Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft
File: LO_eMLilizIqQx8IKe1P8ztarBg.mft (raw, json)
Hash identifier: luImTBJPi8RDXXCld3ur1LXM9Vo+2yTNDgp+D+9Uj/M=
Subject key identifier: B2:0E:85:43:6D:B9:4B:E8:70:A4:6E:57:6D:6E:2C:39:98:34:16:76
Authority key identifier: 2C:EF:DE:30:B8:A5:8B:32:2A:43:1F:08:29:ED:4F:F3:3B:5A:AC:18
Certificate issuer: /CN=2cefde30b8a58b322a431f0829ed4ff33b5aac18
Certificate serial: 019675D58B84D7B403935206AEE9743CCEDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LO_eMLilizIqQx8IKe1P8ztarBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 06:00:51 +0000
Manifest this update: Sun 27 Apr 2025 06:00:51 +0000
Manifest next update: Mon 28 Apr 2025 06:00:51 +0000
Files and hashes: 1: LO_eMLilizIqQx8IKe1P8ztarBg.crl (hash: JDYLX7CIxBPVZqDaVzbV219b8d34wdF4WKt/fCz3b/E=)
2: mQcxBkZ7-mWqzkv2ZtLrNKCsXXw.roa (hash: KchD7ZXPUhVAHhfHUs6iNxTS5Xs7vYjFeQVLeVV+Bu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LO_eMLilizIqQx8IKe1P8ztarBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:8b:84:d7:b4:03:93:52:06:ae:e9:74:3c:ce:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cefde30b8a58b322a431f0829ed4ff33b5aac18
Validity
Not Before: Apr 27 06:00:51 2025 GMT
Not After : Apr 28 06:00:51 2025 GMT
Subject: CN=b20e85436db94be870a46e576d6e2c3998341676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6e:46:57:87:5a:eb:4b:46:bd:02:6c:57:d8:
33:06:40:34:91:79:41:36:e6:30:41:c8:52:d6:45:
07:d1:55:9d:b0:2e:be:f4:f6:4b:cf:5b:de:2f:c8:
cf:0e:0f:de:59:15:72:ba:8d:25:25:1b:cc:25:a5:
67:bd:6a:8a:d9:15:6a:e9:0e:9c:d3:bb:2a:51:13:
52:1d:05:04:ad:63:c4:06:b1:bd:b1:a2:58:59:83:
89:ba:a4:55:a1:a4:41:b4:80:47:5f:d4:36:6d:91:
6d:4d:ca:8f:0f:4a:13:7f:d6:23:36:39:32:52:a5:
63:e8:cf:a1:a1:57:73:a3:c9:3c:56:fc:54:03:e7:
87:be:30:e9:e2:b4:61:0a:c9:57:b0:14:22:ef:13:
15:de:07:0e:90:14:2c:76:5e:b8:49:2b:8f:d2:2b:
71:31:8b:99:5d:7c:8c:b2:b7:95:00:98:61:34:e9:
1f:96:08:95:c3:a2:92:4c:85:8a:6f:ed:07:2c:46:
72:3c:4f:f3:17:70:a0:aa:1a:12:fe:6d:7d:f7:90:
c7:c6:63:e9:64:6a:05:1c:17:cb:fd:85:64:50:3c:
de:1d:fe:7c:50:c6:a4:b0:c4:1a:36:58:d4:3f:04:
eb:de:32:7f:dc:b1:6b:bf:85:bb:0c:7c:56:22:6d:
e8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:0E:85:43:6D:B9:4B:E8:70:A4:6E:57:6D:6E:2C:39:98:34:16:76
X509v3 Authority Key Identifier:
keyid:2C:EF:DE:30:B8:A5:8B:32:2A:43:1F:08:29:ED:4F:F3:3B:5A:AC:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LO_eMLilizIqQx8IKe1P8ztarBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/33a0f9-1178-4a6d-b964-ff765f8531d5/1/LO_eMLilizIqQx8IKe1P8ztarBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:9c:ea:73:9b:9b:6f:26:d1:f2:c4:7b:2e:56:46:81:8b:97:
8a:24:74:1e:c5:02:4e:72:63:d7:ee:da:00:ff:f3:e8:14:11:
f0:26:0f:23:48:5c:42:a3:c7:3b:57:43:a4:a3:1c:68:29:bc:
99:31:70:77:0a:4e:d7:1d:8a:fb:38:34:9b:1b:85:22:4e:2c:
3f:4e:49:47:75:0a:ae:03:99:11:c6:3f:29:53:6e:c6:16:20:
64:8c:e3:ea:54:47:15:f9:2b:ee:09:8e:ac:23:d3:d5:cc:78:
f0:f1:24:fe:62:d6:f4:20:ac:63:57:9f:15:ba:07:00:bd:c8:
b9:ac:37:ae:93:97:72:77:7a:be:f8:5b:1f:fe:61:9c:12:ca:
0e:a9:3c:11:ce:8d:fd:f9:df:69:69:b1:94:f2:78:74:b1:0b:
10:43:bb:87:9b:8d:d2:ec:0e:f4:53:15:88:25:df:e9:4d:7f:
5c:fc:67:f7:f5:38:f2:1c:8c:f9:5d:cb:10:0a:fa:84:91:46:
77:ef:ef:4b:54:c6:a0:fe:80:92:c6:b6:d6:45:a1:5c:51:97:
43:3d:cd:22:5f:25:72:6f:34:2f:04:e6:7f:7b:51:af:bc:fb:
9e:b3:2e:73:41:e6:10:69:eb:f6:71:76:f5:41:42:3d:c3:ab:
c1:91:29:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:16:24 2025 by rpki-client