Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.mft
File: LHwKdxsw0nQoUIDdxC42eYOW8iw.mft (raw, json)
Hash identifier: q008QSvDp1hU95Qa+zAdYvHBsyahVnWdiQHuF8R++Rw=
Subject key identifier: FE:80:2A:1F:FF:15:92:17:E2:F2:EF:C3:96:25:37:AD:0D:9B:83:38
Authority key identifier: 2C:7C:0A:77:1B:30:D2:74:28:50:80:DD:C4:2E:36:79:83:96:F2:2C
Certificate issuer: /CN=2c7c0a771b30d274285080ddc42e36798396f22c
Certificate serial: 01964CA23255302974765B0CB40CEAF18B5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHwKdxsw0nQoUIDdxC42eYOW8iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.mft
Manifest number: 121C
Signing time: Sat 19 Apr 2025 06:00:20 +0000
Manifest this update: Sat 19 Apr 2025 06:00:20 +0000
Manifest next update: Sun 20 Apr 2025 06:00:20 +0000
Files and hashes: 1: LHwKdxsw0nQoUIDdxC42eYOW8iw.crl (hash: xMqh+7uD7CmVdpbl29pJ7Kp7dwmYbTK0BYj8NErfHpg=)
2: _wYBYYAWsBdIPcz67gJjf_cpxBc.roa (hash: WT5EAFrH+ID6hV4wr/zaJ0InnDxoXdrcj+f2kf7QcuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHwKdxsw0nQoUIDdxC42eYOW8iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 06:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:a2:32:55:30:29:74:76:5b:0c:b4:0c:ea:f1:8b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c7c0a771b30d274285080ddc42e36798396f22c
Validity
Not Before: Apr 19 06:00:20 2025 GMT
Not After : Apr 20 06:00:20 2025 GMT
Subject: CN=fe802a1fff159217e2f2efc3962537ad0d9b8338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:87:a6:16:34:ef:cd:7a:92:18:32:d9:a4:ad:
02:3a:52:44:c4:52:67:27:26:34:56:87:5e:2c:e1:
75:df:6e:0e:9b:7b:7e:43:7b:7c:a6:80:17:3a:d2:
cb:27:33:ed:50:89:2a:43:51:14:40:db:28:84:d6:
68:d5:df:6e:73:90:e3:b0:e9:71:3b:33:7a:eb:b0:
cf:ae:30:21:2c:bc:89:42:37:82:e5:12:01:6e:0f:
92:8a:2a:49:9b:20:6c:86:9c:90:2b:4e:0e:94:47:
6d:a0:9f:f6:e7:93:5d:84:ef:4d:63:88:39:83:b6:
d5:eb:a1:ae:10:dd:37:e8:85:49:c7:83:74:78:ba:
e7:ef:4d:5b:f4:96:b6:fc:4a:7a:0f:e4:f5:80:ac:
c6:9b:d1:31:a6:18:21:67:1b:7e:fe:02:8f:01:35:
9b:44:b5:88:42:e4:9c:29:60:17:f4:9d:f2:0f:da:
0b:a3:04:56:0f:1b:e1:e0:f5:54:1e:66:0b:03:16:
6e:c4:9b:09:69:21:06:78:c4:49:e6:4a:27:dc:d0:
99:54:09:e9:5a:1e:af:70:3d:10:54:df:5c:8f:ca:
ed:e2:16:88:92:1b:29:01:6a:d0:85:d5:d6:9e:56:
b7:69:68:12:fb:e6:f1:8c:d0:e9:05:fd:f2:a1:0f:
aa:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:80:2A:1F:FF:15:92:17:E2:F2:EF:C3:96:25:37:AD:0D:9B:83:38
X509v3 Authority Key Identifier:
keyid:2C:7C:0A:77:1B:30:D2:74:28:50:80:DD:C4:2E:36:79:83:96:F2:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHwKdxsw0nQoUIDdxC42eYOW8iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ce:2c:55:92:75:d4:ce:f8:f4:5c:c8:c9:5d:08:fe:68:9e:
a4:29:79:42:33:f7:c3:26:ad:1d:d5:ff:87:70:ee:3c:b4:8d:
19:44:cd:f6:16:ff:f3:5d:10:c1:1d:ba:3a:78:60:99:da:e5:
d9:08:c1:3c:b1:42:25:14:54:08:c1:f0:ab:8a:f5:71:90:b7:
71:be:22:4f:fc:81:47:0f:a0:80:3a:91:ec:5c:ff:6b:a6:96:
2b:45:6c:bf:6e:73:57:1f:54:f9:ec:a8:7b:c4:31:16:ce:3d:
55:9e:0b:78:9d:bf:3a:71:92:a4:d9:cd:ca:51:50:fc:8e:5a:
5d:6c:54:ec:a4:06:2c:05:5a:f7:cf:8e:14:06:70:32:f8:d4:
47:72:0b:ae:be:41:77:f1:eb:8e:35:e5:80:38:36:a8:1d:20:
58:b0:8e:3a:eb:d1:65:e5:95:c4:41:96:6c:a4:61:5f:ea:8f:
cf:6c:f6:93:74:0d:62:9d:2c:c1:ab:b1:3f:de:f7:d8:12:d2:
83:01:5d:d7:d9:4f:56:ad:10:af:e6:90:c2:23:2c:a5:ca:28:
1e:4d:ec:05:88:85:80:6c:7a:8c:35:cb:af:42:a9:82:d7:af:
9f:a8:c6:93:57:ca:ec:5c:e4:4a:8f:28:fd:ac:c5:69:34:1a:
99:0d:73:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:52:56 2025 by rpki-client