Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
File: _LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft (raw, json)
Hash identifier: ejbF9V2tcz+l2c4XBwOte5+wIuWNxNnb3AzM43HLHqE=
Subject key identifier: 78:18:2A:25:40:73:A3:92:31:DB:2A:E1:DE:7A:09:C9:9E:4E:62:8D
Authority key identifier: FC:B3:29:9F:05:C2:0D:63:95:9C:E7:78:1B:5A:8E:07:2F:57:CC:B4
Certificate issuer: /CN=fcb3299f05c20d63959ce7781b5a8e072f57ccb4
Certificate serial: 0196C04A96B2DEBC4FFC4BB8D4C207FB2B99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
Manifest number: 12D7
Signing time: Sun 11 May 2025 17:00:35 +0000
Manifest this update: Sun 11 May 2025 17:00:35 +0000
Manifest next update: Mon 12 May 2025 17:00:35 +0000
Files and hashes: 1: _LMpnwXCDWOVnOd4G1qOBy9XzLQ.crl (hash: eKq6C1de0/sdTAfxTZW6sZA7yHy7iviBq/61LxJdE8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:4a:96:b2:de:bc:4f:fc:4b:b8:d4:c2:07:fb:2b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb3299f05c20d63959ce7781b5a8e072f57ccb4
Validity
Not Before: May 11 17:00:35 2025 GMT
Not After : May 12 17:00:35 2025 GMT
Subject: CN=78182a254073a39231db2ae1de7a09c99e4e628d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d4:6a:c7:48:d2:de:2c:28:97:99:13:d6:b4:
59:b0:94:87:08:75:ed:95:85:04:0b:5c:3b:f6:51:
99:d3:c1:9c:4f:98:b2:5c:9e:67:e7:68:75:de:19:
db:6b:b8:4a:1c:c8:f4:65:17:9c:c0:39:5e:98:07:
08:65:48:53:44:4f:41:0c:ca:57:27:a3:24:57:e7:
a5:f0:a6:80:d9:10:6c:25:da:6d:65:1a:80:bb:1a:
9e:ae:b4:f0:7d:6c:d5:63:d9:cd:ce:02:ce:88:c8:
97:d2:fe:ab:7d:5f:de:b9:84:de:6d:38:4a:8a:95:
aa:27:bf:61:71:ba:75:38:89:b2:7f:4c:cb:aa:e2:
4a:0d:45:a4:1f:41:fb:df:96:47:da:e9:92:e6:0a:
84:80:3d:95:e0:3c:d2:46:9f:3a:30:a0:76:1b:5a:
db:90:0c:5f:99:03:99:fe:c5:4b:55:84:87:0c:8a:
a1:d2:08:f7:c4:ac:62:89:74:bc:da:b5:dd:ed:2d:
9c:04:00:66:ae:a6:9c:02:0c:3c:99:a6:eb:e1:80:
26:ff:37:b6:69:b5:4d:17:69:78:21:b7:26:9b:6f:
df:72:15:0a:46:ae:b7:b5:94:c1:94:98:c8:87:ac:
ac:b3:0e:24:3c:56:ca:24:27:11:77:8e:be:16:63:
6e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:18:2A:25:40:73:A3:92:31:DB:2A:E1:DE:7A:09:C9:9E:4E:62:8D
X509v3 Authority Key Identifier:
keyid:FC:B3:29:9F:05:C2:0D:63:95:9C:E7:78:1B:5A:8E:07:2F:57:CC:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:5f:4c:bf:4a:6f:eb:43:11:1e:d7:f0:7e:f2:30:7b:12:6c:
46:74:1a:b4:b5:8b:92:7c:e2:6d:1a:91:6a:91:1b:fc:23:e5:
7a:e1:a6:e9:03:5b:27:c8:29:15:84:c9:91:4e:92:81:0f:9f:
ae:82:3d:fe:5d:22:e9:8f:7d:c5:2b:a6:f3:4f:f3:07:c9:27:
36:e5:49:48:f2:6a:42:0f:61:10:27:be:d5:d3:e0:4e:d2:bc:
71:a1:86:b6:45:7d:24:5e:53:48:95:bb:8d:9d:98:fc:14:07:
f3:0b:0a:e0:5e:f6:f5:94:b4:5f:89:91:dd:24:f9:c0:c1:8a:
18:43:52:9b:e6:a4:5e:41:71:9b:3a:5e:74:32:6e:7c:db:6c:
84:ab:02:98:ac:80:df:e4:23:ec:2c:35:9b:d1:c7:a6:7b:60:
19:2a:91:68:80:02:7a:5b:86:5e:26:5a:df:37:47:d3:63:8e:
be:8d:d7:60:20:31:7e:a7:d8:27:fc:0c:88:4f:79:ca:2c:ed:
4b:20:15:a6:74:44:4d:5a:73:f6:7b:0e:5e:3e:27:61:13:cf:
19:eb:f9:f1:1d:7f:91:22:de:de:bb:e1:b1:27:b4:43:ef:44:
4d:14:3d:bd:34:66:35:02:25:ae:fa:72:82:2f:a6:27:ee:58:
54:45:07:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:24:58 2025 by rpki-client