Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
File: LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft (raw, json)
Hash identifier: JPFrjbMRtVMWsUnQWF+OgCcgBSIg9jpTqWTghg6Tj7Q=
Subject key identifier: 81:74:84:5E:11:9F:9B:7F:24:F6:F0:34:47:91:F1:DA:B5:AD:30:EF
Authority key identifier: 2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC
Certificate issuer: /CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc
Certificate serial: 0196CBE0DE59818888C2A0400AC2B39EAB0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
Manifest number: 1535
Signing time: Tue 13 May 2025 23:00:33 +0000
Manifest this update: Tue 13 May 2025 23:00:33 +0000
Manifest next update: Wed 14 May 2025 23:00:33 +0000
Files and hashes: 1: LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl (hash: V0OMGEv7ELl8o52oIZe8NIN3WY7EvQE+TDOcy0oGkaY=)
2: k9ESiOC05FAL5OZXSx8n68sQwKU.roa (hash: x3z9I2/sycjs0uOQJeLYl+8lQLkZ9uNIg5/ImA60dEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:e0:de:59:81:88:88:c2:a0:40:0a:c2:b3:9e:ab:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc
Validity
Not Before: May 13 23:00:33 2025 GMT
Not After : May 14 23:00:33 2025 GMT
Subject: CN=8174845e119f9b7f24f6f0344791f1dab5ad30ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:87:3e:3b:73:43:42:f4:87:06:87:19:e3:80:
11:15:fb:e1:b0:a1:7c:3e:5f:74:43:d4:3a:81:f4:
62:31:3b:17:2c:59:82:4f:a1:3e:d6:20:fc:63:5f:
c0:fd:aa:fb:d5:69:35:d8:0a:8d:23:b0:fd:1d:4c:
20:f2:91:a7:c9:81:96:a8:09:fb:6b:67:7e:90:37:
57:16:94:8b:ab:9a:22:2f:37:ed:b3:9f:96:a9:15:
32:cf:b7:f2:7e:50:cb:6d:cc:0c:9c:01:1f:35:aa:
f1:54:e5:42:22:14:4a:cc:b5:ba:73:24:9b:d5:fc:
4f:e2:6b:f2:a1:6f:d2:2f:10:6b:4b:3b:a2:ba:16:
7d:c2:6c:cd:c4:66:c0:ae:95:07:c4:4f:d6:b2:2e:
bb:7f:cb:1c:8f:06:10:cb:68:1b:cc:49:60:6f:8d:
4b:65:39:cc:c7:7e:d1:6c:07:46:c0:2a:b0:26:7c:
87:56:79:90:8c:f9:26:7e:31:ee:de:04:82:3a:9c:
6c:cd:79:bb:5c:c4:b2:a5:ff:02:6f:48:8d:a8:57:
94:0c:3d:b8:1f:29:98:fe:4e:24:67:1c:ee:88:36:
f8:eb:5e:cc:4c:9e:46:f5:fb:bc:0f:5e:84:01:84:
08:42:5d:84:51:58:23:e9:0f:b1:9b:83:8d:a3:6e:
1c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:74:84:5E:11:9F:9B:7F:24:F6:F0:34:47:91:F1:DA:B5:AD:30:EF
X509v3 Authority Key Identifier:
keyid:2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:68:ff:2a:d5:ba:b4:c6:0c:22:cf:ce:c4:f0:5e:1b:3b:eb:
6a:20:84:4f:ae:14:64:e3:2c:37:34:85:fa:ef:3e:6a:61:3c:
2c:e1:4b:69:3d:8b:98:d2:5a:ff:98:08:88:02:32:9c:1e:b1:
4b:29:70:81:be:11:f6:e2:7a:91:69:4f:cc:6f:7e:73:9b:a6:
bb:58:ab:f0:b6:fd:0b:63:e5:f1:ce:3c:c3:cb:ef:cb:60:d3:
54:8f:e6:26:e9:a8:ae:df:6b:7f:9c:20:d2:c4:e8:33:9e:11:
00:06:ec:88:e1:ca:51:d3:66:5d:e0:58:53:96:53:1d:e6:72:
94:46:67:21:30:46:b5:44:05:dd:db:9b:31:8e:da:e3:e4:3c:
0d:ac:1d:84:8c:e5:cc:c6:26:01:26:ef:91:a6:74:0c:cc:a6:
37:af:84:b2:8b:1f:c0:7d:b9:e4:24:75:ec:21:17:6c:45:2a:
ba:20:1e:37:51:89:68:97:50:43:3e:c1:8c:01:1f:c5:ed:a6:
5e:37:b7:21:87:e7:0d:bc:e8:80:9f:3b:32:21:8e:97:26:70:
7b:1c:03:04:ac:4a:f6:d8:8c:08:6d:22:e6:71:a7:aa:26:3d:
41:b5:25:79:05:79:38:05:04:de:36:59:09:4f:7c:44:30:1b:
4e:b4:df:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 06:44:35 2025 by rpki-client