Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
File: LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft (raw, json)
Hash identifier: gq3vPzshrMG/gA72xPWbevtvOqRmqrlnhvV6x6VYU/E=
Subject key identifier: 14:29:3D:6D:DF:DF:C7:F3:F8:73:9E:E0:F1:3D:5D:0C:CA:17:6A:F2
Authority key identifier: 2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
Certificate issuer: /CN=2e1620890f700f012b0ba60172314e3c85919513
Certificate serial: 0196545BF349E819793CE4D9EE605209FC62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 18:00:34 +0000
Manifest this update: Sun 20 Apr 2025 18:00:34 +0000
Manifest next update: Mon 21 Apr 2025 18:00:34 +0000
Files and hashes: 1: LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl (hash: XKCqHwgmzxyinx9cqjBDcuNsdMifU77UtAFUAR4S3BU=)
2: UEzUyopP5UVcAuE2wQnf6zxgiYA.roa (hash: WO7cSkDAVVG4RqEt/anGaCZXbbFB9XEJIQ0eE+HtSwo=)
3: g1Qj1KnuMxZpXuMaGLTMbgWLRyE.roa (hash: f3NI3BOfnPP1R6nzFdJwSdGpqAlLYVxZtd9uD+YokWY=)
4: x9mgn-wCUD8rT1tTi9C7mbyMAtI.roa (hash: sgZbLcOXGM2ArVU0X49/Qh6v7QEpIvbA1cc08MVfbkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 18:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5b:f3:49:e8:19:79:3c:e4:d9:ee:60:52:09:fc:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1620890f700f012b0ba60172314e3c85919513
Validity
Not Before: Apr 20 18:00:34 2025 GMT
Not After : Apr 21 18:00:34 2025 GMT
Subject: CN=14293d6ddfdfc7f3f8739ee0f13d5d0cca176af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5f:57:59:10:96:56:cf:fc:bb:f3:c7:35:ee:
05:f8:b2:ce:1b:96:95:73:63:c3:0a:b8:a0:a7:65:
0e:9e:25:ee:c7:c5:1a:27:3f:b2:59:0d:f9:81:a6:
42:98:80:bc:fa:b1:65:2a:ee:fd:46:f7:85:61:00:
ae:65:53:61:35:3c:82:26:1c:04:4c:8c:ad:76:76:
11:16:49:4e:b6:ce:52:11:32:c7:7a:08:50:6f:8b:
af:d1:11:ca:44:18:7e:2d:db:2b:5b:b2:19:58:ee:
c7:69:09:06:41:8c:00:fe:89:18:58:54:7c:77:95:
be:16:bc:af:ab:4d:cf:2f:92:af:ea:a2:c4:0c:8a:
6b:18:65:16:58:7c:41:00:76:04:e2:1c:cc:1d:83:
13:fa:eb:15:91:78:d5:28:bf:78:1f:50:ed:42:7a:
d4:b5:21:9e:63:e1:4e:a1:39:f2:a3:c6:48:97:1c:
1b:9a:3c:09:27:69:28:4f:de:a8:ff:c3:8a:ce:f2:
a2:0c:4c:12:de:4b:d0:49:84:39:3a:fd:57:2c:51:
2d:1f:af:bc:34:c4:7e:1a:9e:e7:44:5c:3f:a5:b2:
e9:14:ff:b6:9a:82:05:41:7e:03:52:5e:c4:de:e1:
26:b5:f3:cf:e6:e0:09:18:a6:3a:9e:18:84:35:0b:
bc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:29:3D:6D:DF:DF:C7:F3:F8:73:9E:E0:F1:3D:5D:0C:CA:17:6A:F2
X509v3 Authority Key Identifier:
keyid:2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:ac:c9:70:05:42:16:72:3e:62:ea:c6:26:f4:fd:bd:7a:7c:
f8:48:ed:55:77:50:36:53:57:20:c2:bd:ee:53:91:5d:30:f3:
4d:d0:85:a0:89:4c:9c:f8:67:db:b5:fd:09:cd:c1:ee:bf:28:
0e:2f:66:26:12:cd:6e:a1:0e:c6:bf:79:64:34:22:06:cb:60:
a7:3f:5e:b7:74:e6:34:6d:db:32:3d:74:9b:7a:19:d6:72:39:
9a:b4:75:e0:98:72:81:cd:02:47:05:95:bf:d7:a4:1f:ac:cd:
c7:60:aa:05:92:42:c4:5c:dd:87:82:05:cb:ba:25:bc:83:13:
0c:8c:9b:1a:14:4b:7d:df:e7:08:2d:81:d1:18:52:80:cc:22:
c7:b0:fa:d3:15:10:ec:e1:b2:a2:9c:7e:8b:cd:2c:5c:8d:e6:
50:e6:ac:e7:7f:0b:b7:9b:fc:36:d9:00:fd:c8:2b:6a:ef:6e:
77:9d:de:a4:04:fe:14:9e:e3:c5:e5:b7:f4:83:08:22:71:89:
7a:44:2c:34:f2:8e:48:14:83:b4:c7:1d:c1:21:3b:5b:54:98:
aa:01:77:26:a1:d4:76:20:7a:32:2f:68:52:23:24:03:ea:90:
e2:c7:8f:d0:f4:79:dc:1b:7e:61:f4:4b:7f:1a:b5:83:d7:cc:
d8:c7:46:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:55:14 2025 by rpki-client