Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
File: l2lJAzf2c8ZOORJK6JgbA05QEno.mft (raw, json)
Hash identifier: 1Lp5oypQhSsDmHHVc25QijEeZDe0JoZN2zZTrFhIV8g=
Subject key identifier: F4:6F:79:18:E6:EA:2A:57:31:C7:49:9A:B6:48:25:FB:6D:9D:66:22
Authority key identifier: 97:69:49:03:37:F6:73:C6:4E:39:12:4A:E8:98:1B:03:4E:50:12:7A
Certificate issuer: /CN=9769490337f673c64e39124ae8981b034e50127a
Certificate serial: 01969FACB4BA7A27A874EB7281B9AA921212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2lJAzf2c8ZOORJK6JgbA05QEno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
Manifest number: 1521
Signing time: Mon 05 May 2025 09:00:17 +0000
Manifest this update: Mon 05 May 2025 09:00:17 +0000
Manifest next update: Tue 06 May 2025 09:00:17 +0000
Files and hashes: 1: l2lJAzf2c8ZOORJK6JgbA05QEno.crl (hash: 1hxQZfm7x0dP1+UoNplR3OmsFHoG0xD4d+/BniR9GsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
rsync://rpki.ripe.net/repository/DEFAULT/l2lJAzf2c8ZOORJK6JgbA05QEno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:ac:b4:ba:7a:27:a8:74:eb:72:81:b9:aa:92:12:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9769490337f673c64e39124ae8981b034e50127a
Validity
Not Before: May 5 09:00:17 2025 GMT
Not After : May 6 09:00:17 2025 GMT
Subject: CN=f46f7918e6ea2a5731c7499ab64825fb6d9d6622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ae:ff:b5:16:8f:ce:6c:11:4f:0d:cf:cd:17:
97:f2:ab:1b:b3:1a:6d:c8:ec:8d:fe:a5:6e:9d:d3:
e1:0f:ea:13:3d:3a:1d:51:6f:d6:18:b3:9d:2e:5a:
74:6b:47:09:bf:04:94:48:d8:d2:6c:4e:a2:5c:44:
84:38:05:47:4b:f6:fa:2b:6f:30:b7:71:34:61:bb:
59:09:6e:5d:5f:f4:f9:c5:37:3d:0a:69:cc:e4:d4:
7b:50:83:4d:49:61:bd:15:39:c2:5b:3c:81:e4:1b:
05:d6:d5:42:c9:8b:df:d3:64:5a:fe:a4:b2:0a:2e:
ea:f8:10:b3:70:9d:00:1c:cd:75:7e:eb:b5:4f:e1:
4b:66:dd:ef:40:45:c7:53:26:c2:e1:18:3d:bc:f3:
e5:bd:f2:2b:33:2a:af:f1:ca:e2:c7:5d:65:91:ba:
6e:4a:23:e5:f2:1e:ee:e3:a2:df:31:84:5c:33:2c:
b3:7f:ec:57:b1:91:b3:c8:46:e6:bf:fb:7f:1d:b6:
50:66:64:34:2e:eb:e1:dc:1f:3a:01:47:cb:df:aa:
65:7a:2c:57:e0:83:04:86:52:61:59:af:c6:04:ff:
f4:f5:a5:ab:a3:3a:4b:e4:0e:e3:bb:3c:23:31:00:
42:19:a0:0a:37:78:fd:fa:e2:1f:ef:1c:98:3d:f3:
66:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:6F:79:18:E6:EA:2A:57:31:C7:49:9A:B6:48:25:FB:6D:9D:66:22
X509v3 Authority Key Identifier:
keyid:97:69:49:03:37:F6:73:C6:4E:39:12:4A:E8:98:1B:03:4E:50:12:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2lJAzf2c8ZOORJK6JgbA05QEno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:90:87:c7:20:66:f9:e8:7b:2b:13:c3:65:a2:a7:cc:fc:65:
d0:66:20:95:15:a0:89:34:c7:25:b7:85:c3:d3:5f:47:54:a8:
b4:21:63:2f:d5:53:80:ec:bb:c0:aa:cf:3c:11:73:a1:39:81:
00:3d:d4:3a:c6:b5:31:05:05:f3:25:c8:6a:d7:45:98:b8:07:
24:7f:ff:c7:14:69:48:f0:5a:03:b9:51:d7:62:e0:d7:a1:40:
ea:35:67:ff:79:8f:24:61:42:96:b8:74:6b:e3:31:71:f1:4a:
1b:f3:6e:b5:db:e7:70:de:0b:cf:d9:61:0d:72:b0:71:1c:e7:
59:54:e3:c8:4b:b8:6b:5c:9c:2a:a5:a1:f1:af:44:1d:f1:cc:
4f:01:a3:35:29:61:a3:0b:f7:17:e5:95:4e:00:0f:34:e3:c4:
b6:b7:d2:41:3f:f9:45:31:4b:60:2f:29:e0:4e:9a:b2:8d:f0:
22:6e:57:f4:75:8d:44:0f:d6:22:19:32:12:7c:ba:85:b1:b4:
d8:92:4d:d4:97:0b:0f:fc:7d:91:91:56:71:6a:5d:91:e8:c8:
dd:59:54:6d:f5:5a:db:c1:ab:5f:14:22:14:ff:09:6c:3f:8e:
38:06:b5:5d:cc:e1:a4:37:b3:32:d8:7a:5f:f9:20:8b:f0:68:
16:ab:fa:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:29:49 2025 by rpki-client