Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
File: ljmhp94G13qyrjOH3Kaaf-x2bEM.mft (raw, json)
Hash identifier: pv/ETDDCZjycLp+hSi1Z2ERZeXjPr9VBbVyI+WKKdKI=
Subject key identifier: E2:90:80:7D:35:B5:B0:E7:8F:56:85:05:6A:BD:5F:88:38:DE:88:1B
Authority key identifier: 96:39:A1:A7:DE:06:D7:7A:B2:AE:33:87:DC:A6:9A:7F:EC:76:6C:43
Certificate issuer: /CN=9639a1a7de06d77ab2ae3387dca69a7fec766c43
Certificate serial: 0196C539B47816E6A3717C4826A7334C502D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljmhp94G13qyrjOH3Kaaf-x2bEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
Manifest number: 12F8
Signing time: Mon 12 May 2025 16:00:15 +0000
Manifest this update: Mon 12 May 2025 16:00:15 +0000
Manifest next update: Tue 13 May 2025 16:00:15 +0000
Files and hashes: 1: Qiqrfe8kB9GaXpsM0lx0qYLex1Y.roa (hash: wjrm5Cuv3WYI62Wa2AE0y6JBVls2W7DEVANrYb6LK08=)
2: ljmhp94G13qyrjOH3Kaaf-x2bEM.crl (hash: A7Q54W4UDuFV0h4WiadWxeh2gpyg3plbB4tYmbiiX34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ljmhp94G13qyrjOH3Kaaf-x2bEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:39:b4:78:16:e6:a3:71:7c:48:26:a7:33:4c:50:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9639a1a7de06d77ab2ae3387dca69a7fec766c43
Validity
Not Before: May 12 16:00:15 2025 GMT
Not After : May 13 16:00:15 2025 GMT
Subject: CN=e290807d35b5b0e78f5685056abd5f8838de881b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:78:d5:f8:cb:69:72:25:a9:d5:d0:de:ae:54:
d9:92:f2:b7:49:e9:26:ca:c3:c2:30:36:71:fd:ad:
6b:10:fc:bc:d0:5d:b4:16:3a:9c:8a:bd:e7:ff:42:
6c:9a:bb:b4:d5:00:aa:e6:b0:7a:5c:bb:d4:26:f5:
91:5c:f8:2f:49:4b:12:a9:3d:c3:75:b6:24:b2:40:
83:cf:0d:fb:8a:40:14:e0:d3:6f:e4:02:33:6e:db:
f5:49:95:8f:dd:51:e6:d7:34:7a:a7:ae:60:42:7c:
02:ed:a7:bd:20:67:6b:72:40:13:a8:b8:41:9e:1c:
94:b3:77:b5:d5:58:1c:f6:cb:1b:55:88:59:a7:cd:
4d:6c:40:58:39:e0:20:26:70:79:c9:93:6a:cd:c6:
ce:60:66:1f:3d:0d:65:45:c6:1a:f0:d1:03:30:63:
b2:94:56:3b:ed:9a:03:01:44:37:88:eb:f6:25:fc:
d6:46:13:5a:95:6c:8c:ab:c6:10:83:29:e8:c1:ab:
e0:e9:f6:02:72:8d:bb:43:c0:95:93:f0:cd:55:d9:
44:de:77:d7:5a:2e:91:fc:dc:f8:8b:9e:4f:d8:01:
bf:4e:7e:70:d4:86:75:90:fb:c0:41:7d:93:de:f3:
89:dd:6a:1d:24:3a:bc:e5:da:1c:61:8a:62:4d:6a:
63:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:90:80:7D:35:B5:B0:E7:8F:56:85:05:6A:BD:5F:88:38:DE:88:1B
X509v3 Authority Key Identifier:
keyid:96:39:A1:A7:DE:06:D7:7A:B2:AE:33:87:DC:A6:9A:7F:EC:76:6C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljmhp94G13qyrjOH3Kaaf-x2bEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:0d:d4:18:10:d5:4d:23:bb:ad:5e:c3:ea:c8:74:f6:e0:ab:
e4:54:c1:1a:bc:ad:dc:8d:5e:72:b6:8d:62:33:80:25:82:5e:
93:ab:df:ca:a6:1a:9d:fa:e6:4b:f4:e2:49:04:db:22:8b:91:
8a:5a:37:62:56:67:9d:ee:04:a5:f8:20:a7:fe:07:b4:02:d2:
27:49:37:6c:85:25:f2:04:d2:3d:aa:a2:b1:09:35:54:d1:03:
74:5c:73:fa:31:f3:61:cf:de:a8:bf:2e:2c:c5:fe:f4:ef:82:
a9:ec:47:ef:47:4a:9d:f1:7d:12:e5:1e:12:93:76:ff:f6:d9:
37:71:8e:62:56:6a:61:78:5f:f5:32:53:2e:34:4b:fd:b1:5a:
a8:b5:61:4e:a8:5c:89:1c:34:00:b5:84:0a:eb:f9:8f:98:a9:
e3:e1:5d:85:f9:7a:b7:1a:ce:84:a7:c9:46:87:3a:6c:5b:ae:
cb:49:e0:62:a1:19:e1:0c:00:8b:fa:f2:43:b1:f2:c0:f4:e8:
7b:36:09:8f:33:db:ba:c6:38:25:2b:60:c2:98:f6:3e:8b:0c:
5c:80:cc:7d:74:94:f5:ea:b6:13:a9:5a:53:f3:d5:71:19:ec:
b0:1f:2c:0e:f5:83:c9:34:d0:b0:76:79:f7:53:54:8b:38:3f:
b4:d7:76:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:50:31 2025 by rpki-client