Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
File: LiSXk-WSSp8l86Co3ZlLN065N9I.mft (raw, json)
Hash identifier: fq53rte4ZlmYUZ//CZJNrCbrTAxw2qF09z3iknGMKl4=
Subject key identifier: 71:C8:8A:7F:E7:C9:6D:14:45:84:40:01:F7:34:20:CD:DF:1B:5A:A6
Authority key identifier: 2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2
Certificate issuer: /CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2
Certificate serial: 0196BB92C13FD10AAE18121E8838022400AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
Manifest number: 150B
Signing time: Sat 10 May 2025 19:01:19 +0000
Manifest this update: Sat 10 May 2025 19:01:19 +0000
Manifest next update: Sun 11 May 2025 19:01:19 +0000
Files and hashes: 1: FP9KPtAPudwifvNA1yXNkNCFOFY.roa (hash: ocGzp/8Fhd1lCI2svcm4GtNlcaUMkqz9rj4sgodMzFo=)
2: LiSXk-WSSp8l86Co3ZlLN065N9I.crl (hash: Tmclll0joeRdSZ1ot8i5hL46WWVzNJdiSZglH2WontQ=)
3: gzJT4-cX5kiA_JxRqpqJmyeN7rM.roa (hash: j7soth2EwPp+uzVpjpNq3DRnu+ZloTBjkFjkTsLwX1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:c1:3f:d1:0a:ae:18:12:1e:88:38:02:24:00:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2
Validity
Not Before: May 10 19:01:19 2025 GMT
Not After : May 11 19:01:19 2025 GMT
Subject: CN=71c88a7fe7c96d1445844001f73420cddf1b5aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:68:d6:87:db:c6:c0:59:37:a9:cb:a4:1c:41:
2e:6e:6c:6d:ef:ef:94:ff:16:65:a2:f9:06:57:14:
7a:3e:00:92:ed:47:b2:73:12:6f:03:b7:9c:aa:49:
c2:83:d2:fa:00:65:17:0f:65:96:82:9f:90:c5:a8:
3d:6c:c6:dd:ef:27:fc:0a:31:d6:85:28:d0:6c:73:
9d:43:c3:6a:b9:78:81:c3:74:d5:fc:4b:a9:f4:4f:
9d:c9:dc:9e:4e:49:67:9d:5c:73:7f:56:2f:49:7f:
23:fd:17:0d:dc:d8:42:fa:d1:f4:f7:89:f5:41:aa:
ac:5a:37:52:7c:cf:24:93:d3:cf:1f:67:ef:1c:53:
b0:26:bb:87:be:46:2d:51:ac:c6:67:d1:9c:07:64:
57:3e:4a:28:f6:d8:43:24:c3:c6:53:97:c6:26:9b:
bb:0c:c7:11:59:12:31:6e:7d:df:29:7a:22:22:8e:
c5:be:74:cd:db:12:d4:8a:46:70:0e:47:51:c3:e0:
a5:c4:f8:db:9c:04:99:5a:2e:4f:bb:33:d7:fa:5d:
7d:5b:7f:24:9d:ae:20:5d:62:e1:57:2e:25:7b:46:
44:11:32:5d:e1:8a:97:89:18:3b:0a:92:da:5e:51:
aa:18:37:37:fa:32:62:5c:bf:3b:c6:b3:a6:44:9a:
95:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C8:8A:7F:E7:C9:6D:14:45:84:40:01:F7:34:20:CD:DF:1B:5A:A6
X509v3 Authority Key Identifier:
keyid:2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:8d:f5:73:d8:1f:f6:e8:00:51:ff:00:59:a9:a3:9f:87:cf:
9f:e4:2c:fb:19:1a:5a:13:62:10:f8:ee:a4:5d:1c:37:8c:19:
ae:14:d3:89:5e:4f:2a:26:9b:ef:00:a6:b5:85:cc:5f:d0:e3:
e5:86:1a:d9:9c:cf:99:6c:6e:0a:07:7d:98:b5:7a:93:ac:ba:
0c:a5:1d:79:ab:0c:20:1b:90:b3:70:1e:43:0d:81:71:42:e9:
17:ca:d7:6d:d9:32:c4:91:23:c4:01:2d:7a:e9:66:8a:d0:1c:
51:45:a1:93:74:94:d7:1a:ca:bc:cb:2d:21:ec:75:7a:90:ae:
2f:8e:c0:11:a5:82:60:5c:7f:98:5b:74:76:46:08:9d:d9:a2:
91:dc:61:93:e2:27:0e:3b:cc:45:05:ff:42:cd:f0:d8:84:00:
2e:52:2e:ba:86:09:be:79:20:2c:20:3c:64:c8:6a:89:db:a0:
2c:d0:c2:24:bf:a4:20:aa:65:b1:9b:81:2f:41:fb:24:b5:23:
8f:e0:a3:51:3e:8e:41:d7:7d:34:6d:0f:1e:49:13:ea:a9:60:
45:0c:5c:48:4c:db:55:15:19:82:03:57:fb:a2:38:8c:9b:d2:
94:9d:47:10:7d:84:c7:b8:7b:33:9a:85:45:af:a5:28:21:19:
c1:cc:08:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:12:23 2025 by rpki-client