Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft
File: lIlI8N1eL7CpArl5ypxcGkT5j6E.mft (raw, json)
Hash identifier: x3u3O9Ot1oQi4yzDJa1TMhyf7kfBDEjuRzsUIv/rcTg=
Subject key identifier: 1E:78:E8:D1:C5:79:93:F9:11:C7:8A:DF:7D:0F:5B:33:77:E3:E4:3E
Authority key identifier: 94:89:48:F0:DD:5E:2F:B0:A9:02:B9:79:CA:9C:5C:1A:44:F9:8F:A1
Certificate issuer: /CN=948948f0dd5e2fb0a902b979ca9c5c1a44f98fa1
Certificate serial: 0196CC857F09D8CF1CFF60B40B819BEDC066
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIlI8N1eL7CpArl5ypxcGkT5j6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft
Manifest number: 11CA
Signing time: Wed 14 May 2025 02:00:22 +0000
Manifest this update: Wed 14 May 2025 02:00:22 +0000
Manifest next update: Thu 15 May 2025 02:00:22 +0000
Files and hashes: 1: PqIFggzIk_ANiqqFNJr1_Xaymmc.roa (hash: EhtNg//JemmQlKzA50IitdtWxLjPUBVE2aJwJpTUs+g=)
2: lIlI8N1eL7CpArl5ypxcGkT5j6E.crl (hash: jUnRTa3BeB7wewcfh1ZOPMREP8WRdf3F9pZmh+txbBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/lIlI8N1eL7CpArl5ypxcGkT5j6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:85:7f:09:d8:cf:1c:ff:60:b4:0b:81:9b:ed:c0:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=948948f0dd5e2fb0a902b979ca9c5c1a44f98fa1
Validity
Not Before: May 14 02:00:22 2025 GMT
Not After : May 15 02:00:22 2025 GMT
Subject: CN=1e78e8d1c57993f911c78adf7d0f5b3377e3e43e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:07:ce:e1:83:61:b6:39:a3:ae:58:32:a8:18:
36:2b:a8:fa:3d:4c:4d:ae:02:55:a6:87:51:10:2e:
94:83:c4:5f:af:5d:ca:c8:c0:b2:85:0c:b7:57:69:
25:9a:c0:2a:cf:33:0d:c2:59:35:67:72:df:09:b6:
f9:4a:35:68:2f:ae:8d:73:20:a9:d6:4e:e0:14:ad:
39:11:83:73:90:2b:18:7f:91:71:ef:63:e8:90:71:
6b:84:a4:e7:cd:45:9e:f1:ed:2e:4e:78:f9:bd:da:
36:6a:9d:49:40:17:60:33:1e:81:40:fa:e3:5a:40:
01:af:04:30:e3:80:1e:e6:dc:d2:6a:39:99:54:aa:
d3:20:98:22:4d:98:2e:d5:3e:00:cd:26:21:77:c6:
b0:63:3b:42:3a:fc:4d:26:f4:25:f4:8a:c4:3c:05:
8c:3c:59:2b:0f:c8:57:96:f4:b1:3b:4c:2c:1f:ad:
12:f1:25:66:23:46:2f:ff:d9:c5:df:24:5b:07:6e:
03:96:43:20:db:bc:df:8b:d0:64:cc:cc:63:64:48:
b9:3e:9a:e1:f4:ec:60:76:9d:e1:87:47:8c:45:c7:
ac:8d:ba:5b:8b:14:93:3a:23:98:32:09:0b:a3:e9:
db:29:4b:b1:0b:87:ea:79:f8:cc:82:a1:d2:57:ed:
eb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:78:E8:D1:C5:79:93:F9:11:C7:8A:DF:7D:0F:5B:33:77:E3:E4:3E
X509v3 Authority Key Identifier:
keyid:94:89:48:F0:DD:5E:2F:B0:A9:02:B9:79:CA:9C:5C:1A:44:F9:8F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIlI8N1eL7CpArl5ypxcGkT5j6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a8:bc:66:c6:6d:c4:ae:29:b7:73:bf:d9:69:c9:68:4e:2f:
4c:2d:92:e7:67:bb:73:d6:06:84:6b:a6:a5:03:4b:e2:2b:ef:
65:7a:86:73:60:e6:2e:a1:55:7f:64:a7:d4:86:5a:8a:d6:2a:
f7:5a:33:04:f8:d9:3e:a0:e6:6f:ba:2d:be:b9:2b:0b:28:55:
2e:0e:96:a2:00:c8:8f:c3:96:bd:72:67:f3:3c:29:1e:93:25:
45:2e:4c:9f:2f:5d:06:6e:b2:92:91:e4:64:5e:9b:0b:a9:b4:
8e:c1:64:2a:b9:49:bb:f7:1a:e7:06:f8:40:77:e5:61:d2:2f:
e6:ad:14:f9:d8:e2:81:47:2b:86:ae:0f:a0:f7:ac:00:e7:81:
74:b3:7f:d7:7c:c2:e9:99:7f:ba:57:bf:28:ad:1c:b7:fb:13:
89:67:35:15:49:1b:40:4a:20:09:59:5b:78:90:e4:9e:a3:94:
48:54:39:2d:a7:e3:2a:54:9b:66:34:2a:62:d1:0b:19:2d:51:
c0:c9:2f:96:f2:29:3e:86:6f:f0:90:a5:64:df:c5:92:c6:db:
fb:58:49:cd:37:19:1a:2b:4d:17:92:4c:2e:6d:8f:a3:37:df:
f3:a2:eb:a0:26:d5:90:ff:25:df:01:04:eb:9f:23:e4:f5:84:
47:92:b8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:29:26 2025 by rpki-client