Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.mft
File: lnRtO9Pi3eYWQCDesLXYkixkdm0.mft (raw, json)
Hash identifier: iLSlb+sPFQ4cSntgmQlYNDHwbScU0LF98NgVoHwPu5o=
Subject key identifier: 10:3E:BE:D7:AD:14:CC:D1:4B:5B:79:C9:C3:FC:DE:4B:FB:78:DF:83
Authority key identifier: 96:74:6D:3B:D3:E2:DD:E6:16:40:20:DE:B0:B5:D8:92:2C:64:76:6D
Certificate issuer: /CN=96746d3bd3e2dde6164020deb0b5d8922c64766d
Certificate serial: 0196AEB2AC51A4B40594C979EEC36DA58267
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lnRtO9Pi3eYWQCDesLXYkixkdm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.mft
Manifest number: 01E2
Signing time: Thu 08 May 2025 07:01:07 +0000
Manifest this update: Thu 08 May 2025 07:01:07 +0000
Manifest next update: Fri 09 May 2025 07:01:07 +0000
Files and hashes: 1: lnRtO9Pi3eYWQCDesLXYkixkdm0.crl (hash: Xdfk1hnKZhtJ3HBsU0gzaD59nhlRe6xYKuCrDlkPnLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lnRtO9Pi3eYWQCDesLXYkixkdm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:b2:ac:51:a4:b4:05:94:c9:79:ee:c3:6d:a5:82:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96746d3bd3e2dde6164020deb0b5d8922c64766d
Validity
Not Before: May 8 07:01:07 2025 GMT
Not After : May 9 07:01:07 2025 GMT
Subject: CN=103ebed7ad14ccd14b5b79c9c3fcde4bfb78df83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:82:a4:d5:7e:0e:1e:6f:18:55:16:e6:47:ca:
5c:30:96:e9:7e:75:15:cd:e8:91:a3:8c:5b:c0:97:
a1:d5:d4:0f:a0:5d:97:a3:ef:f8:b8:ec:2e:0e:d4:
aa:4d:d2:13:9c:6e:1a:32:12:aa:fa:1e:56:dd:69:
f3:56:c9:da:c9:0a:80:ed:f1:48:17:07:36:81:a8:
50:13:a2:3c:96:63:72:55:96:ae:f8:71:aa:93:2d:
47:2a:25:ab:13:3a:f2:b5:fb:90:52:bf:86:9c:88:
1c:82:46:ed:1c:33:6e:1d:58:da:a6:f7:17:0d:c6:
d4:4e:7d:7f:7b:b0:2b:fb:1d:a2:ff:a0:3d:74:5a:
4d:85:3f:75:08:df:b4:25:d5:6c:ef:8d:2a:22:e6:
6b:01:ed:77:f0:06:16:02:36:91:f0:95:5e:8c:a9:
4c:72:df:38:40:82:1d:5e:cf:2b:72:8c:7f:a7:8b:
de:28:f8:52:f0:df:44:ec:19:35:f6:1f:de:81:ce:
22:8c:72:f3:ae:41:ad:c2:a8:08:b5:25:88:21:ad:
ae:aa:3f:cd:3c:97:a7:bd:29:69:ea:3a:49:31:a0:
dc:9d:8a:99:b4:41:c3:6f:01:c3:75:7e:9a:18:ff:
a0:f2:73:61:bc:9d:05:bf:6f:20:90:e6:40:db:3a:
26:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3E:BE:D7:AD:14:CC:D1:4B:5B:79:C9:C3:FC:DE:4B:FB:78:DF:83
X509v3 Authority Key Identifier:
keyid:96:74:6D:3B:D3:E2:DD:E6:16:40:20:DE:B0:B5:D8:92:2C:64:76:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lnRtO9Pi3eYWQCDesLXYkixkdm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/e1f171-a889-4395-9cfc-0805419d721a/1/lnRtO9Pi3eYWQCDesLXYkixkdm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:3a:0c:a7:a6:d5:75:3b:d6:33:77:52:7d:c9:bc:78:1a:32:
19:bc:4d:4c:14:55:95:b6:97:c3:79:5d:48:49:af:00:41:f3:
5a:17:30:d9:ac:f4:d4:07:73:01:ac:02:93:19:10:9c:ea:6e:
d4:a3:0d:7a:9c:8d:37:ed:de:4e:de:af:9b:24:2c:52:e3:de:
14:ff:a0:f9:56:1e:73:96:c9:5a:b9:d3:be:5e:cb:66:19:d9:
19:6d:b5:ae:db:63:53:97:e2:99:8e:05:2f:ac:b8:04:e0:e7:
e1:bc:f6:77:4a:8c:b7:1b:b9:3d:cc:bf:2b:c6:6d:0f:00:c7:
9b:fc:32:00:ef:22:a4:7b:75:aa:9e:c2:70:a7:fa:90:82:7c:
13:50:39:bf:71:cd:71:70:48:b5:d0:20:82:f7:0d:3e:24:da:
4c:96:de:53:62:8b:45:1c:f1:bd:69:0e:60:7f:33:92:af:33:
9c:4f:23:02:22:2e:f3:4a:a0:50:64:ec:1f:83:b0:44:df:13:
df:30:bd:26:8c:ab:3d:6c:5c:c8:40:58:5b:92:40:72:62:de:
f1:b8:b0:59:e9:f6:0c:60:b2:48:a6:36:df:60:3d:55:f8:87:
69:a4:dc:85:b3:3a:75:57:78:b6:8f:94:02:e3:00:34:2e:32:
06:46:e4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 15:47:30 2025 by rpki-client