Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5557fc-7653-40a9-99c3-7ea9905c3fbd/1/lhzPqdAsvwWWDjovkHmFnM1urW0.mft
File: lhzPqdAsvwWWDjovkHmFnM1urW0.mft (raw, json)
Hash identifier: HkztCGCYg18e22bmXmMUnHwdVDsXGq2whIyr2VaM68E=
Subject key identifier: 7B:6D:16:66:7D:90:BA:ED:D7:69:A7:3F:5C:91:86:0B:79:EB:DB:3E
Authority key identifier: 96:1C:CF:A9:D0:2C:BF:05:96:0E:3A:2F:90:79:85:9C:CD:6E:AD:6D
Certificate issuer: /CN=961ccfa9d02cbf05960e3a2f9079859ccd6ead6d
Certificate serial: 019655DCAE7145C33ADFC18727951B5C2E0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhzPqdAsvwWWDjovkHmFnM1urW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5557fc-7653-40a9-99c3-7ea9905c3fbd/1/lhzPqdAsvwWWDjovkHmFnM1urW0.mft
Manifest number: 14FF
Signing time: Mon 21 Apr 2025 01:00:47 +0000
Manifest this update: Mon 21 Apr 2025 01:00:47 +0000
Manifest next update: Tue 22 Apr 2025 01:00:47 +0000
Files and hashes: 1: lhzPqdAsvwWWDjovkHmFnM1urW0.crl (hash: oLhXZqUQf+V/xi5GtM+T2r984mK2ONsK/X4d8osHqGc=)
2: qTElxIuYhBq2Kr2moM3xQmQlUEA.roa (hash: 6HA56HJcMMODNW40FbLFvKXa1rIMDv54m0DX5YcNqN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5557fc-7653-40a9-99c3-7ea9905c3fbd/1/lhzPqdAsvwWWDjovkHmFnM1urW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/5557fc-7653-40a9-99c3-7ea9905c3fbd/1/lhzPqdAsvwWWDjovkHmFnM1urW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhzPqdAsvwWWDjovkHmFnM1urW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:ae:71:45:c3:3a:df:c1:87:27:95:1b:5c:2e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961ccfa9d02cbf05960e3a2f9079859ccd6ead6d
Validity
Not Before: Apr 21 01:00:47 2025 GMT
Not After : Apr 22 01:00:47 2025 GMT
Subject: CN=7b6d16667d90baedd769a73f5c91860b79ebdb3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f7:f7:41:85:bd:0d:3f:5a:ab:16:42:4b:9d:
5c:b9:06:95:06:85:01:1f:c1:29:0a:05:af:7c:63:
5c:73:cf:ef:67:d9:68:a7:b2:5c:59:8e:5b:6c:e8:
4d:d7:1f:79:6c:21:46:51:95:7d:5c:f7:19:31:13:
92:e8:c9:02:75:f7:dd:57:0e:96:cd:c3:29:49:07:
15:28:02:dc:50:52:b5:9b:b7:f0:76:fe:5f:af:c4:
79:da:de:71:22:c5:1c:48:4c:b6:60:d9:30:5b:a4:
a7:48:e0:d8:db:ae:d5:f4:62:e6:da:e7:36:4a:c0:
0a:c2:34:0a:39:23:a6:7c:f4:22:5e:0d:2f:0e:4a:
f2:88:d7:1c:0c:76:3e:be:de:18:ff:78:4c:6c:4d:
bf:2d:dd:bd:ae:60:23:75:13:00:3b:70:f8:74:a4:
09:e8:21:c9:85:16:87:5d:2d:28:fd:3f:cf:84:23:
79:79:8c:ee:7f:09:f5:72:c4:1d:d5:a8:d1:85:89:
61:ac:bb:e2:ce:0a:14:86:be:6e:60:2f:d3:f6:48:
9d:2a:fd:ba:57:69:c6:77:01:9b:55:f2:76:22:d9:
71:99:b8:56:83:de:16:d4:f4:b6:fe:f0:05:f6:91:
65:38:a2:55:38:de:e8:a9:46:f2:da:50:3a:b9:7c:
13:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:6D:16:66:7D:90:BA:ED:D7:69:A7:3F:5C:91:86:0B:79:EB:DB:3E
X509v3 Authority Key Identifier:
keyid:96:1C:CF:A9:D0:2C:BF:05:96:0E:3A:2F:90:79:85:9C:CD:6E:AD:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhzPqdAsvwWWDjovkHmFnM1urW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5557fc-7653-40a9-99c3-7ea9905c3fbd/1/lhzPqdAsvwWWDjovkHmFnM1urW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5557fc-7653-40a9-99c3-7ea9905c3fbd/1/lhzPqdAsvwWWDjovkHmFnM1urW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ea:6b:39:b0:9e:cc:f6:1d:df:fd:30:9f:48:43:34:90:ec:
62:b9:4f:6d:10:8c:9c:ae:ad:74:bf:47:e3:8e:04:d4:48:e7:
30:33:11:e3:7d:4e:e2:b0:61:23:e6:ee:92:da:4d:e5:2b:7d:
fe:f8:c7:cd:24:52:0b:9a:ca:d3:db:9b:cd:bc:51:9b:11:5b:
a0:c1:c5:25:05:0d:ab:42:6d:ad:d5:1d:05:46:ea:99:49:09:
a9:b1:f9:59:da:3c:fc:0a:2d:32:eb:ab:5c:ac:98:fd:1e:8e:
f7:80:95:20:23:d1:d4:13:f1:32:f4:31:d5:ca:49:18:39:92:
45:0f:53:43:7a:a5:ff:2d:8c:88:ab:12:e1:44:5d:3c:21:db:
56:ce:06:b2:54:50:3f:67:f0:27:81:db:3c:30:93:8f:fd:25:
ee:da:70:ae:0b:87:c9:85:11:b8:c1:81:37:7e:1a:eb:b2:f2:
d3:8e:73:25:8d:52:11:9e:7e:14:ce:82:81:a6:36:c2:11:36:
aa:02:91:7e:44:d8:db:85:f7:92:27:ef:a9:b8:d6:8a:3d:ff:
22:50:7b:8f:d4:e4:40:5e:cc:ca:89:f9:5b:e3:43:f4:44:24:
7e:63:cc:c7:c2:d2:d3:4e:d9:ca:2b:8e:d1:33:53:58:52:c2:
81:fb:88:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZV3K5xRcM638GHJ5UbXC4OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MWNjZmE5ZDAyY2JmMDU5NjBlM2EyZjkwNzk4NTljY2Q2
ZWFkNmQwHhcNMjUwNDIxMDEwMDQ3WhcNMjUwNDIyMDEwMDQ3WjAzMTEwLwYDVQQD
Eyg3YjZkMTY2NjdkOTBiYWVkZDc2OWE3M2Y1YzkxODYwYjc5ZWJkYjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtff3QYW9DT9aqxZCS51cuQaVBoUB
H8EpCgWvfGNcc8/vZ9lop7JcWY5bbOhN1x95bCFGUZV9XPcZMROS6MkCdffdVw6W
zcMpSQcVKALcUFK1m7fwdv5fr8R52t5xIsUcSEy2YNkwW6SnSODY267V9GLm2uc2
SsAKwjQKOSOmfPQiXg0vDkryiNccDHY+vt4Y/3hMbE2/Ld29rmAjdRMAO3D4dKQJ
6CHJhRaHXS0o/T/PhCN5eYzufwn1csQd1ajRhYlhrLvizgoUhr5uYC/T9kidKv26
V2nGdwGbVfJ2ItlxmbhWg94W1PS2/vAF9pFlOKJVON7oqUby2lA6uXwTvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHttFmZ9kLrt12mnP1yRhgt569s+MB8GA1UdIwQY
MBaAFJYcz6nQLL8Flg46L5B5hZzNbq1tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGh6UHFkQXN2d1dXRGpvdmtIbUZuTTF1clcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi81NTU3ZmMtNzY1My00MGE5LTk5YzMt
N2VhOTkwNWMzZmJkLzEvbGh6UHFkQXN2d1dXRGpvdmtIbUZuTTF1clcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi81NTU3ZmMtNzY1My00MGE5LTk5YzMtN2VhOTkwNWMzZmJk
LzEvbGh6UHFkQXN2d1dXRGpvdmtIbUZuTTF1clcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATeprObCe
zPYd3/0wn0hDNJDsYrlPbRCMnK6tdL9H444E1EjnMDMR431O4rBhI+buktpN5St9
/vjHzSRSC5rK09ubzbxRmxFboMHFJQUNq0JtrdUdBUbqmUkJqbH5Wdo8/AotMuur
XKyY/R6O94CVICPR1BPxMvQx1cpJGDmSRQ9TQ3ql/y2MiKsS4URdPCHbVs4GslRQ
P2fwJ4HbPDCTj/0l7tpwrguHyYURuMGBN34a67Ly045zJY1SEZ5+FM6CgaY2whE2
qgKRfkTY24X3kifvqbjWij3/IlB7j9TkQF7Myon5W+ND9EQkfmPMx8LS007ZyiuO
0TNTWFLCgfuIhQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:37 2025 by rpki-client