Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
File: lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft (raw, json)
Hash identifier: IxE0H09xLsuc3UFmigTj0Z+VWHuSNlRGtZHdAIqZNvk=
Subject key identifier: F6:1C:DC:06:FF:64:D2:50:E3:A8:9C:04:62:67:6A:08:67:EF:F0:B9
Authority key identifier: 94:3B:C5:76:73:23:74:E8:D8:9D:70:13:AB:36:30:B6:E0:A9:F1:9A
Certificate issuer: /CN=943bc576732374e8d89d7013ab3630b6e0a9f19a
Certificate serial: 0196CA60C80035331F73A23A1FDD53969D1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
Manifest number: 0F61
Signing time: Tue 13 May 2025 16:01:02 +0000
Manifest this update: Tue 13 May 2025 16:01:02 +0000
Manifest next update: Wed 14 May 2025 16:01:02 +0000
Files and hashes: 1: H33ZXIhbVy7xU6xnvVekDxlllNY.roa (hash: gLytCIr8moIJFxRmjTSWLIbls8kZi2qpSK/USMqXNdU=)
2: lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl (hash: 6tVcMlKxCLn8w749GTGp4pl/0WXEWiGlah4FUgw897Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:60:c8:00:35:33:1f:73:a2:3a:1f:dd:53:96:9d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943bc576732374e8d89d7013ab3630b6e0a9f19a
Validity
Not Before: May 13 16:01:02 2025 GMT
Not After : May 14 16:01:02 2025 GMT
Subject: CN=f61cdc06ff64d250e3a89c0462676a0867eff0b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:21:05:e9:31:ba:68:f0:f6:22:8c:8b:9e:ed:
cc:e4:09:05:9a:49:5a:ca:7b:26:f9:29:54:a2:c1:
05:e6:d7:99:50:d5:93:ed:27:91:e3:e3:ab:52:e8:
99:c0:c0:8c:df:41:aa:7c:04:0d:e3:d1:16:e0:5a:
c4:64:60:bb:36:51:30:a9:bc:b5:c4:ae:2d:9a:8d:
4d:d4:5e:63:fc:c4:f5:a9:e6:21:51:06:df:db:88:
90:6d:63:95:71:18:63:97:2f:61:23:f1:2d:0a:0a:
b5:89:97:ec:d2:32:26:b4:51:10:cf:d0:24:5d:69:
c6:16:c9:0b:0f:d4:a7:bb:7d:f4:0d:0e:5c:f9:58:
21:9a:48:bc:48:dc:e1:09:51:47:51:56:69:d4:c2:
6a:45:38:59:9d:87:50:1d:de:2d:3b:cc:d3:b6:b1:
49:38:0f:42:77:12:85:2c:7e:f4:18:66:b2:22:40:
b6:83:c4:ab:2c:79:e0:55:07:37:70:da:e6:ca:5b:
1e:99:44:ba:5b:c2:e7:20:fc:b3:ac:9d:32:62:79:
2f:4d:71:11:80:b3:1b:d6:84:4b:ba:4e:eb:a3:7a:
ea:0a:93:3e:e2:c2:10:b4:fc:49:05:12:ea:63:81:
1b:e5:c6:28:6f:31:73:58:90:ef:d5:59:98:93:f7:
98:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:1C:DC:06:FF:64:D2:50:E3:A8:9C:04:62:67:6A:08:67:EF:F0:B9
X509v3 Authority Key Identifier:
keyid:94:3B:C5:76:73:23:74:E8:D8:9D:70:13:AB:36:30:B6:E0:A9:F1:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:89:1c:88:cd:7b:71:37:50:42:8c:07:cc:bc:c6:aa:40:f1:
ba:c2:bd:c3:e1:22:b6:19:05:aa:d9:53:2e:b2:61:c2:77:ba:
99:6f:fc:fa:e3:f4:d3:55:a2:38:de:3f:f1:a4:74:19:d8:50:
38:21:6c:bb:54:b3:ff:98:a9:c6:e0:58:c3:d6:ac:0a:12:4a:
f4:1b:46:71:e1:42:bc:e9:98:5c:b7:a4:d8:53:96:f8:fa:db:
52:a9:5f:83:c9:d3:4a:25:1b:87:c3:fa:ee:8b:61:24:3d:45:
3c:71:b8:ad:38:22:bc:e3:fd:f0:fb:3c:65:ae:5a:cb:18:e5:
d6:29:1a:ab:f8:de:a3:fa:2d:72:d8:f0:89:90:1f:c2:33:8e:
39:4f:4c:85:42:07:e1:1e:9b:92:9d:ea:08:22:e1:cb:01:f2:
27:10:0b:91:5a:35:17:a3:68:b5:ac:5a:7b:1f:71:a1:75:f8:
64:c5:94:4c:3d:63:01:30:d3:a6:17:4e:49:ff:e6:01:e6:70:
82:16:9c:a7:45:5f:ca:23:75:9f:00:c9:b8:2a:c0:6d:67:82:
6d:d3:6e:a7:fd:39:bb:41:0e:85:cb:28:7e:b9:90:0d:03:02:
d2:72:fd:d6:15:ea:d8:36:37:c4:98:66:f4:ff:b9:d1:46:bc:
89:f0:1e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:51:31 2025 by rpki-client