Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft
File: 37j_LzoL_EHq3BivnlKs0QBSQUk.mft (raw, json)
Hash identifier: BJsyFUVL8R9KamJX1gzCRSWNyydxfBAcYHAVzF+gTn4=
Subject key identifier: 1E:C0:69:C4:2C:B1:DF:B0:19:13:98:03:37:E2:E5:F9:A4:93:3A:CE
Authority key identifier: DF:B8:FF:2F:3A:0B:FC:41:EA:DC:18:AF:9E:52:AC:D1:00:52:41:49
Certificate issuer: /CN=dfb8ff2f3a0bfc41eadc18af9e52acd100524149
Certificate serial: 0196729D253B7526B32ADFB5732A03C8C825
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft
Manifest number: 150D
Signing time: Sat 26 Apr 2025 15:00:23 +0000
Manifest this update: Sat 26 Apr 2025 15:00:23 +0000
Manifest next update: Sun 27 Apr 2025 15:00:23 +0000
Files and hashes: 1: 37j_LzoL_EHq3BivnlKs0QBSQUk.crl (hash: FG0kFiI/jCW10winZXAIVJEs+uU1ZPOsQSrJEpNH9D8=)
2: bz845M7CtyXT_KxSOoYnwM4ytLI.roa (hash: SiQzZh53SIt4QI0YXFwDqHIIaNvnYlzOH5arKhwG3CI=)
3: f9SSHAY0ScyW5AZG3u-f0ngGXZc.roa (hash: rDOXQ0c3zQtm3V3iG9O7bIWJmbqXnEDJDT0mmOn7+8Y=)
4: uwKuD1U0-ONC7lZAzrC62rEZLfU.roa (hash: UOd1qRZsqwUN4sVWfDx1X7tqqqPkCndn9MzXMov8ox8=)
5: wRlQRR0wjybotkSwm99MDtTpSls.roa (hash: XGI9y71SAIsuZ0k81l7U45+PwORlmFWuDUslXmVhPzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:9d:25:3b:75:26:b3:2a:df:b5:73:2a:03:c8:c8:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfb8ff2f3a0bfc41eadc18af9e52acd100524149
Validity
Not Before: Apr 26 15:00:23 2025 GMT
Not After : Apr 27 15:00:23 2025 GMT
Subject: CN=1ec069c42cb1dfb01913980337e2e5f9a4933ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:04:ad:dd:3f:68:dd:02:06:9d:dc:d6:56:f4:
55:f1:89:3f:c6:f7:2c:fb:f7:52:37:28:68:42:e8:
af:c9:a5:e6:ff:95:70:96:76:16:5c:7c:0c:29:2b:
87:65:8b:f2:0f:7b:68:31:82:25:7c:b8:8b:ed:57:
5d:02:56:1d:8f:38:4c:b1:78:5a:c6:14:cd:d2:20:
fd:aa:c1:29:15:53:8f:6e:12:86:3b:7d:5e:06:b7:
2f:47:aa:3a:7a:0c:be:05:c7:ed:8f:6f:97:e1:61:
cc:69:ea:84:cc:40:52:92:20:d2:88:f7:28:d6:a9:
ed:67:e8:d0:db:48:50:70:1e:36:19:f8:1c:e2:d1:
26:51:cb:37:17:8b:28:2f:df:a4:7c:36:44:f0:1b:
13:39:7d:44:94:f4:01:59:6c:96:33:18:4c:21:f7:
ba:65:41:8a:4d:b6:56:98:26:89:bd:73:c8:d4:15:
02:e3:04:b3:8f:ad:57:c7:b6:b5:4c:38:1b:c4:45:
09:33:f4:18:ca:69:3a:cb:35:8d:ad:dc:f4:9f:67:
ae:16:87:4d:de:17:50:70:4f:2d:00:99:e3:62:fc:
7f:2d:3f:e7:b0:c2:a5:c5:14:90:af:f7:16:b2:e9:
98:58:b2:28:c4:51:81:ab:ec:45:22:90:68:d6:aa:
0a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C0:69:C4:2C:B1:DF:B0:19:13:98:03:37:E2:E5:F9:A4:93:3A:CE
X509v3 Authority Key Identifier:
keyid:DF:B8:FF:2F:3A:0B:FC:41:EA:DC:18:AF:9E:52:AC:D1:00:52:41:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:47:91:4d:15:c5:d0:32:19:da:55:a2:9f:84:ec:89:d0:cd:
04:0e:ce:72:9a:44:cf:0b:0e:8e:60:3e:b2:0f:35:0c:d6:2a:
7e:6a:45:c2:31:de:bf:28:4a:c1:43:cb:4c:4d:e3:cc:09:b9:
07:1f:8e:dd:24:97:a7:bc:c6:51:b5:0d:18:ef:2d:08:d3:5d:
38:18:c2:c7:58:7c:de:e8:13:7e:98:58:db:17:fb:bb:5c:a2:
e4:b7:4a:a7:21:87:fc:19:c0:d0:4e:46:c1:97:2d:0e:bd:be:
3a:d7:a4:ed:29:99:46:dc:8d:da:41:ca:0a:2d:b6:82:79:b3:
a0:d5:e2:f2:36:b6:d3:e7:ec:6b:8e:02:ec:e0:dd:91:43:20:
d6:08:f9:e4:13:01:fe:4b:95:cf:fc:23:30:52:f1:8c:b2:66:
df:1b:01:ed:0f:b3:03:51:37:aa:89:16:5a:20:12:e6:2d:a3:
dc:cf:7e:43:19:b2:d0:85:ff:50:be:c0:60:67:68:fb:07:ae:
a0:67:1d:c6:66:4c:b8:5c:20:be:75:36:d9:b4:f5:28:74:e0:
ba:6f:a2:04:f8:21:bf:8c:8e:53:37:de:aa:bc:9d:17:be:70:
45:5f:54:0d:48:e6:64:e1:b1:ce:9b:d8:3a:91:de:27:94:5e:
1d:49:a7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:12:14 2025 by rpki-client