Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft
File: lHjtPq1if84WxRgCUMRmIXMY1lw.mft (raw, json)
Hash identifier: DxtGAlvE5GcRkTws3oGVZRlXASZJVQwQpti6wie9BnE=
Subject key identifier: EE:CD:A4:90:6D:EA:A1:9B:83:A3:E8:AB:2C:DD:59:8E:6A:AE:5B:98
Authority key identifier: 94:78:ED:3E:AD:62:7F:CE:16:C5:18:02:50:C4:66:21:73:18:D6:5C
Certificate issuer: /CN=9478ed3ead627fce16c5180250c466217318d65c
Certificate serial: 01965424C9E5B7A5205A82ECC283A3E89553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 17:00:19 +0000
Manifest this update: Sun 20 Apr 2025 17:00:19 +0000
Manifest next update: Mon 21 Apr 2025 17:00:19 +0000
Files and hashes: 1: df6eEH1lcm-NQu74tYmhvofIQ3M.roa (hash: 2j1bAmdfTQz3oXGIdGeOLHdjury5pLuTexUtxV+TqRE=)
2: lHjtPq1if84WxRgCUMRmIXMY1lw.crl (hash: whMVE3Qh5l2edoDp8N2WesUNS4b5QpO3vO7c7FECbiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 17:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:24:c9:e5:b7:a5:20:5a:82:ec:c2:83:a3:e8:95:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9478ed3ead627fce16c5180250c466217318d65c
Validity
Not Before: Apr 20 17:00:19 2025 GMT
Not After : Apr 21 17:00:19 2025 GMT
Subject: CN=eecda4906deaa19b83a3e8ab2cdd598e6aae5b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bd:06:46:02:0f:c6:1c:a2:4b:6c:4e:98:b0:
24:a4:a8:72:c0:ca:18:ce:cb:3b:e0:40:e9:77:30:
c2:0e:63:e1:dc:65:08:1a:2e:7a:a1:43:14:88:f5:
c6:9a:5d:2b:60:ca:b2:03:ab:59:ee:27:33:11:66:
1f:0f:7f:d1:66:4b:8f:56:2c:38:ff:51:0f:f5:fb:
11:24:19:b6:9a:65:3a:18:41:0f:51:8b:36:db:f6:
56:e6:c4:8b:a0:08:77:4a:47:04:ff:ea:4a:2a:26:
47:a0:e0:0b:24:01:cc:ba:7c:63:10:e2:40:8b:01:
d0:88:b5:72:e9:d9:d7:44:e2:e8:56:9c:63:ab:a7:
5c:70:e7:c9:94:a4:9f:79:54:b1:48:bb:31:46:30:
86:1a:2d:b8:43:a3:8d:dc:da:35:26:1c:4c:84:dd:
ce:fa:d1:1e:19:10:65:2d:ac:48:68:c9:c7:15:92:
3a:2e:d5:e4:2b:5b:2a:86:d8:a2:a5:51:9f:15:9f:
da:30:1f:f0:7b:ea:84:b7:49:e3:b9:a0:a4:8b:27:
86:07:e2:54:59:8e:ae:92:41:3d:21:f8:be:2e:1e:
10:b9:8f:be:f7:d4:d2:89:36:28:96:11:b8:d2:37:
9f:b4:06:d3:80:cc:f9:7f:db:51:d4:7b:87:57:19:
67:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:CD:A4:90:6D:EA:A1:9B:83:A3:E8:AB:2C:DD:59:8E:6A:AE:5B:98
X509v3 Authority Key Identifier:
keyid:94:78:ED:3E:AD:62:7F:CE:16:C5:18:02:50:C4:66:21:73:18:D6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b4:d5:f4:7f:dc:14:3a:0e:d9:d8:7a:e2:c0:49:da:6e:ab:
12:da:d8:6c:c9:59:81:60:cc:11:29:9b:5b:ba:e0:98:76:e3:
16:fa:da:73:dc:c0:cc:dd:07:d2:7e:1d:e8:e9:b7:38:bc:5b:
bb:e7:f6:10:02:6c:64:bf:cb:c7:e1:1e:cf:9f:4e:14:92:fd:
3a:71:87:02:7e:4d:ed:3e:64:82:f3:e5:d8:f5:23:4e:cb:65:
1c:e2:5f:16:d7:33:31:27:43:f5:dc:1e:ad:f0:eb:54:ef:13:
0a:20:11:8d:05:df:c9:18:7c:a1:e8:5a:f0:54:21:83:84:3a:
27:9c:e8:6c:53:e3:a6:5c:b0:38:c1:ea:bc:53:b0:60:e0:bc:
27:39:df:36:0c:49:d0:8f:b2:ac:32:b3:23:f3:7c:4c:96:43:
52:ca:e1:2c:31:2d:06:aa:0f:76:98:59:25:e1:e7:9f:8f:42:
c3:27:5b:e2:e2:9f:45:20:86:4d:bb:52:07:86:f9:c2:ed:b3:
75:20:5d:ef:ce:5e:05:11:04:65:a2:25:34:30:d4:02:99:ab:
cf:7b:07:7b:e2:6e:60:78:03:d7:e3:c9:34:16:66:56:4e:1e:
39:5d:f7:79:80:79:8a:14:18:f5:af:c8:99:53:9b:d9:5c:6d:
82:29:4e:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUJMnlt6UgWoLswoOj6JVTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NzhlZDNlYWQ2MjdmY2UxNmM1MTgwMjUwYzQ2NjIxNzMx
OGQ2NWMwHhcNMjUwNDIwMTcwMDE5WhcNMjUwNDIxMTcwMDE5WjAzMTEwLwYDVQQD
EyhlZWNkYTQ5MDZkZWFhMTliODNhM2U4YWIyY2RkNTk4ZTZhYWU1Yjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnL0GRgIPxhyiS2xOmLAkpKhywMoY
zss74EDpdzDCDmPh3GUIGi56oUMUiPXGml0rYMqyA6tZ7iczEWYfD3/RZkuPViw4
/1EP9fsRJBm2mmU6GEEPUYs22/ZW5sSLoAh3SkcE/+pKKiZHoOALJAHMunxjEOJA
iwHQiLVy6dnXROLoVpxjq6dccOfJlKSfeVSxSLsxRjCGGi24Q6ON3No1JhxMhN3O
+tEeGRBlLaxIaMnHFZI6LtXkK1sqhtiipVGfFZ/aMB/we+qEt0njuaCkiyeGB+JU
WY6ukkE9Ifi+Lh4QuY++99TSiTYolhG40jeftAbTgMz5f9tR1HuHVxlnWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO7NpJBt6qGbg6PoqyzdWY5qrluYMB8GA1UdIwQY
MBaAFJR47T6tYn/OFsUYAlDEZiFzGNZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEhqdFBxMWlmODRXeFJnQ1VNUm1JWE1ZMWx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lNGJlMjMtYjUzNi00ZTMwLTlhNWIt
NWQ1ZDAyYmI3MTk5LzEvbEhqdFBxMWlmODRXeFJnQ1VNUm1JWE1ZMWx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9lNGJlMjMtYjUzNi00ZTMwLTlhNWItNWQ1ZDAyYmI3MTk5
LzEvbEhqdFBxMWlmODRXeFJnQ1VNUm1JWE1ZMWx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi7TV9H/c
FDoO2dh64sBJ2m6rEtrYbMlZgWDMESmbW7rgmHbjFvrac9zAzN0H0n4d6Om3OLxb
u+f2EAJsZL/Lx+Eez59OFJL9OnGHAn5N7T5kgvPl2PUjTstlHOJfFtczMSdD9dwe
rfDrVO8TCiARjQXfyRh8oeha8FQhg4Q6J5zobFPjplywOMHqvFOwYOC8JznfNgxJ
0I+yrDKzI/N8TJZDUsrhLDEtBqoPdphZJeHnn49Cwydb4uKfRSCGTbtSB4b5wu2z
dSBd785eBREEZaIlNDDUApmrz3sHe+JuYHgD1+PJNBZmVk4eOV33eYB5ihQY9a/I
mVOb2VxtgilOjg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:55:02 2025 by rpki-client