Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.mft
File: lsVsXqVHj003sw82guQ7fi75DZg.mft (raw, json)
Hash identifier: TSSrrxa9PUo2Z7CiFG3eAGlNR6Tob4Pl0mOxRZX2nFk=
Subject key identifier: F1:78:BC:A8:0C:42:C5:E8:C3:6E:60:52:41:48:FA:F8:10:C3:AC:AB
Authority key identifier: 96:C5:6C:5E:A5:47:8F:4D:37:B3:0F:36:82:E4:3B:7E:2E:F9:0D:98
Certificate issuer: /CN=96c56c5ea5478f4d37b30f3682e43b7e2ef90d98
Certificate serial: 019643681CF0139B92B37DD78655265CB386
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsVsXqVHj003sw82guQ7fi75DZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.mft
Manifest number: 0961
Signing time: Thu 17 Apr 2025 11:00:18 +0000
Manifest this update: Thu 17 Apr 2025 11:00:18 +0000
Manifest next update: Fri 18 Apr 2025 11:00:18 +0000
Files and hashes: 1: Jfp2BkUryUy6473OSd5t9xfZXek.roa (hash: /yj9OMbKiB1Ji+Udov4fFjS1PqdNa09sKJHlaeP3Vq8=)
2: lsVsXqVHj003sw82guQ7fi75DZg.crl (hash: +EvWokSDVGTP0TYnGawkbw4tbPp6zm0zhhpEhKJ6J8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lsVsXqVHj003sw82guQ7fi75DZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:68:1c:f0:13:9b:92:b3:7d:d7:86:55:26:5c:b3:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96c56c5ea5478f4d37b30f3682e43b7e2ef90d98
Validity
Not Before: Apr 17 11:00:18 2025 GMT
Not After : Apr 18 11:00:18 2025 GMT
Subject: CN=f178bca80c42c5e8c36e60524148faf810c3acab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6e:ce:c0:71:03:b6:cf:18:4b:31:27:34:e8:
f7:83:19:12:40:f7:d1:03:ec:d0:7d:a8:7a:33:d0:
b4:3c:23:b0:98:09:ad:4a:ce:97:6d:02:fa:b5:ee:
e7:83:dc:ae:1c:1a:35:4e:40:f0:85:ed:b9:b3:ab:
ab:e9:d0:37:3b:de:3b:58:4e:5e:3f:f0:04:43:09:
5c:6f:31:0f:65:ee:52:13:30:56:db:a4:39:35:bf:
33:52:df:f6:44:52:00:e2:c4:5e:9b:e7:88:71:a9:
c7:8e:9d:e1:ea:4e:e2:1a:d8:f4:a9:28:82:73:6a:
7f:45:d6:20:de:43:f2:00:2f:0f:ae:70:86:f0:eb:
73:8a:58:ab:16:6d:a7:1f:2e:2d:7c:dd:f7:52:95:
12:c4:07:33:5c:21:ed:34:68:4c:32:b6:2f:3a:0b:
b4:19:43:6a:4b:9f:95:74:7c:8e:08:5b:78:38:66:
b3:7a:1e:45:57:30:c0:21:a0:13:5a:95:6e:73:89:
e6:a4:00:26:54:45:b5:d4:6c:d6:81:03:77:55:18:
21:c0:95:82:35:85:da:09:4a:1a:08:e9:a6:1d:50:
f0:f8:d8:36:ef:cc:04:00:cf:56:95:9f:c3:5e:00:
84:18:b4:24:c0:40:39:61:a2:a1:6d:35:57:5a:67:
0b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:78:BC:A8:0C:42:C5:E8:C3:6E:60:52:41:48:FA:F8:10:C3:AC:AB
X509v3 Authority Key Identifier:
keyid:96:C5:6C:5E:A5:47:8F:4D:37:B3:0F:36:82:E4:3B:7E:2E:F9:0D:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsVsXqVHj003sw82guQ7fi75DZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:56:01:5d:46:fb:22:3c:87:f3:41:73:de:d2:4c:6f:4a:61:
54:14:7b:7b:d4:85:94:04:f3:a3:8b:ab:a0:46:3f:01:1d:d7:
c1:52:e2:91:9a:fa:2f:37:6e:85:d5:64:71:8d:b9:c6:12:08:
8c:ec:96:1a:39:7c:ac:95:7e:bb:ce:b6:a9:0c:28:70:64:3d:
9e:cb:ff:26:0c:22:f3:f4:94:0d:d2:d5:cf:e6:a2:43:d4:91:
8b:ae:7a:32:c1:d0:4f:bd:0b:0d:b8:5f:1c:3d:ed:dc:21:b8:
65:25:da:2e:15:9e:a1:ab:f8:89:64:5a:0e:9c:3b:67:0f:b9:
85:23:76:30:a5:a9:6a:77:c6:e1:74:4c:ab:68:44:5f:fc:f4:
99:8a:03:47:47:11:a9:12:f6:31:9c:6c:55:12:2b:f4:d2:18:
d9:f7:07:95:65:91:4d:76:91:ca:3e:a6:c2:88:1e:f1:1e:01:
09:08:4e:30:7a:a5:93:14:4c:96:26:5d:64:98:60:7b:04:f0:
b4:5d:ac:aa:a3:41:ba:b1:1b:ee:72:4f:24:64:ad:0b:3a:df:
e1:77:a2:e6:2d:e5:ef:97:29:81:7c:e0:23:00:79:26:ec:17:
96:e2:6d:85:f1:7e:ae:eb:3a:bc:3f:01:29:d7:2a:ea:54:8d:
bc:70:7b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:56:37 2025 by rpki-client