Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft
File: ljUcRzoWujj6tNUXBZIl4PEzyL8.mft (raw, json)
Hash identifier: 22CSD4Hp3dlRazBiUYXvAyx4q6r7OX27RVgU2aZy6jw=
Subject key identifier: B7:58:76:BE:5F:9B:D2:50:6A:AC:A3:BF:1B:BD:6F:F4:79:54:12:23
Authority key identifier: 96:35:1C:47:3A:16:BA:38:FA:B4:D5:17:05:92:25:E0:F1:33:C8:BF
Certificate issuer: /CN=96351c473a16ba38fab4d517059225e0f133c8bf
Certificate serial: 019677C3A5E8830A50DE9B707C3B8FF929CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft
Manifest number: 149C
Signing time: Sun 27 Apr 2025 15:00:32 +0000
Manifest this update: Sun 27 Apr 2025 15:00:32 +0000
Manifest next update: Mon 28 Apr 2025 15:00:32 +0000
Files and hashes: 1: 9ePFbgefAOZuTmJLiFLvd1beyls.roa (hash: RIcriqMlU4ZWl7joZj4XClpYJLpavsjnCJfKx3wYXhA=)
2: HVOOHQPc-5Eu7cwWFhbNRCpA9A0.roa (hash: x9bBQ84HsMACBPfPIx9csANOJkhCAtUu4np9OsZI7x4=)
3: KSjUnukZG8WOY9QNez7ybTNOls4.roa (hash: swbthPAwvXge6wDssbFVck74lGidoJQL+o3507ng0tk=)
4: ljUcRzoWujj6tNUXBZIl4PEzyL8.crl (hash: ptHXaYEH1CF9tCWmA7j4rwa0MmyoqfL7PDChE5j8sYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:a5:e8:83:0a:50:de:9b:70:7c:3b:8f:f9:29:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96351c473a16ba38fab4d517059225e0f133c8bf
Validity
Not Before: Apr 27 15:00:32 2025 GMT
Not After : Apr 28 15:00:32 2025 GMT
Subject: CN=b75876be5f9bd2506aaca3bf1bbd6ff479541223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a0:a0:49:55:85:08:06:90:c0:ef:4b:72:ef:
02:99:6b:f1:85:26:c6:b4:ca:f6:31:5c:a6:c3:7a:
4c:0b:2d:d3:c8:cd:83:f2:54:d7:cf:b8:1f:8b:e5:
36:55:93:38:ba:4b:83:fe:bc:16:07:c5:0b:f1:87:
a1:0b:ce:e9:5d:d8:e9:9f:12:c8:38:a9:14:80:23:
43:af:d0:24:ca:fa:e7:51:28:77:07:05:a0:64:e4:
06:02:84:c5:b9:03:c6:ad:ea:0e:b9:7f:10:d0:99:
8e:ee:6d:85:5f:a5:a7:e7:25:62:23:0e:42:8a:fd:
2d:6d:9b:8e:ac:c5:a7:2a:e0:84:50:15:8c:87:d2:
3d:65:be:9c:24:96:7c:e8:0c:13:38:fa:be:ef:5b:
9d:b1:db:66:7e:ec:fe:b9:75:4f:11:22:30:ea:ab:
a9:53:2a:68:be:e7:ae:34:b7:4b:4f:43:52:b3:98:
9c:27:b8:3e:99:0f:50:73:64:5f:e8:d2:16:53:40:
50:c2:f8:85:6a:e4:18:fe:10:23:52:ac:9f:eb:29:
31:f6:7c:95:0a:4f:35:e6:96:17:70:9f:2d:66:88:
cb:b4:d5:db:97:2e:e8:5e:95:04:89:ad:3c:64:58:
d9:70:39:c2:8f:54:b4:35:fa:33:b2:c2:ae:a2:8b:
b7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:58:76:BE:5F:9B:D2:50:6A:AC:A3:BF:1B:BD:6F:F4:79:54:12:23
X509v3 Authority Key Identifier:
keyid:96:35:1C:47:3A:16:BA:38:FA:B4:D5:17:05:92:25:E0:F1:33:C8:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:78:84:25:ae:7a:85:62:95:b3:14:fb:88:86:cf:78:9e:1b:
b4:4b:75:d8:e6:ff:ea:92:0f:dc:a3:a4:a4:1d:49:fa:0c:79:
52:d3:5b:8c:35:7e:a9:e1:a7:f9:4a:cc:f2:96:72:a5:13:43:
00:2d:c9:44:10:05:f7:05:22:66:0d:91:54:d8:f9:6d:de:ae:
1b:64:bb:9b:4b:9c:ee:b6:00:69:d2:ef:d9:19:61:f1:72:05:
0c:3e:6e:65:37:ef:82:23:4f:9c:6e:92:af:9c:79:39:5c:89:
ad:5b:3d:18:ab:ce:98:12:56:21:19:36:89:6e:d2:70:62:07:
5b:b7:7c:7d:69:95:e4:35:3e:e0:f9:72:02:9b:67:24:e8:f2:
47:9c:ec:47:77:44:2d:a1:18:33:bb:ac:52:9d:15:7c:b3:56:
7b:d8:fc:2e:cd:e5:f0:27:a8:7d:24:83:7b:7d:8b:32:d4:f8:
54:23:92:11:ec:11:96:6f:51:bf:0e:c4:5c:d7:85:5b:9d:11:
cc:7a:d7:d0:ca:62:79:85:7d:4b:22:79:19:77:9b:29:33:49:
c0:1d:c3:3b:1b:a2:4a:f1:2d:9d:1f:8a:9c:d0:83:79:fe:58:
69:45:06:bd:ad:6f:9d:4b:8d:d4:2e:f1:d4:7d:ca:26:06:d9:
aa:f2:03:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:16:29 2025 by rpki-client