Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/ee5314-cc34-465e-ab61-664267ed6a7e/1/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.mft
File: Lxs59_Cp5iqgYEm4zKMNIvUtBDU.mft (raw, json)
Hash identifier: FarOV8gvSKQwWkF9LcbQcrM6NCVZ+hhBXSDAWYIeISI=
Subject key identifier: 98:A8:D1:1F:41:60:D8:31:95:D9:2C:F1:AD:BB:D6:41:70:3C:A4:67
Authority key identifier: 2F:1B:39:F7:F0:A9:E6:2A:A0:60:49:B8:CC:A3:0D:22:F5:2D:04:35
Certificate issuer: /CN=2f1b39f7f0a9e62aa06049b8cca30d22f52d0435
Certificate serial: 0196C53A385F500880F01FFAC411B22B736D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/ee5314-cc34-465e-ab61-664267ed6a7e/1/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.mft
Manifest number: 0997
Signing time: Mon 12 May 2025 16:00:48 +0000
Manifest this update: Mon 12 May 2025 16:00:48 +0000
Manifest next update: Tue 13 May 2025 16:00:48 +0000
Files and hashes: 1: Lxs59_Cp5iqgYEm4zKMNIvUtBDU.crl (hash: dKRSFccWYqqEmvVFF55kTInDwC2zKRElvc+ZBohxAFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/ee5314-cc34-465e-ab61-664267ed6a7e/1/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/ee5314-cc34-465e-ab61-664267ed6a7e/1/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:3a:38:5f:50:08:80:f0:1f:fa:c4:11:b2:2b:73:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f1b39f7f0a9e62aa06049b8cca30d22f52d0435
Validity
Not Before: May 12 16:00:48 2025 GMT
Not After : May 13 16:00:48 2025 GMT
Subject: CN=98a8d11f4160d83195d92cf1adbbd641703ca467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:48:69:cb:8e:1c:4e:5f:cb:eb:f1:2b:03:13:
02:b1:7f:ae:40:65:f1:74:61:eb:ca:c7:f3:05:05:
69:9d:58:bb:a2:f1:d2:b2:6a:7e:f6:76:d0:f9:10:
d7:ac:c7:f2:9a:cd:4c:d9:77:48:41:11:fb:a2:a4:
64:66:98:e4:20:7f:5e:3a:c5:93:30:8f:0f:bf:16:
7e:65:ac:7d:6f:07:5f:df:ce:ba:c5:08:2d:54:d8:
cb:1c:e4:16:4a:f7:ab:59:2c:db:ab:02:33:44:37:
fc:8a:70:04:10:92:d6:1c:c2:50:76:f7:f2:63:24:
ce:21:1c:fc:f7:0a:ce:39:6a:1c:1e:17:6a:39:2a:
22:d0:dd:c8:81:4a:5d:e0:3d:11:e3:e8:73:47:46:
d6:fa:03:ee:e6:af:8b:b2:df:98:06:23:68:c1:1c:
8b:a6:ef:a6:d7:c5:ce:51:95:ce:74:84:9a:7e:2a:
85:48:6e:c7:ab:17:b7:b3:51:27:05:6c:cf:97:d3:
9b:dd:7c:d7:63:61:ff:0f:6b:54:97:8b:b1:69:0f:
1c:50:ba:b4:26:25:c4:44:c2:bb:7d:e9:45:3f:c9:
4c:51:9b:20:ab:c6:a2:65:ce:ec:d2:bb:4f:45:e7:
cb:15:3f:b7:2a:fc:51:06:93:ef:70:0b:30:fc:d1:
c7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A8:D1:1F:41:60:D8:31:95:D9:2C:F1:AD:BB:D6:41:70:3C:A4:67
X509v3 Authority Key Identifier:
keyid:2F:1B:39:F7:F0:A9:E6:2A:A0:60:49:B8:CC:A3:0D:22:F5:2D:04:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ee5314-cc34-465e-ab61-664267ed6a7e/1/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ee5314-cc34-465e-ab61-664267ed6a7e/1/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:66:86:88:cb:75:82:b6:e5:47:d9:11:54:ff:3e:ab:09:70:
0b:99:10:66:dc:3f:0c:8e:1f:c2:63:71:ba:fa:d3:0f:df:ed:
40:46:09:91:9a:e2:78:74:af:3e:ba:e6:80:4a:e1:16:20:57:
da:26:6b:2c:e0:62:7f:55:67:ff:b9:6d:00:1e:1f:71:2d:0e:
e9:bb:f9:a2:15:ba:e5:78:55:20:1d:67:11:3c:3e:32:0d:f8:
9e:91:7b:36:74:e3:7d:c1:e5:be:e6:cc:8b:db:3b:70:bf:bf:
ca:0f:a4:25:86:c7:b7:7d:ef:f9:20:f1:75:17:00:3c:5e:c0:
2c:9b:17:e3:c3:84:23:40:7e:ab:10:c0:21:07:9c:c2:c3:1f:
2a:3d:b7:36:4d:b3:a2:cf:7f:0d:34:5e:4e:7b:bf:77:b2:9c:
e9:44:e5:36:99:e7:63:26:20:63:9b:fc:ef:a5:35:1c:6d:e3:
51:ce:ad:8b:57:1a:1d:d6:8f:ba:56:34:b9:a7:61:00:f4:eb:
12:b9:37:11:c7:e9:6d:0f:bc:f8:ea:b3:7a:3b:d7:06:5f:cd:
d9:59:4f:61:a0:47:d0:1a:00:a9:48:b1:6a:35:71:cf:be:c3:
09:58:0a:79:a3:3b:42:b3:b9:3d:86:73:53:41:f5:ae:9f:5f:
a2:ff:4d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:33:57 2025 by rpki-client