Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
File: l3d1zogEaVmWznfH02gbnCQbNi8.mft (raw, json)
Hash identifier: c0bmcVpX34QtLKxm8l2yih+kAVjPIzNUADJ4cxV9xaY=
Subject key identifier: 6D:CA:9F:7A:A0:00:9A:B2:03:68:1D:7D:45:C2:9F:73:88:0D:15:FC
Authority key identifier: 97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
Certificate issuer: /CN=977775ce8804695996ce77c7d3681b9c241b362f
Certificate serial: 01958BBBD17CD0262B193830863F4038A692
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
Manifest number: 1498
Signing time: Wed 12 Mar 2025 19:01:36 +0000
Manifest this update: Wed 12 Mar 2025 19:01:36 +0000
Manifest next update: Thu 13 Mar 2025 19:01:36 +0000
Files and hashes: 1: l3d1zogEaVmWznfH02gbnCQbNi8.crl (hash: T7QcqdeD5LP6ffv/9SNA6m4ZYVUaYiIsQoX8QIOZLTo=)
2: pu3w7UCd4Jix5FHNDyD1wbsxi8M.roa (hash: J6M/UUbbX9rFSK6+ULPDexwZqprBkdzi2+HoEA2BwBc=)
3: rLSgQK3eROYoGVjeEkatzbeLiUo.roa (hash: cRiivZzTe4i6byml8FTWqC2r60f1JUGBkptLQN0rfQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:bb:d1:7c:d0:26:2b:19:38:30:86:3f:40:38:a6:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977775ce8804695996ce77c7d3681b9c241b362f
Validity
Not Before: Mar 12 19:01:36 2025 GMT
Not After : Mar 13 19:01:36 2025 GMT
Subject: CN=6dca9f7aa0009ab203681d7d45c29f73880d15fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:06:06:66:73:03:be:0e:4a:1c:9b:89:49:4a:
b3:58:e4:34:65:fa:48:ad:81:b9:98:0c:94:d8:33:
d6:c4:61:0b:dd:f1:da:4c:08:fc:df:24:44:99:b8:
79:72:3a:15:30:82:8e:35:0c:21:e0:98:86:bd:43:
c4:61:a1:04:30:48:72:d3:7b:ec:84:2e:1c:07:20:
7d:b4:77:70:ea:7d:1b:15:7b:ff:7f:92:c8:a2:8d:
4d:28:a2:19:89:82:fd:33:d0:32:76:46:09:a0:0b:
76:e0:ff:ad:d9:80:f1:61:29:46:85:8f:39:27:21:
d2:ac:3f:f7:04:27:38:c4:b7:b1:ff:78:d7:2d:40:
43:0f:0b:0c:48:14:dc:1e:14:9d:d4:3f:1d:ed:c0:
95:95:0a:14:14:8b:ff:2a:79:52:98:1c:7a:8f:0f:
23:06:95:96:05:35:26:02:0e:5e:7c:f1:dc:74:2d:
7f:08:46:8b:5a:93:8f:37:79:b0:a9:15:52:cf:20:
8d:12:13:a3:95:e7:d5:5b:0c:c0:e0:3a:31:6c:20:
f5:02:cd:fe:1d:4f:95:74:8e:69:ea:0b:e4:1f:a3:
7a:c8:76:e5:33:e8:56:eb:9e:80:87:ac:1b:38:7f:
4e:7f:2e:25:a1:de:17:71:bf:e4:46:2b:21:9e:4c:
28:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:CA:9F:7A:A0:00:9A:B2:03:68:1D:7D:45:C2:9F:73:88:0D:15:FC
X509v3 Authority Key Identifier:
keyid:97:77:75:CE:88:04:69:59:96:CE:77:C7:D3:68:1B:9C:24:1B:36:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3d1zogEaVmWznfH02gbnCQbNi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/bc8e10-461e-4ce4-8be9-6239733c6184/1/l3d1zogEaVmWznfH02gbnCQbNi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:32:58:d1:86:fb:f2:86:dc:ce:3b:89:1e:ea:6a:46:44:4a:
65:7e:8a:2f:b4:57:16:b8:25:d9:28:00:be:d8:74:5a:a1:80:
3b:d9:88:45:20:ff:ba:df:d7:b1:38:db:6b:29:03:ee:1f:cb:
71:94:d4:a1:c0:0b:4a:1b:c6:5d:c1:60:0d:f0:2c:11:ad:61:
10:b6:82:17:cf:a0:27:76:47:ab:78:aa:6b:12:ab:3c:ac:79:
e2:e6:a0:03:cc:15:5a:98:a4:b8:77:95:ad:3e:46:d8:3f:9b:
65:b5:43:2a:fd:1f:46:d5:86:15:fa:b2:97:5d:92:d2:af:60:
5c:12:ba:1a:fa:8e:a5:e0:17:42:0f:fa:d4:27:d8:bd:20:38:
33:b2:ca:2a:1c:76:0c:b1:84:78:46:a4:e4:9a:c6:71:40:5a:
bf:2c:47:0a:fa:b8:f5:20:7c:dd:a8:49:66:d5:8f:5b:b5:37:
d0:19:6b:4a:3b:c1:a7:0a:5c:fb:d2:b1:3f:1c:d5:28:14:0a:
64:1f:a2:1b:59:5a:6b:ad:c4:ea:f9:17:97:04:47:3b:4b:ae:
77:8b:d6:8c:17:bb:a0:07:b2:f2:4f:40:32:5a:b1:c6:3b:d3:
7d:e2:23:61:3d:b1:69:25:64:bf:04:67:7f:e2:25:77:f7:25:
b8:9f:43:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:49:52 2025 by rpki-client