Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
File: ljmhp94G13qyrjOH3Kaaf-x2bEM.mft (raw, json)
Hash identifier: RxBpiFhXEvJYjH8SVPk6pW3myAUaJX6iRTrInHccB5I=
Subject key identifier: 57:D9:89:D3:7F:F2:65:64:04:96:B8:A3:67:D3:23:B8:74:C5:55:BE
Authority key identifier: 96:39:A1:A7:DE:06:D7:7A:B2:AE:33:87:DC:A6:9A:7F:EC:76:6C:43
Certificate issuer: /CN=9639a1a7de06d77ab2ae3387dca69a7fec766c43
Certificate serial: 0196876DABF1D8639F6F0B4A81BA670A845B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljmhp94G13qyrjOH3Kaaf-x2bEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
Manifest number: 12D8
Signing time: Wed 30 Apr 2025 16:00:33 +0000
Manifest this update: Wed 30 Apr 2025 16:00:33 +0000
Manifest next update: Thu 01 May 2025 16:00:33 +0000
Files and hashes: 1: Qiqrfe8kB9GaXpsM0lx0qYLex1Y.roa (hash: wjrm5Cuv3WYI62Wa2AE0y6JBVls2W7DEVANrYb6LK08=)
2: ljmhp94G13qyrjOH3Kaaf-x2bEM.crl (hash: TfVDf8VGDtIhSHTnU8KHkDIyNPYnBP2ruCSPZGu36To=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ljmhp94G13qyrjOH3Kaaf-x2bEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:6d:ab:f1:d8:63:9f:6f:0b:4a:81:ba:67:0a:84:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9639a1a7de06d77ab2ae3387dca69a7fec766c43
Validity
Not Before: Apr 30 16:00:33 2025 GMT
Not After : May 1 16:00:33 2025 GMT
Subject: CN=57d989d37ff265640496b8a367d323b874c555be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:94:2a:6c:83:43:63:4e:95:fc:a0:65:b3:0d:
ce:1d:8d:49:12:b9:d8:cf:ff:41:84:e5:72:c2:78:
5e:74:88:c5:77:56:f4:19:ad:40:31:d6:cc:a5:94:
d6:8c:cb:45:fe:53:3b:ba:35:74:bf:31:ee:03:d5:
5f:d9:72:0a:a1:d5:f6:2d:ee:8a:17:fc:9d:64:37:
87:28:bd:ec:46:7a:48:b6:6b:07:c0:b3:f6:0a:6d:
3d:0b:75:71:41:bd:ec:d1:e9:81:58:52:32:ec:1a:
b1:66:c2:5f:2f:92:83:10:fb:81:ca:ca:93:01:81:
a2:1f:ca:94:fa:bc:5e:0f:ce:e5:fc:1d:03:fa:b3:
ae:ef:77:9d:78:75:a4:29:b7:b9:11:f2:c5:59:e1:
65:26:c9:67:f8:44:f1:91:f7:e8:1d:e1:41:5c:b4:
70:07:ba:94:e5:77:7f:5c:04:c3:fe:27:68:0d:34:
25:a1:ba:b6:41:76:56:80:be:26:43:dc:71:12:02:
9b:e1:4b:1b:0f:b2:bd:76:f7:0d:c4:cb:a6:28:cc:
bc:03:e1:e9:70:84:15:ab:f7:39:89:af:6a:59:a1:
49:bd:94:90:8e:51:60:dd:76:51:f6:53:a3:9a:25:
48:82:ce:9d:c5:42:67:1e:4a:9f:3f:08:09:0d:6c:
95:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D9:89:D3:7F:F2:65:64:04:96:B8:A3:67:D3:23:B8:74:C5:55:BE
X509v3 Authority Key Identifier:
keyid:96:39:A1:A7:DE:06:D7:7A:B2:AE:33:87:DC:A6:9A:7F:EC:76:6C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljmhp94G13qyrjOH3Kaaf-x2bEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6cd870-0968-4cef-a91d-af20fe793e64/1/ljmhp94G13qyrjOH3Kaaf-x2bEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:46:78:7a:30:e5:ff:99:3b:e5:a3:f0:6b:66:e1:ce:4f:87:
23:04:42:87:91:bb:f0:e6:83:c5:60:f1:8b:c2:e9:d9:ef:2c:
c1:77:eb:a9:03:9f:34:f4:dd:74:e8:9f:9e:b7:04:1e:e2:f0:
6b:10:75:a4:14:60:fb:73:07:b4:2f:5b:c4:fb:e3:12:48:4c:
23:6a:f1:7b:1f:03:a0:97:ea:c7:b3:32:80:e7:1b:03:29:d8:
d6:4e:44:40:1d:f8:35:b3:eb:fa:39:84:8a:2a:ca:ec:13:b8:
0f:d9:79:c4:dc:68:24:17:89:16:dd:b3:73:7b:1f:eb:49:28:
88:ad:2f:ca:2e:7f:77:99:9f:cd:89:61:6b:e2:c9:41:43:b0:
4a:9d:a5:83:37:3d:13:2e:c4:b0:77:8b:47:b4:85:ce:47:3e:
a6:1a:d5:85:51:df:09:4b:dd:ac:29:04:48:79:9c:30:38:ab:
61:54:05:72:c8:fc:f9:56:e9:66:4e:be:cf:96:37:59:b7:64:
bf:94:a1:ac:9d:1e:b8:35:19:36:90:8a:3b:d3:07:de:97:a5:
b4:67:5f:5c:bd:f0:27:ee:ff:1a:c0:43:16:bf:c4:27:91:7d:
13:d1:54:d5:9f:79:0d:02:05:83:1a:a5:7a:8a:26:97:d1:43:
ad:62:56:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:19:46 2025 by rpki-client