Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.mft
File: L5INmRKzpyi5SBgYjvPj5X-NP5w.mft (raw, json)
Hash identifier: rZB3Rp4W8B1bEZFW+wTGA+XRkdCaEs7yWMvGpREpsDg=
Subject key identifier: A7:CF:DC:83:18:82:26:88:95:2B:BB:F7:73:3E:9C:30:13:5F:20:74
Authority key identifier: 2F:92:0D:99:12:B3:A7:28:B9:48:18:18:8E:F3:E3:E5:7F:8D:3F:9C
Certificate issuer: /CN=2f920d9912b3a728b94818188ef3e3e57f8d3f9c
Certificate serial: 01967EA1D3C7347C3AE211EAA4D682DE4A00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5INmRKzpyi5SBgYjvPj5X-NP5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.mft
Manifest number: 124F
Signing time: Mon 28 Apr 2025 23:00:56 +0000
Manifest this update: Mon 28 Apr 2025 23:00:56 +0000
Manifest next update: Tue 29 Apr 2025 23:00:56 +0000
Files and hashes: 1: L5INmRKzpyi5SBgYjvPj5X-NP5w.crl (hash: lB9GN3s+G1HzjjXseed6cRD4odrUCe6sanSTQ0f9CvY=)
2: UHmcnjZPkdlcmPvf9kU9gEvRzu8.roa (hash: o/ZBiu0sM0QxdL8NohBvSpb6XFjAawutUac+NbV8PeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5INmRKzpyi5SBgYjvPj5X-NP5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:d3:c7:34:7c:3a:e2:11:ea:a4:d6:82:de:4a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f920d9912b3a728b94818188ef3e3e57f8d3f9c
Validity
Not Before: Apr 28 23:00:56 2025 GMT
Not After : Apr 29 23:00:56 2025 GMT
Subject: CN=a7cfdc8318822688952bbbf7733e9c30135f2074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:13:41:12:9f:95:d6:b3:74:0b:8d:d3:b3:f6:
9c:da:6e:df:fb:d4:1d:7d:65:97:d1:be:60:44:52:
81:6c:dc:d9:61:f5:4a:2c:89:72:f5:1e:56:fa:df:
ba:46:cb:ab:4d:92:f7:42:fa:28:be:49:e3:1b:33:
a4:42:25:94:74:85:e9:84:1a:78:c2:fc:ba:9a:6b:
b6:6f:c7:d6:e6:00:32:94:eb:b8:17:b1:7e:d3:7e:
ac:86:39:91:be:3d:92:76:b8:16:38:d9:12:8a:bf:
4b:3d:d7:89:2f:a3:3a:31:a8:a3:38:db:82:9e:b0:
f5:5b:b5:04:1c:de:d8:b9:cc:f8:eb:ae:80:ca:3c:
9e:30:fe:73:d6:5d:61:32:d6:2a:13:a9:cb:98:28:
64:10:1d:81:0c:d5:4d:58:96:68:c5:79:cb:94:9c:
27:e3:89:5f:41:37:76:35:f6:84:16:41:78:72:cb:
a6:f2:72:a9:fe:4d:6f:b5:23:4c:1f:43:45:e5:2c:
18:49:0f:50:7a:37:46:85:b3:97:db:ec:51:ee:33:
56:6d:fd:d6:a5:f4:da:02:4a:eb:0a:8e:2b:0e:02:
b3:e1:41:dc:02:78:8b:3e:14:a5:a5:82:4a:3f:05:
4a:dc:d5:c9:46:b9:72:f5:a7:ed:fb:01:fc:25:c8:
3c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:CF:DC:83:18:82:26:88:95:2B:BB:F7:73:3E:9C:30:13:5F:20:74
X509v3 Authority Key Identifier:
keyid:2F:92:0D:99:12:B3:A7:28:B9:48:18:18:8E:F3:E3:E5:7F:8D:3F:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5INmRKzpyi5SBgYjvPj5X-NP5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:a7:ff:8f:61:f3:66:a2:21:e6:91:c7:0e:c8:e0:9c:5f:4f:
23:4c:4a:5b:a2:de:13:27:26:9e:0d:d9:5a:55:e1:39:2a:6b:
fd:e2:d4:2f:64:48:94:4f:7b:50:eb:1c:ab:6f:5e:42:6e:8d:
e7:90:ec:ff:1f:02:c7:e8:0d:67:ad:89:4a:9b:fa:57:12:4f:
9e:d1:37:2e:28:bd:d5:00:43:1e:f1:6e:67:5c:28:27:d4:c8:
44:9d:5a:ad:f2:b7:f5:c7:6a:22:5d:38:20:2a:c9:0e:2f:e8:
b0:42:36:54:71:70:cb:0e:cd:c0:a5:6a:57:4c:7c:ef:78:08:
21:a8:f6:52:8f:a0:f0:86:e6:b5:a4:d1:c9:1d:9d:6d:b3:32:
ee:25:a4:88:dd:9b:ac:e7:2d:47:23:b0:40:2f:50:65:29:a4:
9a:3f:03:95:3e:1f:51:bc:1c:50:99:f9:3b:9c:51:5f:cd:25:
38:2d:be:d2:6d:1a:5c:b4:93:59:48:2a:d5:c3:7d:11:55:20:
86:4d:84:7e:e5:3d:f8:c7:86:e5:c9:31:7c:2a:8c:87:f9:80:
1d:01:23:6b:e6:27:48:c8:65:5e:0e:d5:f0:c3:9c:18:e4:c6:
da:06:3d:83:d1:73:cd:78:38:43:b0:5f:09:72:71:70:6d:20:
25:0b:c7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:34:02 2025 by rpki-client