Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft
File: lGEMh1DDN98EecWg61t4tJoX_z4.mft (raw, json)
Hash identifier: Dp2zosSINZ3UE51bdozLY9RbVJ1mOTRiK5PLKTdYr6A=
Subject key identifier: A1:28:9B:82:6A:1B:FA:31:4D:93:97:D9:8E:42:41:3F:6E:93:91:7E
Authority key identifier: 94:61:0C:87:50:C3:37:DF:04:79:C5:A0:EB:5B:78:B4:9A:17:FF:3E
Certificate issuer: /CN=94610c8750c337df0479c5a0eb5b78b49a17ff3e
Certificate serial: 01968849A6A0056731397AB3D826A7C3BF7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGEMh1DDN98EecWg61t4tJoX_z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft
Manifest number: 039A
Signing time: Wed 30 Apr 2025 20:00:50 +0000
Manifest this update: Wed 30 Apr 2025 20:00:50 +0000
Manifest next update: Thu 01 May 2025 20:00:50 +0000
Files and hashes: 1: lGEMh1DDN98EecWg61t4tJoX_z4.crl (hash: InXzvCVH8DX+9y8yGFotgnCpef6uN1+gUERWO++eb8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lGEMh1DDN98EecWg61t4tJoX_z4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:49:a6:a0:05:67:31:39:7a:b3:d8:26:a7:c3:bf:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94610c8750c337df0479c5a0eb5b78b49a17ff3e
Validity
Not Before: Apr 30 20:00:50 2025 GMT
Not After : May 1 20:00:50 2025 GMT
Subject: CN=a1289b826a1bfa314d9397d98e42413f6e93917e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d8:87:16:4a:9a:d3:22:c2:16:f4:45:84:56:
a7:74:76:10:8b:1a:e5:bc:6e:ff:b0:75:5d:bd:a3:
36:76:81:89:82:49:66:32:21:9b:fb:71:b4:8b:fc:
a1:0f:7e:e8:4a:58:3b:e1:87:30:51:13:c1:9f:90:
19:03:e1:56:64:8b:a2:28:4b:53:d7:6c:5f:8a:ac:
18:38:27:62:5c:87:c1:10:21:78:00:c9:b4:9f:aa:
ea:fd:48:a7:70:bf:db:8d:ec:b4:b2:84:47:98:90:
a2:ee:56:56:39:eb:41:de:e5:16:1d:6f:8c:ba:11:
74:60:67:ee:5f:ec:84:ac:6d:54:e3:91:29:4f:56:
5d:23:8f:80:cc:2c:a7:48:45:70:79:e7:ea:f8:01:
8d:dd:82:c8:5b:1c:b4:6f:62:f6:05:1a:aa:94:71:
05:8a:9f:08:6a:a1:f2:74:b2:45:d4:97:cb:58:f8:
04:85:1f:0d:d7:e9:53:83:67:f5:2f:49:d5:26:40:
34:41:02:1f:85:5c:d4:3f:b0:09:5c:10:49:db:2b:
1a:f9:36:fa:e0:ed:c6:e8:5d:60:3e:71:09:06:64:
be:42:8a:93:26:e1:1c:b4:94:23:52:50:a0:b7:f9:
2f:16:d7:a8:18:10:cd:43:48:ed:bf:e9:9f:6b:39:
b7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:28:9B:82:6A:1B:FA:31:4D:93:97:D9:8E:42:41:3F:6E:93:91:7E
X509v3 Authority Key Identifier:
keyid:94:61:0C:87:50:C3:37:DF:04:79:C5:A0:EB:5B:78:B4:9A:17:FF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGEMh1DDN98EecWg61t4tJoX_z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:71:07:9c:94:c5:e6:a6:15:e1:9f:c0:a3:11:64:f0:3d:7f:
95:70:23:ee:28:59:14:54:b9:63:76:cf:30:c7:d6:37:a3:bb:
47:12:71:6d:ee:48:c5:3b:fc:e0:7f:76:ca:da:41:7c:ab:d0:
24:9c:21:24:44:cb:73:44:a7:82:1b:23:2f:98:72:3c:40:4f:
19:2b:be:3c:7a:7a:be:eb:61:78:c1:f5:5a:16:73:5b:50:ff:
cf:85:be:d8:91:96:7c:67:98:81:48:71:9a:c5:5a:90:6b:ed:
e5:08:ad:10:17:07:75:d3:64:75:7a:36:d6:a8:d0:d3:02:bc:
a3:38:9a:4f:0b:1c:f6:33:97:64:db:4a:be:cb:63:a0:f6:58:
47:d0:7d:c2:e9:20:14:d2:3b:0a:00:04:d9:2e:17:0b:ff:ee:
39:4a:ed:1e:c0:7d:69:e4:18:14:97:fa:f9:bd:78:ce:ff:7e:
6e:88:b3:eb:9b:ee:b9:6c:7d:d2:71:3b:ed:22:6f:59:24:dd:
01:7c:35:23:7e:90:24:7e:81:69:89:5e:b2:64:0b:07:04:7c:
10:ce:38:74:08:f3:63:27:8f:91:9e:d4:bf:4a:ab:d5:ed:0a:
e8:aa:0e:79:fd:36:66:c3:41:09:d7:cf:9d:bc:64:cc:33:9b:
84:61:9d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:00:23 2025 by rpki-client