Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft
File: ljUcRzoWujj6tNUXBZIl4PEzyL8.mft (raw, json)
Hash identifier: WJf8EFJux4dGrDa5vOYP1VLPe4amYg8caIEh/mMuk4E=
Subject key identifier: 41:FD:DC:5C:22:EB:23:64:13:78:6F:75:0F:F0:27:71:04:0C:43:CC
Authority key identifier: 96:35:1C:47:3A:16:BA:38:FA:B4:D5:17:05:92:25:E0:F1:33:C8:BF
Certificate issuer: /CN=96351c473a16ba38fab4d517059225e0f133c8bf
Certificate serial: 0196439F8F8D8C3C2E06DC49A69676962EA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft
Manifest number: 1481
Signing time: Thu 17 Apr 2025 12:00:52 +0000
Manifest this update: Thu 17 Apr 2025 12:00:52 +0000
Manifest next update: Fri 18 Apr 2025 12:00:52 +0000
Files and hashes: 1: 9ePFbgefAOZuTmJLiFLvd1beyls.roa (hash: RIcriqMlU4ZWl7joZj4XClpYJLpavsjnCJfKx3wYXhA=)
2: HVOOHQPc-5Eu7cwWFhbNRCpA9A0.roa (hash: x9bBQ84HsMACBPfPIx9csANOJkhCAtUu4np9OsZI7x4=)
3: KSjUnukZG8WOY9QNez7ybTNOls4.roa (hash: swbthPAwvXge6wDssbFVck74lGidoJQL+o3507ng0tk=)
4: ljUcRzoWujj6tNUXBZIl4PEzyL8.crl (hash: wCsBV3b7aH2HP/ZYvTpJUiLDb3sc4vak/18kkaNxziY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:9f:8f:8d:8c:3c:2e:06:dc:49:a6:96:76:96:2e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96351c473a16ba38fab4d517059225e0f133c8bf
Validity
Not Before: Apr 17 12:00:52 2025 GMT
Not After : Apr 18 12:00:52 2025 GMT
Subject: CN=41fddc5c22eb236413786f750ff02771040c43cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6f:25:ee:2d:00:c0:f0:cb:57:18:65:70:e9:
ad:f1:02:0d:c4:93:d8:d3:b3:00:5c:55:54:84:32:
bd:64:bf:ca:83:91:cd:dd:34:e7:1d:38:55:7b:89:
63:44:3f:6e:65:bc:93:58:d1:3d:d7:0b:c7:3a:a1:
98:8b:cb:c0:a5:dc:63:dd:97:ff:84:11:9f:35:b9:
6c:9a:13:5d:e0:8e:06:db:2a:eb:1b:40:52:4f:fc:
92:93:b8:f6:dd:1b:d0:b9:c7:71:c0:f0:00:db:f8:
81:03:5f:0b:00:a5:4b:c0:ce:9b:ad:86:6d:b7:d1:
e4:00:d5:d1:64:96:b5:5e:da:dd:9f:4c:dc:f6:8b:
f2:25:3f:9c:4d:63:e9:4c:31:cf:e3:43:4d:38:07:
49:70:c9:59:c9:f5:8c:f0:b0:f5:76:96:9b:56:ea:
73:df:ed:49:32:67:0b:65:66:2e:b1:f2:b6:00:c2:
23:11:f3:d9:3f:9f:42:b4:d6:1e:01:49:cb:1a:05:
5f:3a:8a:6c:ad:0c:f3:de:f6:45:05:0b:e7:6e:49:
13:df:28:29:47:14:ed:c9:2e:12:86:7c:9d:2d:7c:
d6:bf:32:0d:15:26:26:2f:75:da:ea:04:24:02:82:
4a:39:6b:8a:26:74:91:c6:4d:24:79:08:41:1e:29:
22:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:FD:DC:5C:22:EB:23:64:13:78:6F:75:0F:F0:27:71:04:0C:43:CC
X509v3 Authority Key Identifier:
keyid:96:35:1C:47:3A:16:BA:38:FA:B4:D5:17:05:92:25:E0:F1:33:C8:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b8:ab:eb:7e:50:a7:7d:c2:4c:0c:fe:fb:0f:b6:85:50:9e:
c2:cb:9d:bd:45:6a:18:22:e6:2c:28:4f:2f:45:0c:65:a0:76:
95:a4:3c:3d:e0:9c:29:85:90:06:95:0e:1c:ec:10:21:7a:67:
eb:57:35:66:9e:3f:d6:e8:f1:a1:e3:b6:08:e8:ba:19:fc:12:
f6:a1:c7:19:8b:8b:58:71:bd:fc:31:0c:86:6b:cc:bf:e6:f5:
97:51:ff:f7:05:ea:ca:23:d9:17:89:47:c2:4a:d4:f1:85:f3:
51:20:6c:21:ff:16:75:b7:fa:93:e0:88:df:2e:d2:a9:3b:36:
1d:d8:05:95:31:21:e1:ba:79:4b:91:8d:14:79:ac:c0:42:44:
8d:8d:95:ba:3e:55:62:c6:12:8c:47:a3:68:25:13:8e:a6:b3:
0d:0d:99:ab:68:37:07:fb:cc:73:f4:35:b9:74:51:13:53:70:
58:61:aa:60:06:07:67:47:82:a1:7d:4e:4c:ef:ca:a4:89:5f:
97:45:c6:8e:99:c9:a1:58:ed:65:f7:02:a4:7f:e0:af:a0:4b:
46:7a:3f:c6:b0:cf:91:2c:27:fe:6c:6e:55:55:88:3f:fb:95:
85:05:68:3e:c2:8c:92:ff:5c:b1:e0:66:ec:89:fc:fd:88:b3:
ad:7a:dc:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:48:50 2025 by rpki-client