Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
File: L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft (raw, json)
Hash identifier: Aqosh3EqsOWKi2HDYetPeGd93cmf7IcEjDl3HBj/2ZY=
Subject key identifier: F2:5C:D8:DA:B0:9C:E0:36:CB:CD:9F:BE:75:EE:F4:6E:56:CC:7C:25
Authority key identifier: 2F:88:A5:3F:CB:96:77:7F:99:E0:2D:F8:94:0D:D0:40:B4:54:CD:1C
Certificate issuer: /CN=2f88a53fcb96777f99e02df8940dd040b454cd1c
Certificate serial: 0196A8B04A18431B13D9DCE10DBC1855A038
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
Manifest number: 1527
Signing time: Wed 07 May 2025 03:00:47 +0000
Manifest this update: Wed 07 May 2025 03:00:47 +0000
Manifest next update: Thu 08 May 2025 03:00:47 +0000
Files and hashes: 1: 8vDMjaVS40emmzGFVsGL0I8-fQo.roa (hash: ZQlfpvu51NDsYdzNjhzj60BOHewjbF75+WG+cK0BDP8=)
2: L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl (hash: Q06aako/F0hoEENF3g32eEzXCY6T7lryBkhv6vdV42c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 03:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:b0:4a:18:43:1b:13:d9:dc:e1:0d:bc:18:55:a0:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f88a53fcb96777f99e02df8940dd040b454cd1c
Validity
Not Before: May 7 03:00:47 2025 GMT
Not After : May 8 03:00:47 2025 GMT
Subject: CN=f25cd8dab09ce036cbcd9fbe75eef46e56cc7c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f9:95:6a:79:a6:64:1a:f6:95:5f:3f:b0:dd:
f3:25:70:f2:31:c9:85:01:c3:74:8a:99:29:c5:b6:
39:cf:08:cd:c1:6d:f0:d7:8c:e0:7a:32:58:ee:ae:
d9:07:1a:0c:7a:5e:3e:06:40:82:8f:2a:5d:88:9b:
9f:6b:0f:9b:38:70:1f:6c:95:cb:5f:ef:32:09:37:
79:7e:1e:1b:d5:9e:b3:a4:d6:28:f6:07:d7:7d:f8:
79:0b:19:04:72:b3:b2:bf:5f:cb:4f:ee:c8:ac:df:
54:e9:dc:75:d0:b5:f4:65:75:56:40:00:71:80:50:
ff:b2:71:83:58:71:cf:e4:9b:6e:21:6d:58:b8:74:
02:41:57:db:1a:90:af:81:ae:cd:52:9c:ef:f0:9f:
ee:04:ba:91:8d:79:2a:4c:db:d0:84:f3:27:f0:9e:
06:7d:6d:2c:73:34:fb:ed:07:30:28:0e:1b:23:43:
2b:48:3f:ef:6f:5a:06:b7:28:c6:bb:99:99:ea:5a:
b7:43:cf:07:18:cb:85:c9:a3:d6:41:8a:3f:62:07:
97:63:cb:36:8f:e0:34:31:d9:8b:a9:52:e3:4e:30:
3e:95:4e:35:8b:f7:0d:7d:90:96:2d:e6:bb:89:f1:
0a:16:78:8a:db:c1:6b:ec:34:46:ae:f9:dc:f6:12:
50:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5C:D8:DA:B0:9C:E0:36:CB:CD:9F:BE:75:EE:F4:6E:56:CC:7C:25
X509v3 Authority Key Identifier:
keyid:2F:88:A5:3F:CB:96:77:7F:99:E0:2D:F8:94:0D:D0:40:B4:54:CD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:c6:be:ad:c7:cd:e9:65:5a:18:a8:54:c8:c3:48:88:87:82:
4a:38:e7:27:0f:91:9a:2e:e3:73:91:19:ee:1d:7e:f0:3b:90:
53:22:6e:b0:53:3d:c4:48:9a:61:27:fa:77:87:af:2c:39:ac:
55:c9:65:1d:3f:0d:27:d1:22:94:1d:60:5c:c2:02:cc:b8:b1:
b3:da:89:62:cd:2d:62:e8:36:4f:72:7b:f5:f5:b5:7c:b9:60:
10:21:bc:7d:25:ec:83:59:35:4a:57:03:91:77:82:de:28:5f:
f2:a4:42:f3:6e:3c:8e:79:e6:94:3e:ae:e8:a3:be:66:e7:4d:
47:8d:8f:86:f6:b7:0b:1c:c9:d0:92:44:41:ab:2e:85:e0:fa:
44:37:f6:da:8e:f4:f8:03:27:04:dc:45:ec:c5:32:35:08:a5:
ce:02:1f:2a:e0:c7:5f:dd:f8:9d:01:91:0b:22:72:ef:ea:4d:
8f:5e:76:04:3a:e2:c4:d7:6b:96:bb:04:13:1a:51:d4:87:10:
80:72:86:f2:fb:05:1a:ca:40:40:b0:d8:f9:9c:77:11:f5:54:
74:43:bd:3a:8c:76:eb:f1:8a:bb:7c:28:a8:5d:80:15:80:7f:
21:e2:bd:d3:b1:7f:1f:90:00:29:0f:98:4f:ef:fa:62:ea:f6:
c3:e2:7f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 13:36:56 2025 by rpki-client