Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
File: lgYvXdsY-W14SSs1ONd0XMRxSiY.mft (raw, json)
Hash identifier: VkD/AwSMPRZ03ltXlUy/oGTbmTNh9ygKHHa8JYcFTCQ=
Subject key identifier: C5:4A:CF:F5:FD:3D:42:0D:40:90:BA:F1:8F:B7:DF:40:49:A1:EE:C4
Authority key identifier: 96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
Certificate issuer: /CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Certificate serial: 0196C503435F1FF4F0845E93DF6FB5D55157
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
Manifest number: 081A
Signing time: Mon 12 May 2025 15:00:47 +0000
Manifest this update: Mon 12 May 2025 15:00:47 +0000
Manifest next update: Tue 13 May 2025 15:00:47 +0000
Files and hashes: 1: lgYvXdsY-W14SSs1ONd0XMRxSiY.crl (hash: Z+FAI1+rBG7q/qsiVT3pz8m2iNAgYgGfCeKgM4MkgXE=)
2: tfoDF7zyFas9gs6WFrVbnqLVtKs.roa (hash: x+5zZ3Gyf9InZ2EuLZGBkdxKiWzA8pOKE0Jk5ZEXWWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:03:43:5f:1f:f4:f0:84:5e:93:df:6f:b5:d5:51:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Validity
Not Before: May 12 15:00:47 2025 GMT
Not After : May 13 15:00:47 2025 GMT
Subject: CN=c54acff5fd3d420d4090baf18fb7df4049a1eec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:34:7a:20:1b:d8:67:80:06:f6:76:7d:52:3b:
90:94:51:51:b4:9e:66:62:4b:20:d5:f8:d6:88:e1:
a6:26:4e:35:5f:5c:61:c6:f5:b2:be:60:82:12:7a:
55:c9:d9:c7:3c:5c:32:b9:22:09:80:4c:5c:d9:05:
eb:90:29:84:5c:7e:3a:0e:65:2d:b9:66:15:56:f2:
2f:f5:86:7f:69:fc:f8:fe:70:6e:ca:b5:3d:c9:9e:
52:f9:33:89:e2:53:fe:d2:37:31:e6:00:a6:71:1c:
9e:b1:50:49:be:68:8d:00:56:b1:91:e3:8a:65:75:
af:37:0e:6d:fe:b9:7c:42:c7:18:a3:4f:81:f0:aa:
e2:1e:27:f4:32:7e:98:ba:61:b9:4f:f4:69:db:e8:
05:a6:45:87:f8:03:6e:7c:eb:a5:86:b8:03:28:65:
f5:17:81:c9:64:3f:e0:4c:8b:d7:15:9b:97:94:cd:
98:e2:dc:7e:80:3f:2f:4a:34:52:c8:3c:53:ef:f1:
ee:8b:41:de:34:39:ff:fc:c4:33:4d:1e:d2:d1:90:
86:56:e8:2a:c8:6b:7f:db:63:3f:c6:6e:f6:7f:a5:
92:14:7f:01:f7:85:8b:e8:1e:72:32:e0:da:89:8b:
24:f9:40:7a:81:25:ea:80:d4:10:77:33:df:61:c5:
eb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:4A:CF:F5:FD:3D:42:0D:40:90:BA:F1:8F:B7:DF:40:49:A1:EE:C4
X509v3 Authority Key Identifier:
keyid:96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:fd:d7:70:fa:5e:39:1b:cc:55:01:83:10:ca:fa:1c:41:51:
75:3c:f4:fa:5d:6e:e8:54:50:e2:fe:de:e3:62:57:bc:5b:4f:
a0:90:06:2d:02:3d:11:83:08:e7:1a:0f:da:96:21:f5:f7:29:
07:1a:31:a6:0e:0a:58:07:9a:c6:b3:ab:64:61:9c:d0:b0:af:
9b:36:d9:22:01:9d:19:e5:0c:23:60:04:2a:10:f2:4b:29:ab:
39:f5:52:38:18:44:17:95:6d:51:be:b0:4d:d7:3f:cc:24:6d:
c7:c5:f1:09:21:3a:d3:94:dc:9f:8f:ed:25:0e:04:32:a2:5c:
bc:85:8c:e9:8e:04:b3:f7:96:7d:48:99:1d:82:3c:aa:7c:9d:
93:05:17:e0:2d:d7:0c:c8:b0:5a:b4:f9:cb:d6:b0:a6:24:ef:
b9:cc:5c:d4:ad:8a:e3:fe:cf:46:b8:14:52:41:cd:09:b5:6b:
65:cb:57:de:7e:8b:c6:06:35:02:f5:c3:1b:19:7e:cf:00:a7:
56:da:93:3a:e3:5f:e8:ae:15:8c:43:1f:fa:48:28:3c:c4:eb:
3f:62:40:7c:fd:d8:68:7c:21:1b:80:b9:ac:ff:99:db:b4:b5:
1c:14:e4:13:84:23:5a:01:f0:f6:94:40:4a:9c:d9:09:53:1b:
d5:07:17:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 21:15:05 2025 by rpki-client