Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
File: 1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft (raw, json)
Hash identifier: frRAMJTa2Z5b/wM5CgHzMcxALmQkOF5mkeSC/0V/hSY=
Subject key identifier: CD:87:3B:66:F1:4C:61:3A:DD:26:41:D8:86:BD:17:DF:30:42:08:A8
Authority key identifier: F8:B3:E1:B2:3E:34:B1:3F:6F:7E:F2:B1:E7:FA:77:DA:20:FE:64:12
Certificate issuer: /CN=f8b3e1b23e34b13f6f7ef2b1e7fa77da20fe6412
Certificate serial: 01968B4B5860C3C2703613BE26D2B1855387
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
Manifest number: 1517
Signing time: Thu 01 May 2025 10:01:32 +0000
Manifest this update: Thu 01 May 2025 10:01:32 +0000
Manifest next update: Fri 02 May 2025 10:01:32 +0000
Files and hashes: 1: 1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl (hash: GgYJteIhiOTQl1S4azdCPlzxk2xpun9PdbXXDR1jU0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 10:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:4b:58:60:c3:c2:70:36:13:be:26:d2:b1:85:53:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b3e1b23e34b13f6f7ef2b1e7fa77da20fe6412
Validity
Not Before: May 1 10:01:32 2025 GMT
Not After : May 2 10:01:32 2025 GMT
Subject: CN=cd873b66f14c613add2641d886bd17df304208a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:53:3a:57:06:b2:d5:6c:8a:f4:d2:ad:f5:a8:
31:51:87:82:23:d8:51:6c:13:e3:77:89:6b:27:21:
b4:c0:a0:97:1e:05:33:57:da:46:cb:64:dd:d1:21:
da:5e:c3:40:cb:94:7e:bf:10:78:3b:2b:78:9f:cb:
df:f7:d9:a9:d2:6c:e2:42:b1:39:6a:38:5a:52:b1:
cf:06:65:3b:8e:1f:f4:53:66:8f:56:18:58:9d:3f:
13:67:29:29:aa:e7:50:56:47:29:ff:01:64:9f:3b:
e1:bd:8b:3a:d5:ec:86:b2:7f:f0:26:65:84:3d:01:
cf:db:4c:c6:2c:4b:8a:f4:85:1f:5f:29:5b:92:f7:
dd:df:49:12:9f:f7:1e:14:13:3c:8a:7d:a8:7d:00:
25:f6:23:06:6a:46:75:b4:c8:ab:44:c5:1e:de:5f:
cf:70:c0:96:57:17:fe:16:96:95:f8:af:bb:6a:f3:
ca:e6:28:c0:cb:11:46:74:d5:de:ab:c5:56:61:d5:
d6:38:a7:f0:67:08:62:b8:85:af:b3:33:17:ec:b6:
01:97:1f:4f:1f:f1:cd:86:55:c8:b2:ea:95:c3:c8:
c2:bc:f8:b2:de:b7:7c:fa:01:09:11:27:71:ea:c9:
dc:95:ea:69:63:9d:1f:1d:12:98:3f:18:95:06:1c:
b9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:87:3B:66:F1:4C:61:3A:DD:26:41:D8:86:BD:17:DF:30:42:08:A8
X509v3 Authority Key Identifier:
keyid:F8:B3:E1:B2:3E:34:B1:3F:6F:7E:F2:B1:E7:FA:77:DA:20:FE:64:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ee:af:55:23:b1:3a:43:b4:ae:ce:9c:04:4f:95:f9:7c:84:
b3:9a:de:8f:8b:f4:e4:63:bb:92:f8:79:aa:af:d7:56:fe:e3:
3b:bd:4d:67:71:05:dd:a0:07:5d:dc:de:2b:7c:b7:ef:8b:e6:
7e:13:b1:bb:7b:d3:6c:e1:c3:c4:cc:84:7d:9c:9c:ec:dc:ff:
0f:17:8d:5d:39:71:72:da:25:67:9c:7f:db:11:ec:17:ab:3a:
91:8e:21:83:c0:97:2a:af:1a:57:c1:9d:3e:66:a1:cf:1b:47:
de:01:e5:b2:07:11:1a:74:f8:e5:00:3f:fe:9b:48:5c:84:c6:
70:73:4d:ea:86:9d:ef:12:51:12:30:a0:b8:99:81:b2:4e:56:
aa:91:07:08:d6:b5:b0:14:a5:1d:d0:5f:76:1d:4c:b5:53:f2:
d0:7c:61:df:ef:c1:83:fb:84:89:75:ce:71:ae:57:fa:5a:8d:
ff:bb:c9:27:4b:6c:85:4a:9b:5b:8c:88:b4:95:e3:8b:c6:7d:
38:59:a2:f4:04:d3:b5:7c:47:3e:4d:09:7f:0a:f5:44:5d:4a:
d1:45:46:e5:43:ae:ec:c5:f1:17:41:9e:1b:db:d9:1f:be:55:
40:ca:c9:b9:eb:a2:c9:ca:59:e3:06:e2:85:e1:01:3f:39:86:
86:07:53:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:29:40 2025 by rpki-client