Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
File: clLH1e2MWivCrQMGXUHD5LOsFXU.mft (raw, json)
Hash identifier: huyoj1263iJk6W5XmBTCJx+KhxNhvk72xCpMK+9Ibac=
Subject key identifier: B5:AD:B2:EE:81:20:7D:5A:22:A1:6C:3E:88:8E:1F:06:56:61:26:23
Authority key identifier: 72:52:C7:D5:ED:8C:5A:2B:C2:AD:03:06:5D:41:C3:E4:B3:AC:15:75
Certificate issuer: /CN=7252c7d5ed8c5a2bc2ad03065d41c3e4b3ac1575
Certificate serial: 0196C9F253E369191A7FCB63D8C436A017F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clLH1e2MWivCrQMGXUHD5LOsFXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
Manifest number: 123A
Signing time: Tue 13 May 2025 14:00:23 +0000
Manifest this update: Tue 13 May 2025 14:00:23 +0000
Manifest next update: Wed 14 May 2025 14:00:23 +0000
Files and hashes: 1: clLH1e2MWivCrQMGXUHD5LOsFXU.crl (hash: hRIvJG1nwiug59TAwzquwQnOZs963NFpTJ6Fg600k+A=)
2: pEayhHqE2LsS2JqNOu8wTigFXWQ.roa (hash: xO5IfYrXWQX7NXGLAWvUM5o4fMaOdr7urJcP0f6HOKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/clLH1e2MWivCrQMGXUHD5LOsFXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:f2:53:e3:69:19:1a:7f:cb:63:d8:c4:36:a0:17:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7252c7d5ed8c5a2bc2ad03065d41c3e4b3ac1575
Validity
Not Before: May 13 14:00:23 2025 GMT
Not After : May 14 14:00:23 2025 GMT
Subject: CN=b5adb2ee81207d5a22a16c3e888e1f0656612623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ec:ee:bf:f2:99:8b:5d:b8:43:d4:0a:3e:a1:
a6:29:15:ce:84:00:e0:02:76:2d:ae:c7:1f:82:be:
2a:e5:43:63:b6:58:24:96:72:77:ee:ce:f6:f6:0b:
40:b4:8f:c6:e5:ee:22:4c:cc:a1:e9:eb:f6:1e:67:
52:2e:93:f2:23:f6:f0:fb:7a:20:80:e4:a4:a3:e5:
f1:12:28:f7:73:c1:14:29:29:5c:96:5a:9d:a5:1c:
f4:20:25:10:74:dc:b8:5f:0c:4e:a4:3b:43:01:10:
89:16:c8:fa:81:07:88:49:47:4e:18:4c:ac:50:da:
a3:a4:d3:f8:b6:e7:f9:1a:9e:b1:aa:8a:36:e1:9e:
ad:05:da:c7:31:3d:9e:b9:bd:41:0f:de:ed:46:b2:
86:95:45:f1:6b:8c:b6:1c:05:c0:40:32:bf:32:bf:
f5:a9:a0:20:c6:8b:44:95:fa:05:d1:6a:fa:a4:30:
2d:cd:e1:d4:9a:ac:02:68:5b:9e:27:1c:6f:cd:d0:
b1:2f:c4:dc:45:81:57:d8:fd:a1:c5:2b:fd:24:3f:
0f:13:5d:8d:1f:25:ec:f1:3a:f9:e6:59:e1:0f:c0:
75:ec:8b:ec:82:80:76:18:47:f5:9f:40:d8:d0:f7:
03:a4:80:b3:34:ef:ec:f0:7c:ff:05:2b:67:ee:7a:
28:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:AD:B2:EE:81:20:7D:5A:22:A1:6C:3E:88:8E:1F:06:56:61:26:23
X509v3 Authority Key Identifier:
keyid:72:52:C7:D5:ED:8C:5A:2B:C2:AD:03:06:5D:41:C3:E4:B3:AC:15:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clLH1e2MWivCrQMGXUHD5LOsFXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e5:91:ef:47:b9:82:60:38:cb:7c:c0:13:76:c8:b1:4b:25:
fc:9b:ca:60:bd:b9:f0:39:85:4b:d9:a7:2c:44:d8:a2:e4:f8:
3b:7c:f8:6d:87:73:1d:4e:a8:db:83:d6:f2:cd:72:3f:fb:52:
41:33:d8:1c:7f:94:b0:a5:f1:1c:07:d0:26:fc:66:8c:5f:33:
4a:43:22:7a:31:ef:62:71:b2:93:4a:dd:f8:97:e1:55:16:3d:
47:d4:ce:cf:55:de:78:d5:a2:ec:81:e6:d3:5c:81:98:de:6f:
09:aa:46:cf:fd:29:0d:5f:1a:5c:95:38:f8:ba:c8:f3:45:8c:
a8:3e:10:00:c0:f8:1e:c3:78:68:7a:ec:b1:c0:f0:01:42:78:
f4:79:dd:1f:dd:b8:db:12:0e:d4:6b:65:c9:cf:07:fd:69:83:
0c:ce:b6:8b:d4:b2:b1:d2:e2:31:ab:21:a7:f7:00:fb:19:83:
eb:74:7c:87:85:95:b3:5c:41:e1:d1:e6:af:6d:d5:9e:49:da:
02:d3:eb:6d:93:2a:5c:ce:4e:47:2e:7e:0f:37:a9:4b:bb:2a:
0f:1b:d6:98:5e:90:1a:ab:fc:9b:e3:60:7a:51:7e:6a:3b:71:
a8:b6:a3:ce:22:bf:d6:1d:3d:b8:12:55:80:6c:6a:70:4a:1d:
df:1a:6b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:15:03 2025 by rpki-client