Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft
File: LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft (raw, json)
Hash identifier: 9DAcNCHJznIj6EN4ig5Tdpf6XWejm2kyMrKyELKlEao=
Subject key identifier: 89:B2:4A:8B:49:9C:FE:D2:99:E6:75:85:5A:57:20:E7:31:8D:C9:9A
Authority key identifier: 2E:3C:67:6D:B2:4C:20:5D:72:56:FC:54:9A:DC:7C:3E:60:AC:7E:9D
Certificate issuer: /CN=2e3c676db24c205d7256fc549adc7c3e60ac7e9d
Certificate serial: 01964C6B36BC0E5683804A659B5198FA7960
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjxnbbJMIF1yVvxUmtx8PmCsfp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft
Manifest number: 14F6
Signing time: Sat 19 Apr 2025 05:00:16 +0000
Manifest this update: Sat 19 Apr 2025 05:00:16 +0000
Manifest next update: Sun 20 Apr 2025 05:00:16 +0000
Files and hashes: 1: LjxnbbJMIF1yVvxUmtx8PmCsfp0.crl (hash: 4GnOfe165mD7b4P711iIIZ7zdE2IT11d70uDY8++XiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjxnbbJMIF1yVvxUmtx8PmCsfp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6b:36:bc:0e:56:83:80:4a:65:9b:51:98:fa:79:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e3c676db24c205d7256fc549adc7c3e60ac7e9d
Validity
Not Before: Apr 19 05:00:16 2025 GMT
Not After : Apr 20 05:00:16 2025 GMT
Subject: CN=89b24a8b499cfed299e675855a5720e7318dc99a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:23:66:b5:f2:83:4e:1d:2f:fa:e4:36:35:30:
06:d7:dd:b1:10:08:37:d4:72:49:57:88:15:53:9f:
7e:42:17:ef:ed:3a:86:a5:07:05:9d:9e:2e:83:74:
ca:ef:15:99:3b:d6:7e:f7:8e:a1:95:cb:17:15:7f:
bc:21:62:1d:df:ce:af:1b:ad:98:0c:ad:a4:d0:92:
95:a8:db:40:55:4d:7c:73:0b:f8:59:00:d2:06:58:
d1:c5:a8:17:54:4e:fe:71:2e:f5:07:f6:fd:fe:db:
c8:78:62:f4:5a:f2:a9:14:cb:8a:c0:78:76:8d:50:
43:db:d8:69:43:8c:bb:f7:97:39:9e:96:ee:93:9a:
63:27:94:1a:fd:c5:46:d3:4e:fb:3d:ce:f0:e6:3d:
3b:b1:11:be:84:24:5a:6e:b3:0a:59:57:16:e6:55:
e2:46:25:2f:24:b1:bd:4d:05:b0:28:f5:b7:b5:26:
b1:b2:b7:c1:4c:54:fd:59:30:96:3f:8e:66:83:80:
77:e7:19:6a:2b:8a:88:4c:75:60:a9:66:8e:cb:8d:
67:dd:3f:c0:ce:3c:75:56:ab:d2:e4:ed:42:69:4a:
15:8e:d7:ff:74:8a:51:eb:e4:09:39:04:c9:e4:f9:
d1:db:dc:32:2c:c9:bf:ed:9a:85:eb:f7:75:8b:50:
6b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B2:4A:8B:49:9C:FE:D2:99:E6:75:85:5A:57:20:E7:31:8D:C9:9A
X509v3 Authority Key Identifier:
keyid:2E:3C:67:6D:B2:4C:20:5D:72:56:FC:54:9A:DC:7C:3E:60:AC:7E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjxnbbJMIF1yVvxUmtx8PmCsfp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:01:50:bf:08:82:7c:23:2d:f7:37:51:a9:75:ff:d5:d3:23:
b7:90:a6:16:5e:66:74:55:ce:40:9a:fd:d3:4f:49:89:12:c8:
94:8a:fc:f1:99:34:df:33:27:e2:b8:d9:6d:8c:15:90:37:cf:
39:7a:d1:24:c9:ce:57:d6:ac:20:16:97:e1:8c:96:d8:27:05:
b4:f2:29:a9:e9:44:dd:ba:aa:bd:88:ea:fe:8a:20:95:80:ac:
b7:c6:91:ae:99:36:0d:51:0a:83:a3:d1:e4:0f:88:14:b1:16:
5e:be:75:4c:61:66:1c:a3:39:14:62:7b:cc:1a:8b:5a:e6:30:
4f:fe:85:92:ec:d3:cc:e4:fd:27:76:74:6e:57:3d:73:4d:18:
25:21:ae:da:8f:b1:c0:6a:14:cc:48:0a:25:02:5f:1d:9f:24:
36:63:5d:ee:49:38:3f:ae:be:7e:02:48:3c:96:7f:a3:ee:d2:
65:cf:9a:5e:17:33:53:5c:58:11:97:67:96:d0:e2:77:7b:f2:
d6:3b:e1:ff:ec:a7:3c:52:24:67:ba:4f:22:40:64:9b:51:68:
3b:01:fa:2f:d9:c9:f4:61:77:88:61:1f:75:09:c7:5d:6c:a1:
f8:9b:f1:20:d0:7a:f7:45:9b:a8:4a:4c:4a:3b:8e:fa:d5:8b:
81:35:1b:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZMaza8DlaDgEplm1GY+nlgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlM2M2NzZkYjI0YzIwNWQ3MjU2ZmM1NDlhZGM3YzNlNjBh
YzdlOWQwHhcNMjUwNDE5MDUwMDE2WhcNMjUwNDIwMDUwMDE2WjAzMTEwLwYDVQQD
Eyg4OWIyNGE4YjQ5OWNmZWQyOTllNjc1ODU1YTU3MjBlNzMxOGRjOTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySNmtfKDTh0v+uQ2NTAG192xEAg3
1HJJV4gVU59+Qhfv7TqGpQcFnZ4ug3TK7xWZO9Z+946hlcsXFX+8IWId386vG62Y
DK2k0JKVqNtAVU18cwv4WQDSBljRxagXVE7+cS71B/b9/tvIeGL0WvKpFMuKwHh2
jVBD29hpQ4y795c5npbuk5pjJ5Qa/cVG0077Pc7w5j07sRG+hCRabrMKWVcW5lXi
RiUvJLG9TQWwKPW3tSaxsrfBTFT9WTCWP45mg4B35xlqK4qITHVgqWaOy41n3T/A
zjx1VqvS5O1CaUoVjtf/dIpR6+QJOQTJ5PnR29wyLMm/7ZqF6/d1i1BrAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFImySotJnP7SmeZ1hVpXIOcxjcmaMB8GA1UdIwQY
MBaAFC48Z22yTCBdclb8VJrcfD5grH6dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGp4bmJiSk1JRjF5VnZ4VW10eDhQbUNzZnAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iOTRiMGMtOTYyNC00YzM3LTgyN2Yt
MzQ4OTI1NzhmZjE5LzEvTGp4bmJiSk1JRjF5VnZ4VW10eDhQbUNzZnAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9iOTRiMGMtOTYyNC00YzM3LTgyN2YtMzQ4OTI1NzhmZjE5
LzEvTGp4bmJiSk1JRjF5VnZ4VW10eDhQbUNzZnAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIwFQvwiC
fCMt9zdRqXX/1dMjt5CmFl5mdFXOQJr9009JiRLIlIr88Zk03zMn4rjZbYwVkDfP
OXrRJMnOV9asIBaX4YyW2CcFtPIpqelE3bqqvYjq/ooglYCst8aRrpk2DVEKg6PR
5A+IFLEWXr51TGFmHKM5FGJ7zBqLWuYwT/6FkuzTzOT9J3Z0blc9c00YJSGu2o+x
wGoUzEgKJQJfHZ8kNmNd7kk4P66+fgJIPJZ/o+7SZc+aXhczU1xYEZdnltDid3vy
1jvh/+ynPFIkZ7pPIkBkm1FoOwH6L9nJ9GF3iGEfdQnHXWyh+JvxINB690WbqEpM
SjuO+tWLgTUbUA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:37:43 2025 by rpki-client