Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.mft
File: i5LFXos1lQd133Y-dJMNUinJ-gA.mft (raw, json)
Hash identifier: 6q4dYNdwGfzcFKntigd/sr0q0v3RLRr18L1bmpomRcA=
Subject key identifier: 15:EB:D3:6D:EA:E0:37:79:74:D7:39:CF:AD:5F:39:1C:20:CE:C1:F5
Authority key identifier: 8B:92:C5:5E:8B:35:95:07:75:DF:76:3E:74:93:0D:52:29:C9:FA:00
Certificate issuer: /CN=8b92c55e8b35950775df763e74930d5229c9fa00
Certificate serial: 0196BBC8AD506DF2F5B7C86C28C218DC27B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5LFXos1lQd133Y-dJMNUinJ-gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.mft
Manifest number: 14C6
Signing time: Sat 10 May 2025 20:00:13 +0000
Manifest this update: Sat 10 May 2025 20:00:13 +0000
Manifest next update: Sun 11 May 2025 20:00:13 +0000
Files and hashes: 1: LNuPziOYyIrKubsBwXhoqEItKOI.roa (hash: HVHsB2c8MGUhz2rUlgm+F2HzTtyYnTiTaoLJeI/5tZw=)
2: i5LFXos1lQd133Y-dJMNUinJ-gA.crl (hash: PLAI2kcq30VGNIP+pmAl5mjkoiP4bBqI+ZFvodvIOAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5LFXos1lQd133Y-dJMNUinJ-gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 20:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:c8:ad:50:6d:f2:f5:b7:c8:6c:28:c2:18:dc:27:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b92c55e8b35950775df763e74930d5229c9fa00
Validity
Not Before: May 10 20:00:13 2025 GMT
Not After : May 11 20:00:13 2025 GMT
Subject: CN=15ebd36deae0377974d739cfad5f391c20cec1f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:bf:1f:49:7e:ba:f8:16:f3:98:4e:e7:2e:04:
ce:f5:f8:74:c9:dd:5b:93:f2:b8:fc:66:59:14:37:
f2:2b:50:45:85:18:43:1c:4e:2b:cc:5a:6c:fd:7a:
f5:7d:98:c1:04:b1:93:42:1b:9a:7a:7b:ae:de:c8:
d6:af:fe:86:af:17:32:21:9d:e5:fd:58:ab:5a:80:
08:0c:12:90:55:1f:fb:59:af:b9:f4:49:06:5f:d9:
c2:ca:b6:6b:e4:66:fd:75:d6:11:c6:c2:66:30:02:
e2:e4:c7:57:69:a1:67:3f:1f:07:b9:13:c0:d3:ca:
a2:a5:1d:41:50:7f:09:2a:64:87:ab:b0:84:43:bd:
fc:a2:59:48:73:09:1e:2b:91:32:02:0e:bb:8a:d3:
fb:32:77:57:48:c1:46:4e:a3:c5:f1:64:20:a2:bf:
67:b8:07:af:a6:38:ff:32:e0:ce:e7:3f:8d:2e:90:
e5:d5:23:05:c9:b0:49:20:5d:2b:7c:cc:fb:4e:f3:
11:79:40:6d:c5:84:37:d6:f4:a2:67:e2:29:6f:33:
f0:2e:dd:06:b4:db:c7:f3:14:aa:e3:90:4a:61:9c:
91:51:cc:ff:77:cd:4c:cc:7a:be:f8:c8:d0:8b:7c:
3c:08:a1:cd:5a:4c:ba:5a:46:1f:13:4c:47:7e:a2:
5d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:EB:D3:6D:EA:E0:37:79:74:D7:39:CF:AD:5F:39:1C:20:CE:C1:F5
X509v3 Authority Key Identifier:
keyid:8B:92:C5:5E:8B:35:95:07:75:DF:76:3E:74:93:0D:52:29:C9:FA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5LFXos1lQd133Y-dJMNUinJ-gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:67:93:aa:20:c0:1d:56:ee:9d:ee:e1:92:e8:bb:a3:66:44:
40:2b:34:b6:41:a1:ac:ee:dc:c0:97:e7:e4:6d:8e:e4:64:24:
72:15:76:64:ae:fb:a9:af:a0:27:ad:6a:84:a7:2e:05:d0:07:
cb:9e:34:6e:9b:14:81:17:84:c2:70:07:e4:41:13:99:0a:22:
aa:44:0d:bb:cc:5b:38:2a:e2:85:c3:66:93:68:15:27:ac:35:
63:6f:5e:9d:71:00:46:14:38:bb:85:09:b8:4f:85:84:ff:07:
f4:40:ee:cc:c4:ef:ad:81:63:6d:4a:7e:d4:96:77:b8:f8:89:
84:d7:d5:ce:e0:2c:c0:05:c7:22:0b:13:15:91:65:10:32:b3:
57:43:58:b8:f8:ab:30:b2:20:75:05:03:a5:99:23:12:e5:d2:
36:b9:4b:ac:a7:60:7a:4c:f1:47:51:1c:55:73:e9:db:10:a3:
51:95:78:22:4d:08:1e:07:97:51:4a:1f:0f:93:7d:90:90:56:
5e:cd:54:13:77:4c:58:1d:79:96:4c:c7:2a:f1:8d:75:1d:7f:
53:58:a9:25:15:9e:f3:c7:71:aa:44:9a:32:71:c0:eb:87:ae:
68:94:d7:7e:9e:ab:ee:28:86:14:fa:06:8c:89:3f:36:b1:59:
aa:13:44:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:02:18 2025 by rpki-client