Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft
File: LNH_SXJfYzHmO47XZEjXJd16hN4.mft (raw, json)
Hash identifier: dkMdTSKx5JEnAfkr5wBUU+zq+rFi91iuXlAm11KF7aU=
Subject key identifier: 8B:18:1A:B3:AE:3C:E2:67:A3:30:7D:65:3C:22:BD:37:B5:B3:F7:62
Authority key identifier: 2C:D1:FF:49:72:5F:63:31:E6:3B:8E:D7:64:48:D7:25:DD:7A:84:DE
Certificate issuer: /CN=2cd1ff49725f6331e63b8ed76448d725dd7a84de
Certificate serial: 01958B4D5FC260989C740DB845ACBEB39F1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNH_SXJfYzHmO47XZEjXJd16hN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft
Manifest number: 1494
Signing time: Wed 12 Mar 2025 17:00:58 +0000
Manifest this update: Wed 12 Mar 2025 17:00:58 +0000
Manifest next update: Thu 13 Mar 2025 17:00:58 +0000
Files and hashes: 1: LNH_SXJfYzHmO47XZEjXJd16hN4.crl (hash: JWl2lbOy8x+T+6f7Z4CO1txRnBgwQP0iG7djdYLZT8g=)
2: Upzwlv30c7TC3O9gxJ1kAAgNiDA.roa (hash: yTJNjXZ4BZhaMYBc9uxx4ckW86PF2pvOMSFidtmg0eA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LNH_SXJfYzHmO47XZEjXJd16hN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 17:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:4d:5f:c2:60:98:9c:74:0d:b8:45:ac:be:b3:9f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd1ff49725f6331e63b8ed76448d725dd7a84de
Validity
Not Before: Mar 12 17:00:58 2025 GMT
Not After : Mar 13 17:00:58 2025 GMT
Subject: CN=8b181ab3ae3ce267a3307d653c22bd37b5b3f762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:51:75:fd:75:f1:33:92:e2:3e:cf:70:6f:e7:
16:6e:49:45:87:7f:94:4b:6a:c4:2c:0c:af:42:1a:
c2:a3:98:9d:3f:99:ae:9a:3f:52:8b:5e:de:24:d6:
86:ac:72:b6:be:5c:0f:93:00:70:2d:51:c9:5a:86:
59:1b:02:f1:5c:65:bc:bc:6c:9a:ba:61:e4:26:77:
dd:0c:c9:e8:c7:b3:8d:b2:d2:b1:9c:f6:de:cd:4e:
d7:ca:17:c4:08:7a:de:8e:ed:0f:08:70:21:f5:25:
a6:39:45:87:fc:8c:f6:ba:12:3f:09:55:1c:2d:e2:
14:33:eb:d7:a6:a9:e8:5a:9b:de:30:3e:5f:12:72:
f6:07:33:84:c2:6e:ba:b6:25:29:67:82:91:ca:7d:
a0:8e:25:c0:fe:c6:25:f0:2e:14:9d:89:b7:cf:47:
e9:21:f4:a3:d8:10:de:82:26:09:43:d0:a2:67:67:
d3:9e:06:bd:b2:f4:ab:02:09:c2:01:38:8d:01:86:
6e:c0:f5:f0:ac:30:8a:f8:4c:59:cd:39:0e:cb:c9:
4a:70:f5:22:16:7a:da:7f:67:95:a6:55:d7:da:a3:
80:ff:f6:02:cb:86:af:d3:8d:79:f7:2e:6b:8d:ff:
c6:8f:90:a6:c3:9a:f7:38:3e:3a:90:fc:6f:4b:46:
c3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:18:1A:B3:AE:3C:E2:67:A3:30:7D:65:3C:22:BD:37:B5:B3:F7:62
X509v3 Authority Key Identifier:
keyid:2C:D1:FF:49:72:5F:63:31:E6:3B:8E:D7:64:48:D7:25:DD:7A:84:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNH_SXJfYzHmO47XZEjXJd16hN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/738188-73ae-4918-bfd7-7788aee1215f/1/LNH_SXJfYzHmO47XZEjXJd16hN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:64:e3:db:b3:ec:e0:d9:7d:ce:93:5d:29:c3:f3:96:f8:63:
c2:bd:d2:2b:a9:66:94:4f:b0:78:15:60:14:ed:59:fe:38:f3:
43:9e:2a:56:2a:48:bb:bb:d7:89:7f:b9:1e:c7:8d:5a:51:59:
c9:87:e4:e9:75:12:48:c4:2a:d5:b2:d5:ef:34:d0:a3:5c:0c:
ac:b8:29:25:fd:af:10:ef:05:fd:37:b3:9d:7f:7a:a5:c2:71:
a5:5e:e9:09:3a:70:52:90:88:a4:c6:e2:11:f5:8c:1f:c9:7d:
52:7d:7d:e5:a2:b2:08:92:87:aa:09:65:ea:23:59:b8:25:1f:
54:f7:77:14:66:a4:9d:0a:09:3f:b1:1f:a4:13:1b:0f:db:d0:
2c:a2:e8:d1:50:57:42:52:b0:28:98:ce:cf:59:e8:45:f7:e6:
32:ac:9b:e5:fa:13:94:34:85:8d:4f:0e:3a:f3:e0:ca:fc:c4:
6a:83:94:8e:84:6c:44:eb:93:1b:31:a1:c6:49:78:72:45:96:
c8:e1:e2:02:16:37:5e:88:e4:5a:a7:e8:25:a1:1b:9d:bb:12:
4f:ee:fe:c5:31:47:dd:69:3b:b4:a3:61:59:78:31:00:99:30:
8f:21:e5:2c:6e:4e:3d:0b:0c:a7:e8:aa:ea:43:06:4c:2f:68:
fb:76:32:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:50 2025 by rpki-client