Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
File: llpqv9sIdPL-wiYs3qM3Otyy3FU.mft (raw, json)
Hash identifier: TOXC4lg6GDSB5D8kfBWpMSo3+5pNj/UWlRtN55p2zak=
Subject key identifier: CD:6C:06:73:44:EC:89:B1:BE:E0:2E:25:49:CB:C7:AD:C2:29:C1:4D
Authority key identifier: 96:5A:6A:BF:DB:08:74:F2:FE:C2:26:2C:DE:A3:37:3A:DC:B2:DC:55
Certificate issuer: /CN=965a6abfdb0874f2fec2262cdea3373adcb2dc55
Certificate serial: 0196CE3D0ADEA0D65B8D68534FAFBF965ADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
Manifest number: 0CA2
Signing time: Wed 14 May 2025 10:00:29 +0000
Manifest this update: Wed 14 May 2025 10:00:29 +0000
Manifest next update: Thu 15 May 2025 10:00:29 +0000
Files and hashes: 1: jx2XkRRJ1Pen6eLqWGsTXmBaP9o.roa (hash: yl4Uer3PsgYBYL8law/V2acfxxr/ONbHAHnzrh/MmEQ=)
2: llpqv9sIdPL-wiYs3qM3Otyy3FU.crl (hash: aeUha3CxvOcPL/7CDrRlfDLvfXM8vcD5mNZReMhuwQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:3d:0a:de:a0:d6:5b:8d:68:53:4f:af:bf:96:5a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965a6abfdb0874f2fec2262cdea3373adcb2dc55
Validity
Not Before: May 14 10:00:29 2025 GMT
Not After : May 15 10:00:29 2025 GMT
Subject: CN=cd6c067344ec89b1bee02e2549cbc7adc229c14d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:85:80:ba:6f:b6:f5:a0:ca:aa:7b:c4:2d:a0:
c7:3f:bc:2c:1e:3d:c7:43:f5:fb:4a:f9:ea:83:83:
4c:bf:96:6e:1b:38:56:74:a9:e3:2e:88:ef:79:ea:
6f:d8:79:66:81:8e:c0:6d:7d:78:87:9b:59:69:e5:
ba:6b:74:28:fd:68:74:fb:53:f9:a7:2c:d6:7c:cf:
66:1d:b7:cf:b2:13:b7:db:e7:73:4e:ed:7a:22:15:
1b:ea:b0:20:b3:f4:b8:9c:d0:b0:3e:63:eb:74:cd:
fc:e5:80:c7:be:3c:97:ac:0d:ae:a8:61:18:37:e5:
fd:6d:d3:44:88:b0:51:39:c2:02:b9:a4:a7:4a:af:
d2:2e:82:ec:d1:2d:e1:17:4b:e7:aa:84:cc:59:38:
5d:59:39:dc:8c:82:35:17:02:a4:84:2d:38:29:84:
e9:32:91:65:15:18:16:e1:19:eb:80:03:84:c1:9b:
f3:b9:6a:98:fa:28:ba:a3:ad:5f:75:4c:21:95:32:
c1:fc:6f:64:12:c1:5f:10:16:c7:d4:d4:34:f5:7b:
35:17:99:27:57:0c:4e:73:27:54:ba:54:5c:76:33:
5c:cd:9f:b8:0a:3d:a2:75:a9:19:4c:f2:d0:4f:92:
d5:b2:a2:4e:f5:1e:88:10:81:0d:d7:90:63:3d:b0:
7a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:6C:06:73:44:EC:89:B1:BE:E0:2E:25:49:CB:C7:AD:C2:29:C1:4D
X509v3 Authority Key Identifier:
keyid:96:5A:6A:BF:DB:08:74:F2:FE:C2:26:2C:DE:A3:37:3A:DC:B2:DC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llpqv9sIdPL-wiYs3qM3Otyy3FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/12417f-7665-4098-a338-4949b1e2b60f/1/llpqv9sIdPL-wiYs3qM3Otyy3FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:7b:e6:32:f7:37:53:a1:85:95:87:6e:7e:e2:77:09:a5:2b:
be:a4:ab:2a:55:85:6c:3f:43:3b:7b:1e:92:5e:54:22:5c:57:
bb:b2:36:98:40:9f:62:3e:f8:6e:2e:39:58:5c:b0:1f:2e:ad:
03:8a:f8:3b:ee:88:4f:bb:e4:39:e4:c3:52:93:36:56:44:81:
46:3e:e7:d9:2f:b4:95:38:0c:d6:3e:8b:fc:6b:21:0f:96:19:
7e:ac:ed:ed:6b:77:36:5a:aa:6b:6b:4f:46:e3:b5:7e:2e:cb:
0e:34:cf:af:b2:30:94:87:8f:52:ea:81:cd:c0:85:99:81:0b:
27:5e:ce:89:37:db:c0:09:7c:dc:a4:b4:ec:da:38:0d:57:e0:
f7:03:9b:3d:ee:da:26:31:c3:f6:da:4a:08:5c:03:47:fd:ba:
22:21:4b:da:ee:45:90:1d:11:ee:c5:79:dc:6c:11:88:bd:0c:
a2:08:cb:b3:79:c5:97:c3:42:4c:ea:17:cc:74:0f:8e:7e:9c:
2c:61:5f:8e:d1:5f:cb:05:30:60:ba:6b:63:c2:cd:e2:a2:74:
80:98:bd:87:84:77:a7:b9:f3:9d:71:e8:75:57:f0:68:30:d7:
75:78:ec:dd:1b:50:9f:c4:de:75:ad:a2:d2:a9:03:7e:6f:41:
23:cb:7d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:38:21 2025 by rpki-client