Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
File: LiSXk-WSSp8l86Co3ZlLN065N9I.mft (raw, json)
Hash identifier: Lx3jAQa/yUhHp5AnC0T7WlBBfLCpx4qpeI9WZ47zE3A=
Subject key identifier: 8A:63:B7:24:E2:9D:8E:80:05:02:B6:9A:87:4D:69:70:30:58:26:BB
Authority key identifier: 2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2
Certificate issuer: /CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2
Certificate serial: 0196760CCF76B1045608D9340105201866FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
Manifest number: 14E7
Signing time: Sun 27 Apr 2025 07:01:13 +0000
Manifest this update: Sun 27 Apr 2025 07:01:13 +0000
Manifest next update: Mon 28 Apr 2025 07:01:13 +0000
Files and hashes: 1: FP9KPtAPudwifvNA1yXNkNCFOFY.roa (hash: ocGzp/8Fhd1lCI2svcm4GtNlcaUMkqz9rj4sgodMzFo=)
2: LiSXk-WSSp8l86Co3ZlLN065N9I.crl (hash: apEQW1nkoLcW7GjwdnR21Odv8Lg728z3Kz/gWx9gxQ8=)
3: gzJT4-cX5kiA_JxRqpqJmyeN7rM.roa (hash: j7soth2EwPp+uzVpjpNq3DRnu+ZloTBjkFjkTsLwX1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:cf:76:b1:04:56:08:d9:34:01:05:20:18:66:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2
Validity
Not Before: Apr 27 07:01:13 2025 GMT
Not After : Apr 28 07:01:13 2025 GMT
Subject: CN=8a63b724e29d8e800502b69a874d6970305826bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6d:be:5c:11:65:53:6e:f7:e0:ed:9b:00:95:
95:d8:f1:8e:74:cc:7e:66:01:a8:d2:05:06:f9:f8:
82:04:f9:e8:6f:41:d7:f4:89:74:07:ad:3c:d3:66:
33:41:39:20:2e:e3:78:4b:63:9f:7b:69:ff:76:f1:
95:24:5b:6f:17:67:05:67:02:9f:e0:76:d7:02:7a:
76:97:a5:0e:cd:a3:f5:59:76:4d:01:f6:7e:d5:0a:
56:d0:29:f9:20:fb:52:70:5d:da:2b:81:54:02:b6:
98:f2:92:f5:9d:87:ba:86:7c:fd:cb:1c:6b:4f:88:
4f:af:96:52:08:3e:47:62:53:bd:04:2c:22:aa:e6:
4d:11:37:4b:71:f3:41:ab:ae:26:6e:d8:87:4f:09:
b8:20:c4:ce:ff:92:ad:53:91:cb:35:e5:e9:a8:b7:
23:f6:fd:4d:14:b1:aa:00:2d:0e:02:a8:ee:7a:d7:
e2:38:34:a5:ec:a7:7d:7e:2c:fc:32:cc:b0:f0:66:
3e:61:e5:06:93:ab:60:ef:0d:e6:ff:6e:21:2e:fa:
a5:e2:90:2c:f0:78:ef:75:1c:6e:a8:b0:93:56:ee:
aa:43:9b:62:77:10:dd:66:ce:15:15:21:13:ca:83:
c2:8d:c9:16:a8:1c:33:8e:f3:50:09:d0:e6:3d:51:
a7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:63:B7:24:E2:9D:8E:80:05:02:B6:9A:87:4D:69:70:30:58:26:BB
X509v3 Authority Key Identifier:
keyid:2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:0f:f6:d2:39:c2:93:77:43:90:ce:04:30:72:9f:39:d5:2c:
ca:69:19:f0:3a:be:db:33:a3:fa:f2:f8:b7:c0:ea:b2:a5:2c:
f6:08:80:76:e0:92:fe:87:96:f8:a9:7a:53:9d:0f:2e:2e:be:
65:d9:65:b4:a7:a1:67:1f:4f:40:2a:4a:5e:e1:1f:25:fa:1f:
57:07:2d:37:9d:01:38:a0:6f:0f:a2:b9:17:14:9b:92:53:ed:
05:59:13:e9:46:9f:b1:07:11:66:02:24:c3:69:9a:fc:0e:c9:
2e:95:41:e1:79:b3:b0:1b:90:85:5b:3b:1e:39:07:24:bd:31:
19:92:a2:b8:4f:ff:d8:fc:db:25:46:a1:8a:49:98:4c:cf:ff:
79:f2:af:73:30:ad:77:39:94:5b:6e:6c:8f:12:2d:20:f2:7c:
11:06:5b:70:45:e4:f9:38:15:19:7f:43:d0:a3:da:8b:41:50:
cf:7a:8b:7b:c2:56:53:80:31:3c:3b:92:6f:66:fb:a8:cf:10:
17:36:73:99:f9:fa:ba:e5:eb:4c:ea:c2:04:a3:1a:01:24:34:
bc:b6:32:d1:d4:46:c1:00:20:7c:b4:91:03:f7:45:fc:da:c9:
9e:c2:83:48:6b:a2:49:db:0c:22:dd:12:8d:11:a1:c9:c5:a3:
60:ca:0c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:24:04 2025 by rpki-client