Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
File: 0LhJubyQQqFVczGTfkrXFRivYc8.mft (raw, json)
Hash identifier: yFDe8fwnU2ndOhmha+CDnCcraBvikzxS1kCs6rEYKv0=
Subject key identifier: 30:16:94:97:1D:25:DF:66:6F:A8:E9:61:F4:F1:C9:3C:10:1D:ED:12
Authority key identifier: D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
Certificate issuer: /CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Certificate serial: 019608D4EC6CE2732C08814D76BF3B2AA2C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
Manifest number: 14E1
Signing time: Sun 06 Apr 2025 02:01:33 +0000
Manifest this update: Sun 06 Apr 2025 02:01:33 +0000
Manifest next update: Mon 07 Apr 2025 02:01:33 +0000
Files and hashes: 1: 0LhJubyQQqFVczGTfkrXFRivYc8.crl (hash: IEGUmrzJbpJ4IqDOEbEfd2vINar2VgtsN+Tkl+96zAc=)
2: 1-eb9r-ZDRcfXM319Xm17VSwOe2g.roa (hash: gjasaH7lkMMANTCzqIlftWjMy6V6Szhqm9mZMjotXY4=)
3: H0lhlyvHrJBUbelTUSco_7dJSjQ.roa (hash: L/m4BXMaiGyOl/b45Q9sPqlYrX5v9RjW3QD40e1E52s=)
4: eANGg9nd8brobQxQsq-OUws_-A0.roa (hash: lEUfEgigb66go+VnP4oXCP4ZNWVGI/eBV8YRKR1wILc=)
5: fchmYh0XMmIa-Ncr7a7fqAnAY00.roa (hash: ZlxUCwJ7bUmXJFbrCkwij8tMOrG795eaKW3Q7cSegWE=)
6: gbFyA5kAyF3D91TwTtuIgfKJGwg.roa (hash: P+ljc7ooXveuyv4fpj4pataLqZnV6kSVgO14/6L0j+k=)
7: m885sdRVL7vvTw9o72IDISfg7CA.roa (hash: G7PZpicKtRlgQZhGAEn8Nx8P/JZomwfCGr+1m/KgFYQ=)
8: ncGsNjTWkIf28hHD5IvPQUyPHT4.roa (hash: OTRCAQhrm/oTjMPsGhu8HQvEnrVxNQI7H4S1GDdgIBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 02:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:08:d4:ec:6c:e2:73:2c:08:81:4d:76:bf:3b:2a:a2:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Validity
Not Before: Apr 6 02:01:33 2025 GMT
Not After : Apr 7 02:01:33 2025 GMT
Subject: CN=301694971d25df666fa8e961f4f1c93c101ded12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5d:14:1c:f1:18:39:64:24:00:b4:f8:82:83:
27:73:10:e1:16:a6:8a:aa:79:0d:17:b9:dc:00:8d:
34:75:cf:4b:0d:5f:b7:26:09:3d:97:5a:e2:af:b2:
3b:02:6e:ac:16:e0:77:23:f1:38:99:22:cd:be:31:
8a:1d:49:6c:52:1f:8e:ea:5a:d8:d4:aa:3b:98:3f:
b1:39:b9:cd:aa:36:4f:74:d6:32:0d:42:88:da:8c:
bd:5d:18:ff:29:6d:34:4f:81:8b:17:cc:0f:64:4d:
54:5d:95:46:4b:2c:f2:fe:b2:78:d0:a1:56:b0:5f:
ea:e9:58:88:c9:92:08:48:f3:12:9a:4c:35:13:da:
4a:3b:89:e0:58:8f:c3:a8:75:ef:a2:9c:93:4a:f4:
50:8a:cd:b2:78:00:cb:66:b7:53:e1:2e:51:85:bf:
1d:b6:9e:39:80:da:ae:cd:2e:cb:f5:a5:8b:c7:a3:
80:d5:57:9e:e3:90:9c:52:c5:93:47:b8:42:31:61:
73:0e:dc:bc:46:c3:27:27:53:e0:ee:d8:75:72:95:
c9:13:96:a0:b6:50:77:af:fc:9a:3e:3e:a5:26:fd:
ac:23:14:76:32:f8:1e:98:77:ba:85:65:69:4a:da:
68:81:a8:3a:92:4b:47:79:10:36:c9:1e:60:42:a2:
e9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:16:94:97:1D:25:DF:66:6F:A8:E9:61:F4:F1:C9:3C:10:1D:ED:12
X509v3 Authority Key Identifier:
keyid:D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:f8:c7:4c:68:ab:a3:d1:5c:81:a9:27:3b:a2:3d:f8:f7:3a:
96:f1:8e:8e:5d:9e:c7:ff:f6:db:bd:6a:7b:e9:0e:b2:46:ca:
34:d5:96:ea:4a:e2:53:91:d7:0f:bf:f6:16:fc:b7:6b:6d:e3:
96:a0:bf:90:5a:e5:f4:6e:9e:15:8a:99:f5:00:eb:38:ea:d2:
1c:50:b4:2e:a7:ab:e3:bd:84:b4:5e:85:8a:ca:d5:4b:0b:6e:
7f:f9:53:00:fd:24:1c:e3:61:47:e9:94:ba:f4:37:ec:33:9f:
cd:20:08:c0:31:fc:07:e4:5e:62:35:2a:00:bc:44:6d:5d:f3:
be:4e:9d:aa:95:a8:84:33:6b:8d:43:8a:ec:18:9a:86:7f:fa:
a9:f2:1a:32:2e:8d:87:ba:60:6e:05:2b:8b:04:6f:82:26:4f:
81:6b:2a:24:8e:9d:1c:19:1a:16:1a:96:b2:27:2f:5c:3c:f1:
84:03:56:37:9a:3b:08:b0:9e:96:17:bf:cc:b4:ae:b5:7d:34:
92:27:88:a7:b2:cb:95:ed:9a:43:cf:41:55:12:2a:20:f1:db:
a2:cf:17:01:fe:d1:36:4b:1f:f4:c5:f7:e3:15:72:d5:cf:1a:
09:c1:8d:24:39:28:01:11:00:b2:16:f1:ed:12:66:90:82:48:
4e:59:02:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:40:56 2025 by rpki-client