Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
File: lPNHF_8y_ix2RK610O6iMBYX8SQ.mft (raw, json)
Hash identifier: Q96yXjZ/yfffznZy7MwXQo9p61bFydj9jFZU615i0yw=
Subject key identifier: BF:14:F6:5B:EB:88:BF:B6:19:31:4D:F8:AE:19:23:66:D4:11:39:5B
Authority key identifier: 94:F3:47:17:FF:32:FE:2C:76:44:AE:B5:D0:EE:A2:30:16:17:F1:24
Certificate issuer: /CN=94f34717ff32fe2c7644aeb5d0eea2301617f124
Certificate serial: 01958B84AF2CA001E1F57748CE53DE34613C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
Manifest number: 0417
Signing time: Wed 12 Mar 2025 18:01:23 +0000
Manifest this update: Wed 12 Mar 2025 18:01:23 +0000
Manifest next update: Thu 13 Mar 2025 18:01:23 +0000
Files and hashes: 1: lPNHF_8y_ix2RK610O6iMBYX8SQ.crl (hash: 0Jw+e5zGRIysvgmLEZgOC3RjMuAIVt1ki93rK/k4u28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 18:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:84:af:2c:a0:01:e1:f5:77:48:ce:53:de:34:61:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f34717ff32fe2c7644aeb5d0eea2301617f124
Validity
Not Before: Mar 12 18:01:23 2025 GMT
Not After : Mar 13 18:01:23 2025 GMT
Subject: CN=bf14f65beb88bfb619314df8ae192366d411395b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b4:70:71:55:bf:b6:2f:db:67:da:05:33:9e:
f4:8e:de:a8:c5:51:47:1d:79:d2:3e:25:4f:ae:93:
f5:79:89:3c:fd:2e:3e:19:0e:82:c3:d3:d0:e4:55:
58:37:b5:9b:73:f1:18:84:e3:b2:08:39:35:3d:4f:
d9:d6:dd:28:14:67:fe:4d:1b:f1:c6:48:cf:f0:a2:
28:d2:3f:1e:f9:22:99:bf:87:65:38:3e:74:08:03:
c2:03:79:c3:6f:70:8d:f9:a8:30:ce:8f:16:de:07:
85:94:89:d3:4f:c0:85:16:3d:1e:0a:d6:00:52:bd:
62:2d:14:ca:77:78:7e:37:1b:00:5a:7d:31:7c:5f:
89:a1:3f:5b:55:49:f6:4e:15:21:b2:3c:86:77:d4:
cc:fc:63:59:37:17:ae:a9:5b:c9:e1:13:af:4a:0b:
3e:a6:e9:fe:78:7d:92:04:94:4c:47:50:bd:6d:65:
14:50:7f:9d:fb:a2:d8:af:0b:9a:a1:bd:77:2f:ab:
d3:05:48:70:97:bc:9a:09:fe:2a:89:bd:35:8f:b8:
70:4b:ba:c9:8e:2a:15:d7:69:de:e0:82:ec:9c:ef:
cb:ad:49:60:06:3a:59:81:e7:59:f6:b6:45:20:06:
9b:10:91:ee:64:47:1c:4c:1d:d4:5d:c8:78:d3:ae:
fb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:14:F6:5B:EB:88:BF:B6:19:31:4D:F8:AE:19:23:66:D4:11:39:5B
X509v3 Authority Key Identifier:
keyid:94:F3:47:17:FF:32:FE:2C:76:44:AE:B5:D0:EE:A2:30:16:17:F1:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:9c:98:d5:5c:79:e7:4f:81:e2:95:44:03:25:87:22:68:fc:
ff:23:1a:e6:c6:38:ac:b9:ba:b7:e8:a4:4b:c4:e2:7a:47:f1:
b0:d6:bb:ca:0f:de:b6:d4:d2:62:3c:5b:ef:b2:62:cf:48:dc:
25:64:a2:11:db:bf:7e:ed:19:44:bc:2b:6f:e1:b1:e6:96:64:
4a:96:3c:e1:61:67:7e:c8:3b:30:fa:cb:61:12:9b:ff:42:d0:
31:ae:e6:94:a1:66:10:0e:f8:c5:2a:4e:5f:43:2c:5d:89:bb:
93:60:6d:63:63:02:1e:db:0c:b7:5a:ee:04:1e:48:53:d3:49:
ee:a5:bd:f8:59:88:31:71:d5:af:06:ea:33:5d:b5:be:75:2b:
46:0b:99:26:64:96:c3:99:2a:15:ff:44:c0:b2:3a:53:3a:fe:
46:20:93:e5:3e:cf:5e:77:99:dd:2e:c3:a1:9d:48:d9:f7:f9:
64:af:ad:47:d0:c5:56:ae:86:bf:f6:43:c6:16:db:6b:be:c0:
b5:54:ae:6f:ee:a7:98:da:a8:21:3b:a3:ae:e6:f7:bc:3a:bb:
9b:73:db:bd:88:5c:b7:3e:83:f2:60:6a:f9:61:d3:81:fd:a8:
25:ac:8e:82:0f:bb:69:28:05:26:85:bc:59:4e:d1:54:28:75:
c5:39:2b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:24:24 2025 by rpki-client