Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft
File: levYBm8QkMMRnNtp6dTcQNkDBPg.mft (raw, json)
Hash identifier: rPO/SUi/Dol3zUlc1VyJrTW4b/sZfiqB3hFUgJo7ZvY=
Subject key identifier: BC:B1:13:66:33:B2:C1:2E:FF:01:A3:4E:B9:2C:05:6F:E3:B3:57:85
Authority key identifier: 95:EB:D8:06:6F:10:90:C3:11:9C:DB:69:E9:D4:DC:40:D9:03:04:F8
Certificate issuer: /CN=95ebd8066f1090c3119cdb69e9d4dc40d90304f8
Certificate serial: 0196C12665F1F67A23AE52B1496EED6FB2E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft
Manifest number: 153D
Signing time: Sun 11 May 2025 21:00:41 +0000
Manifest this update: Sun 11 May 2025 21:00:41 +0000
Manifest next update: Mon 12 May 2025 21:00:41 +0000
Files and hashes: 1: levYBm8QkMMRnNtp6dTcQNkDBPg.crl (hash: JvD8bCAMY+IQU7bo9x4u1mFKY2tdze7XfsAXK+qf/T4=)
2: wRukRujev3BO2RN4ND9D6D63w5k.roa (hash: BYKbibBqJO+JvICBVUX/a9TBtkzvHJs+kP8dXi4jNhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:26:65:f1:f6:7a:23:ae:52:b1:49:6e:ed:6f:b2:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95ebd8066f1090c3119cdb69e9d4dc40d90304f8
Validity
Not Before: May 11 21:00:41 2025 GMT
Not After : May 12 21:00:41 2025 GMT
Subject: CN=bcb1136633b2c12eff01a34eb92c056fe3b35785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9f:4c:3d:75:6c:d0:30:74:15:36:4c:fd:d8:
2c:79:64:84:5a:c9:f4:04:d9:75:a8:21:f1:db:65:
26:5e:2c:ba:d2:a7:0c:19:c4:18:70:dd:6d:99:57:
6b:b9:40:f3:27:64:34:4a:cb:c3:5a:f3:ee:9a:ef:
9a:cb:09:7f:9a:97:cb:4c:d8:cd:7e:cd:65:43:cd:
b3:4c:b5:53:fe:ac:9a:66:a5:84:b5:6e:2a:5f:19:
9e:74:4b:1e:d0:09:bc:2b:8c:86:e1:8e:95:e9:4e:
c0:6b:c0:54:0a:ec:7c:02:12:4b:38:16:f3:da:14:
6e:17:02:a8:31:bb:1c:88:a6:f4:de:da:d3:46:78:
1f:2f:58:d7:51:39:4e:c0:89:f5:f8:9a:7e:59:f7:
39:91:01:d5:c6:de:56:14:70:0f:a0:23:e2:16:15:
07:57:38:e0:5e:ab:7d:26:fe:fc:75:ec:7e:d6:01:
34:d6:2c:e7:32:03:51:17:97:5a:f8:a7:48:ef:b6:
64:aa:dc:b0:d2:1a:01:d8:06:71:5d:08:11:90:62:
28:ff:54:21:9d:6a:ea:6d:ae:03:2d:7b:dd:b8:ef:
4e:9f:10:48:a4:ae:b9:d9:71:84:2c:75:34:6d:85:
3c:89:23:7d:7e:03:38:b0:e8:9a:f5:c3:4c:f6:73:
b3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B1:13:66:33:B2:C1:2E:FF:01:A3:4E:B9:2C:05:6F:E3:B3:57:85
X509v3 Authority Key Identifier:
keyid:95:EB:D8:06:6F:10:90:C3:11:9C:DB:69:E9:D4:DC:40:D9:03:04:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/levYBm8QkMMRnNtp6dTcQNkDBPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0dff12-4e72-430e-9df6-bdaa6fbd4347/1/levYBm8QkMMRnNtp6dTcQNkDBPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:71:00:01:b3:d8:35:ce:21:ea:61:60:40:42:c6:a3:7e:d1:
c8:de:12:ec:e5:c1:f8:4d:dd:17:fd:64:cb:b5:99:4e:86:7b:
0e:58:ab:98:88:29:00:8f:99:f6:d8:cc:81:b0:15:cc:88:80:
5d:6d:87:8b:1c:ee:a8:9d:b5:c8:2a:55:5c:3e:0f:8f:3e:21:
f2:41:e4:03:9a:25:d8:de:c0:7e:53:31:25:f4:d6:bc:88:b1:
0f:04:81:f1:08:b4:95:a9:28:5f:83:77:e7:03:0c:3e:c4:7f:
81:76:04:33:a8:1f:f8:76:c9:5e:ae:8c:15:5a:f6:56:3f:67:
ca:39:19:c8:79:b5:2a:e2:7f:07:99:89:1c:5d:fa:35:f7:26:
90:ac:4c:49:86:32:e6:be:e7:17:d7:9b:6c:e8:a2:32:26:e9:
1a:f5:6d:0a:02:60:16:64:1f:17:80:2c:50:34:c2:17:1c:38:
31:03:1c:49:fb:51:cc:4a:27:e0:d8:1a:8c:80:ea:0a:fd:a5:
69:27:1a:56:39:ac:80:b5:23:6b:73:c0:6f:1e:0b:f2:a9:47:
4f:4e:db:58:20:d3:72:98:00:42:96:d7:a9:3e:59:58:a8:17:
ec:da:de:3c:81:8c:74:c8:83:6a:e3:c5:12:3d:80:b1:a4:b5:
c4:76:9c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 01:09:16 2025 by rpki-client