Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
File: LxiqH1XWNcliBMp5qCmT-87BUSw.mft (raw, json)
Hash identifier: dPG0/ngmwwInOiDjNHNPLpT4g28L3ATiMKcoGeXRmgk=
Subject key identifier: 7E:FC:29:E1:CE:0F:05:CE:B5:80:15:F2:76:A6:34:D0:1D:FC:DB:4C
Authority key identifier: 2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C
Certificate issuer: /CN=2f18aa1f55d635c96204ca79a82993fbcec1512c
Certificate serial: 0196C4CC1BBCD7D09DBAC7F886DDEBA390E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
Manifest number: 1539
Signing time: Mon 12 May 2025 14:00:32 +0000
Manifest this update: Mon 12 May 2025 14:00:32 +0000
Manifest next update: Tue 13 May 2025 14:00:32 +0000
Files and hashes: 1: LgyeVhb60AJRIPJ13YatbxO4AsM.roa (hash: +B/MY539hDGa2yzYS0WxkYZEnocpiOn/GpdxMJUzr84=)
2: LxiqH1XWNcliBMp5qCmT-87BUSw.crl (hash: 0BjGNvgb+ku8o3z1pbgDSk/aLK//RMCHCKgE6FvWdOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:cc:1b:bc:d7:d0:9d:ba:c7:f8:86:dd:eb:a3:90:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f18aa1f55d635c96204ca79a82993fbcec1512c
Validity
Not Before: May 12 14:00:32 2025 GMT
Not After : May 13 14:00:32 2025 GMT
Subject: CN=7efc29e1ce0f05ceb58015f276a634d01dfcdb4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:28:57:eb:67:1a:32:a5:23:d5:7b:91:f5:bf:
52:01:b3:0c:1f:7c:d0:c6:b9:54:41:90:57:50:e4:
3f:b7:ef:1c:68:e9:29:59:18:a9:84:6c:76:93:9d:
a0:e1:76:bc:c7:53:62:92:a6:c3:0c:a5:a2:b3:65:
72:c2:38:2b:a3:d3:7f:6f:91:24:88:db:c8:46:a0:
b5:82:40:e0:03:14:e7:69:3a:91:27:21:cc:cf:b6:
eb:1d:79:7d:2e:f6:64:12:9e:72:13:f6:55:4f:a5:
6d:42:66:fc:28:50:da:59:ea:99:7c:fc:5d:d2:90:
06:e0:07:b3:d9:78:6a:62:ea:6c:a8:cc:f7:88:40:
e8:a7:d2:56:d4:2d:ae:29:c0:5d:ba:f3:d4:16:62:
82:b1:b5:cf:78:3d:32:04:49:89:18:de:e3:64:25:
5f:7b:e3:a1:15:cf:1c:e9:d9:3c:16:f5:ff:98:43:
d4:ad:50:58:5b:83:9c:99:25:6a:c8:7b:8f:04:c8:
bc:b7:2b:60:49:44:79:0a:ad:48:d7:c1:b7:c9:de:
7d:05:9c:ba:02:5d:13:f9:8f:ef:64:76:a8:75:11:
bf:4f:1a:ce:4a:13:72:88:f7:fd:e8:6d:85:27:24:
31:0a:c6:2e:f4:ec:b3:0e:d1:20:d8:70:1d:a7:39:
c8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:FC:29:E1:CE:0F:05:CE:B5:80:15:F2:76:A6:34:D0:1D:FC:DB:4C
X509v3 Authority Key Identifier:
keyid:2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:fe:dd:ab:77:1e:ea:d1:e3:5b:a0:24:ef:81:c3:bd:4e:84:
c9:b3:8a:a1:f4:67:c2:68:f4:d3:a6:93:6b:61:98:11:bf:e5:
ee:f5:30:c9:a4:fd:63:6f:a9:dc:bd:c1:d5:26:b0:6e:17:92:
2d:be:5d:90:20:3b:44:56:0a:a5:3f:d4:a8:6b:d0:92:65:49:
55:41:d4:b4:fc:1e:4d:f8:a9:bd:08:ca:db:d3:4b:4c:57:aa:
4a:c9:f3:73:b7:a6:7c:81:76:42:19:78:b0:4c:ec:64:b9:b2:
f3:db:85:7f:47:c0:9d:f3:66:67:85:12:d7:e7:ef:ef:39:50:
91:0a:21:9e:0e:5a:39:6c:7e:e4:cc:07:c6:b1:f2:8e:d3:c9:
69:1d:53:87:ce:35:f6:b6:27:b2:a5:95:a0:b2:15:35:95:2d:
df:a1:b8:5c:a4:e9:b7:66:0f:ef:ee:23:b6:cb:19:7c:34:09:
06:14:f9:6f:9a:f8:88:29:b1:c8:18:fb:85:1a:4b:b7:87:21:
43:86:1c:b8:89:76:d4:d9:78:23:05:8b:f5:15:07:cc:cc:ee:
70:63:50:55:c0:e5:1b:0e:f0:59:97:01:3e:5c:2a:42:5f:7c:
7a:c4:8b:57:4d:b1:28:48:89:3c:33:d5:48:ce:16:be:96:4f:
1f:a9:b6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:15:46 2025 by rpki-client