Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft
File: Li-E9VWmZqoMBKj759wZEAdfVlg.mft (raw, json)
Hash identifier: x/A1nRHQfH4yiR7IZsPlbLJE3D9avtccshrdsgediw0=
Subject key identifier: BA:D3:DD:73:B9:C9:28:A0:9D:8A:A6:70:35:1A:A2:B2:4F:29:43:36
Authority key identifier: 2E:2F:84:F5:55:A6:66:AA:0C:04:A8:FB:E7:DC:19:10:07:5F:56:58
Certificate issuer: /CN=2e2f84f555a666aa0c04a8fbe7dc1910075f5658
Certificate serial: 0196CA2969DAFC943ECCD4EBBB8C73814178
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft
Manifest number: 153A
Signing time: Tue 13 May 2025 15:00:33 +0000
Manifest this update: Tue 13 May 2025 15:00:33 +0000
Manifest next update: Wed 14 May 2025 15:00:33 +0000
Files and hashes: 1: Li-E9VWmZqoMBKj759wZEAdfVlg.crl (hash: mKfR5JL0SjecjeCL2pxhw/b/58N69Cs/OdfIzoZZmnE=)
2: pFH6DHW2s5KsXhoSMia6hZQZzt0.roa (hash: eNJrzW8rXB10B8GQwblM7wVFPW8bxQ19CVHU34yh2No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:29:69:da:fc:94:3e:cc:d4:eb:bb:8c:73:81:41:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e2f84f555a666aa0c04a8fbe7dc1910075f5658
Validity
Not Before: May 13 15:00:33 2025 GMT
Not After : May 14 15:00:33 2025 GMT
Subject: CN=bad3dd73b9c928a09d8aa670351aa2b24f294336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ac:3c:bb:93:21:0c:5e:39:e9:5e:05:a9:a2:
14:9b:65:10:e7:20:8c:6f:4a:38:dd:b9:a2:8d:da:
79:27:f0:74:80:bf:90:c5:8e:6a:f2:28:12:2c:98:
77:d6:17:3f:a5:22:19:bd:26:2c:f9:c5:5a:c3:d0:
ad:3a:d9:be:f7:ef:48:b8:87:50:1c:da:5f:03:2f:
83:20:b3:f0:4e:82:7e:c1:56:57:d3:42:fb:7a:b1:
58:77:68:05:9b:86:ce:28:e7:dd:76:63:b6:d1:13:
58:02:09:fe:f6:79:a2:4a:80:64:95:b6:38:32:f6:
7a:09:40:56:9d:85:5b:70:37:91:2c:f2:8d:7a:d0:
42:b0:17:1f:07:57:d3:bd:8f:aa:b0:f8:fb:a8:f1:
3a:f7:be:66:40:bd:43:29:fd:f6:85:73:0c:27:ef:
67:64:83:59:ad:aa:5a:f8:39:46:5a:5d:a9:0c:b2:
31:02:9c:7b:f7:67:99:8f:c1:a9:65:9c:53:c4:ff:
24:96:11:6d:a2:75:68:2c:b3:9a:48:c8:f7:53:78:
20:5d:95:2b:3f:6a:f2:4b:7f:b6:0f:9a:a1:2f:9f:
7b:3e:b0:df:88:ad:7a:24:0d:cb:d4:6b:89:1d:6a:
a8:cf:56:a5:35:0e:16:a8:4d:60:1f:7e:8e:b5:1f:
2f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D3:DD:73:B9:C9:28:A0:9D:8A:A6:70:35:1A:A2:B2:4F:29:43:36
X509v3 Authority Key Identifier:
keyid:2E:2F:84:F5:55:A6:66:AA:0C:04:A8:FB:E7:DC:19:10:07:5F:56:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:02:b3:82:f0:ce:46:25:49:fe:b5:ce:85:50:57:b0:93:ee:
73:35:25:dd:da:dd:ad:8e:ad:42:0b:35:34:27:88:62:1e:e7:
f5:f7:19:b6:94:6f:9b:52:7e:73:ab:d9:fa:4c:e2:42:f8:e1:
e3:8b:ad:e5:46:7c:f1:c1:fa:7b:57:f4:e8:4c:2a:68:ef:a6:
e9:36:a4:2f:55:46:13:ec:af:8b:b0:97:d3:a7:5f:1f:3d:34:
ff:aa:e6:2f:97:d2:7d:6c:2c:b6:39:e0:b9:6d:1a:f3:ee:20:
ae:13:d9:b4:53:70:cb:b1:1f:ee:e8:98:19:d3:de:cb:00:5b:
23:e3:3a:41:60:1e:d4:4c:b5:fb:d4:5d:aa:6f:3f:af:46:7e:
b9:99:45:eb:74:3e:be:aa:03:5e:38:bb:24:c3:7e:19:b8:b8:
89:6a:b3:36:f1:db:ec:00:8f:42:73:4a:88:bf:c7:97:18:6a:
07:89:0d:10:e6:0e:da:47:e7:33:cc:8e:f4:18:d3:5f:85:47:
9d:c5:fa:14:97:be:cf:50:cc:bf:a3:e8:e0:bc:76:7f:c0:c4:
31:c5:fa:98:3b:bc:70:a2:2a:44:c3:db:99:a0:02:89:15:b5:
54:c0:dc:1c:f5:14:d3:e4:30:a0:07:fb:bf:96:1d:51:2e:8d:
39:9c:ed:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:24:39 2025 by rpki-client