Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
File: lHS1JBtjw6-9s0LMR2NMVasv-EY.mft (raw, json)
Hash identifier: KJCCNy7gvgxX81sGJimpThVCowasnP1uQMJqWHAYbOY=
Subject key identifier: 9A:B5:FA:A5:99:56:1B:4F:C7:70:4A:74:46:40:41:B4:4A:66:F8:2C
Authority key identifier: 94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46
Certificate issuer: /CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
Certificate serial: 01965613B3AD3ABF3BEF4B25FEFEBF340598
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
Manifest number: 0E
Signing time: Mon 21 Apr 2025 02:00:53 +0000
Manifest this update: Mon 21 Apr 2025 02:00:53 +0000
Manifest next update: Tue 22 Apr 2025 02:00:53 +0000
Files and hashes: 1: _esauh0bwxU4lPvXm-nLiVYT1MY.roa (hash: dg/Xh0ZCbSrkvMtC9w3xbJVNO3y7y3uRRsJgcH21rXg=)
2: lHS1JBtjw6-9s0LMR2NMVasv-EY.crl (hash: BXs+sTbuqtM3c2It5zwkGvhp1fUfHgQ5jWSuoYGJg10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:b3:ad:3a:bf:3b:ef:4b:25:fe:fe:bf:34:05:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
Validity
Not Before: Apr 21 02:00:53 2025 GMT
Not After : Apr 22 02:00:53 2025 GMT
Subject: CN=9ab5faa599561b4fc7704a74464041b44a66f82c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fb:02:de:18:02:96:e5:42:d9:de:ac:5c:23:
c0:7c:ba:21:be:34:07:dc:bf:d1:de:8d:1d:8e:56:
f9:4c:a3:11:29:7a:ab:0f:c5:c3:e7:84:64:61:fd:
77:0f:cb:fd:da:b3:58:01:e9:92:7e:8f:20:00:17:
7f:70:b1:96:2c:82:5a:21:93:48:2b:14:9b:8c:e6:
b3:3d:c2:32:c7:24:10:2f:01:2d:7b:e0:b7:d5:12:
5e:0b:54:2d:39:d5:88:b7:3e:f6:9c:fa:d9:4e:c6:
44:13:0f:6c:64:4d:29:b2:64:11:2f:0c:75:6b:c7:
35:22:aa:be:7b:09:51:d8:78:07:9a:62:e0:fa:35:
d0:41:5e:e4:c5:88:f9:73:96:b4:44:fb:3c:ad:09:
ba:d3:0e:ed:58:71:a1:ad:dd:db:ea:c1:0a:e6:b7:
7c:14:aa:bf:5a:13:c1:bb:f9:64:39:a4:0e:d5:46:
16:ac:49:4a:ff:ac:6c:92:1a:78:65:78:b7:fe:65:
00:7c:5b:80:50:9b:d2:be:63:f8:36:77:04:dc:ab:
44:6e:7f:2c:cb:09:95:67:14:fa:47:f7:93:30:80:
82:fe:9b:9b:90:cc:6c:b6:ff:78:a1:dc:e0:3b:60:
e7:f8:43:26:14:9c:10:12:0e:97:a2:9d:2d:15:33:
54:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B5:FA:A5:99:56:1B:4F:C7:70:4A:74:46:40:41:B4:4A:66:F8:2C
X509v3 Authority Key Identifier:
keyid:94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:bc:c6:f7:a2:13:2d:c9:2e:d4:58:62:09:10:33:cd:88:41:
5e:b2:98:49:da:b1:d6:08:e1:e4:33:96:0a:3b:fb:74:b9:41:
db:96:9a:0c:16:54:b0:54:71:10:c8:a5:1d:7e:77:ec:c6:75:
c4:c1:b3:cb:6a:f1:42:8a:2e:b4:48:d8:82:40:6b:0e:94:af:
d3:f5:7a:a9:fa:b2:37:b0:d9:64:00:d5:63:2f:0b:c6:56:38:
29:38:45:2d:ca:b4:a1:0f:09:c9:86:70:a3:97:fe:fb:e1:35:
db:f1:f2:9c:cf:93:b9:06:dd:e2:47:12:79:6d:c6:a4:9d:c6:
16:87:28:6a:cd:9c:36:d8:6c:0c:3b:fa:b5:82:a1:7c:21:83:
74:b2:86:7c:d0:ba:05:cf:fe:e2:78:3d:58:f7:f9:5c:7d:fa:
ea:51:f8:e0:1f:0f:1c:8f:72:ba:31:ce:13:14:22:bc:0e:3e:
d9:7c:5a:10:75:f5:b6:c9:2e:1f:2a:e9:4f:e7:17:73:f9:d8:
70:6a:a0:1b:0b:19:4c:80:6b:60:5a:f2:ad:c9:94:0f:94:63:
77:0a:a1:27:5a:e5:ee:db:16:1a:19:1a:cf:8d:7b:82:de:39:
f9:f9:18:a4:a0:64:af:61:10:51:b2:36:93:46:30:6a:ed:31:
21:82:f3:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:32 2025 by rpki-client