Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft
File: lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft (raw, json)
Hash identifier: NFID4LfKueNy29wNGldDvp39/4UeNDsYCzovW/BCrYM=
Subject key identifier: 02:19:3C:8E:18:26:14:C4:93:B0:FD:A8:3B:EF:CA:CA:1C:41:DB:58
Authority key identifier: 96:AB:46:97:A6:A4:8F:6C:6C:69:3E:38:39:BF:D5:B3:FB:0E:3B:F1
Certificate issuer: /CN=96ab4697a6a48f6c6c693e3839bfd5b3fb0e3bf1
Certificate serial: 01977640820765A92EAD1D05FB7D48C9C095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lqtGl6akj2xsaT44Ob_Vs_sOO_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft
Manifest number: 0AC4
Signing time: Mon 16 Jun 2025 01:00:28 +0000
Manifest this update: Mon 16 Jun 2025 01:00:28 +0000
Manifest next update: Tue 17 Jun 2025 01:00:28 +0000
Files and hashes: 1: lqtGl6akj2xsaT44Ob_Vs_sOO_E.crl (hash: ME6BfdxX+bXDlMByBBH7rx8JMiR+IrooytlsAeO1A1s=)
2: v_uqFNyNrjwxcamsF3cO6qzXKVI.roa (hash: 8Loff474F2iUwQ0Ne9OGFLSGYhgKQSa6EgjZzTy3738=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/lqtGl6akj2xsaT44Ob_Vs_sOO_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:40:82:07:65:a9:2e:ad:1d:05:fb:7d:48:c9:c0:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96ab4697a6a48f6c6c693e3839bfd5b3fb0e3bf1
Validity
Not Before: Jun 16 01:00:28 2025 GMT
Not After : Jun 17 01:00:28 2025 GMT
Subject: CN=02193c8e182614c493b0fda83befcaca1c41db58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b9:e2:2f:11:38:77:4c:79:29:28:b2:3e:35:
f4:4b:ab:07:22:b6:ff:63:b7:b7:58:ef:87:c1:92:
41:10:47:55:9b:cc:7c:b5:33:d9:42:45:40:e2:7a:
35:d2:21:04:cb:5b:14:5a:6a:02:3d:e7:8f:19:9e:
ad:11:06:23:86:66:00:14:f0:83:b4:42:f0:3e:e8:
fb:99:21:4c:ad:75:8a:a9:c3:6d:db:86:48:b0:27:
c4:bf:35:a3:85:34:af:02:86:c6:24:29:b2:81:4b:
39:b3:ea:34:39:57:39:4a:ea:e2:9a:e3:0e:47:ac:
ea:46:a4:00:94:7e:91:cc:7f:d0:ad:d4:d4:fc:32:
b1:1f:70:ef:5f:41:58:e7:3f:c2:3b:09:99:e6:4b:
4f:bb:57:88:fe:a1:1b:03:14:38:d5:13:db:7f:99:
8f:6c:2a:d4:94:13:9e:f6:0e:3c:13:3f:2f:dc:c3:
9e:6c:f0:11:d9:c3:43:b1:a9:7f:9b:0d:3e:c3:3f:
48:f1:ea:26:47:4c:f2:c4:6f:5c:61:d7:2b:d4:9e:
33:7a:fb:a6:3d:c3:e0:ab:21:f4:03:34:c0:52:7f:
2b:1f:74:77:49:98:4c:54:c8:c5:53:16:ba:3d:bc:
8d:bd:ec:20:bf:d9:c4:39:21:84:56:01:47:37:83:
05:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:19:3C:8E:18:26:14:C4:93:B0:FD:A8:3B:EF:CA:CA:1C:41:DB:58
X509v3 Authority Key Identifier:
keyid:96:AB:46:97:A6:A4:8F:6C:6C:69:3E:38:39:BF:D5:B3:FB:0E:3B:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqtGl6akj2xsaT44Ob_Vs_sOO_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:9e:76:3b:ed:8d:30:39:90:9e:d2:43:2e:5c:ac:0c:b6:95:
e9:c3:e2:ec:c3:07:d3:53:dd:b1:d6:e9:5a:4e:90:4a:46:1b:
b8:7c:63:20:2a:c5:e5:fd:65:9e:a1:16:c3:dd:48:54:18:04:
db:8d:3f:56:32:8a:64:13:c6:9c:7e:d2:f9:fb:fc:2c:37:18:
f8:d2:47:dc:bf:bf:56:cd:0f:e8:05:d1:5e:ca:7b:b1:34:99:
d2:c5:63:d9:96:1a:2b:c4:2e:2f:0b:d0:2e:84:e9:99:72:85:
9c:2f:31:02:82:6f:28:a3:a8:a4:34:2f:dc:6e:76:6e:04:6c:
3b:a9:31:5b:d7:43:8f:31:68:b6:a3:22:85:20:bc:0f:c6:56:
a4:a4:32:9a:40:a6:2d:71:dd:7f:b2:fe:c2:01:82:8d:21:c6:
11:4c:6e:5f:d8:60:8d:c2:cb:af:89:35:5a:1b:1c:1e:7c:53:
b6:b9:2b:98:f4:82:ba:bf:d8:20:b8:04:b8:be:31:c6:5a:b0:
98:70:d2:79:60:8e:da:cc:b6:6a:3f:d4:6f:c7:45:c3:cf:1b:
36:19:52:46:e5:46:95:99:02:26:55:b9:47:a7:57:38:0f:a9:
40:0d:17:36:74:66:70:1e:a8:1a:2d:85:ac:d3:de:b9:22:db:
01:02:db:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:56:25 2025 by rpki-client