Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft
File: lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft (raw, json)
Hash identifier: qpW7r4i15kDtO8jPLsTjD2ygYv9vycLBhdS7N9ljhak=
Subject key identifier: 19:ED:27:A2:EC:A0:2A:45:05:F0:D6:3E:F7:A3:33:07:FD:5A:D3:30
Authority key identifier: 96:B8:12:1D:55:6D:F4:53:45:65:53:DC:B4:5C:41:43:F4:CD:D2:13
Certificate issuer: /CN=96b8121d556df453456553dcb45c4143f4cdd213
Certificate serial: 0196C1CB293FA8E948AD97A12A16F9620194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft
Manifest number: 07B6
Signing time: Mon 12 May 2025 00:00:39 +0000
Manifest this update: Mon 12 May 2025 00:00:39 +0000
Manifest next update: Tue 13 May 2025 00:00:39 +0000
Files and hashes: 1: lrgSHVVt9FNFZVPctFxBQ_TN0hM.crl (hash: skU5pxgzsQyg07QaWKudZoMsxD9K/nkeGmzm5L+zbio=)
2: qP3YU_S4LUHGi-PUyOS9YdXOrOg.roa (hash: 86gRYjmoaW5iHjfh3rXQG4yuY8yHQt9SBONVBj8bSuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:29:3f:a8:e9:48:ad:97:a1:2a:16:f9:62:01:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b8121d556df453456553dcb45c4143f4cdd213
Validity
Not Before: May 12 00:00:39 2025 GMT
Not After : May 13 00:00:39 2025 GMT
Subject: CN=19ed27a2eca02a4505f0d63ef7a33307fd5ad330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a6:a2:d0:85:a5:22:bd:a9:4f:a2:5a:02:2d:
56:b3:33:2e:2d:a5:44:62:d4:d8:d7:61:68:9d:a1:
81:3f:05:3b:35:2e:b6:fb:56:56:3e:b2:40:cb:8b:
ce:9a:cc:a3:6e:8e:3e:ee:88:f6:7c:91:1b:ae:7e:
87:4d:8b:d2:b8:95:f2:ac:04:90:36:59:43:f2:8b:
b5:f7:3a:da:e6:0b:17:e4:10:53:31:65:d4:2e:21:
f3:bb:d5:d8:89:c3:86:d8:30:29:14:cd:b0:6b:8c:
f2:85:c7:d2:12:ba:18:3e:12:2f:1f:06:3d:a6:6a:
0d:b3:10:f4:15:20:89:31:4d:f0:db:76:1e:97:c2:
2e:94:e7:85:e5:0e:4a:f3:a4:20:bd:ba:28:c0:51:
5d:17:53:8b:14:1e:b2:bb:b1:b4:1c:b4:ef:fc:75:
fc:44:d9:79:c4:fa:73:63:3b:98:80:9b:0b:fc:4b:
1f:3b:b0:00:69:00:6f:d7:6e:47:64:be:12:88:9b:
33:c4:40:c6:6d:67:e8:c1:a8:41:84:b0:4d:13:6a:
24:c7:c1:f0:61:5a:bb:7f:4b:da:eb:d2:bf:4a:b2:
c2:a6:f1:6a:6d:8a:eb:b2:26:f4:20:8c:ad:85:47:
07:5a:bb:56:91:56:e2:58:7b:5e:32:ef:bd:f4:cf:
42:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:ED:27:A2:EC:A0:2A:45:05:F0:D6:3E:F7:A3:33:07:FD:5A:D3:30
X509v3 Authority Key Identifier:
keyid:96:B8:12:1D:55:6D:F4:53:45:65:53:DC:B4:5C:41:43:F4:CD:D2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:f2:bb:8f:91:d0:cd:cc:f1:ae:04:0d:75:ad:94:2b:b0:a7:
8d:e5:8d:a7:09:f1:95:cf:d1:2f:92:27:c1:6c:29:33:3e:f7:
dc:60:c5:2d:93:64:cd:96:9b:ff:8c:66:a3:3c:78:6f:e3:3a:
d2:7b:69:62:60:2d:7a:10:37:e9:ab:d2:7a:47:38:73:76:0f:
8b:74:c7:8d:ab:7d:f9:15:42:60:d2:df:ab:78:40:22:2d:e7:
7d:0e:a3:78:cd:a4:e7:ef:1b:35:a6:0a:da:a5:ee:12:bf:d2:
a7:b2:59:c2:e2:44:29:4d:b6:a9:ef:89:59:3c:2e:56:80:f8:
6b:64:42:bb:ce:fc:0f:36:aa:2e:21:02:12:89:75:45:89:1b:
06:c9:6a:9a:2d:c1:88:34:e3:2f:5f:f4:38:3c:97:5d:ea:31:
4f:6b:e5:fc:ce:ba:a6:83:57:a0:e7:52:52:24:b7:29:42:79:
bb:fd:fe:69:5f:27:15:d7:25:db:c6:81:60:a3:53:ea:60:6a:
c6:f3:71:17:cd:5c:8e:2f:56:02:46:ec:62:16:72:e7:74:ed:
53:d9:2f:d5:9a:6d:03:e8:f7:1a:dd:9b:02:da:45:70:ce:41:
a8:ae:bf:d6:09:00:c4:89:6b:83:0b:ed:b0:38:d5:97:fb:78:
d9:17:c7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 02:13:18 2025 by rpki-client