Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
File: jlNMDBgsQ4N_LCvU7csLizq-luk.mft (raw, json)
Hash identifier: 6JY3v6ndyTjA5dtxzkMt9kSdwGXnHpyC8eTSYKicHM4=
Subject key identifier: 4C:83:4F:DE:72:5B:04:27:60:99:DF:50:C8:67:02:EB:F2:C2:F0:0A
Authority key identifier: 8E:53:4C:0C:18:2C:43:83:7F:2C:2B:D4:ED:CB:0B:8B:3A:BE:96:E9
Certificate issuer: /CN=8e534c0c182c43837f2c2bd4edcb0b8b3abe96e9
Certificate serial: 0196BB5AD997870BABEDB644C9B5DDA0DB66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
Manifest number: A0
Signing time: Sat 10 May 2025 18:00:15 +0000
Manifest this update: Sat 10 May 2025 18:00:15 +0000
Manifest next update: Sun 11 May 2025 18:00:15 +0000
Files and hashes: 1: U_5c8CxOIHHrRakjJdwAMkWA57k.roa (hash: QboBS3SLtO5jQZfeGl+2o8dQ0vIC+Re5+Wn8IQ4OL28=)
2: jlNMDBgsQ4N_LCvU7csLizq-luk.crl (hash: v1UqMsk87g1zf+hG/wMUuaAGNS5jt9UCXKF2L2KD+j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:5a:d9:97:87:0b:ab:ed:b6:44:c9:b5:dd:a0:db:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e534c0c182c43837f2c2bd4edcb0b8b3abe96e9
Validity
Not Before: May 10 18:00:15 2025 GMT
Not After : May 11 18:00:15 2025 GMT
Subject: CN=4c834fde725b04276099df50c86702ebf2c2f00a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:69:8e:16:df:15:17:bc:e2:bb:8b:1a:57:bd:
4a:4b:c0:de:6d:85:b3:d1:72:34:0a:d2:0b:90:f2:
2b:dd:0b:02:17:b6:3a:7e:25:0d:6e:73:02:7d:f3:
3c:e7:24:fd:ef:01:95:10:e8:ff:56:6b:54:c6:c2:
c7:94:1c:c3:f8:76:64:63:05:9c:24:c7:fd:6a:d4:
ec:bd:22:a0:95:47:c0:06:f4:f8:ee:b1:d4:ad:e2:
e0:59:1c:7a:7d:60:7c:2a:46:af:36:d2:66:39:32:
11:61:3b:3c:63:ae:88:8e:e8:52:06:0e:a0:bb:db:
db:bf:7b:8e:e0:8c:4d:a1:ac:f6:14:2d:a9:fc:a6:
ad:50:c1:23:4d:8a:40:a8:b2:04:97:cc:7e:58:84:
08:2f:ae:36:ae:3d:e2:e6:a3:75:b3:55:ab:85:41:
7a:64:c6:62:7a:0d:a6:5a:9a:5d:cb:5c:4a:20:4f:
1a:15:24:69:54:4b:3e:8d:ae:4e:7c:ae:24:73:eb:
d8:11:8b:9a:15:bf:93:c2:28:a2:b4:25:d7:83:de:
eb:d6:95:a1:ee:39:bf:c7:60:16:4b:61:7e:f2:1f:
09:77:f9:f5:55:44:be:1b:ea:86:01:29:d9:a1:4f:
76:1c:46:6e:be:3e:a3:f9:24:4e:17:c5:ef:89:98:
2d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:83:4F:DE:72:5B:04:27:60:99:DF:50:C8:67:02:EB:F2:C2:F0:0A
X509v3 Authority Key Identifier:
keyid:8E:53:4C:0C:18:2C:43:83:7F:2C:2B:D4:ED:CB:0B:8B:3A:BE:96:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:89:10:03:0c:30:e8:84:93:70:17:f3:e7:c4:5f:60:1a:2e:
7a:a8:4c:54:7d:51:a1:b1:ae:1b:83:7e:37:97:cf:da:f7:6c:
1f:0a:8f:d0:88:2a:84:fa:36:02:f1:47:88:da:e2:8d:d8:03:
33:b6:5e:a8:a4:d1:2b:c7:94:42:f4:02:ec:fd:0e:cd:02:c8:
12:8e:a9:dd:17:fe:87:3b:28:3f:82:f5:ce:f8:ca:4c:42:14:
6c:c5:c9:d2:7f:ef:26:07:1c:41:6e:db:e6:ad:45:39:e7:f8:
05:30:92:e3:13:88:50:d5:4e:af:6b:23:02:3e:15:9c:0a:70:
b4:2d:d2:b1:1d:a8:09:18:83:08:c4:31:e3:b4:79:9f:66:35:
d1:71:fd:53:fb:3b:7e:fa:1c:f0:d8:da:19:5e:48:2b:e5:00:
83:7a:b8:31:3d:cc:98:88:0d:b4:26:6a:7a:76:e3:03:9b:4d:
86:29:7a:76:dc:c3:d9:2f:5d:57:c9:3e:d7:00:c6:9a:69:53:
91:97:74:42:2f:fc:00:67:4f:16:7c:fc:57:0c:7d:fc:fe:04:
7d:ce:a1:76:39:66:34:b9:d1:48:b0:a4:43:58:33:37:6c:94:
90:86:6f:29:95:c5:c0:fa:e9:c1:ad:82:62:e1:ba:a1:c0:d2:
c4:10:a9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:43:07 2025 by rpki-client