Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
File: lw69BGmlxpwQmJccqrNv4DLs4xE.mft (raw, json)
Hash identifier: YihhEWMxGK5xK+fgURzPsTk9GZb21smKCJGfB5EtGWE=
Subject key identifier: AE:8B:80:16:42:4A:DE:1C:62:64:0A:15:D7:4D:D2:0B:D2:8E:34:AA
Authority key identifier: 97:0E:BD:04:69:A5:C6:9C:10:98:97:1C:AA:B3:6F:E0:32:EC:E3:11
Certificate issuer: /CN=970ebd0469a5c69c1098971caab36fe032ece311
Certificate serial: 01967FB4A74B5D62416468E25905A73C6D5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
Manifest number: 1517
Signing time: Tue 29 Apr 2025 04:01:07 +0000
Manifest this update: Tue 29 Apr 2025 04:01:07 +0000
Manifest next update: Wed 30 Apr 2025 04:01:07 +0000
Files and hashes: 1: aRRMx2LpXrXzb91tfKNbEYwqTy4.roa (hash: u9ed+0pIjkL2kAKw6TtOQkn9W9RbAQ792y7vYcRd71M=)
2: eV3A69o5dbmXhkcbRscNdwCcmUw.roa (hash: 1+RfsWC1iIY4uoQdBg4VWebMYcz8BpqPe7dmv43mNg4=)
3: lw69BGmlxpwQmJccqrNv4DLs4xE.crl (hash: bM8soI9PpuzrfnDOxOKTitmJ9Ofl5vPj9L5edr/fMKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:a7:4b:5d:62:41:64:68:e2:59:05:a7:3c:6d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=970ebd0469a5c69c1098971caab36fe032ece311
Validity
Not Before: Apr 29 04:01:07 2025 GMT
Not After : Apr 30 04:01:07 2025 GMT
Subject: CN=ae8b8016424ade1c62640a15d74dd20bd28e34aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6d:5a:5b:7d:ce:54:e8:75:5b:54:91:af:90:
4c:20:ea:c0:3b:2f:7e:00:c7:c7:6e:6e:b4:ea:02:
b0:e1:6b:73:3f:4e:37:cb:a8:27:1f:fa:71:8b:91:
91:f9:0e:b4:ab:af:5a:f9:f2:46:47:20:66:4c:f9:
a8:aa:30:0c:ea:0f:7c:9b:00:12:9e:a2:83:c1:01:
78:dd:a3:d2:cc:00:e8:40:23:54:d5:80:c3:a0:de:
aa:ca:0f:0c:38:f6:2d:35:b2:d4:43:fc:ac:e5:3c:
af:9f:49:15:bd:b8:f7:0c:38:f1:3f:6c:bd:a2:fb:
3c:6a:91:e9:17:a9:39:db:22:c6:a0:8f:61:fe:a6:
85:c1:ff:50:cd:5a:6e:5c:95:8b:6c:e5:b6:73:e6:
20:1c:f4:e2:c3:39:86:b2:a8:9c:fd:1d:37:d9:e0:
db:ca:08:7d:7a:ce:fe:a2:26:3e:ea:42:31:f1:ea:
d7:54:31:6f:21:85:83:3a:2a:76:11:51:f4:1c:3a:
c3:7b:88:24:e3:0e:eb:ce:b5:5b:4f:2e:69:de:55:
42:f5:ad:84:c6:68:de:53:fa:07:dc:f1:af:a2:e0:
98:43:f9:31:eb:e0:3b:31:a4:ff:8f:a8:c8:c5:cf:
03:e0:36:4d:36:40:f6:b9:22:22:40:80:b0:bd:aa:
92:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:8B:80:16:42:4A:DE:1C:62:64:0A:15:D7:4D:D2:0B:D2:8E:34:AA
X509v3 Authority Key Identifier:
keyid:97:0E:BD:04:69:A5:C6:9C:10:98:97:1C:AA:B3:6F:E0:32:EC:E3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:eb:47:86:5f:ce:da:76:db:ff:7f:93:ef:8f:d2:39:3c:ee:
78:23:50:f6:bc:fc:af:7e:6d:82:ae:ca:e1:2f:bc:64:df:a2:
af:69:cc:6e:a3:e1:03:c0:ea:9f:af:82:e1:75:cb:ba:09:07:
c5:11:e7:07:68:da:86:44:8c:75:55:dd:c0:a9:97:c6:b9:fb:
ef:0d:6b:1f:1c:e3:ff:32:61:63:c2:e8:c1:78:cb:cb:44:31:
7a:05:71:b3:36:e2:f6:7a:00:08:b5:9e:5b:94:b1:6f:0c:4e:
11:0e:6a:6d:23:a6:c9:cb:4a:77:f7:7f:77:cb:4f:b5:a9:3e:
7f:8a:6b:4b:e9:0b:cf:0d:51:fe:e0:ed:2a:01:85:4e:cc:38:
74:f5:c5:28:1a:6b:31:1a:2a:b4:a9:69:c2:eb:d3:41:88:20:
d6:e7:f8:96:ea:26:b0:5d:da:e2:cb:0f:70:d9:3f:0d:6c:ec:
ff:2f:71:12:56:8f:15:dd:73:ff:95:81:a8:ff:77:18:c9:dc:
ce:73:fc:e9:8d:40:ab:5f:0e:6e:9a:fd:3f:32:df:2b:69:fd:
f3:26:a9:d0:60:7f:1f:fd:a9:09:39:41:dd:30:2f:b8:bc:39:
e4:65:4c:51:ec:8c:07:82:52:7d:6e:85:ef:7d:e1:6c:69:4f:
38:31:d0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:33:39 2025 by rpki-client