Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft
File: LPHkHOfCQk-d-I65hGTJsIJr6cE.mft (raw, json)
Hash identifier: XuIxH6wGkEoo9Non7xE1EEU6Rk32cFaaK4Cruys38Kk=
Subject key identifier: E0:9B:92:90:7C:75:7F:18:83:F8:45:AC:43:84:F0:77:3E:3B:AB:15
Authority key identifier: 2C:F1:E4:1C:E7:C2:42:4F:9D:F8:8E:B9:84:64:C9:B0:82:6B:E9:C1
Certificate issuer: /CN=2cf1e41ce7c2424f9df88eb98464c9b0826be9c1
Certificate serial: 0194C3877F34D30E2C20FEBDADA174F2BA57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPHkHOfCQk-d-I65hGTJsIJr6cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft
Manifest number: 0DBF
Signing time: Sat 01 Feb 2025 22:00:24 +0000
Manifest this update: Sat 01 Feb 2025 22:00:24 +0000
Manifest next update: Sun 02 Feb 2025 22:00:24 +0000
Files and hashes: 1: 21s8U-775BXGrImXYw5behrvCTg.roa (hash: dw6lhA0ynQrPKMXAZyoEl/NZ/Jca/wYUb0RkllkJszc=)
2: LPHkHOfCQk-d-I65hGTJsIJr6cE.crl (hash: DX0SlECt7WXgaCmqa4b+lxIt0whySu5QjM2w3NgCcxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LPHkHOfCQk-d-I65hGTJsIJr6cE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:7f:34:d3:0e:2c:20:fe:bd:ad:a1:74:f2:ba:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cf1e41ce7c2424f9df88eb98464c9b0826be9c1
Validity
Not Before: Feb 1 22:00:24 2025 GMT
Not After : Feb 2 22:00:24 2025 GMT
Subject: CN=e09b92907c757f1883f845ac4384f0773e3bab15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:92:41:34:ab:a8:95:13:c5:10:71:c6:89:1f:
02:20:60:ed:fb:a8:a3:9b:01:68:62:f0:20:a1:15:
d1:5e:4f:2a:e9:fb:b5:7d:6d:99:be:47:6b:df:a8:
59:eb:70:7c:f1:31:f9:ca:a0:c9:73:79:41:28:91:
e2:ad:1a:80:b8:19:ca:8d:5e:b6:6a:96:81:e8:fd:
62:ae:32:d0:79:15:04:30:9f:a4:72:a3:e1:ab:83:
20:35:72:e1:09:83:06:dd:35:ef:3e:3e:d1:1f:26:
e3:4c:cb:fc:43:72:fb:0d:96:38:9e:1b:a0:e6:f3:
c8:c2:e9:98:26:de:74:44:f7:7c:17:c0:cb:24:f0:
70:47:ab:3b:90:2a:8f:b3:0e:bc:8c:7e:72:d8:f6:
44:9d:a6:45:40:d6:c9:00:75:38:b4:0a:9f:81:17:
4b:af:ca:60:64:1d:ef:19:ac:21:b6:f6:02:3b:8b:
b5:90:cb:96:0f:a6:f2:96:36:56:1e:67:57:a3:d8:
d9:69:5d:39:39:09:36:dc:4a:65:c0:f4:5b:af:2a:
ba:bf:4c:a6:9d:d4:81:76:30:f8:2a:df:c2:0d:69:
51:70:a3:d6:dd:58:0e:9d:b9:fa:16:85:87:cf:02:
02:f3:51:53:21:8f:1e:ef:64:19:1d:31:a5:4b:af:
ed:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:9B:92:90:7C:75:7F:18:83:F8:45:AC:43:84:F0:77:3E:3B:AB:15
X509v3 Authority Key Identifier:
keyid:2C:F1:E4:1C:E7:C2:42:4F:9D:F8:8E:B9:84:64:C9:B0:82:6B:E9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPHkHOfCQk-d-I65hGTJsIJr6cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ff:59:ee:96:53:43:4a:52:19:43:0c:83:37:b1:2c:3f:bc:
1b:19:a7:5b:f5:0d:02:2c:e1:0b:7c:c6:19:7b:78:81:25:70:
58:01:f0:ba:d9:68:b8:47:f3:08:4d:06:18:35:42:02:b7:52:
f2:84:f9:fb:57:97:fd:42:bd:23:3a:a9:2c:49:a0:5d:fd:11:
29:4a:73:2c:0a:82:f1:b6:a6:c2:b3:4b:7e:d3:c7:b7:db:4a:
f5:5b:d7:a7:49:68:01:9a:41:65:48:48:77:8c:a5:a3:5f:d6:
3b:20:95:46:44:8c:58:57:f9:f3:ea:c7:13:23:a3:a3:7c:e1:
3f:72:31:56:3a:6b:f7:63:6c:9a:f6:6a:f3:26:a7:38:be:3b:
d0:a1:f4:c0:c5:08:6f:24:b8:dc:31:3e:b6:ae:4a:09:5c:e6:
ad:6b:59:7a:7e:16:f0:bc:0a:47:6a:43:9e:06:aa:e3:93:3f:
98:79:44:35:5f:0d:82:1c:1a:56:a8:69:39:37:42:5c:c1:f3:
67:85:68:cf:ef:6b:fc:18:07:4f:d8:10:ce:f3:54:e1:16:f3:
ea:46:20:f1:bc:ab:79:02:32:61:9a:55:34:49:ff:e3:9c:0c:
86:f3:a7:da:7a:04:08:5f:f1:8e:5e:c6:c4:e9:6d:89:66:fa:
ba:e5:cb:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDh3800w4sIP69raF08rpXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjZjFlNDFjZTdjMjQyNGY5ZGY4OGViOTg0NjRjOWIwODI2
YmU5YzEwHhcNMjUwMjAxMjIwMDI0WhcNMjUwMjAyMjIwMDI0WjAzMTEwLwYDVQQD
EyhlMDliOTI5MDdjNzU3ZjE4ODNmODQ1YWM0Mzg0ZjA3NzNlM2JhYjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopJBNKuolRPFEHHGiR8CIGDt+6ij
mwFoYvAgoRXRXk8q6fu1fW2Zvkdr36hZ63B88TH5yqDJc3lBKJHirRqAuBnKjV62
apaB6P1irjLQeRUEMJ+kcqPhq4MgNXLhCYMG3TXvPj7RHybjTMv8Q3L7DZY4nhug
5vPIwumYJt50RPd8F8DLJPBwR6s7kCqPsw68jH5y2PZEnaZFQNbJAHU4tAqfgRdL
r8pgZB3vGawhtvYCO4u1kMuWD6byljZWHmdXo9jZaV05OQk23EplwPRbryq6v0ym
ndSBdjD4Kt/CDWlRcKPW3VgOnbn6FoWHzwIC81FTIY8e72QZHTGlS6/tdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOCbkpB8dX8Yg/hFrEOE8Hc+O6sVMB8GA1UdIwQY
MBaAFCzx5BznwkJPnfiOuYRkybCCa+nBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFBIa0hPZkNRay1kLUk2NWhHVEpzSUpyNmNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9lZWIwYzAtOTRmNS00NDFhLThkZDkt
OTdiODljNDdkNTBhLzEvTFBIa0hPZkNRay1kLUk2NWhHVEpzSUpyNmNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9lZWIwYzAtOTRmNS00NDFhLThkZDktOTdiODljNDdkNTBh
LzEvTFBIa0hPZkNRay1kLUk2NWhHVEpzSUpyNmNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiv9Z7pZT
Q0pSGUMMgzexLD+8GxmnW/UNAizhC3zGGXt4gSVwWAHwutlouEfzCE0GGDVCArdS
8oT5+1eX/UK9IzqpLEmgXf0RKUpzLAqC8bamwrNLftPHt9tK9VvXp0loAZpBZUhI
d4ylo1/WOyCVRkSMWFf58+rHEyOjo3zhP3IxVjpr92NsmvZq8yanOL470KH0wMUI
byS43DE+tq5KCVzmrWtZen4W8LwKR2pDngaq45M/mHlENV8NghwaVqhpOTdCXMHz
Z4Voz+9r/BgHT9gQzvNU4Rbz6kYg8byreQIyYZpVNEn/45wMhvOn2noECF/xjl7G
xOltiWb6uuXL6Q==
-----END CERTIFICATE-----
Generated at Sun Feb 2 05:44:37 2025 by rpki-client