Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft
File: lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft (raw, json)
Hash identifier: rIiEEuuW5qrLs1O91pEogrgEJbvi+xVPcS6J45qep7g=
Subject key identifier: A5:6A:C7:1F:39:06:01:C1:31:0F:30:7D:A8:0A:9C:E4:07:29:C2:0A
Authority key identifier: 97:15:33:CB:7A:67:96:AC:5C:38:2B:38:DC:F4:59:F9:17:69:31:F4
Certificate issuer: /CN=971533cb7a6796ac5c382b38dcf459f9176931f4
Certificate serial: 019674C2B38B4C02DF7C664A3F5C2A609E81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft
Manifest number: 05BA
Signing time: Sun 27 Apr 2025 01:00:39 +0000
Manifest this update: Sun 27 Apr 2025 01:00:39 +0000
Manifest next update: Mon 28 Apr 2025 01:00:39 +0000
Files and hashes: 1: lxUzy3pnlqxcOCs43PRZ-RdpMfQ.crl (hash: YPtkrzY6gTEcgywpqh0JZW8qbjWXbCfIBmq2KuQVY6M=)
2: tU-16s9tq9lFPI9LdHnUudxWQ80.roa (hash: C3zkVEZCC33fk0KY3UR1pX59nVM27axL5/PozEIPAG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:b3:8b:4c:02:df:7c:66:4a:3f:5c:2a:60:9e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971533cb7a6796ac5c382b38dcf459f9176931f4
Validity
Not Before: Apr 27 01:00:39 2025 GMT
Not After : Apr 28 01:00:39 2025 GMT
Subject: CN=a56ac71f390601c1310f307da80a9ce40729c20a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0a:ad:a0:99:31:9f:e8:3b:00:ab:4f:62:05:
b5:56:ca:e3:d9:5f:d1:7a:ab:71:45:ba:c5:9c:d1:
21:06:00:20:51:28:1c:d1:83:79:17:dd:99:3b:fc:
e8:40:95:87:c0:27:d4:72:db:a4:2f:fd:06:bb:28:
11:ca:e0:39:b6:48:22:54:ee:0e:39:ca:ca:ac:7c:
23:ae:3c:bd:b0:5a:02:03:20:f9:ac:b7:f5:0c:f4:
b6:35:34:0d:1d:37:a8:1a:98:95:3a:9b:80:c3:b5:
67:e4:5d:48:45:ab:59:96:83:67:65:60:f2:44:83:
37:a4:1e:7f:34:bc:9e:28:c2:32:2e:0d:a4:fd:2e:
cc:9d:64:06:c7:98:99:6d:7c:d0:fa:cc:88:38:e9:
35:14:a5:d1:94:eb:50:ab:c0:f0:ba:18:96:c8:a3:
4b:02:cb:2f:44:14:4c:96:dc:94:de:10:f9:ee:d0:
a6:fd:b3:55:1d:d2:10:b1:2f:53:28:c4:43:b5:05:
76:9d:9c:5f:32:fb:30:f8:60:9b:06:c2:7b:b5:14:
eb:4e:a6:01:ff:1c:b3:56:27:df:86:f8:54:ff:56:
de:ce:91:cd:e1:09:80:6b:0b:00:1e:aa:9c:6e:47:
2d:c7:ec:27:3e:bf:c2:99:bf:7e:7f:0d:69:d3:52:
37:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:6A:C7:1F:39:06:01:C1:31:0F:30:7D:A8:0A:9C:E4:07:29:C2:0A
X509v3 Authority Key Identifier:
keyid:97:15:33:CB:7A:67:96:AC:5C:38:2B:38:DC:F4:59:F9:17:69:31:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:80:49:08:64:e2:28:22:59:5a:90:ce:4e:b5:27:6f:12:2c:
bb:79:7c:66:d6:03:c9:ce:9a:57:56:77:de:db:90:06:aa:30:
ad:b2:b3:68:94:3a:b7:51:75:9b:f0:5a:b4:e8:d5:14:a2:68:
39:ea:88:ea:f2:54:ad:74:74:ca:9a:a8:70:47:ab:5e:a6:10:
55:4d:22:ee:f3:fb:5a:56:1f:86:0e:ca:4f:9c:e1:8d:60:fb:
bd:6e:eb:7e:00:50:1f:e2:bb:ae:44:d3:d3:66:67:8d:df:ec:
9e:cc:ca:2b:b2:be:27:e7:6f:bd:27:e3:4d:d3:a9:43:da:26:
3b:8e:03:36:2a:38:e5:fe:93:4b:75:1b:78:62:68:ca:9f:2e:
09:b5:00:03:51:e0:4a:d8:08:c1:82:ec:20:96:dd:19:92:c7:
9f:6f:55:14:bf:dd:a3:78:f1:3d:e3:46:85:35:cd:e3:4f:fa:
3c:1a:91:05:11:36:e1:40:58:e1:b6:c0:0f:e3:9b:43:9c:01:
7c:c0:4c:0d:47:d6:a6:12:8f:2b:f5:6b:8e:65:29:7f:1b:f0:
62:b4:a4:66:89:7a:a5:7b:9b:c2:f3:e5:e5:70:e2:8e:ea:cf:
69:a0:92:96:9a:f8:e7:a5:11:80:45:c3:ae:53:97:98:f3:0e:
e4:da:8e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:36:01 2025 by rpki-client