Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
File: l15fSPU6jbnKYPqPGDfQfzGREE8.mft (raw, json)
Hash identifier: ZRx8LDYIgdLxhM2TlG8aDhq6agHrHiDejeoVcCL5Pgo=
Subject key identifier: 00:52:41:08:82:60:0E:B9:D5:E2:4B:3F:FA:BB:CE:89:E1:78:80:A9
Authority key identifier: 97:5E:5F:48:F5:3A:8D:B9:CA:60:FA:8F:18:37:D0:7F:31:91:10:4F
Certificate issuer: /CN=975e5f48f53a8db9ca60fa8f1837d07f3191104f
Certificate serial: 01965C4C149AB45B61D15DF910A8CAE2B1CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
Manifest number: 017F
Signing time: Tue 22 Apr 2025 07:00:11 +0000
Manifest this update: Tue 22 Apr 2025 07:00:11 +0000
Manifest next update: Wed 23 Apr 2025 07:00:11 +0000
Files and hashes: 1: VmXkaG5WzI9Vz_7xcXFAL06DAoc.roa (hash: uKPs/SrJH/MnTw4fYsxVa8cqGkMc8R9CKa5VOSutc0U=)
2: l15fSPU6jbnKYPqPGDfQfzGREE8.crl (hash: ASdeBwP37d2SxMkLboC4DJ19SDzSQ6zssGphqvXSVRc=)
3: t42bTlVzekO4_zka2dM08NYoS0o.roa (hash: k4lNjjF23Ae3Sbhg3LYDkwgC4ol0mKxgVNJCg94oeiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 07:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:4c:14:9a:b4:5b:61:d1:5d:f9:10:a8:ca:e2:b1:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=975e5f48f53a8db9ca60fa8f1837d07f3191104f
Validity
Not Before: Apr 22 07:00:11 2025 GMT
Not After : Apr 23 07:00:11 2025 GMT
Subject: CN=0052410882600eb9d5e24b3ffabbce89e17880a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:06:5e:e7:19:31:2d:56:d3:1c:39:ec:01:12:
35:96:66:a1:ec:68:f3:ed:3a:fa:f4:5e:a9:84:fb:
ea:22:9d:e4:f8:d8:4f:4a:8f:f8:30:dc:bb:b3:cd:
4d:9c:07:67:17:31:6d:51:bb:eb:8c:85:53:9a:0f:
8b:24:f7:03:58:3a:ea:9c:18:41:8b:e7:a3:cf:e0:
c5:4c:02:b0:1b:ba:9a:2a:61:ce:7f:4b:65:33:b5:
13:ba:82:87:6d:42:da:5d:0c:18:e7:11:9b:be:46:
ae:dc:4d:c0:be:90:68:92:43:25:1d:2b:58:94:03:
bd:64:ca:fa:f6:c0:06:5e:8f:94:e9:7d:a6:dd:85:
a9:6f:bf:b1:10:ff:2d:7f:42:22:08:7a:c8:87:55:
9f:1e:59:26:d5:2f:52:03:02:07:bc:74:6d:67:49:
de:9d:3f:b8:8c:ec:70:a8:10:cd:63:a0:cd:ac:c6:
4f:00:05:b2:c9:9d:32:6f:7f:66:85:1d:fd:90:47:
aa:af:38:53:97:e6:40:83:b4:42:b1:e7:06:b9:b2:
01:89:45:a8:39:14:45:df:d8:04:da:04:22:2d:5c:
af:5a:af:9d:6f:2f:8a:5d:30:9e:3f:67:28:8e:2e:
5d:14:b8:a0:65:0f:18:ff:b2:b1:a6:d7:ba:9d:e1:
1a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:52:41:08:82:60:0E:B9:D5:E2:4B:3F:FA:BB:CE:89:E1:78:80:A9
X509v3 Authority Key Identifier:
keyid:97:5E:5F:48:F5:3A:8D:B9:CA:60:FA:8F:18:37:D0:7F:31:91:10:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l15fSPU6jbnKYPqPGDfQfzGREE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e0b1b5-edef-4aeb-836b-63f5035f3446/1/l15fSPU6jbnKYPqPGDfQfzGREE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:57:91:ca:17:9b:8e:3b:23:64:fd:de:ab:cb:5d:1e:20:46:
3a:89:3d:90:fc:bf:2d:62:85:07:29:4b:2d:91:95:89:5b:0f:
5a:7f:a5:7e:b1:a7:8f:ad:df:fa:37:73:b2:86:ee:9a:03:c5:
4b:79:cb:57:11:0e:8f:7d:e2:27:ec:d6:d3:42:65:5a:ae:55:
7a:df:7c:8d:64:08:d3:53:dd:a2:19:b0:33:1e:0c:c0:5c:ff:
29:77:6e:56:72:bd:8a:c9:02:39:97:f8:21:89:50:a5:6a:f7:
86:29:52:df:b9:da:e2:11:23:8d:87:02:a9:fa:2e:b1:ca:20:
62:52:87:98:67:c9:a7:13:6c:bf:83:f8:b8:f1:30:f5:48:a2:
11:fd:3a:de:43:12:55:62:6e:fe:98:cc:78:8b:af:39:0c:dd:
48:74:c9:4b:ea:6c:6e:69:4a:50:2b:2a:ab:67:cf:7c:c8:e5:
ee:0b:a8:55:29:bb:b7:c4:62:ef:51:93:32:78:0f:30:72:bc:
16:14:3f:6c:a4:8c:06:03:ff:32:60:38:31:19:e8:ad:ca:72:
dc:e3:0c:3b:a9:d8:58:28:df:9c:bc:b9:89:3e:c0:02:eb:23:
e6:59:27:43:35:f7:d0:d1:14:d1:3f:f0:99:9b:14:03:47:3f:
5d:0b:74:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:06:57 2025 by rpki-client