
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/991825-d4bf-48c6-9493-38cfec21b422/1/LijWjfjYqxVZsR5zmeYu3DMjyj0.mft
File: LijWjfjYqxVZsR5zmeYu3DMjyj0.mft (raw, json)
Hash identifier: EjiacF+JjgZSIy+L+BnvhlSBzn1Q9mXP4TqCtKlGB8Y=
Subject key identifier: 5A:0D:18:FF:46:47:10:50:5F:99:B2:A9:13:17:6B:78:B5:9C:1D:C2
Authority key identifier: 2E:28:D6:8D:F8:D8:AB:15:59:B1:1E:73:99:E6:2E:DC:33:23:CA:3D
Certificate issuer: /CN=2e28d68df8d8ab1559b11e7399e62edc3323ca3d
Certificate serial: 0196AF202C53F553AEB723EAD797E88033C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LijWjfjYqxVZsR5zmeYu3DMjyj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/991825-d4bf-48c6-9493-38cfec21b422/1/LijWjfjYqxVZsR5zmeYu3DMjyj0.mft
Manifest number: 01FE
Signing time: Thu 08 May 2025 09:00:43 +0000
Manifest this update: Thu 08 May 2025 09:00:43 +0000
Manifest next update: Fri 09 May 2025 09:00:43 +0000
Files and hashes: 1: LijWjfjYqxVZsR5zmeYu3DMjyj0.crl (hash: r6k8b/LsxWWUVcgVaWEiUHAakj1ny8Yv8xT8z/JjLjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/991825-d4bf-48c6-9493-38cfec21b422/1/LijWjfjYqxVZsR5zmeYu3DMjyj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/991825-d4bf-48c6-9493-38cfec21b422/1/LijWjfjYqxVZsR5zmeYu3DMjyj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LijWjfjYqxVZsR5zmeYu3DMjyj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:20:2c:53:f5:53:ae:b7:23:ea:d7:97:e8:80:33:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e28d68df8d8ab1559b11e7399e62edc3323ca3d
Validity
Not Before: May 8 09:00:43 2025 GMT
Not After : May 9 09:00:43 2025 GMT
Subject: CN=5a0d18ff464710505f99b2a913176b78b59c1dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:bf:cc:1a:60:a8:56:7a:36:3c:d2:c5:39:7f:
fc:91:e9:2d:d7:0f:56:9a:46:d0:9c:60:c1:a2:5d:
df:6e:a7:96:6c:22:27:80:e6:b6:ca:ef:8e:b6:7e:
10:79:89:db:c8:32:b4:60:45:ba:f1:45:54:cd:4f:
2c:d2:58:5b:0c:b5:f5:50:bf:75:34:46:34:91:68:
04:1d:a3:67:ed:98:ee:4d:5e:37:98:44:61:50:d4:
46:83:c2:46:9c:dd:a7:0c:35:4d:18:1c:16:ab:21:
4c:71:ca:66:5e:74:3d:c6:57:e3:5d:59:f9:c6:cf:
23:9a:cd:c1:a0:7d:39:f0:88:33:b7:f3:62:e5:72:
81:9f:22:c0:6a:5f:0f:1a:03:82:eb:07:15:ce:b4:
34:fa:73:c1:02:72:b1:7b:eb:5f:7c:53:85:9d:61:
af:78:cc:90:51:9f:a6:49:dc:e3:6e:95:4e:34:07:
83:c2:6f:2e:c9:09:32:3a:a7:99:c7:ab:a8:62:c4:
77:08:70:20:3f:7a:37:67:63:ad:49:94:31:e1:92:
ea:71:85:c4:0f:4b:b9:2c:b9:5a:77:27:a5:aa:47:
24:d5:7e:05:5a:69:14:87:cf:c9:c2:84:7b:71:4c:
33:cf:8c:c9:b6:ed:17:03:37:26:a9:3d:6a:b6:8e:
3d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:0D:18:FF:46:47:10:50:5F:99:B2:A9:13:17:6B:78:B5:9C:1D:C2
X509v3 Authority Key Identifier:
keyid:2E:28:D6:8D:F8:D8:AB:15:59:B1:1E:73:99:E6:2E:DC:33:23:CA:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LijWjfjYqxVZsR5zmeYu3DMjyj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/991825-d4bf-48c6-9493-38cfec21b422/1/LijWjfjYqxVZsR5zmeYu3DMjyj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/991825-d4bf-48c6-9493-38cfec21b422/1/LijWjfjYqxVZsR5zmeYu3DMjyj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:04:9b:f7:79:7c:90:de:80:83:90:04:23:cf:4f:99:77:db:
0f:4b:2a:85:46:e3:da:94:1f:87:a1:f5:bb:92:ad:c6:b7:9f:
ee:0e:7a:9e:d3:4a:6a:a6:11:38:7e:96:b3:0c:0e:d6:ab:28:
59:5c:cf:1c:a4:a6:f2:e8:ae:11:5e:c7:84:58:b3:fc:e3:de:
7b:bb:a6:0d:1c:d4:65:e2:86:6b:9e:e6:e6:5c:c8:31:61:02:
cc:0f:aa:7f:33:aa:ec:88:b8:5c:d5:5e:a0:84:6e:9a:de:11:
a7:71:f7:41:8e:97:34:c2:99:f4:a1:77:25:5c:42:f0:8a:73:
77:a5:49:13:a5:4d:d7:d4:39:9a:92:22:66:ac:49:9d:f9:c1:
6d:17:16:d5:1f:1c:60:8f:fd:d9:ea:33:fb:da:da:c3:0a:50:
86:2f:0c:87:01:ed:50:30:90:3c:f7:7d:eb:3e:7c:62:a2:22:
b1:11:04:04:18:5c:86:3c:2d:32:8b:bb:21:6c:c2:f4:48:5f:
96:b2:0b:50:14:ae:cb:88:04:cf:02:bc:3e:e1:49:36:83:3d:
9b:ea:4d:1b:78:a3:c9:0a:69:8b:f8:09:cc:0d:ae:0b:7f:68:
a7:04:a0:4f:79:85:a4:7f:ce:4e:fd:a2:59:4d:bf:a7:a7:64:
63:a6:00:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 15:35:44 2025 by rpki-client