Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft
File: LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft (raw, json)
Hash identifier: 2SOnmzQuxjYX8jkesp+0U3KIXK3BqYSJGr9z5/UhTxA=
Subject key identifier: CA:8E:16:2F:0B:3D:A4:93:F4:82:94:9C:A0:18:2F:B2:F4:11:71:AC
Authority key identifier: 2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1
Certificate issuer: /CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1
Certificate serial: 0196421E70664BFE2B7B3171C5BB84BBA5F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft
Manifest number: 14F7
Signing time: Thu 17 Apr 2025 05:00:13 +0000
Manifest this update: Thu 17 Apr 2025 05:00:13 +0000
Manifest next update: Fri 18 Apr 2025 05:00:13 +0000
Files and hashes: 1: 2pOIOt6X219VN3XtCdkvfoMV1HM.roa (hash: KzERp6VpDMwzGAgg9zdxnmFvkE4p1OFFxh7fS85flGo=)
2: 9XHx-FMLe5KFZj_JCaCK7as9iPY.roa (hash: sCVbuVUuH2ERBnxlvsUX4HPEyoA2qfu7FIegGKtn/gw=)
3: GGgXcPcm_VptZUKYb8GMmNRReBo.roa (hash: j3A5aG9PwaRgDAI8o0WNyR1pWgweLYrS0ZRrTwX+vVc=)
4: LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl (hash: zmXi9KjhGfoaouToV8W7ZSFixUSvRMdgWj4s4LgjNY0=)
5: aH3szR6jhr3LKmXFz58P9TMNq1M.roa (hash: k2DoDeJi//lnLAIw8oEfwg7P4tlKFybQoCOgJClGVQo=)
6: cg9vAN0so6RVwR7-dl1qakm7GSg.roa (hash: LWonZXTxxx8N9GGW8RVI8f+urakLOSBngPnNd8+m61s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 05:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:1e:70:66:4b:fe:2b:7b:31:71:c5:bb:84:bb:a5:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1
Validity
Not Before: Apr 17 05:00:13 2025 GMT
Not After : Apr 18 05:00:13 2025 GMT
Subject: CN=ca8e162f0b3da493f482949ca0182fb2f41171ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:05:47:23:0b:ee:26:54:6d:36:7f:b7:b5:f0:
79:ad:f0:eb:ed:f9:fc:84:31:77:70:fd:44:c2:90:
f5:13:bf:b1:73:96:7d:e8:0e:6d:f2:49:d2:18:08:
2f:5e:3e:f7:64:e3:e7:d9:b4:f0:77:27:58:bb:69:
bf:6c:0c:63:5a:63:59:ef:cc:3b:0a:2e:9a:f9:95:
88:75:7c:4a:60:4d:7e:c8:cb:fa:41:ae:80:ea:e4:
eb:d5:1a:14:9e:9a:bf:3d:3b:62:1d:9e:ac:1d:71:
49:2e:49:60:af:03:87:7b:a4:18:97:4c:08:5a:c6:
16:01:6f:55:1c:9b:60:35:7c:a4:8a:f7:2e:2e:de:
5f:45:68:fb:d3:08:89:5b:59:14:6b:d2:7c:9c:f1:
40:23:55:01:b0:1d:0c:5f:34:be:9f:22:f4:a2:af:
75:2c:49:47:ef:57:2c:e8:97:d6:a1:0d:d0:76:c3:
8e:3c:f7:e3:a0:2a:57:ba:ef:c4:0a:c1:3f:42:e4:
17:ae:b0:10:1c:b3:80:9e:ca:ea:c2:bc:cb:fe:12:
1d:fc:3a:a8:29:7e:b7:f4:72:0f:7a:bc:a6:91:57:
45:5c:0b:e5:4b:b8:47:24:9f:6d:c7:6b:43:8a:25:
5f:36:8c:d6:35:f2:84:25:d6:af:13:b4:b4:af:dc:
20:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:8E:16:2F:0B:3D:A4:93:F4:82:94:9C:A0:18:2F:B2:F4:11:71:AC
X509v3 Authority Key Identifier:
keyid:2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:b0:11:9c:d2:02:ba:59:c9:af:4f:db:44:04:c9:d7:6d:98:
50:0e:4f:43:d9:af:aa:10:e1:bc:d9:6b:53:4c:f2:8f:5d:56:
9e:24:ea:5b:09:48:2a:c3:22:bd:a4:00:d5:3a:66:70:fa:24:
7c:02:a3:e6:97:99:1a:33:9f:f9:61:e0:e5:35:12:f6:1e:bc:
a1:93:88:29:23:2b:f4:9b:bc:5f:5a:43:a9:80:77:6a:22:32:
0f:47:f8:dc:81:5d:7f:34:0f:cb:ed:52:e9:40:6d:dc:c0:7a:
94:c4:69:09:76:48:8c:91:1a:2d:56:ce:f5:d1:e6:e8:6b:08:
61:5d:eb:26:7c:70:3c:dd:67:f1:cf:ce:4c:1d:91:82:41:29:
70:f4:d9:3c:13:03:9d:13:17:3b:95:04:45:5d:3c:d8:1d:4a:
3a:f5:f2:77:d0:4a:c7:6b:ac:7c:ad:9b:13:b8:09:02:8a:49:
ad:31:a5:4d:6b:4d:fd:08:d9:d5:79:c4:8b:14:0c:42:d5:2e:
7b:cb:ab:ac:9c:58:b8:8c:0d:91:31:96:bd:2c:8c:15:b2:99:
e8:27:02:b8:32:a6:fb:45:56:fc:ac:85:a3:74:32:2c:b4:66:
da:78:d0:1d:5d:3f:3a:35:8e:3a:7c:ca:91:a8:31:8c:a7:9c:
ea:00:20:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 12:37:04 2025 by rpki-client