Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
File: LRjYfouf6XS-3wl_iJSDmIYaxH4.mft (raw, json)
Hash identifier: 0UMjgmyT1i00crJUDOeF9q9Eh7L+ysTVT6vrBcI71VQ=
Subject key identifier: DC:58:02:03:6A:1C:B4:B4:C5:01:EE:74:A9:11:9A:F7:0D:55:CA:BA
Authority key identifier: 2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E
Certificate issuer: /CN=2d18d87e8b9fe974bedf097f88948398861ac47e
Certificate serial: 0196B3D8DFD573575F4805A6BB281FF6D7CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
Manifest number: 0DDD
Signing time: Fri 09 May 2025 07:00:56 +0000
Manifest this update: Fri 09 May 2025 07:00:56 +0000
Manifest next update: Sat 10 May 2025 07:00:56 +0000
Files and hashes: 1: D0SM7svQIwgtTWtBXQRfVaYEWCM.roa (hash: 0gzyVGki8KAciWCmOf7f1a5tlOgoH/nOkPBzCHojuSo=)
2: LRjYfouf6XS-3wl_iJSDmIYaxH4.crl (hash: k271MtbigvzE3Dfu1Cg3o1BI/DOy1KcvRcKCILOS5W0=)
3: _IXLnCzw_zVB3dV_MJacG4jX80Y.roa (hash: Gt8+0DW6xRdgGsnmBSXKglilyEwDNEUME1kVSSFIiv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:d8:df:d5:73:57:5f:48:05:a6:bb:28:1f:f6:d7:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d18d87e8b9fe974bedf097f88948398861ac47e
Validity
Not Before: May 9 07:00:56 2025 GMT
Not After : May 10 07:00:56 2025 GMT
Subject: CN=dc5802036a1cb4b4c501ee74a9119af70d55caba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1e:bf:5c:45:0f:dc:88:b5:de:d3:16:b2:7c:
b6:0a:0c:79:9a:cf:48:ff:66:64:a8:d2:44:20:91:
ae:9f:ef:0c:45:ba:b0:45:45:9e:ac:73:7e:53:94:
f6:49:b6:47:3e:82:84:a3:5c:70:c6:c9:9c:53:5c:
c8:da:87:a2:25:a2:1c:98:2b:a8:51:e9:2a:85:66:
2e:81:01:a1:d7:c8:65:f3:40:bf:23:e3:75:6d:d3:
82:19:3e:8b:23:7b:04:a4:07:07:ae:b4:98:28:cc:
ce:d2:fa:9d:4c:e8:d8:ea:11:73:c5:f0:04:af:3c:
1b:d2:1a:23:f2:37:dc:3a:3f:f9:a3:a7:cb:d4:20:
91:db:c9:ca:fd:bd:e7:70:db:80:b3:51:78:13:98:
b8:ae:d9:45:79:38:ab:7b:33:61:b7:49:3c:a1:b9:
66:1b:76:8a:e7:f6:1b:80:36:ad:e3:92:57:e5:10:
7c:a7:3c:5a:4c:2d:6d:a0:cb:e7:4d:ca:8d:f7:b3:
62:d7:1d:d3:2c:a4:95:f6:ab:e9:74:09:a9:29:c0:
a0:0f:1e:44:57:e2:ab:25:75:a5:f4:78:1b:12:7f:
d9:3d:5d:9c:f7:d5:4a:4f:0d:6a:83:33:54:dc:3f:
15:9c:9b:dc:f2:4b:c5:db:c4:c5:08:0a:52:e0:42:
24:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:58:02:03:6A:1C:B4:B4:C5:01:EE:74:A9:11:9A:F7:0D:55:CA:BA
X509v3 Authority Key Identifier:
keyid:2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:31:1d:08:7f:d9:a1:bd:81:9c:66:e4:43:3e:9f:a2:6e:91:
e7:f0:a2:ef:40:88:7c:b2:39:a6:30:36:b1:13:c2:c8:96:b5:
0f:79:52:8b:07:b2:7d:f8:9b:49:f9:41:7c:8d:75:3b:d6:80:
0c:f9:c7:77:a2:06:97:0a:24:f1:64:7c:82:cd:e6:13:95:55:
ac:64:a4:0a:40:3b:7c:1b:94:a0:3d:15:38:c7:f3:bc:05:4a:
ef:95:c4:31:8c:db:40:88:d4:7e:1b:0d:25:25:48:3a:8a:ad:
9c:e9:4f:f0:c3:75:8b:9d:ad:2d:1f:4c:0d:3d:4b:6f:e2:f5:
ca:da:35:75:67:9b:7b:ce:d9:2d:dd:de:f9:dd:1f:1c:8e:bb:
7b:a2:76:22:94:94:57:fc:cf:72:6f:17:8c:94:8a:58:6c:47:
e1:82:7e:37:fe:ee:fb:63:99:61:53:aa:25:59:f6:c2:91:c1:
29:40:44:3d:d0:f0:a8:26:24:0b:e6:4c:fa:6c:3e:e4:80:4c:
0e:99:de:73:dc:57:8c:44:33:ef:05:67:45:3d:62:03:28:38:
17:00:8f:bd:46:e3:ac:70:13:e4:07:5d:b8:47:84:e3:3e:3b:
14:fb:22:9f:1c:6e:a7:c3:35:95:61:80:55:8d:8d:07:45:1d:
d7:54:3b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 09:44:12 2025 by rpki-client