Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/4225b9-e9c3-4b8e-8bff-3a533cedc301/1/LhznvOx_18KfCYu64NMSte46NF4.mft
File: LhznvOx_18KfCYu64NMSte46NF4.mft (raw, json)
Hash identifier: H4LZKh18uxWEmYlnG7HM3yX51JUY0BwrBX3wg/OL7lM=
Subject key identifier: F6:42:5D:D1:63:53:6D:83:F1:24:5F:D0:CD:D8:2F:18:1F:3F:44:0F
Authority key identifier: 2E:1C:E7:BC:EC:7F:D7:C2:9F:09:8B:BA:E0:D3:12:B5:EE:3A:34:5E
Certificate issuer: /CN=2e1ce7bcec7fd7c29f098bbae0d312b5ee3a345e
Certificate serial: 019658DDBE7B0BFDFE3E24786AE413218FB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhznvOx_18KfCYu64NMSte46NF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/4225b9-e9c3-4b8e-8bff-3a533cedc301/1/LhznvOx_18KfCYu64NMSte46NF4.mft
Manifest number: 0184
Signing time: Mon 21 Apr 2025 15:00:49 +0000
Manifest this update: Mon 21 Apr 2025 15:00:49 +0000
Manifest next update: Tue 22 Apr 2025 15:00:49 +0000
Files and hashes: 1: LhznvOx_18KfCYu64NMSte46NF4.crl (hash: aGoH81Y5PSq9nHweK4yiRI9ka+G/x4tiLxFnuen7W/8=)
2: dGGMhhLDaoWkDWmK8o4AcoqcFuc.roa (hash: +aGKRXgqkoPg+9wbbAijk/9YLBVcGbYOuDtpc/CsaCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/4225b9-e9c3-4b8e-8bff-3a533cedc301/1/LhznvOx_18KfCYu64NMSte46NF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/4225b9-e9c3-4b8e-8bff-3a533cedc301/1/LhznvOx_18KfCYu64NMSte46NF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhznvOx_18KfCYu64NMSte46NF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 15:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:dd:be:7b:0b:fd:fe:3e:24:78:6a:e4:13:21:8f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1ce7bcec7fd7c29f098bbae0d312b5ee3a345e
Validity
Not Before: Apr 21 15:00:49 2025 GMT
Not After : Apr 22 15:00:49 2025 GMT
Subject: CN=f6425dd163536d83f1245fd0cdd82f181f3f440f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:fb:34:02:86:a3:2f:ef:8a:a9:b4:9b:0e:a1:
7d:0c:aa:44:be:4a:a0:0d:a8:d2:29:48:73:29:2d:
e2:7c:42:78:42:de:aa:8d:e8:38:ac:3b:df:1f:7c:
2e:cf:cc:cf:65:47:62:be:59:a0:c1:fc:66:9e:49:
43:26:fb:ab:e6:20:7d:05:f3:14:0b:7e:e9:1d:55:
86:73:3e:28:0a:2d:c0:32:53:f1:00:6f:45:e3:f7:
a6:f1:dd:5d:86:a9:2e:2c:69:fe:40:0a:e6:35:7f:
ff:7d:9f:d5:17:d9:b9:d3:df:48:af:60:ab:3d:49:
0b:08:ae:0a:a1:af:e7:f5:fc:9f:05:22:88:16:a3:
ec:62:26:5e:d7:bb:83:55:ad:78:9c:3c:e4:30:14:
77:23:bc:ab:3f:be:ef:84:ed:2a:c7:22:d8:31:7e:
6b:84:d3:e9:d0:4d:8d:51:8c:c9:e0:fc:b0:22:82:
3a:bb:b4:e4:e6:74:5a:56:16:b4:1d:73:99:45:3f:
52:c5:b2:50:2c:2c:4d:88:fd:cf:22:9c:95:64:9a:
9a:11:32:37:5b:05:9a:a6:04:51:f0:b5:68:e7:7f:
78:2e:47:23:2e:a8:31:93:df:38:89:87:c7:4b:0a:
80:21:b1:98:35:6a:6d:0a:3a:22:e9:35:a5:25:0e:
31:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:42:5D:D1:63:53:6D:83:F1:24:5F:D0:CD:D8:2F:18:1F:3F:44:0F
X509v3 Authority Key Identifier:
keyid:2E:1C:E7:BC:EC:7F:D7:C2:9F:09:8B:BA:E0:D3:12:B5:EE:3A:34:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhznvOx_18KfCYu64NMSte46NF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4225b9-e9c3-4b8e-8bff-3a533cedc301/1/LhznvOx_18KfCYu64NMSte46NF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4225b9-e9c3-4b8e-8bff-3a533cedc301/1/LhznvOx_18KfCYu64NMSte46NF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a8:85:6f:b2:2b:e4:39:f0:de:b2:59:e4:7d:39:07:d1:16:
bf:f7:b7:8a:b8:ff:cb:5c:ee:dd:12:0e:d3:e2:96:2d:85:b1:
54:25:0e:f8:d7:cf:49:9e:e3:16:84:b0:31:40:8d:3b:d6:cd:
c0:fd:7a:ee:15:3c:0d:66:cc:6a:c7:23:e6:0b:cd:94:08:fa:
86:b6:da:8f:70:9e:9a:aa:0c:4b:5a:de:59:13:00:70:c4:e4:
09:92:5f:17:4e:27:5d:e1:b3:5d:32:bd:a6:b7:c7:d9:d6:ef:
a0:da:b4:96:67:8a:6d:83:9d:a5:36:2f:1b:4b:90:08:38:8e:
44:3d:4e:a4:ff:07:74:e8:15:99:f9:19:7d:8f:73:98:62:c8:
84:2e:ef:b8:3e:b2:b7:c5:ca:cb:ab:87:d8:ad:52:53:31:a1:
ef:fe:f8:34:27:8e:8d:2a:66:6e:d1:63:13:4f:85:b3:51:7e:
6a:cc:8e:07:b7:c6:83:de:2f:a8:1b:c4:89:e1:2b:65:61:f1:
76:f8:a5:dd:5b:a0:79:19:1b:57:7e:db:64:00:8e:c5:36:11:
62:6a:53:95:61:63:46:f4:dd:9b:3f:90:6c:d2:7f:60:6e:3c:
ad:9a:2b:1b:77:38:a3:d5:88:91:87:6d:79:02:c6:58:96:fe:
06:bb:96:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:23:18 2025 by rpki-client