Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4edd8b-3cab-453b-b376-d2c968b0fedc/1/LhBSUuEMtSELqyYdm8MiDKb7z3M.mft
File: LhBSUuEMtSELqyYdm8MiDKb7z3M.mft (raw, json)
Hash identifier: /+yMlRkkbTYJtz0qdB92sATwWW+XXtvKuAtMXi5p144=
Subject key identifier: 90:23:AF:3A:7F:76:1C:34:E0:2D:8A:87:67:53:08:23:F1:48:FE:53
Authority key identifier: 2E:10:52:52:E1:0C:B5:21:0B:AB:26:1D:9B:C3:22:0C:A6:FB:CF:73
Certificate issuer: /CN=2e105252e10cb5210bab261d9bc3220ca6fbcf73
Certificate serial: 01951210BFF6EE608566FE07B3D9DA38E00E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhBSUuEMtSELqyYdm8MiDKb7z3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4edd8b-3cab-453b-b376-d2c968b0fedc/1/LhBSUuEMtSELqyYdm8MiDKb7z3M.mft
Manifest number: 13E0
Signing time: Mon 17 Feb 2025 04:00:42 +0000
Manifest this update: Mon 17 Feb 2025 04:00:42 +0000
Manifest next update: Tue 18 Feb 2025 04:00:42 +0000
Files and hashes: 1: LhBSUuEMtSELqyYdm8MiDKb7z3M.crl (hash: 9etl7NHW0XcoDGvdRIv7E+hszXVN5vNKx8XG8+BrI6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4edd8b-3cab-453b-b376-d2c968b0fedc/1/LhBSUuEMtSELqyYdm8MiDKb7z3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/4edd8b-3cab-453b-b376-d2c968b0fedc/1/LhBSUuEMtSELqyYdm8MiDKb7z3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhBSUuEMtSELqyYdm8MiDKb7z3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:bf:f6:ee:60:85:66:fe:07:b3:d9:da:38:e0:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e105252e10cb5210bab261d9bc3220ca6fbcf73
Validity
Not Before: Feb 17 04:00:42 2025 GMT
Not After : Feb 18 04:00:42 2025 GMT
Subject: CN=9023af3a7f761c34e02d8a8767530823f148fe53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:9b:6b:39:9d:99:5c:7a:3d:3f:30:a3:39:2e:
54:69:82:32:e8:e1:b5:1e:d6:11:32:d3:da:4f:12:
3b:41:c1:86:23:73:b0:91:09:b3:e9:7f:81:46:d9:
fc:39:a8:ff:f4:3c:8a:63:30:8c:a8:ce:bf:24:35:
e1:fc:a2:3b:3d:3a:88:10:38:78:d3:42:2d:43:cd:
ad:eb:df:02:63:6c:ba:99:4e:13:b1:92:13:49:e8:
05:e0:90:3f:a3:4a:e6:49:54:b4:8d:ee:46:9c:c1:
db:69:77:9c:aa:78:0a:92:94:02:4a:d9:ee:f4:1b:
d4:a7:3a:1c:83:01:53:eb:07:ce:ae:07:1a:55:7e:
d6:6f:22:ef:05:0e:77:3d:1d:16:30:19:89:c5:8b:
d7:e3:a8:37:61:b1:5f:f1:8e:83:d5:2f:fc:98:22:
7f:75:b6:ec:ed:33:04:d8:8e:1f:a1:fd:f5:fe:b7:
2c:9a:54:84:12:0b:05:5a:f6:5e:09:d9:6a:13:cb:
eb:fd:4b:62:d0:8d:7f:26:a6:dc:30:48:7a:25:31:
8d:57:03:44:bc:71:ff:10:0b:f3:5f:26:1f:81:09:
0c:c4:5e:c5:aa:3e:cd:c2:c9:e2:2c:38:bc:b3:b4:
15:80:88:a7:53:5c:5e:07:b8:67:7d:0b:02:10:3a:
1b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:23:AF:3A:7F:76:1C:34:E0:2D:8A:87:67:53:08:23:F1:48:FE:53
X509v3 Authority Key Identifier:
keyid:2E:10:52:52:E1:0C:B5:21:0B:AB:26:1D:9B:C3:22:0C:A6:FB:CF:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhBSUuEMtSELqyYdm8MiDKb7z3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4edd8b-3cab-453b-b376-d2c968b0fedc/1/LhBSUuEMtSELqyYdm8MiDKb7z3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4edd8b-3cab-453b-b376-d2c968b0fedc/1/LhBSUuEMtSELqyYdm8MiDKb7z3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:3c:ac:bf:bd:e9:88:23:50:6b:db:f7:d8:8f:14:1d:da:64:
33:a8:01:ff:68:f3:e4:91:44:45:1e:d0:b2:0a:60:fb:0e:55:
43:77:ae:35:35:28:5f:da:12:8a:f5:ca:44:68:f5:61:52:c8:
8d:fb:84:61:7c:f1:04:d0:59:84:47:d1:f6:7b:3b:5a:b8:ad:
93:5c:da:b2:50:8a:dc:13:c0:2f:07:22:12:e2:7c:cb:87:23:
97:d4:7f:c2:9d:58:85:24:0f:4e:d1:86:44:5c:29:d1:c4:c9:
01:6f:7c:b4:fe:6f:5d:22:fe:c6:ee:cb:7a:3d:5f:44:f8:d1:
7d:e0:f1:27:13:f6:5b:e4:d5:49:39:ef:df:5e:60:31:ce:91:
8c:6b:ed:b1:f2:f1:4f:cd:5a:d6:92:f7:52:fe:bb:1f:91:ee:
3b:13:fb:19:87:9a:e7:31:94:e9:f3:91:e7:18:bd:d1:4f:69:
d7:c7:57:db:62:25:6c:cc:8a:37:93:7c:6e:17:35:ad:ef:db:
ff:3f:ed:62:18:63:a6:40:6d:54:b7:68:43:bd:3b:a3:5b:c6:
d6:66:09:17:8f:07:5e:19:3e:25:e6:68:b5:7a:c0:07:75:d9:
a4:85:1d:4e:98:1b:af:38:c0:6f:36:27:5b:3b:82:41:be:b3:
81:2e:c1:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSEL/27mCFZv4Hs9naOOAOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMTA1MjUyZTEwY2I1MjEwYmFiMjYxZDliYzMyMjBjYTZm
YmNmNzMwHhcNMjUwMjE3MDQwMDQyWhcNMjUwMjE4MDQwMDQyWjAzMTEwLwYDVQQD
Eyg5MDIzYWYzYTdmNzYxYzM0ZTAyZDhhODc2NzUzMDgyM2YxNDhmZTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ZtrOZ2ZXHo9PzCjOS5UaYIy6OG1
HtYRMtPaTxI7QcGGI3OwkQmz6X+BRtn8Oaj/9DyKYzCMqM6/JDXh/KI7PTqIEDh4
00ItQ82t698CY2y6mU4TsZITSegF4JA/o0rmSVS0je5GnMHbaXecqngKkpQCStnu
9BvUpzocgwFT6wfOrgcaVX7WbyLvBQ53PR0WMBmJxYvX46g3YbFf8Y6D1S/8mCJ/
dbbs7TME2I4fof31/rcsmlSEEgsFWvZeCdlqE8vr/Uti0I1/JqbcMEh6JTGNVwNE
vHH/EAvzXyYfgQkMxF7Fqj7NwsniLDi8s7QVgIinU1xeB7hnfQsCEDobfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJAjrzp/dhw04C2Kh2dTCCPxSP5TMB8GA1UdIwQY
MBaAFC4QUlLhDLUhC6smHZvDIgym+89zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGhCU1V1RU10U0VMcXlZZG04TWlES2I3ejNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80ZWRkOGItM2NhYi00NTNiLWIzNzYt
ZDJjOTY4YjBmZWRjLzEvTGhCU1V1RU10U0VMcXlZZG04TWlES2I3ejNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80ZWRkOGItM2NhYi00NTNiLWIzNzYtZDJjOTY4YjBmZWRj
LzEvTGhCU1V1RU10U0VMcXlZZG04TWlES2I3ejNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXTysv73p
iCNQa9v32I8UHdpkM6gB/2jz5JFERR7Qsgpg+w5VQ3euNTUoX9oSivXKRGj1YVLI
jfuEYXzxBNBZhEfR9ns7Writk1zaslCK3BPALwciEuJ8y4cjl9R/wp1YhSQPTtGG
RFwp0cTJAW98tP5vXSL+xu7Lej1fRPjRfeDxJxP2W+TVSTnv315gMc6RjGvtsfLx
T81a1pL3Uv67H5HuOxP7GYea5zGU6fOR5xi90U9p18dX22IlbMyKN5N8bhc1re/b
/z/tYhhjpkBtVLdoQ707o1vG1mYJF48HXhk+JeZotXrAB3XZpIUdTpgbrzjAbzYn
WzuCQb6zgS7Bjw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:14 2025 by rpki-client