Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.mft
File: LrlwnvMbddaOIgiqvyosPD2Hb8E.mft (raw, json)
Hash identifier: KPFHCIL4SOsokx7EpaEnaY0sxCrN2kG65hxc54zg+uU=
Subject key identifier: 3B:41:86:D2:2B:07:1D:EF:F8:FE:A9:C3:8E:81:C2:3B:47:DF:A1:16
Authority key identifier: 2E:B9:70:9E:F3:1B:75:D6:8E:22:08:AA:BF:2A:2C:3C:3D:87:6F:C1
Certificate issuer: /CN=2eb9709ef31b75d68e2208aabf2a2c3c3d876fc1
Certificate serial: 0196C12606BEE2989AD8EB10C5DD1C69827B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrlwnvMbddaOIgiqvyosPD2Hb8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.mft
Manifest number: 1533
Signing time: Sun 11 May 2025 21:00:16 +0000
Manifest this update: Sun 11 May 2025 21:00:16 +0000
Manifest next update: Mon 12 May 2025 21:00:16 +0000
Files and hashes: 1: LrlwnvMbddaOIgiqvyosPD2Hb8E.crl (hash: BUZQep+dyGYPFf4+/XOyEVB+JY8fgkt9TelOYLo2N1g=)
2: y4nRX2MR29nhRNB-8qKuPT5GKso.roa (hash: KPjY3F6wNY99Qei7P9FnZL2mNKxujn8hAQHxPf7AHds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/LrlwnvMbddaOIgiqvyosPD2Hb8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:26:06:be:e2:98:9a:d8:eb:10:c5:dd:1c:69:82:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eb9709ef31b75d68e2208aabf2a2c3c3d876fc1
Validity
Not Before: May 11 21:00:16 2025 GMT
Not After : May 12 21:00:16 2025 GMT
Subject: CN=3b4186d22b071deff8fea9c38e81c23b47dfa116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7e:94:29:a3:d3:97:72:0b:16:13:dd:94:59:
69:8f:37:d2:19:2b:64:f9:17:3a:19:36:6c:57:2f:
5d:d8:b2:b7:9b:c1:f8:4a:7f:44:ac:c5:fa:65:4a:
cc:a6:dc:89:b7:18:18:ba:2c:de:1b:46:13:b5:9b:
94:12:5a:34:f4:8d:78:a5:d8:41:92:68:1a:cf:5b:
c8:28:31:1b:ec:39:43:38:ba:ab:32:c3:a5:6d:3a:
a4:88:80:c8:4c:a6:1a:40:3f:4f:34:25:19:08:2d:
dc:5f:0d:5c:21:df:08:6b:7a:37:49:46:24:0d:d6:
e8:ea:dd:d4:08:50:96:a0:a2:07:ea:ec:35:48:f0:
41:36:2f:ef:96:74:11:e5:ac:be:1d:38:be:6b:25:
e8:9f:2e:e5:60:d5:d3:9c:eb:f1:56:24:1a:2c:fd:
9b:8d:65:25:08:33:21:b6:29:ac:22:ee:8e:78:02:
63:cd:c2:a1:cf:03:05:2c:e7:87:bb:c7:86:a9:7a:
a7:91:ac:48:be:5c:49:a4:ae:76:c5:1b:5a:1c:a7:
ec:11:83:ff:d7:4d:36:4f:66:d5:9d:a1:dd:c2:ab:
1f:9c:29:77:ae:c5:f4:55:e3:14:f7:e1:1c:8d:ed:
69:d1:e4:d0:43:12:96:7d:58:7e:a3:58:7f:78:3b:
44:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:41:86:D2:2B:07:1D:EF:F8:FE:A9:C3:8E:81:C2:3B:47:DF:A1:16
X509v3 Authority Key Identifier:
keyid:2E:B9:70:9E:F3:1B:75:D6:8E:22:08:AA:BF:2A:2C:3C:3D:87:6F:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrlwnvMbddaOIgiqvyosPD2Hb8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:02:a6:32:62:0c:2b:4f:3e:11:3c:9b:13:69:c0:41:05:3b:
08:41:4b:43:f2:80:e6:d2:f0:3f:82:c6:c9:54:28:67:34:9e:
72:e4:83:f9:d3:21:00:a6:41:ae:40:ed:ec:61:e9:83:34:fe:
d6:4e:a0:80:bd:89:0f:81:a1:9c:d3:cd:39:79:67:0d:5d:46:
69:a2:f0:a9:5e:8d:2b:f7:75:0c:1d:61:b5:b0:8f:9c:6a:e7:
dc:cb:38:ef:98:46:02:5e:13:40:5c:37:5d:df:16:78:9f:c4:
f0:b5:fc:17:2b:b7:dc:97:7a:8e:fc:ea:fb:bb:1e:a6:60:0d:
65:c7:35:67:26:e5:5d:18:aa:1f:c7:5b:d2:f3:41:ee:6b:5b:
d4:eb:e8:bd:16:25:5d:9a:a0:31:fd:56:6a:e4:d5:8e:06:69:
d5:30:65:62:f7:48:ad:ea:83:6b:50:f2:4f:bb:cb:0c:fb:d7:
eb:d9:2b:52:2c:bf:8e:11:c1:a0:3c:60:02:4e:cf:16:d6:80:
04:66:a5:ab:18:3a:ab:c1:15:47:d2:0a:a0:f6:10:68:ef:08:
5b:64:a3:3b:ad:d4:5b:fd:90:b4:d4:8c:5a:cc:b7:ff:0f:d4:
97:92:1e:28:98:09:65:45:07:50:6c:fe:b0:b5:1b:b9:1b:cc:
23:fd:f5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:09:25 2025 by rpki-client