Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft
File: LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft (raw, json)
Hash identifier: XD4KidxLo48Iu/aiq0WYREM3e9ckayhS2RpPFY/M0U4=
Subject key identifier: 42:0C:E4:30:15:F2:C0:03:9A:16:DA:8A:99:FC:9A:72:8B:75:EA:14
Authority key identifier: 2E:3C:67:6D:B2:4C:20:5D:72:56:FC:54:9A:DC:7C:3E:60:AC:7E:9D
Certificate issuer: /CN=2e3c676db24c205d7256fc549adc7c3e60ac7e9d
Certificate serial: 019697BCB12D04905AD5A2784F2C6561740B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjxnbbJMIF1yVvxUmtx8PmCsfp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft
Manifest number: 151D
Signing time: Sat 03 May 2025 20:00:47 +0000
Manifest this update: Sat 03 May 2025 20:00:47 +0000
Manifest next update: Sun 04 May 2025 20:00:47 +0000
Files and hashes: 1: LjxnbbJMIF1yVvxUmtx8PmCsfp0.crl (hash: kKmhkFEfgtSa2SEbG4ddEmsSWHodS4mIKFhm6JejYSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjxnbbJMIF1yVvxUmtx8PmCsfp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:97:bc:b1:2d:04:90:5a:d5:a2:78:4f:2c:65:61:74:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e3c676db24c205d7256fc549adc7c3e60ac7e9d
Validity
Not Before: May 3 20:00:47 2025 GMT
Not After : May 4 20:00:47 2025 GMT
Subject: CN=420ce43015f2c0039a16da8a99fc9a728b75ea14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a7:61:a3:95:80:19:54:61:7a:1d:65:3f:19:
8b:10:64:1c:ec:f8:c8:3e:55:ae:13:34:31:6a:4e:
af:dc:95:b0:65:11:09:43:53:b3:4d:49:c6:01:4c:
f8:ea:3c:1c:dc:e7:e5:7f:44:17:c9:cd:ee:6d:de:
30:e9:b8:d7:38:47:a1:ca:d4:2d:e8:3c:84:87:ee:
20:88:12:92:56:f2:6e:00:fb:51:23:4c:12:bb:36:
6b:7c:32:38:0e:c2:39:c2:7a:f6:7b:fc:45:e7:4b:
12:2e:bb:35:e6:b4:b7:bc:db:02:cb:24:40:e8:6b:
f0:8d:e0:9f:fd:be:c1:cf:f8:af:49:02:e0:e3:2a:
bd:84:fb:d5:57:14:a1:2c:04:6b:38:ad:8b:d9:ec:
d1:2a:a2:28:e7:e3:9c:95:15:fc:eb:60:ef:e5:f3:
6d:bd:02:65:23:d8:52:ca:88:e0:98:2c:d5:07:8d:
73:c6:dd:42:59:fb:ac:d8:06:67:f7:ca:04:51:12:
83:fa:9f:24:d1:32:9b:b6:90:a9:95:1e:dc:f7:e8:
19:a1:cb:d6:e0:2a:dc:58:61:84:d6:b8:a6:c8:b4:
d3:67:a4:ab:7e:f3:7f:4f:38:9f:2b:35:59:fc:e4:
f3:df:31:46:f7:63:b6:c4:93:d8:fb:5e:c9:16:0f:
fb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:0C:E4:30:15:F2:C0:03:9A:16:DA:8A:99:FC:9A:72:8B:75:EA:14
X509v3 Authority Key Identifier:
keyid:2E:3C:67:6D:B2:4C:20:5D:72:56:FC:54:9A:DC:7C:3E:60:AC:7E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjxnbbJMIF1yVvxUmtx8PmCsfp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b94b0c-9624-4c37-827f-34892578ff19/1/LjxnbbJMIF1yVvxUmtx8PmCsfp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ee:e0:d3:fd:41:5a:e0:f0:3e:1f:bb:20:a8:cc:d9:62:8e:
1e:a0:b9:fe:c4:97:7a:f1:fa:74:24:12:69:9a:70:89:63:67:
9b:21:84:72:6d:fa:cf:e1:19:5d:5b:03:28:91:51:90:18:53:
e3:c8:db:82:5e:e0:b0:a7:e5:11:ec:e3:55:5e:4d:64:2c:c0:
94:6d:68:bd:8b:25:bc:32:3f:80:f0:d5:db:92:92:56:b7:a2:
27:6b:15:80:6d:83:99:d0:47:07:35:39:77:01:b9:e9:4a:a9:
ff:e3:f9:d6:bc:fe:3c:2b:1a:ff:59:e3:5a:ad:1c:68:64:9c:
1e:e1:e9:72:59:db:43:bc:35:47:49:d0:16:3e:d0:40:c4:78:
1d:61:85:67:98:f3:32:19:a5:6a:16:16:17:db:c9:c7:f7:84:
f4:1d:46:18:44:18:56:a8:b1:aa:0c:e3:a7:d9:fe:ae:cb:0c:
8f:70:98:61:37:89:6d:cd:95:f1:0d:c7:1f:cc:ed:be:e5:a7:
39:47:5b:e3:47:af:37:36:f7:a5:a3:6a:ba:03:1c:64:d8:73:
14:ea:bd:9e:ee:cc:bf:a0:1d:27:50:94:f5:53:39:c0:c5:d0:
64:38:92:39:6b:13:27:e0:f1:ee:d5:87:33:ac:ee:d0:f3:e9:
57:de:a3:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaXvLEtBJBa1aJ4TyxlYXQLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlM2M2NzZkYjI0YzIwNWQ3MjU2ZmM1NDlhZGM3YzNlNjBh
YzdlOWQwHhcNMjUwNTAzMjAwMDQ3WhcNMjUwNTA0MjAwMDQ3WjAzMTEwLwYDVQQD
Eyg0MjBjZTQzMDE1ZjJjMDAzOWExNmRhOGE5OWZjOWE3MjhiNzVlYTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qdho5WAGVRheh1lPxmLEGQc7PjI
PlWuEzQxak6v3JWwZREJQ1OzTUnGAUz46jwc3Oflf0QXyc3ubd4w6bjXOEehytQt
6DyEh+4giBKSVvJuAPtRI0wSuzZrfDI4DsI5wnr2e/xF50sSLrs15rS3vNsCyyRA
6GvwjeCf/b7Bz/ivSQLg4yq9hPvVVxShLARrOK2L2ezRKqIo5+OclRX862Dv5fNt
vQJlI9hSyojgmCzVB41zxt1CWfus2AZn98oEURKD+p8k0TKbtpCplR7c9+gZocvW
4CrcWGGE1rimyLTTZ6SrfvN/TzifKzVZ/OTz3zFG92O2xJPY+17JFg/7hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEIM5DAV8sADmhbaipn8mnKLdeoUMB8GA1UdIwQY
MBaAFC48Z22yTCBdclb8VJrcfD5grH6dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGp4bmJiSk1JRjF5VnZ4VW10eDhQbUNzZnAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iOTRiMGMtOTYyNC00YzM3LTgyN2Yt
MzQ4OTI1NzhmZjE5LzEvTGp4bmJiSk1JRjF5VnZ4VW10eDhQbUNzZnAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9iOTRiMGMtOTYyNC00YzM3LTgyN2YtMzQ4OTI1NzhmZjE5
LzEvTGp4bmJiSk1JRjF5VnZ4VW10eDhQbUNzZnAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAu7g0/1B
WuDwPh+7IKjM2WKOHqC5/sSXevH6dCQSaZpwiWNnmyGEcm36z+EZXVsDKJFRkBhT
48jbgl7gsKflEezjVV5NZCzAlG1ovYslvDI/gPDV25KSVreiJ2sVgG2DmdBHBzU5
dwG56Uqp/+P51rz+PCsa/1njWq0caGScHuHpclnbQ7w1R0nQFj7QQMR4HWGFZ5jz
MhmlahYWF9vJx/eE9B1GGEQYVqixqgzjp9n+rssMj3CYYTeJbc2V8Q3HH8ztvuWn
OUdb40evNzb3paNqugMcZNhzFOq9nu7Mv6AdJ1CU9VM5wMXQZDiSOWsTJ+Dx7tWH
M6zu0PPpV96jCA==
-----END CERTIFICATE-----
Generated at Sun May 4 04:35:38 2025 by rpki-client