Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
File: l79b5z8YIydEmN9So3U10T2lvmI.mft (raw, json)
Hash identifier: oTTLTsAhdXGP0J8+v86m0NillhQmH+Ai7EFCMT1gIkM=
Subject key identifier: A8:0E:01:0A:7C:1E:50:71:F0:1D:4D:D1:71:B7:DE:7E:92:21:E9:4F
Authority key identifier: 97:BF:5B:E7:3F:18:23:27:44:98:DF:52:A3:75:35:D1:3D:A5:BE:62
Certificate issuer: /CN=97bf5be73f1823274498df52a37535d13da5be62
Certificate serial: 0196789FBCCEFF11D3E2D9F8A6E67C6BC3F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 19:00:56 +0000
Manifest this update: Sun 27 Apr 2025 19:00:56 +0000
Manifest next update: Mon 28 Apr 2025 19:00:56 +0000
Files and hashes: 1: HWzBieo8pIQmRXoRuWfRIehTEwE.roa (hash: JynDcSW3QZoBehAT3uFmeO42DtekqQpNN7+NxcQtvOQ=)
2: l79b5z8YIydEmN9So3U10T2lvmI.crl (hash: QcCPyzGbfW8m5srGcyZaIwoB8c9jHgXJA0q/h+Mp3qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:bc:ce:ff:11:d3:e2:d9:f8:a6:e6:7c:6b:c3:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bf5be73f1823274498df52a37535d13da5be62
Validity
Not Before: Apr 27 19:00:56 2025 GMT
Not After : Apr 28 19:00:56 2025 GMT
Subject: CN=a80e010a7c1e5071f01d4dd171b7de7e9221e94f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ff:e5:36:41:bf:20:4c:b6:77:b6:e7:25:55:
97:bd:05:8f:5b:f2:39:eb:7a:6f:6a:1a:ed:a4:ae:
90:57:2d:10:e6:ba:60:1f:b3:fe:c1:f4:8d:1c:ea:
e4:81:e9:bd:ab:81:dd:84:15:5c:9d:60:e9:d1:1b:
ad:7a:c0:e0:cf:7b:25:ed:c6:2e:13:fa:a0:cb:54:
da:81:77:dc:e2:00:8b:48:0b:73:23:88:1a:58:5d:
82:2a:97:9b:42:25:a9:d5:c7:f5:f8:60:1f:36:e1:
89:1f:f4:01:99:02:b5:73:f5:4d:2c:6a:74:61:4f:
10:0d:8b:20:71:a5:2a:31:43:ea:a3:26:00:58:ee:
91:c5:8e:1b:23:20:1f:9d:17:96:53:fd:5d:ab:65:
47:10:e2:59:dd:08:e2:28:f6:39:2e:b7:23:b0:8d:
df:a7:11:c3:b6:33:3a:90:87:46:57:cc:db:3d:1c:
02:c9:24:16:91:d5:50:27:6c:6b:ed:01:18:33:f2:
2b:1e:a2:67:73:99:75:54:40:3b:08:60:d0:42:18:
b9:f5:c6:ee:c6:af:db:82:c6:5c:88:06:b5:a7:e9:
9d:7d:75:e0:fc:b5:3e:9f:50:d9:71:ef:5c:0f:86:
21:65:be:ee:fa:9a:32:e2:ec:af:b6:7b:d9:41:d5:
78:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:0E:01:0A:7C:1E:50:71:F0:1D:4D:D1:71:B7:DE:7E:92:21:E9:4F
X509v3 Authority Key Identifier:
keyid:97:BF:5B:E7:3F:18:23:27:44:98:DF:52:A3:75:35:D1:3D:A5:BE:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:c0:94:d5:36:5a:ea:cf:d7:31:0f:95:64:b7:fa:9a:ea:2d:
7d:e4:71:f5:77:9d:5d:a4:39:8b:ca:90:e2:14:b0:ee:d4:f9:
99:27:f7:bc:4d:31:88:8c:52:d7:cc:62:d1:55:a9:f7:2b:04:
ad:9b:ba:c5:01:fb:dc:f9:c0:df:ac:a5:54:d4:89:ca:fd:7c:
05:2b:85:ce:b2:0b:17:4b:82:ac:17:2e:e0:b5:6b:b8:21:6f:
6d:3d:c4:f8:af:87:79:8f:17:89:1e:7f:1b:0b:11:9e:79:71:
b3:0e:03:56:44:2a:fd:75:13:8d:9d:fb:01:4a:93:c0:ba:c0:
b6:6c:13:ea:d6:0e:a6:7d:4a:56:de:eb:a6:a8:2b:a9:35:b4:
a3:09:6d:fb:44:11:ea:b2:4a:80:7d:a8:e7:80:56:e4:4a:84:
86:e0:ab:b6:d6:1c:ea:b7:30:74:8c:24:c8:a3:87:75:d6:c0:
62:90:a2:0c:05:46:aa:75:07:20:2c:e8:56:ad:9f:41:23:ce:
44:0d:af:1a:03:ac:7e:1b:87:b0:ad:90:db:f9:48:c1:36:50:
53:89:14:b8:a2:a2:db:07:93:22:fa:53:16:36:c8:2f:19:77:
3a:60:6f:7b:a5:99:ce:97:ba:06:b8:e0:88:0a:8c:0c:2e:fa:
f2:23:f6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:01:04 2025 by rpki-client