Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
File: lbheWsBVoSGIrlDNsAf6SItqqIs.mft (raw, json)
Hash identifier: 4w0vV0A0UuNuIBlapw4293vWo2f/EgcJVbU2uBBEepw=
Subject key identifier: E0:80:5F:26:35:5F:A8:6D:70:7F:35:51:C3:F9:A8:13:29:1F:4E:61
Authority key identifier: 95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B
Certificate issuer: /CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b
Certificate serial: 01962ABBBF5739FD86407B328473465DCAF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
Manifest number: 14E7
Signing time: Sat 12 Apr 2025 16:01:09 +0000
Manifest this update: Sat 12 Apr 2025 16:01:09 +0000
Manifest next update: Sun 13 Apr 2025 16:01:09 +0000
Files and hashes: 1: 6LbIgFJwzpH2Qf0sirzfHYuw_a4.roa (hash: yVSc0ifnnPwL8H5EwEXT2iNnCkvEaZBn7yh2JV9dabc=)
2: lbheWsBVoSGIrlDNsAf6SItqqIs.crl (hash: Lj5tysyIPTeW2Mpx+SBWX0C9wasL4+Mh1ZE8spxcJSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 16:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:bb:bf:57:39:fd:86:40:7b:32:84:73:46:5d:ca:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b85e5ac055a12188ae50cdb007fa488b6aa88b
Validity
Not Before: Apr 12 16:01:09 2025 GMT
Not After : Apr 13 16:01:09 2025 GMT
Subject: CN=e0805f26355fa86d707f3551c3f9a813291f4e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f4:97:7b:ff:da:aa:35:5b:bd:bb:fe:18:c6:
8d:91:fb:24:5d:fd:9a:f1:f0:c7:f2:ab:52:36:27:
03:94:73:78:45:4f:d1:9a:49:01:a8:e3:1e:22:5c:
72:2e:eb:a7:eb:44:60:00:e4:89:ed:d2:87:f7:fd:
0f:c0:03:2a:7a:85:e5:c0:7d:72:a1:d7:6b:f6:8b:
ef:06:3d:00:0d:26:c8:9f:cb:95:ec:d8:ba:48:69:
26:b0:d0:a5:f0:1f:4b:30:db:00:47:6e:ca:c2:05:
4e:7d:f3:80:61:d4:8b:26:d8:60:2d:f6:0b:00:46:
26:7e:86:23:a6:d4:15:2a:2d:4c:7e:d4:6b:1e:61:
b2:59:5c:7e:f1:4b:dd:48:7f:1a:7f:f9:20:f0:b6:
ad:dc:89:e3:d3:6a:05:74:b4:87:d0:ae:45:74:0b:
7c:9c:8c:25:fe:44:ac:e1:42:5b:1b:99:56:a8:89:
ba:eb:00:11:66:53:c2:a9:c6:72:81:54:f8:e5:ff:
b2:37:ae:61:55:65:74:1c:84:10:12:42:1d:84:c9:
41:46:0b:bf:02:3a:e9:b6:88:90:0c:47:3a:a6:d2:
2d:5f:a4:8a:40:e1:93:1f:e8:e0:5a:ff:ce:6a:a0:
33:76:00:77:f3:7c:86:b2:99:49:db:22:2b:9d:1d:
8d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:80:5F:26:35:5F:A8:6D:70:7F:35:51:C3:F9:A8:13:29:1F:4E:61
X509v3 Authority Key Identifier:
keyid:95:B8:5E:5A:C0:55:A1:21:88:AE:50:CD:B0:07:FA:48:8B:6A:A8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbheWsBVoSGIrlDNsAf6SItqqIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74aee8-41a8-4ee7-ae4c-2183bc3844d2/1/lbheWsBVoSGIrlDNsAf6SItqqIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:be:44:8e:9b:e9:02:62:f9:35:45:6a:58:82:7b:f1:3a:ce:
7b:35:6b:b4:52:dc:5a:27:49:2c:b3:52:c1:fa:59:04:30:f8:
05:5a:74:23:87:68:a9:47:c2:5a:d7:6e:06:cd:be:3a:6e:1b:
58:96:62:50:91:fc:8c:5d:c7:3f:5b:68:89:2c:17:14:f9:da:
55:13:f6:c7:2a:5f:fe:c1:a5:6b:51:44:df:c3:8e:d9:58:9b:
69:bb:44:87:ea:c8:e4:71:05:c0:0b:c3:fd:c5:da:d9:a3:a7:
00:ae:55:88:f4:9c:21:9f:ab:e6:05:13:2f:19:4e:bf:46:7d:
8a:3e:1f:4a:28:c4:d3:d8:9a:5a:7d:8b:9a:ae:b6:5e:a8:6f:
14:2f:e3:86:ac:12:23:12:d6:bf:30:07:2d:18:ee:9b:a4:c3:
9d:e1:e0:8c:14:6d:2d:30:37:4a:e6:4c:17:2b:82:6e:62:55:
46:5e:ed:6f:7d:36:42:c8:07:1a:19:60:35:48:99:d1:d3:0a:
c7:cf:64:04:d0:54:13:36:29:b0:7d:04:07:0c:75:d1:e9:fb:
94:9c:0c:d6:89:d4:b3:00:0f:10:92:85:a6:eb:99:80:78:a2:
4d:2f:33:2c:85:38:f1:a1:89:48:14:3d:1e:81:85:ac:7e:e1:
fc:94:3f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:41:53 2025 by rpki-client