Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
File: 1lAD4kzs-_jowV_2N90V201_rpI.mft (raw, json)
Hash identifier: y+WoBPBWxq9OKmHmIxGibtjUlnzQtvfjKp4lCIWgXK8=
Subject key identifier: 04:92:A2:79:5B:E6:24:CC:E3:75:4E:01:0D:7D:62:CB:90:30:56:6C
Authority key identifier: D6:50:03:E2:4C:EC:FB:F8:E8:C1:5F:F6:37:DD:15:DB:4D:7F:AE:92
Certificate issuer: /CN=d65003e24cecfbf8e8c15ff637dd15db4d7fae92
Certificate serial: 0196C2700522BB2CEB7394563B0276FD4217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
Manifest number: 11C9
Signing time: Mon 12 May 2025 03:00:43 +0000
Manifest this update: Mon 12 May 2025 03:00:43 +0000
Manifest next update: Tue 13 May 2025 03:00:43 +0000
Files and hashes: 1: 1lAD4kzs-_jowV_2N90V201_rpI.crl (hash: WhKaAbyteSWAk3JmgSCvMUh4z/OUpnE4RZGLmAkBBaA=)
2: kLDW8S2AqSM38SEqcZhk6y6H9Zs.roa (hash: 1uyD9ShIaMoUE8tZ7cjyGLh54i2J2KfHSIYSBkC6vac=)
3: wIodltuZamN_XbrkxPEbxEvk-zQ.roa (hash: rVn8wcQMjL6Fr2tjBFZGRxqvuP5jpiydhf+juvmtDHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:70:05:22:bb:2c:eb:73:94:56:3b:02:76:fd:42:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d65003e24cecfbf8e8c15ff637dd15db4d7fae92
Validity
Not Before: May 12 03:00:43 2025 GMT
Not After : May 13 03:00:43 2025 GMT
Subject: CN=0492a2795be624cce3754e010d7d62cb9030566c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:20:06:48:f5:1c:ae:1b:4c:71:70:ba:af:6f:
43:8f:5d:89:34:8f:49:0c:c6:2f:30:56:42:88:64:
9d:49:ac:06:4f:d9:4a:9a:33:90:e9:3c:f7:2a:9b:
ed:16:48:58:e6:40:5b:9c:3f:76:c6:25:92:65:30:
b7:c9:56:43:c1:14:e0:e8:85:88:e0:cb:04:81:ad:
b5:54:79:5b:59:0e:ca:ef:36:88:7c:b3:dd:94:95:
76:fc:3a:2a:98:8b:b7:20:56:e5:54:d8:2a:0d:43:
a9:50:e1:69:b0:7a:d0:74:c2:47:c0:cc:01:ce:1a:
b1:fb:73:fa:e3:ee:36:14:73:ad:13:df:74:ba:10:
a5:5b:cd:e5:3a:6a:28:9d:0c:39:f2:3e:11:d6:37:
c1:57:9b:ab:a6:2e:a4:a4:ac:b9:7a:63:d8:9c:d9:
36:a8:33:21:6f:70:83:2b:a1:06:45:49:34:41:88:
8e:b7:50:13:26:78:dc:1b:15:17:34:2a:ae:50:29:
d7:96:c4:34:22:48:77:5b:e9:49:cf:97:71:f4:4e:
9e:4f:a8:72:bd:7b:70:14:d3:ec:5f:4c:e1:2b:02:
33:ba:f3:94:67:6e:a4:4c:12:c7:bc:00:4f:0d:73:
c0:96:2c:6b:f5:14:c7:a5:4b:cb:a2:30:b4:d4:23:
b0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:92:A2:79:5B:E6:24:CC:E3:75:4E:01:0D:7D:62:CB:90:30:56:6C
X509v3 Authority Key Identifier:
keyid:D6:50:03:E2:4C:EC:FB:F8:E8:C1:5F:F6:37:DD:15:DB:4D:7F:AE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:06:9a:60:ac:b2:09:03:33:fc:25:7f:72:ab:58:42:6b:a9:
9a:47:f8:8e:f6:c2:3e:af:13:bc:e1:4b:d5:4b:ff:81:73:27:
1c:2c:ba:c6:9f:ff:ce:5f:69:12:8c:20:e4:1b:75:bd:e7:bb:
f1:7e:5b:6b:7c:f5:ae:1f:bf:d0:b7:6c:71:db:4f:30:f2:e0:
ae:db:5f:b4:15:38:03:d9:39:4f:58:13:a9:9c:09:09:f2:b5:
b4:94:e1:71:15:1f:3b:95:a1:57:d5:62:f0:0b:a1:5f:30:0f:
88:49:f4:f3:f6:9e:31:a5:af:a4:f0:5d:b6:90:43:48:25:79:
25:ad:f5:01:d7:e9:fc:98:e7:4a:3b:6e:5f:3e:c5:72:0e:be:
ed:5c:b0:46:94:12:a8:56:48:c1:82:22:fe:90:0b:b0:2d:79:
70:45:dc:93:9f:92:28:74:7c:71:f7:ae:bb:b2:51:c3:aa:0f:
42:25:fe:cf:ae:78:f5:93:3a:f0:ac:2e:27:29:2f:67:da:5a:
ba:38:9a:58:88:1d:bb:af:8e:ef:75:9f:11:5d:7a:92:0e:4d:
35:f9:0d:ab:a3:da:ae:7d:63:7f:7e:fa:52:6f:73:18:d2:29:
e1:de:7e:db:e5:17:2e:49:a5:31:93:46:d6:42:01:d8:38:9b:
f8:fd:99:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:34:34 2025 by rpki-client