Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
File: LWmLr5_z7uvmYoSIn79onU5oPIE.mft (raw, json)
Hash identifier: q1Z/yY4fV/xQ7SRYK+yLtGHi2lKsVCvVVzBJoaA/SyU=
Subject key identifier: 88:47:58:56:B6:23:F0:7A:F2:44:FA:52:31:B9:FD:0F:B1:E7:2F:C4
Authority key identifier: 2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81
Certificate issuer: /CN=2d698baf9ff3eeebe66284889fbf689d4e683c81
Certificate serial: 0196778CF491B79B096219E4E85E1EC1E2F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
Manifest number: 0D99
Signing time: Sun 27 Apr 2025 14:00:48 +0000
Manifest this update: Sun 27 Apr 2025 14:00:48 +0000
Manifest next update: Mon 28 Apr 2025 14:00:48 +0000
Files and hashes: 1: LWmLr5_z7uvmYoSIn79onU5oPIE.crl (hash: 23EA+prrCnPcZF4uHAPYQlcpnYifCGiQEyT7tnRXcko=)
2: k4aTxBF_DmBio83fOwNHIHkeyiA.roa (hash: IVVbmDsKyhVLGaHbxiyIMsj1K/TNy+QiBpkicXXI0O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:8c:f4:91:b7:9b:09:62:19:e4:e8:5e:1e:c1:e2:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d698baf9ff3eeebe66284889fbf689d4e683c81
Validity
Not Before: Apr 27 14:00:48 2025 GMT
Not After : Apr 28 14:00:48 2025 GMT
Subject: CN=88475856b623f07af244fa5231b9fd0fb1e72fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6f:64:80:80:d3:3e:7d:f0:87:97:d6:81:ed:
f2:9c:e9:4a:ac:33:b6:7e:7d:62:ed:0a:87:a3:0d:
9c:1d:66:db:9f:0e:f1:10:af:d8:b5:8f:21:dc:02:
9d:ac:f8:00:fd:ae:23:6d:61:44:5e:93:72:29:e9:
73:f5:00:02:96:8e:63:cd:c8:c0:c4:bf:1d:78:71:
ab:af:2a:07:43:f5:7d:74:ab:f4:48:b3:6e:56:79:
9e:b3:c7:61:44:44:dc:78:96:ae:94:38:38:9f:6e:
b5:c0:be:47:07:7f:4b:ea:d7:35:83:e1:48:38:4c:
e8:14:09:6b:42:12:eb:e8:bd:b5:2e:76:bb:e3:ce:
97:4a:5c:4d:d1:ca:d5:61:d0:8b:47:21:32:1f:8d:
a9:a3:28:4d:dc:82:c2:08:e9:8f:6a:e7:96:52:22:
2d:df:24:e0:c2:96:ef:53:a4:8d:69:4d:db:73:a2:
f2:85:af:1c:7c:f5:1c:8a:b6:5c:9e:36:64:1d:7a:
11:b7:40:28:3c:f7:8e:b2:2e:54:89:e7:d5:ec:86:
59:8f:50:95:53:c0:9f:24:d3:67:0c:f3:17:90:da:
bc:1f:9c:59:0d:31:3f:b6:23:ec:73:90:9c:43:41:
60:a6:22:6d:63:a9:3a:c4:c8:c3:77:3e:c2:cc:51:
92:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:47:58:56:B6:23:F0:7A:F2:44:FA:52:31:B9:FD:0F:B1:E7:2F:C4
X509v3 Authority Key Identifier:
keyid:2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:30:f1:4d:d9:88:72:80:c4:0a:4a:97:89:9e:84:7e:f0:10:
b5:35:e0:4c:97:e6:ca:89:b8:ec:92:e1:44:97:84:f2:8f:aa:
ed:b9:a9:c2:78:0f:f6:84:ac:c9:44:13:3b:d3:62:7e:67:60:
69:ca:8e:5d:09:0c:36:62:4a:e8:31:2b:57:35:7f:00:9f:69:
31:6b:7b:6b:46:40:c5:a6:89:ce:5b:eb:bf:b7:76:29:dc:51:
59:7e:7f:16:87:f0:2f:92:0f:a9:24:9f:3b:4b:0f:83:e5:60:
a1:bf:51:84:c7:97:3e:b0:6d:de:ca:f1:65:b6:e6:f8:1e:9a:
1d:d3:20:f8:bc:89:a9:1c:b9:19:13:15:87:9b:f7:c9:16:54:
07:59:59:9d:b3:4b:ea:9f:f5:ca:ee:f0:08:aa:85:b0:cc:04:
21:25:8e:18:f3:9c:f5:97:83:59:2c:56:d6:66:c8:e4:e2:a9:
2f:9b:9d:e5:a1:0d:f4:45:bd:a8:48:e8:5b:16:b4:99:21:43:
bf:2f:6c:5b:9d:4a:5b:d9:86:1e:51:a1:53:e1:47:40:10:e4:
69:88:63:60:1c:e7:3d:c4:43:79:04:43:bb:68:dd:aa:31:38:
71:27:7f:ec:4c:36:8d:ad:eb:74:ee:5d:ce:80:81:0a:14:ef:
9b:00:6b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:15:43 2025 by rpki-client