Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft
File: sLGxJtrAqgt3lIZADt5yVLJe6qY.mft (raw, json)
Hash identifier: Pclx9qmMIMsq/XWj11W5c0BM1Y3DFGjp3yv0yX67eLQ=
Subject key identifier: 8F:70:56:0D:A1:CF:CD:85:75:DC:C4:B7:DB:FD:88:AA:FF:CE:08:9A
Authority key identifier: B0:B1:B1:26:DA:C0:AA:0B:77:94:86:40:0E:DE:72:54:B2:5E:EA:A6
Certificate issuer: /CN=b0b1b126dac0aa0b779486400ede7254b25eeaa6
Certificate serial: 019676E84A7FDBE2A8BE27B98BADDA97CDF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft
Manifest number: 14A2
Signing time: Sun 27 Apr 2025 11:00:56 +0000
Manifest this update: Sun 27 Apr 2025 11:00:56 +0000
Manifest next update: Mon 28 Apr 2025 11:00:56 +0000
Files and hashes: 1: sLGxJtrAqgt3lIZADt5yVLJe6qY.crl (hash: pJQLB8gEkWUV6J23JZs+WXlBOAGuWLQwPgcJoZ4xSps=)
2: y5aXUBKmtNndMqsBfDwB9q7N1JM.roa (hash: ZtFZGojw6I1xjiF5OKZdPGSKt7iqS59zSaAIueVvxRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e8:4a:7f:db:e2:a8:be:27:b9:8b:ad:da:97:cd:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b1b126dac0aa0b779486400ede7254b25eeaa6
Validity
Not Before: Apr 27 11:00:56 2025 GMT
Not After : Apr 28 11:00:56 2025 GMT
Subject: CN=8f70560da1cfcd8575dcc4b7dbfd88aaffce089a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:26:e1:32:af:a0:11:91:88:78:f2:87:58:ec:
bb:d3:fe:0c:b8:a6:1c:a8:b0:fb:e1:4c:99:79:ec:
d1:6c:4b:98:86:72:19:bf:02:65:03:a5:a7:97:69:
16:d7:56:62:44:7b:aa:d0:9b:79:67:ad:d9:2e:d9:
72:29:60:cb:60:0a:fd:23:b2:21:a7:9f:b7:dd:f8:
64:d7:ec:70:1a:29:ef:a3:30:9c:1a:55:99:9f:72:
77:ce:0d:02:02:f6:c0:41:13:14:15:73:5b:75:07:
37:d5:e3:33:62:07:ca:b1:81:7f:ea:28:5d:28:ee:
9c:f5:cd:ed:f6:31:a6:de:c1:53:58:46:95:9f:aa:
2f:bd:28:dc:08:7f:fd:47:bf:51:13:28:35:67:6b:
51:5a:12:a3:e9:6f:da:62:12:37:4a:76:6b:74:bc:
e6:14:21:95:fd:32:7e:90:65:d6:5f:4b:fb:0e:57:
da:6e:7b:2d:45:90:ec:c6:cf:91:56:ca:9b:a2:18:
ba:5d:55:6c:5b:0f:a5:70:cd:0f:01:78:ec:13:2d:
77:d6:42:19:38:d6:c9:09:3d:7a:5f:4e:95:0f:3c:
73:22:82:68:1e:f9:f1:04:2a:ef:14:58:dd:8e:a7:
0d:0b:da:bc:1b:d2:a5:da:39:f7:d5:c4:75:3a:41:
a3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:70:56:0D:A1:CF:CD:85:75:DC:C4:B7:DB:FD:88:AA:FF:CE:08:9A
X509v3 Authority Key Identifier:
keyid:B0:B1:B1:26:DA:C0:AA:0B:77:94:86:40:0E:DE:72:54:B2:5E:EA:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e1:dd:54:77:6f:f8:ce:fa:07:89:35:de:fe:8c:56:08:3e:
d7:51:97:ea:46:21:59:10:04:ba:5d:ef:26:5a:59:a1:2f:d6:
d9:4b:b1:12:b9:e0:e8:75:0c:66:11:5d:17:e5:2f:0b:60:99:
22:52:b3:26:1a:8e:40:27:c6:6e:eb:13:6a:78:5e:f6:b6:6c:
8a:95:b7:71:f9:16:f5:24:36:0a:57:50:2c:51:88:00:69:16:
98:ec:46:64:46:24:88:b1:cd:c3:c6:e7:cc:2e:a6:6c:6b:63:
50:e8:24:98:3e:9d:75:f7:a5:79:01:3e:1a:1d:b8:32:fa:7e:
b6:e8:37:aa:b4:f6:71:f1:45:60:f1:64:a6:e2:af:b3:fb:3f:
6f:9f:83:f9:b4:c8:71:85:dd:b6:5b:4e:82:f6:51:10:e4:59:
2c:c1:e1:b8:90:2e:b7:2a:af:0a:4f:7d:d3:e8:5b:96:33:c0:
0b:5d:6f:87:01:1b:5f:0d:9e:2b:d4:aa:14:bf:cc:7a:cc:d5:
fe:02:34:4a:6b:bf:3b:2a:02:b6:57:f2:43:80:2d:cc:48:f8:
d2:07:8d:d2:60:f6:2e:d5:91:4a:28:2b:7b:1e:12:2e:58:78:
f8:88:43:4a:a2:e9:46:0c:83:dd:b3:36:ff:38:77:9d:78:85:
be:c2:ab:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:35:43 2025 by rpki-client