Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
File: LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft (raw, json)
Hash identifier: rf4tUk0njVEJWfnD0MATt7e5XDvyVMGfiUSqf9+yW6M=
Subject key identifier: 8E:09:B4:D3:22:49:29:B2:8D:1F:69:EE:55:59:62:8D:6F:39:D1:01
Authority key identifier: 2C:72:7D:09:FB:B1:9A:7F:98:5D:75:1A:20:31:1C:1B:AD:4B:07:1F
Certificate issuer: /CN=2c727d09fbb19a7f985d751a20311c1bad4b071f
Certificate serial: 01964DEC12679DFE8B898C4E090F7F4D5941
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 12:00:38 +0000
Manifest this update: Sat 19 Apr 2025 12:00:38 +0000
Manifest next update: Sun 20 Apr 2025 12:00:38 +0000
Files and hashes: 1: 9phsu2p4WF8NqnfUkSWWdnt6zzA.roa (hash: f41MILFdl6rcNDj7+ORCxwVOJlnjfxd2bAX97uHKrtw=)
2: LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl (hash: c0ej9PcLew934p7HW4yz2LkQYG1+PDveK3imxi3Ss2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 12:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:ec:12:67:9d:fe:8b:89:8c:4e:09:0f:7f:4d:59:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c727d09fbb19a7f985d751a20311c1bad4b071f
Validity
Not Before: Apr 19 12:00:38 2025 GMT
Not After : Apr 20 12:00:38 2025 GMT
Subject: CN=8e09b4d3224929b28d1f69ee5559628d6f39d101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7a:40:c3:e3:3c:bc:73:b6:14:68:21:70:92:
2c:6a:d2:fb:1a:ed:4c:15:24:ef:95:9d:a9:6e:37:
ba:6d:3c:08:fd:aa:24:57:8e:28:bf:c7:15:ca:fa:
a8:1d:42:3e:5a:6b:2b:d2:bb:6c:31:cb:9b:29:4a:
fb:10:bd:b5:66:69:a4:4a:5e:08:77:da:10:73:2e:
aa:a8:0c:17:cf:0f:4a:41:9e:28:30:c7:f7:79:e9:
7c:55:88:ee:91:61:7d:95:d2:ce:31:58:49:6f:b7:
7e:44:82:ba:19:f7:01:c9:d9:0b:1d:89:32:7f:5b:
a7:f6:4e:9e:75:b1:0e:1a:c5:79:7f:9f:3f:9f:b2:
d8:08:2b:5c:bf:69:5f:26:2c:8c:8d:5d:70:a3:42:
e5:c3:51:2a:cf:6b:fe:6c:47:17:03:54:83:85:c0:
e2:4f:b5:54:e7:49:82:c5:dd:c6:b6:7d:cf:ab:ad:
c7:5c:42:44:da:4a:80:58:2c:ba:f3:fb:e3:20:d3:
02:74:05:59:2b:e6:d5:a7:66:74:b0:53:7b:67:a8:
98:63:3b:ec:bb:b9:92:e5:e0:94:85:57:82:84:61:
91:1a:23:d2:48:55:88:f1:25:c3:8f:33:74:7d:7f:
0b:f2:ec:9e:1a:22:df:d6:cd:26:bc:03:d0:85:78:
f7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:09:B4:D3:22:49:29:B2:8D:1F:69:EE:55:59:62:8D:6F:39:D1:01
X509v3 Authority Key Identifier:
keyid:2C:72:7D:09:FB:B1:9A:7F:98:5D:75:1A:20:31:1C:1B:AD:4B:07:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:d4:9b:3d:03:a1:9d:dc:15:69:08:67:3a:41:ed:5c:30:75:
6a:07:cb:bc:2f:d4:6c:e5:50:78:55:e7:7c:73:e1:06:bf:63:
85:f8:46:40:ec:b9:f7:5a:5b:9d:bf:0d:41:bc:f0:a0:94:bc:
d8:f3:6c:c9:a8:ae:c5:2e:6e:1f:fa:20:ac:cb:b8:a0:d0:cc:
6e:8f:31:ef:e7:ff:3d:ec:52:8e:06:80:96:80:ca:ff:9e:3b:
d2:d2:96:55:fc:0a:85:f9:b2:0c:dc:1c:3a:06:b9:32:b6:3a:
cf:a6:8a:e7:71:dd:69:78:3a:e0:16:3a:eb:13:ff:07:ca:ac:
16:97:aa:c9:48:f6:5a:84:d9:08:17:69:31:c0:d9:bd:3b:e5:
ce:7e:4a:c7:db:2a:1f:b2:53:41:75:33:a0:52:0e:a9:3c:74:
c9:99:3d:bb:62:06:db:75:6a:2c:9f:bd:6d:9f:62:be:c1:09:
8e:a3:bc:20:35:44:df:e3:52:c6:db:07:a1:94:f9:1b:f0:96:
33:18:71:b6:3e:90:90:2e:c1:db:b2:ac:a1:ee:ff:d6:0d:3e:
0d:ed:01:ee:3e:0a:d5:d9:11:76:e0:14:a8:33:89:25:48:6b:
e1:9a:5a:81:25:25:c3:fe:0a:29:36:0f:bf:44:5b:28:42:88:
f3:53:45:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:47:34 2025 by rpki-client