Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
File: 8lap7bLZreIE2CMTzOmLZiOp2Kw.mft (raw, json)
Hash identifier: vaZbbR8eSNC4T0/gsgjlDZrgET50DT4v5+d3/uAVK80=
Subject key identifier: 35:DF:70:B1:85:AE:83:A0:07:1A:13:3D:E4:9A:51:2C:09:D4:FD:8D
Authority key identifier: F2:56:A9:ED:B2:D9:AD:E2:04:D8:23:13:CC:E9:8B:66:23:A9:D8:AC
Certificate issuer: /CN=f256a9edb2d9ade204d82313cce98b6623a9d8ac
Certificate serial: 01965124018DE1726EB34405991C5B7DFC48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
Manifest number: 14FF
Signing time: Sun 20 Apr 2025 03:00:36 +0000
Manifest this update: Sun 20 Apr 2025 03:00:36 +0000
Manifest next update: Mon 21 Apr 2025 03:00:36 +0000
Files and hashes: 1: 8lap7bLZreIE2CMTzOmLZiOp2Kw.crl (hash: lxd/YkXzzY35DZr0CM3pPLawzlzYeuyq/T5Ad+DRoT0=)
2: m61Skl38qNd_z8iy_icAt6gZ-a0.roa (hash: agPnne36nNKEttk3MarLpGi1Y49vXcfn+4zgZdtH3ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 03:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:24:01:8d:e1:72:6e:b3:44:05:99:1c:5b:7d:fc:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f256a9edb2d9ade204d82313cce98b6623a9d8ac
Validity
Not Before: Apr 20 03:00:36 2025 GMT
Not After : Apr 21 03:00:36 2025 GMT
Subject: CN=35df70b185ae83a0071a133de49a512c09d4fd8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b6:0a:8b:1c:52:fb:c1:dc:74:72:74:7e:ca:
99:6f:65:4a:81:67:8d:f6:76:b7:8a:2b:23:8a:9b:
9b:38:9c:1b:dc:fe:48:87:ba:d2:1e:c0:95:3e:ff:
cd:6a:f8:40:9a:18:01:e6:49:36:8d:c0:a9:e0:5c:
b3:9f:d0:ff:13:34:05:03:c4:82:3c:42:45:e5:c7:
65:c1:af:36:1a:fd:3f:d2:df:aa:ae:0f:86:32:9c:
e1:93:a6:42:21:eb:20:1a:82:71:85:2a:f8:69:b9:
5b:7f:ce:c7:c2:6c:e8:83:c2:c9:6f:6c:ff:a3:27:
61:de:a6:1f:0d:a5:6d:f6:73:a8:82:5c:a6:ee:e6:
13:a0:6d:2d:dd:6f:e3:24:fa:d8:79:15:45:73:7a:
74:9d:37:5e:0a:2b:fb:e5:bb:40:dd:ec:a2:78:a5:
8a:ff:53:47:57:30:58:3c:b3:d9:6e:49:4b:8b:bb:
38:5d:9f:6b:43:32:4c:14:00:fc:39:63:66:40:e0:
9b:e1:00:a3:f1:3b:52:f2:5b:18:6c:86:24:31:98:
25:f3:6a:3d:8b:71:f4:bf:b4:00:5b:35:1e:bc:fe:
2b:01:49:8e:41:88:28:37:07:1d:2f:3a:e3:ce:09:
9b:de:4f:50:dd:78:b8:57:c3:95:2f:b5:9b:ba:7d:
18:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:DF:70:B1:85:AE:83:A0:07:1A:13:3D:E4:9A:51:2C:09:D4:FD:8D
X509v3 Authority Key Identifier:
keyid:F2:56:A9:ED:B2:D9:AD:E2:04:D8:23:13:CC:E9:8B:66:23:A9:D8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:a6:13:b4:c6:55:fb:c6:a9:46:0f:3e:e6:29:a1:50:1e:c3:
a5:cc:d4:83:de:72:4e:ac:e7:b5:b6:d0:6a:97:09:a1:4d:f7:
8a:33:22:dc:5b:73:b2:15:6b:a4:74:1c:45:f2:54:82:e0:5d:
b7:a1:ff:4f:f4:86:61:08:74:fa:29:72:0b:21:d1:3f:34:d5:
6f:5e:2d:9c:f5:47:76:1f:7a:c5:b4:f7:6e:8b:4b:f4:c3:cc:
5f:d2:ab:44:78:0c:aa:1d:89:5a:45:1e:73:6c:d3:6b:46:e9:
73:70:10:88:3e:4e:df:70:bf:e5:48:8c:8b:83:bf:c6:36:d8:
01:b9:a4:4e:4e:2a:d0:4e:be:2b:b5:1c:db:79:c2:e0:81:51:
d0:89:90:24:af:d6:6b:14:3e:b8:b2:ac:fe:fa:a7:a2:c4:41:
a6:ed:97:53:d7:66:d5:af:ac:9c:a8:a6:2e:8b:96:f6:3e:27:
d8:84:cf:a0:1a:bb:1b:6d:7a:99:a1:2d:f7:91:03:36:31:c3:
4b:50:67:68:e1:24:c9:53:4d:71:1a:66:9b:c3:ed:a6:f1:d5:
eb:d9:89:82:7d:c7:3d:a0:ce:4b:31:95:08:bb:07:1c:1d:e3:
42:24:32:71:63:53:cb:de:6b:4b:26:13:e3:fe:64:b6:2d:54:
6f:9f:b2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:15:39 2025 by rpki-client