Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/da53b9-dca5-495d-8763-bfea61b770b6/1/L1SHXb4wvk9_xEoEaLUbF47fZOY.mft
File: L1SHXb4wvk9_xEoEaLUbF47fZOY.mft (raw, json)
Hash identifier: NZEGczJyL2AOlAmbucKin6AZ4+kGwqMhX0K203DDGFU=
Subject key identifier: 72:77:D2:BC:C5:C3:63:AC:57:66:74:FF:DC:75:1D:59:E6:C1:23:33
Authority key identifier: 2F:54:87:5D:BE:30:BE:4F:7F:C4:4A:04:68:B5:1B:17:8E:DF:64:E6
Certificate issuer: /CN=2f54875dbe30be4f7fc44a0468b51b178edf64e6
Certificate serial: 01968022328071D08BB40358582F1DFAC518
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1SHXb4wvk9_xEoEaLUbF47fZOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/da53b9-dca5-495d-8763-bfea61b770b6/1/L1SHXb4wvk9_xEoEaLUbF47fZOY.mft
Manifest number: 111F
Signing time: Tue 29 Apr 2025 06:00:46 +0000
Manifest this update: Tue 29 Apr 2025 06:00:46 +0000
Manifest next update: Wed 30 Apr 2025 06:00:46 +0000
Files and hashes: 1: Db8JmQFrHbrslQy_0_sI8qPfsLc.roa (hash: h9edWzGv+GirDt6SdrQhWfZqKoYQaPxuFx4R8MWBJlc=)
2: L1SHXb4wvk9_xEoEaLUbF47fZOY.crl (hash: bd3kOZYuL5W8QvFeZoE2ye6Ews3XnfM8DAugWyx/ky4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/da53b9-dca5-495d-8763-bfea61b770b6/1/L1SHXb4wvk9_xEoEaLUbF47fZOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/da53b9-dca5-495d-8763-bfea61b770b6/1/L1SHXb4wvk9_xEoEaLUbF47fZOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L1SHXb4wvk9_xEoEaLUbF47fZOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:22:32:80:71:d0:8b:b4:03:58:58:2f:1d:fa:c5:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f54875dbe30be4f7fc44a0468b51b178edf64e6
Validity
Not Before: Apr 29 06:00:46 2025 GMT
Not After : Apr 30 06:00:46 2025 GMT
Subject: CN=7277d2bcc5c363ac576674ffdc751d59e6c12333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c2:58:51:af:c4:2f:b7:0f:b8:d7:8d:12:74:
a1:e8:d9:38:3c:3e:13:64:bd:93:fa:df:3d:b4:6e:
ca:49:73:4f:b3:b5:92:94:2b:c9:46:50:4f:a3:15:
f6:d2:5b:31:71:b0:a4:0c:ac:67:1f:17:22:f7:e7:
7e:ea:c3:0c:b9:77:f7:74:92:e6:74:f5:2c:bf:0b:
7a:62:dd:7b:95:06:a0:1e:3c:a2:4a:de:88:ae:b5:
ac:bb:1c:ac:8a:8d:91:06:0d:95:91:0f:d2:c3:b3:
20:e3:b8:ba:5e:bd:83:9b:75:e5:bc:c2:7b:11:df:
39:b3:8c:62:4c:46:c0:df:4c:d4:5e:42:83:83:fc:
c6:33:0b:7f:e0:18:5e:17:63:b9:d1:af:5d:97:b4:
b9:0a:27:b2:60:55:b2:23:c1:ba:04:b1:ac:66:a8:
df:b9:90:e3:63:ab:ee:3a:49:fe:42:ca:bc:85:0c:
08:ab:3e:5c:2f:a5:ce:5c:57:94:50:3c:89:34:b0:
65:6d:40:58:60:6c:81:cc:22:51:57:0e:8c:dd:09:
d1:b2:b7:2a:50:c0:b0:76:d0:50:11:35:c6:4b:c6:
e8:12:44:a7:74:cd:81:67:f3:47:43:8b:30:e9:83:
56:0f:97:0c:30:2e:97:80:9b:8c:4c:e3:d0:4e:ff:
ab:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:77:D2:BC:C5:C3:63:AC:57:66:74:FF:DC:75:1D:59:E6:C1:23:33
X509v3 Authority Key Identifier:
keyid:2F:54:87:5D:BE:30:BE:4F:7F:C4:4A:04:68:B5:1B:17:8E:DF:64:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1SHXb4wvk9_xEoEaLUbF47fZOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/da53b9-dca5-495d-8763-bfea61b770b6/1/L1SHXb4wvk9_xEoEaLUbF47fZOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/da53b9-dca5-495d-8763-bfea61b770b6/1/L1SHXb4wvk9_xEoEaLUbF47fZOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:3c:54:81:ae:cf:e0:58:14:bf:2a:be:be:c3:83:8c:51:db:
a1:ff:36:02:78:f2:18:ff:e4:be:4e:3f:6d:9f:fc:2c:ff:a0:
84:a2:23:25:86:76:08:30:d6:9e:7b:a0:9b:d9:aa:ce:9c:73:
98:33:2c:68:e4:9a:59:1c:02:64:ed:f4:9d:d6:34:07:26:00:
da:17:c2:a3:c8:04:b7:42:98:f8:43:b6:46:37:b6:00:8a:7f:
2c:cd:ed:70:fb:fa:52:bb:c3:37:9a:b4:52:ed:22:44:f9:2f:
5d:ca:a4:cd:7c:e2:64:64:18:25:f9:d1:1b:6a:58:0f:3e:f0:
08:f5:6c:93:1a:f8:8a:e8:eb:ce:f3:8f:ac:fa:7f:01:13:b2:
a4:9c:65:04:52:22:df:26:cb:b0:15:7a:29:4f:3d:21:66:8f:
45:e9:bc:5e:13:ab:45:bb:09:ef:72:d9:0e:8f:9f:b8:6f:f8:
e1:8e:ce:3d:85:35:7c:86:de:1f:d8:bc:39:26:6e:e3:d6:15:
d7:45:4e:d3:96:e9:32:5f:7d:e1:86:9d:eb:cf:03:3b:3e:3d:
ac:fe:f7:74:f5:c1:6b:23:e8:4f:dc:bd:e5:d1:23:aa:fa:df:
4a:00:12:7d:b5:46:bf:40:fc:16:7c:88:cc:69:e4:61:09:7d:
e6:b5:31:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:09:51 2025 by rpki-client