Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
File: LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft (raw, json)
Hash identifier: nRBx5Ptf1ko/KSEgHKBhFK6AEC3Qs13kcQ8wIKj6cbw=
Subject key identifier: 31:BE:AA:96:87:22:B8:C7:74:BE:35:BB:92:53:04:32:D2:72:6B:8A
Authority key identifier: 2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
Certificate issuer: /CN=2e1620890f700f012b0ba60172314e3c85919513
Certificate serial: 019511D9C5256C6DA29751B52072B3FBAE58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
Manifest number: 1455
Signing time: Mon 17 Feb 2025 03:00:39 +0000
Manifest this update: Mon 17 Feb 2025 03:00:39 +0000
Manifest next update: Tue 18 Feb 2025 03:00:39 +0000
Files and hashes: 1: LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl (hash: GimosZcJor1geeNN84wkDu+EoL74DNtsujAdiCmF/k0=)
2: UEzUyopP5UVcAuE2wQnf6zxgiYA.roa (hash: WO7cSkDAVVG4RqEt/anGaCZXbbFB9XEJIQ0eE+HtSwo=)
3: g1Qj1KnuMxZpXuMaGLTMbgWLRyE.roa (hash: f3NI3BOfnPP1R6nzFdJwSdGpqAlLYVxZtd9uD+YokWY=)
4: x9mgn-wCUD8rT1tTi9C7mbyMAtI.roa (hash: sgZbLcOXGM2ArVU0X49/Qh6v7QEpIvbA1cc08MVfbkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:c5:25:6c:6d:a2:97:51:b5:20:72:b3:fb:ae:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1620890f700f012b0ba60172314e3c85919513
Validity
Not Before: Feb 17 03:00:39 2025 GMT
Not After : Feb 18 03:00:39 2025 GMT
Subject: CN=31beaa968722b8c774be35bb92530432d2726b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:53:9e:5e:04:4d:2b:92:d7:2a:af:92:2a:44:
48:57:2a:38:16:3d:b1:e1:d8:48:5b:d2:4f:5d:fc:
a8:df:81:e8:f7:a3:8c:29:5f:c9:98:f6:29:23:70:
87:20:74:23:40:e2:1e:98:45:69:91:7e:91:af:47:
15:ad:17:f4:08:c3:45:55:2b:26:db:3f:47:35:5d:
45:04:fb:f4:8f:e2:40:df:2d:e6:a3:06:b9:70:23:
f7:75:dd:3c:14:eb:90:74:c6:7f:e2:c8:e4:e2:36:
9b:d1:f1:b4:3f:62:6f:7b:c3:fa:f6:05:c7:de:0a:
72:0a:b1:3b:86:d8:5e:42:4f:56:c1:94:00:79:e5:
eb:f8:85:d7:0f:f6:a0:12:a6:18:73:04:76:94:6c:
59:c2:d7:37:f6:c4:c4:cb:6f:e2:3b:33:0a:7d:f1:
4d:8e:d5:ec:c7:d6:df:c2:de:3d:6b:93:92:70:21:
5d:7a:2d:18:b3:41:f8:ea:5a:48:ea:8b:ea:f8:93:
af:14:84:95:89:d2:47:ae:af:fd:0c:05:3c:1f:e3:
53:c9:a4:9e:26:df:e2:70:46:10:a4:69:f0:94:68:
3c:f0:9e:b1:b1:e5:a4:c5:91:ef:cd:61:bf:a4:1d:
8d:6d:55:09:e1:97:81:7e:1a:67:6f:60:ea:0e:19:
94:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:BE:AA:96:87:22:B8:C7:74:BE:35:BB:92:53:04:32:D2:72:6B:8A
X509v3 Authority Key Identifier:
keyid:2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:52:eb:38:4e:c8:d1:39:c5:fb:24:52:65:fd:63:1a:96:e2:
d0:4f:99:58:7d:6e:e1:4c:b8:b9:58:4e:d2:f8:52:60:0d:b5:
9c:60:3a:1b:00:94:fc:c3:ac:e7:fb:2c:fa:ff:5d:fb:20:64:
0b:d1:5f:22:e5:ba:5b:9c:12:ac:74:b7:08:ac:87:5d:88:a2:
9a:57:33:c4:ad:30:03:a1:1e:43:5b:26:12:c0:22:1e:09:7e:
e1:b8:f7:6e:38:19:2a:9b:9e:40:e7:fc:f1:8c:5b:a1:83:9d:
dc:ac:17:ee:18:b9:fa:72:a2:f2:d4:be:21:b5:9d:dc:d9:b5:
bf:e3:c5:6e:7e:91:44:ea:21:3c:6c:4e:e2:ab:70:3b:24:f5:
ba:93:11:df:11:e0:18:16:bf:8e:ef:51:c7:d1:3b:00:9b:ed:
98:39:50:7e:6a:ea:72:f7:57:d7:87:db:e1:02:71:ee:f4:be:
e1:e6:55:c9:01:79:44:53:85:0b:f4:74:85:4c:82:56:99:15:
73:85:11:50:7d:56:38:9e:12:9e:66:b3:44:30:00:d4:3c:f1:
05:6f:e9:af:f6:37:77:45:c3:e9:a1:73:8a:29:d7:b6:03:f8:
6f:e4:e2:cc:0e:a8:97:65:ab:17:5e:e4:30:d2:36:c5:a4:cc:
ca:75:97:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:32 2025 by rpki-client