Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
File: lPNHF_8y_ix2RK610O6iMBYX8SQ.mft (raw, json)
Hash identifier: YTcGh3Lm23ytWn+5vi2KRs2Z+PlKTuvfwyodwlPSpgc=
Subject key identifier: 0E:68:9C:BD:E3:48:AA:85:C5:21:7D:4F:EC:A9:C9:0F:70:D3:A5:A9
Authority key identifier: 94:F3:47:17:FF:32:FE:2C:76:44:AE:B5:D0:EE:A2:30:16:17:F1:24
Certificate issuer: /CN=94f34717ff32fe2c7644aeb5d0eea2301617f124
Certificate serial: 0196B4EB53CC27C079A19AA3129C40A6812F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
Manifest number: 04B1
Signing time: Fri 09 May 2025 12:00:43 +0000
Manifest this update: Fri 09 May 2025 12:00:43 +0000
Manifest next update: Sat 10 May 2025 12:00:43 +0000
Files and hashes: 1: lPNHF_8y_ix2RK610O6iMBYX8SQ.crl (hash: MWosONM3gAjhMPtTD48XzhjVMhUcAz/NjvRTInlNTas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:eb:53:cc:27:c0:79:a1:9a:a3:12:9c:40:a6:81:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f34717ff32fe2c7644aeb5d0eea2301617f124
Validity
Not Before: May 9 12:00:43 2025 GMT
Not After : May 10 12:00:43 2025 GMT
Subject: CN=0e689cbde348aa85c5217d4feca9c90f70d3a5a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:17:21:46:d7:a2:d8:39:21:55:23:fd:50:f4:
fa:8c:b0:fb:2e:ed:29:38:81:9e:ca:0a:d6:c2:c0:
37:ae:f9:8a:fb:3d:6c:dd:80:2d:7d:81:d3:da:e4:
29:f3:10:6a:51:cf:4c:6b:0e:20:62:ed:27:d3:ad:
60:e8:fa:44:27:eb:1d:06:59:46:44:f6:ea:9e:e8:
8c:34:b9:9b:39:0e:b2:b8:7e:ff:68:ce:67:b2:30:
8f:43:7f:f4:a4:f1:7f:41:ec:28:ba:66:c9:75:ef:
32:ae:4e:86:b9:00:e7:91:ed:c2:9c:82:ce:5f:ac:
d0:cc:b3:02:7a:68:4b:db:d6:67:d2:5d:50:34:7f:
64:56:30:66:cc:3a:c4:41:9e:f7:6b:2d:fd:8c:e5:
d5:fe:d1:05:ee:20:31:2b:7c:5c:84:d9:61:d1:2a:
c3:75:27:9a:82:5b:df:3b:d5:2f:3e:7a:33:bc:1a:
97:ac:b3:c9:35:8e:14:f7:17:24:11:fc:db:33:5a:
2c:bf:2e:75:ad:8f:65:22:32:d1:28:09:ff:7d:67:
fb:98:cc:e0:b2:80:f2:35:9c:06:7b:d3:c6:96:86:
e5:13:95:43:d6:b0:8b:f8:46:1e:a6:70:93:ce:0c:
ec:36:99:50:eb:bc:55:79:9b:de:17:01:49:50:7d:
ba:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:68:9C:BD:E3:48:AA:85:C5:21:7D:4F:EC:A9:C9:0F:70:D3:A5:A9
X509v3 Authority Key Identifier:
keyid:94:F3:47:17:FF:32:FE:2C:76:44:AE:B5:D0:EE:A2:30:16:17:F1:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:6f:16:9d:9f:13:fc:91:e7:fe:60:d8:ad:8f:83:8f:ed:c3:
88:d9:ed:a2:d1:e9:88:84:a6:1b:aa:9e:8f:b6:4c:59:27:9c:
27:93:12:d8:ed:15:df:57:1e:cd:8a:12:9d:ba:56:36:9a:4b:
31:b5:c4:d7:1e:4e:d8:71:78:98:ca:83:23:dd:a6:31:bd:99:
cc:93:21:91:02:2a:c6:99:0e:90:c7:b1:1f:40:10:4d:8c:f2:
fe:ac:6b:ac:3a:b5:a0:9c:b2:ab:d3:7d:95:2b:c4:9a:37:0c:
fa:de:5c:b2:7c:22:f8:32:8f:7d:8e:ee:3e:ae:f2:c8:2e:fd:
17:0e:a6:6b:63:cd:8b:7c:a4:63:e5:0a:ce:67:a0:f7:0b:4f:
d8:c0:04:18:2f:bc:56:cf:08:fc:13:e8:89:22:e5:da:68:f5:
87:75:fa:e1:01:01:36:86:84:b9:75:d3:9a:a4:87:5d:09:79:
ff:02:b7:bc:75:72:a7:68:fd:f1:fb:9f:bf:5d:e6:a0:8d:c5:
cf:75:2a:61:22:b9:8b:78:c9:71:af:09:01:5c:ab:98:3c:95:
9f:3b:0e:f2:fa:92:62:4c:ee:3e:35:ed:c2:ec:1e:f3:d3:c0:
be:60:a3:c7:55:fe:63:9f:86:36:8f:8c:cf:a3:d9:79:ba:11:
b6:78:4b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 15:28:22 2025 by rpki-client