Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
File: LsEh4VRd8-W7hukYjygl-tdHf3U.mft (raw, json)
Hash identifier: ni+vPzwtKBeOOQ9QSqx39HVra6inyWOjvfysc7T+KyE=
Subject key identifier: 3A:F0:77:E2:C8:10:36:6B:36:5F:F9:DF:85:27:ED:F8:22:76:71:01
Authority key identifier: 2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75
Certificate issuer: /CN=2ec121e1545df3e5bb86e9188f2825fad7477f75
Certificate serial: 01958CCE7277FAF9FE1B2EF95E2E0BE29D46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
Manifest number: 1498
Signing time: Thu 13 Mar 2025 00:01:34 +0000
Manifest this update: Thu 13 Mar 2025 00:01:34 +0000
Manifest next update: Fri 14 Mar 2025 00:01:34 +0000
Files and hashes: 1: 0IG7CMPC-7SDKCTiz8anhD3c0zs.roa (hash: fOnGjT4Xyjjotwa9/pecYw3cI1uzEt3+li8tB/lSTXY=)
2: BU0Pzn4hZS4sQu5v8Q1Qbbhp9vM.roa (hash: 9kbaESAN0/YNybQyxy7LooDJN3A5I92At9aUcKOvy/s=)
3: IwlbmFExD2G5c49HgZqQSHA1wZk.roa (hash: 45pPUt5QNz8dN0ylQGV0BCVZpBwOOv2uaieuY/tEzHc=)
4: JH5Q15rYm3yauoa5O0AtnaEF5T8.roa (hash: P8bh12UacYgaXKXWnxHFtSknccP/NWYvpFtt4o+MFnQ=)
5: L1Jr9Ntwc8rL0VyBMGBPBeMOSbU.roa (hash: 2Po6H5pjnfZQ8LGkU3TaUi4GHx7DH6w6vtm+1KWoyVI=)
6: LsEh4VRd8-W7hukYjygl-tdHf3U.crl (hash: UdCwKjoV9CtbxUrhwWvWTVWPxNL8fPVfS+2y4BqnzWc=)
7: X1X4I6xtC4Tyzz9jxci5NVZVFuk.roa (hash: Y7rSJ5Le7s/lA/Q7YQ3ZJcSkf2udL6S8lMTSgJ0RabQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:ce:72:77:fa:f9:fe:1b:2e:f9:5e:2e:0b:e2:9d:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ec121e1545df3e5bb86e9188f2825fad7477f75
Validity
Not Before: Mar 13 00:01:34 2025 GMT
Not After : Mar 14 00:01:34 2025 GMT
Subject: CN=3af077e2c810366b365ff9df8527edf822767101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cf:60:87:16:12:e7:42:dc:1f:34:92:d0:98:
7e:05:4f:ec:fc:f5:7b:46:e4:ab:a5:fd:b3:04:73:
d6:7c:e8:d8:2c:e9:0f:1d:0a:9b:b9:28:dd:1b:c3:
fc:a3:a5:5b:60:3c:6c:24:75:cd:28:48:9e:15:6c:
50:54:27:f4:7e:a0:57:8e:e2:91:e5:17:af:a1:b3:
e0:66:64:1c:0a:ce:d4:55:ad:ad:9c:9b:8d:31:32:
5c:f5:11:03:38:28:24:a0:82:1b:78:90:56:c6:b1:
b7:cb:fd:05:8d:be:51:c5:17:58:ed:a9:5b:3b:bd:
51:88:65:13:49:14:ad:03:2b:d8:52:40:13:10:ac:
3b:c0:1a:fd:56:20:db:11:85:e1:62:f8:b0:26:1f:
21:c7:fb:24:26:46:41:58:be:8e:a5:e9:2d:30:2f:
2c:71:9b:bf:83:cd:0c:8e:aa:a6:e9:03:9b:87:9f:
df:97:53:77:14:43:da:ab:9c:f8:dc:47:35:2f:cd:
96:f2:df:39:05:18:4a:bc:93:7d:93:08:f4:e7:06:
a1:61:6a:1a:d6:c6:97:bc:29:f6:6e:b1:bc:4e:ec:
61:f8:52:36:0e:7f:ad:96:23:64:06:5f:8d:5c:29:
a9:22:d5:4b:60:60:c2:01:59:3c:1e:5f:96:58:46:
9a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F0:77:E2:C8:10:36:6B:36:5F:F9:DF:85:27:ED:F8:22:76:71:01
X509v3 Authority Key Identifier:
keyid:2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:aa:c2:9b:1d:2f:f4:c8:0a:a8:14:26:39:23:8e:ea:7b:05:
fa:02:81:04:8e:ac:40:0b:ff:c2:f3:9b:66:d9:14:ee:33:ca:
dc:80:34:86:5c:3a:d2:cf:39:82:0d:0b:6b:e5:ba:57:f0:20:
a7:6b:b7:53:65:a6:10:6a:e2:66:a1:ce:a4:ce:8b:2c:c3:3a:
1d:74:33:4f:19:ca:4c:8f:d2:d8:69:9c:9c:5f:91:22:a8:60:
84:73:ec:0e:12:4c:77:52:81:5a:39:f2:f2:d4:46:5a:0c:25:
bd:b4:4d:25:39:88:95:52:21:a1:b6:0d:ef:33:b7:f6:e3:8b:
30:36:28:70:29:ae:97:b3:54:2e:ab:42:5e:f7:d2:ef:24:ea:
80:26:09:fc:2b:00:54:6b:86:e0:12:f1:29:bc:25:7b:74:fc:
90:6d:19:f9:da:a8:96:48:31:06:39:19:63:13:47:e8:63:b4:
4e:9f:79:2a:08:96:4d:49:d5:6c:27:e3:5c:2c:51:65:8e:9f:
f5:37:8e:5d:c0:e8:2c:5f:c8:ca:34:77:b5:be:94:64:63:bc:
58:c6:48:39:c8:39:65:14:e8:33:e4:b8:86:77:0f:3b:29:72:
49:0d:de:b3:4a:5a:5b:0c:df:26:3e:4c:16:27:c8:f5:99:f9:
23:5d:5b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:41 2025 by rpki-client