce:33:5b:82:0b:58:
0d:13:e0:4e:c7:fd:14:e7:5c:fb:a8:06:0b:38:01:
09:0d:59:0f:4c:9e:f1:89:2e:f3:be:cc:f1:e3:5c:
57:71:c8:b7:d9:87:7f:c0:13:88:23:c2:7a:72:75:
ae:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:84:0E:80:D0:09:47:B2:B6:70:31:20:5C:13:F3:E4:59:01:FA:40
X509v3 Authority Key Identifier:
keyid:2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:da:c0:32:4c:e0:da:4e:17:ed:62:9c:7c:2b:ee:6d:41:b6:
5b:a8:d1:ab:a5:77:a4:09:1c:7d:9e:ae:52:37:25:21:cb:f7:
d4:8b:3a:35:63:7d:60:1a:08:9c:eb:bc:8b:8a:f5:a3:5a:47:
94:77:38:6e:ac:e7:52:1d:ce:bf:f3:eb:e2:f8:d9:8c:9c:fe:
9c:57:9e:e4:26:d8:1e:3f:20:8b:65:24:37:db:89:34:f7:4f:
fe:53:82:1e:cb:df:98:86:4a:a9:12:5d:f8:0c:a7:f8:04:d3:
95:b6:af:28:23:e3:8f:03:b2:1e:a8:5b:7f:ef:ea:44:25:37:
d7:1c:a5:0f:2e:96:a3:73:52:bd:29:42:9b:44:3d:ef:fa:1e:
37:f8:97:f0:b7:cf:d9:eb:b6:81:07:2d:8c:cb:2b:ee:bd:fa:
ac:9e:32:8b:b3:92:3c:e7:d7:47:34:7c:e9:c0:a9:ad:b9:31:
6d:84:e3:e4:12:1d:61:61:2f:0c:74:44:40:d7:4c:c6:5e:6b:
33:4b:f6:19:a0:1f:ab:0e:94:b9:ac:8b:39:dd:f1:ed:96:82:
66:a7:38:8b:85:55:b4:0d:74:e2:c4:fc:ca:e4:14:4f:b4:86:
4a:ca:19:e0:e7:74:60:9f:61:fd:19:7b:7a:04:8c:ad:5a:5f:
47:4d:f8:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 01:57:35 2025 by rpki-client