Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/02240f-e080-4be9-93c4-396fcda6490c/1/lW4xbJg4BMJQHsxavqU6KoO1cyQ.mft
File: lW4xbJg4BMJQHsxavqU6KoO1cyQ.mft (raw, json)
Hash identifier: H/iIzFZnIxBlB35Js1PeTDNz/GQL9JDKhCMb/Nzhzwk=
Subject key identifier: 01:A1:89:C6:E2:D4:E3:05:53:07:34:C8:C4:28:A3:F7:E9:D6:91:F7
Authority key identifier: 95:6E:31:6C:98:38:04:C2:50:1E:CC:5A:BE:A5:3A:2A:83:B5:73:24
Certificate issuer: /CN=956e316c983804c2501ecc5abea53a2a83b57324
Certificate serial: 0196AA31256156A9DF0E624AD1846FB53521
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lW4xbJg4BMJQHsxavqU6KoO1cyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/02240f-e080-4be9-93c4-396fcda6490c/1/lW4xbJg4BMJQHsxavqU6KoO1cyQ.mft
Manifest number: 14FA
Signing time: Wed 07 May 2025 10:01:09 +0000
Manifest this update: Wed 07 May 2025 10:01:09 +0000
Manifest next update: Thu 08 May 2025 10:01:09 +0000
Files and hashes: 1: lW4xbJg4BMJQHsxavqU6KoO1cyQ.crl (hash: mgVeWi48e4Kt7FSd0TyeAPIXPK/Z0x4YD+b/+9+LW18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/02240f-e080-4be9-93c4-396fcda6490c/1/lW4xbJg4BMJQHsxavqU6KoO1cyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/02240f-e080-4be9-93c4-396fcda6490c/1/lW4xbJg4BMJQHsxavqU6KoO1cyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lW4xbJg4BMJQHsxavqU6KoO1cyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 10:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:31:25:61:56:a9:df:0e:62:4a:d1:84:6f:b5:35:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=956e316c983804c2501ecc5abea53a2a83b57324
Validity
Not Before: May 7 10:01:09 2025 GMT
Not After : May 8 10:01:09 2025 GMT
Subject: CN=01a189c6e2d4e305530734c8c428a3f7e9d691f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1c:c9:60:07:70:6e:f1:a4:45:f4:1c:d5:e3:
6c:bd:46:e6:27:87:0d:8b:0d:29:29:6e:13:e7:fb:
e7:4e:23:25:3f:8b:b7:17:41:e9:5a:f7:85:91:eb:
c2:66:3d:fd:0e:1c:e8:e9:10:8d:a2:2a:f9:88:c7:
f4:d9:32:28:c6:98:86:4d:a0:ba:af:95:5b:0d:4e:
e7:9a:34:1e:cb:9a:38:27:78:2e:59:8f:8d:81:1a:
3d:f2:d3:2f:28:44:ea:f2:33:7b:b0:7d:b2:78:e4:
da:ab:29:b4:87:ac:56:c4:9f:bf:76:0f:a1:a4:58:
cd:b3:03:e0:e5:11:49:d0:3f:c2:a2:13:cf:c3:b7:
ef:2a:9a:93:32:b7:d2:fb:23:27:d5:15:6f:1b:f5:
f4:47:96:08:c8:a6:67:91:61:fe:9f:a0:cb:82:7b:
73:60:73:a6:c7:c0:21:42:6a:a5:2a:3e:5b:bd:81:
26:f2:cb:48:4e:84:cd:1f:bb:14:df:05:ad:f9:8c:
fa:f5:62:a7:dc:12:6e:b1:d4:a5:1a:d9:0f:20:62:
a9:7c:10:0e:46:94:3c:fd:b2:fe:ad:53:33:2d:dd:
3f:1f:05:47:2e:b3:f7:c7:3a:6c:8e:06:a7:9f:14:
f2:d4:c6:5c:d1:7f:20:5b:1e:46:47:fc:bc:79:75:
34:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A1:89:C6:E2:D4:E3:05:53:07:34:C8:C4:28:A3:F7:E9:D6:91:F7
X509v3 Authority Key Identifier:
keyid:95:6E:31:6C:98:38:04:C2:50:1E:CC:5A:BE:A5:3A:2A:83:B5:73:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lW4xbJg4BMJQHsxavqU6KoO1cyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/02240f-e080-4be9-93c4-396fcda6490c/1/lW4xbJg4BMJQHsxavqU6KoO1cyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/02240f-e080-4be9-93c4-396fcda6490c/1/lW4xbJg4BMJQHsxavqU6KoO1cyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:8d:2c:51:8c:87:d7:4d:2a:a7:8b:41:42:e1:12:6e:86:dc:
7e:58:9b:f2:f7:92:2d:1d:dc:71:f8:13:1d:0a:16:5f:61:e4:
db:ef:9d:e3:e7:18:ba:8c:18:6c:cd:55:64:a8:ea:bb:4a:90:
cd:1c:62:6c:bf:f5:1d:89:a2:91:28:33:25:96:6c:ae:45:54:
d8:b3:18:41:04:e7:84:35:6a:79:a7:43:7d:3b:ad:ff:8b:98:
2a:09:5f:47:01:ff:42:69:22:c8:98:73:c7:d4:d2:a9:3a:9a:
0f:85:0d:27:9d:6f:85:90:24:92:04:2e:00:7a:d3:17:a6:23:
d9:51:e0:68:f5:01:71:2f:77:57:d2:9b:ba:a2:4b:c8:8e:e0:
fa:76:91:34:02:d5:79:7d:93:ae:e2:22:23:9e:d2:4b:11:26:
4b:9b:18:d0:79:95:8d:64:c0:7e:64:67:5d:12:66:ad:8c:da:
15:50:c1:04:91:1a:35:9c:23:2e:c8:d0:4a:a2:6b:78:cc:5a:
96:48:0e:20:93:75:8f:eb:08:c2:df:5b:f4:0b:8d:6c:17:1c:
ff:a9:27:37:9f:36:5f:ad:ff:2a:f4:fb:e0:64:97:0e:e9:4b:
09:53:ed:c8:34:72:8d:91:10:7e:70:a3:42:82:14:f7:35:5e:
61:8c:97:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 17:07:32 2025 by rpki-client