Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.mft
File: LswQU0wEJcv21GXoQRT_euDwsFI.mft (raw, json)
Hash identifier: JgtWSFa91bNEZuXGnm1Ylbe1TDh6t0QyRgCQN+6ZyT0=
Subject key identifier: 32:B2:52:0A:1C:FE:C7:84:EA:15:A7:A1:12:60:A0:77:A2:B2:70:C7
Authority key identifier: 2E:CC:10:53:4C:04:25:CB:F6:D4:65:E8:41:14:FF:7A:E0:F0:B0:52
Certificate issuer: /CN=2ecc10534c0425cbf6d465e84114ff7ae0f0b052
Certificate serial: 0196D889D115B5A2C60EA3698861EF5AAD1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LswQU0wEJcv21GXoQRT_euDwsFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.mft
Manifest number: 05C1
Signing time: Fri 16 May 2025 10:00:32 +0000
Manifest this update: Fri 16 May 2025 10:00:32 +0000
Manifest next update: Sat 17 May 2025 10:00:32 +0000
Files and hashes: 1: LswQU0wEJcv21GXoQRT_euDwsFI.crl (hash: SuzSIbY3qbNu7frRVIrq/z4/crOIVS4Tr1+pj+1r9ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LswQU0wEJcv21GXoQRT_euDwsFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d8:89:d1:15:b5:a2:c6:0e:a3:69:88:61:ef:5a:ad:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ecc10534c0425cbf6d465e84114ff7ae0f0b052
Validity
Not Before: May 16 10:00:32 2025 GMT
Not After : May 17 10:00:32 2025 GMT
Subject: CN=32b2520a1cfec784ea15a7a11260a077a2b270c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6d:72:d7:47:6a:fe:bb:76:00:23:33:f8:ac:
53:fd:dd:cc:34:2e:cb:35:d4:13:bc:7e:1f:79:28:
30:e9:ec:aa:50:60:64:45:92:c8:cc:c6:04:a9:90:
f6:67:93:65:8c:ad:0d:a8:0f:4a:13:db:8d:e8:85:
77:d0:92:38:9e:07:87:0a:fa:6d:b2:1d:cb:a1:93:
d5:cb:1b:f8:df:a6:0d:15:5b:9b:19:49:2e:dc:39:
97:fd:06:7e:88:34:9b:2d:2b:e7:9c:b8:f4:0e:9c:
88:e1:db:53:ed:22:94:be:1e:82:a8:ac:54:00:c9:
55:d7:01:c4:65:80:2f:81:cd:d7:d4:1a:60:57:1d:
59:ee:1d:75:19:f4:8d:0d:e7:00:ce:75:3c:5f:98:
5d:f8:82:0a:67:d4:28:16:bc:9f:1d:d6:cf:f2:c7:
ef:da:c0:74:08:01:47:d9:fb:69:87:ab:07:41:90:
27:9b:e4:0f:76:ae:c7:d9:75:3e:30:25:e4:95:71:
0c:ea:c8:0b:99:49:48:41:6c:86:64:db:0c:0a:02:
84:80:72:63:09:c3:17:91:aa:c6:cc:31:2b:8c:56:
3d:06:41:36:6e:a2:8f:80:84:da:6a:1d:04:8f:98:
97:fc:46:31:02:62:9a:45:e2:e9:68:b7:24:ab:a5:
5f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B2:52:0A:1C:FE:C7:84:EA:15:A7:A1:12:60:A0:77:A2:B2:70:C7
X509v3 Authority Key Identifier:
keyid:2E:CC:10:53:4C:04:25:CB:F6:D4:65:E8:41:14:FF:7A:E0:F0:B0:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LswQU0wEJcv21GXoQRT_euDwsFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:90:fe:12:95:c3:46:6d:cf:b7:fc:01:d8:4b:3c:d9:07:10:
0a:20:85:8a:1c:d5:90:5c:91:43:0c:35:3f:b1:1d:13:51:c0:
3c:54:c3:ee:48:fe:cc:9b:9c:a9:2f:05:96:62:16:6d:7f:09:
d3:90:ed:5b:bf:41:5d:cb:b8:b2:0d:1a:fe:01:6b:64:65:79:
0d:97:4d:bc:b7:e8:d8:f9:fb:8d:88:c6:c7:19:98:60:e2:27:
bd:f9:3f:28:44:7a:2f:73:2e:06:c4:0f:62:e8:94:fc:ca:2f:
6b:d1:a7:c8:71:d0:5b:a3:47:03:d3:eb:4a:65:6f:fd:fb:4f:
55:b3:89:00:c4:e0:43:cf:28:7c:5b:24:f9:94:a4:de:6a:42:
81:a2:fd:60:1f:92:44:54:45:0f:fb:d1:13:a3:03:f6:c2:1f:
0c:c9:85:8e:38:38:22:38:6b:a9:65:45:bc:d2:e8:6c:05:ca:
93:22:4d:90:43:bb:6c:a8:10:1a:0f:6a:55:40:61:57:52:ff:
70:7f:c5:f7:2a:bb:0f:0c:88:82:ff:7c:03:99:3a:31:b7:69:
ab:48:da:a8:5a:83:63:51:a8:fa:b1:a4:29:ec:f0:e2:9a:14:
3d:f5:4f:24:50:d5:bc:24:c1:7e:64:fa:0a:f8:02:89:f2:d8:
33:05:7f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 12:16:40 2025 by rpki-client