Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.mft
File: l6I7sKyp0ibQWt-sCFVBgcSO-C4.mft (raw, json)
Hash identifier: O6bALePLcBRk4Mr7jEn59rPQieVmLWXtElNtM8y7+zo=
Subject key identifier: 3E:80:6F:32:4F:17:9C:9E:61:89:DD:B8:29:28:DB:C3:1F:16:91:B4
Authority key identifier: 97:A2:3B:B0:AC:A9:D2:26:D0:5A:DF:AC:08:55:41:81:C4:8E:F8:2E
Certificate issuer: /CN=97a23bb0aca9d226d05adfac08554181c48ef82e
Certificate serial: 019677FB081CB2D7657C4DF5465936ED8B66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6I7sKyp0ibQWt-sCFVBgcSO-C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 16:01:02 +0000
Manifest this update: Sun 27 Apr 2025 16:01:02 +0000
Manifest next update: Mon 28 Apr 2025 16:01:02 +0000
Files and hashes: 1: YVg_2iB1D0i_33LG7yJEAknUwCM.roa (hash: LAKKZLtOPGoM/C7ZDpXW5Qjmcc0Ag72bwBoz/cyOViA=)
2: l6I7sKyp0ibQWt-sCFVBgcSO-C4.crl (hash: EShvr2jreNXworAhYmnqGXJqlrvHObOqFuDrJawneNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/l6I7sKyp0ibQWt-sCFVBgcSO-C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:08:1c:b2:d7:65:7c:4d:f5:46:59:36:ed:8b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97a23bb0aca9d226d05adfac08554181c48ef82e
Validity
Not Before: Apr 27 16:01:02 2025 GMT
Not After : Apr 28 16:01:02 2025 GMT
Subject: CN=3e806f324f179c9e6189ddb82928dbc31f1691b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:18:9d:ce:2e:78:07:8e:28:ff:c1:b3:a5:2a:
0c:14:af:5e:99:d0:c2:17:7d:ae:00:f5:5f:2f:09:
99:77:59:62:23:a7:ce:be:60:8b:45:af:88:34:bc:
ca:a4:70:51:b4:2f:d9:cb:cf:ee:2c:79:a4:6e:dd:
05:f7:10:32:c9:20:2a:28:3a:97:1b:35:5c:de:3a:
7f:0f:ab:b5:88:8d:da:7b:d8:e3:c7:2f:b8:a0:aa:
54:01:e9:5e:78:56:00:ff:da:bc:a4:80:91:1d:5e:
c4:a1:fe:d3:8e:66:62:2f:55:b6:fb:e3:6f:5d:d5:
e7:f3:f0:85:bb:82:f9:52:5c:08:d5:64:c4:e4:22:
3d:0a:f9:3f:7e:9b:86:31:c2:a3:36:b0:dd:c3:45:
bf:7b:26:0e:d6:9b:d7:d8:2f:e4:f9:00:66:19:6c:
fb:df:8d:0e:90:de:96:3f:02:a1:83:05:82:6c:c8:
b5:cd:15:f2:9c:1a:e0:57:b5:fa:fd:4c:f4:d5:39:
27:93:12:e6:66:19:d2:c6:85:0a:35:ca:91:53:a9:
4d:8d:d7:df:3c:f0:8e:08:9f:34:87:ca:73:23:1b:
73:4f:c7:f3:48:c5:0e:fd:3f:3a:45:e9:10:cb:17:
d7:6e:7e:18:68:47:eb:b0:f9:de:04:f3:53:aa:94:
a2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:80:6F:32:4F:17:9C:9E:61:89:DD:B8:29:28:DB:C3:1F:16:91:B4
X509v3 Authority Key Identifier:
keyid:97:A2:3B:B0:AC:A9:D2:26:D0:5A:DF:AC:08:55:41:81:C4:8E:F8:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6I7sKyp0ibQWt-sCFVBgcSO-C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:60:03:cd:31:15:97:ed:8a:d7:70:dc:38:31:6b:55:4b:a5:
48:ad:0f:d9:91:25:1f:5b:28:00:d3:6f:4b:5f:15:9b:db:ff:
85:48:04:d9:5a:58:60:2f:43:e5:05:bd:87:d0:3d:91:f0:f1:
a4:cf:8b:8b:1d:a9:06:c4:e3:f3:5b:70:77:03:6a:18:6f:23:
dc:88:b6:ff:d9:d3:db:18:8e:56:9c:b5:57:62:a7:11:03:0b:
61:49:f6:0f:ba:03:07:32:cf:53:98:78:33:0d:e5:1a:21:10:
c4:df:e9:72:12:72:ab:c8:db:42:02:45:08:0a:ca:45:d5:8d:
ee:dc:e0:00:19:74:96:ee:a8:2e:c4:cb:f3:a1:d6:87:8e:34:
b8:17:7d:5a:94:80:81:80:bd:0c:7f:a4:6d:34:1e:f1:90:53:
90:a3:65:da:1d:b0:f2:28:36:ad:af:a7:a8:b9:ba:89:13:4f:
d1:bf:58:ca:89:55:3b:24:a5:f4:d2:58:3d:49:ee:6a:34:81:
c1:c0:88:31:30:fb:5d:59:59:99:fa:4d:e8:b7:d9:72:17:b7:
8c:97:f6:33:a1:b1:ef:36:3c:ee:45:46:8b:9c:4d:ba:01:48:
cc:4a:fd:c8:cd:68:16:f4:10:e4:9a:86:c4:78:f8:2a:71:9b:
de:4a:77:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:30:52 2025 by rpki-client