Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
File: LhmWbA6l3zqYf4NlUktRKMun_JA.mft (raw, json)
Hash identifier: H1ck/l3xtqxHJ3i8eSV6+t/muWq+lKCl925eFfmC7Kc=
Subject key identifier: 7A:74:58:B7:67:18:FF:BE:A0:9E:17:76:0C:D2:F5:0D:E3:CD:43:D8
Authority key identifier: 2E:19:96:6C:0E:A5:DF:3A:98:7F:83:65:52:4B:51:28:CB:A7:FC:90
Certificate issuer: /CN=2e19966c0ea5df3a987f8365524b5128cba7fc90
Certificate serial: 0194BAF26CA30276976B68130DBDF429EA5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 06:00:37 +0000
Manifest this update: Fri 31 Jan 2025 06:00:37 +0000
Manifest next update: Sat 01 Feb 2025 06:00:37 +0000
Files and hashes: 1: EB2pKsJqEpEjhB4YuLKeyjkIp9Q.roa (hash: ruDUWZ/Fl5sEVfjlgGOsVStJ3zZdJ/uyG7EZiN/zjl0=)
2: LhmWbA6l3zqYf4NlUktRKMun_JA.crl (hash: 5RhcqMQPlVYgrjHvXEMXYIMny04ifNtsXXgZpV/Wlwg=)
3: iOSgDas4E473RISs54ZCqJXEL1Y.roa (hash: cm025SWzl2vuQDv4U8M4vf0+/0CnnGay76ie0c/nESQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:6c:a3:02:76:97:6b:68:13:0d:bd:f4:29:ea:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e19966c0ea5df3a987f8365524b5128cba7fc90
Validity
Not Before: Jan 31 06:00:37 2025 GMT
Not After : Feb 1 06:00:37 2025 GMT
Subject: CN=7a7458b76718ffbea09e17760cd2f50de3cd43d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:da:9c:6c:56:b2:e0:7d:a9:b1:bd:bb:ad:19:
a5:6e:81:07:29:43:99:ee:72:8d:0c:69:eb:96:23:
a2:64:fe:5e:0e:ef:96:d3:aa:db:ce:fe:d5:df:f5:
1a:f1:00:cc:6c:f9:82:ae:2d:3c:e5:2b:7d:24:06:
74:3d:20:8e:3c:ac:3f:cb:f3:f6:d8:55:62:42:dc:
e6:e2:0c:c2:a9:71:b9:ab:ce:89:33:c5:9b:71:64:
aa:c2:29:17:7c:fa:fa:3d:12:ec:2c:9c:64:be:c7:
24:81:46:24:c2:51:5b:dc:08:06:76:f9:3b:13:4b:
06:d0:cd:e9:59:cb:be:e3:00:08:26:d0:c4:a5:22:
cc:9d:b0:36:ae:a6:75:33:93:a5:e7:64:ee:3b:3e:
92:7d:3d:62:e0:45:99:af:a4:2d:62:6f:a8:cd:e2:
51:9c:7d:e4:bd:43:9f:12:16:73:da:d9:7a:24:c9:
7b:97:3c:d6:8e:8f:fe:c1:e4:6a:5f:8b:5d:e4:d4:
e8:c9:bb:b4:ce:b0:e0:a5:7e:a8:db:a0:a6:9c:fa:
6a:0d:c9:74:ba:78:27:56:a1:8c:3e:49:34:a5:1b:
a1:81:22:3f:26:38:b0:8f:51:39:bb:67:17:9c:62:
16:5c:33:4f:8c:8b:c1:4c:36:b6:51:2f:24:ec:e9:
a9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:74:58:B7:67:18:FF:BE:A0:9E:17:76:0C:D2:F5:0D:E3:CD:43:D8
X509v3 Authority Key Identifier:
keyid:2E:19:96:6C:0E:A5:DF:3A:98:7F:83:65:52:4B:51:28:CB:A7:FC:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c7:7c:13:95:db:c0:b1:f1:7c:78:27:a6:02:7c:b5:95:a8:
a8:12:fc:54:32:45:c8:43:78:cb:c5:03:2e:0e:65:cf:58:c0:
b6:bf:fb:17:28:dc:1a:38:35:a3:c3:7b:e5:89:cd:96:f2:22:
a5:9d:91:83:d4:42:80:73:a2:59:df:f2:19:f6:bc:6a:d2:f1:
5a:a2:68:91:7e:06:31:15:53:19:57:b4:a8:15:f8:fe:2b:b5:
1b:66:37:95:be:85:87:2e:dc:d8:b0:0d:5c:1a:aa:ba:db:e7:
c2:d9:aa:52:0a:87:a2:38:38:81:a3:b2:13:77:4a:3f:68:7e:
ef:6a:a5:99:ad:59:57:db:e6:17:30:0b:60:a3:88:5b:d3:a5:
f8:61:80:3c:97:72:cb:ec:b9:ee:8c:9b:29:82:ba:56:cf:7f:
e7:8c:c9:63:e4:1d:d8:a2:19:ca:ac:d6:ee:65:8b:2e:5b:9a:
0e:81:4f:44:c4:3c:95:69:c3:0b:13:10:7a:dd:cf:c2:49:ae:
81:dd:31:8c:ad:4d:59:85:9d:74:ae:3a:8d:8a:36:50:2c:a1:
68:b4:0f:37:f5:c6:1d:5b:1d:26:21:ab:be:98:96:94:c5:be:
4b:60:75:50:82:d7:6b:91:53:5b:e3:a3:ce:47:3e:d3:98:12:
d7:4e:80:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS68myjAnaXa2gTDb30KepdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMTk5NjZjMGVhNWRmM2E5ODdmODM2NTUyNGI1MTI4Y2Jh
N2ZjOTAwHhcNMjUwMTMxMDYwMDM3WhcNMjUwMjAxMDYwMDM3WjAzMTEwLwYDVQQD
Eyg3YTc0NThiNzY3MThmZmJlYTA5ZTE3NzYwY2QyZjUwZGUzY2Q0M2Q4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutqcbFay4H2psb27rRmlboEHKUOZ
7nKNDGnrliOiZP5eDu+W06rbzv7V3/Ua8QDMbPmCri085St9JAZ0PSCOPKw/y/P2
2FViQtzm4gzCqXG5q86JM8WbcWSqwikXfPr6PRLsLJxkvsckgUYkwlFb3AgGdvk7
E0sG0M3pWcu+4wAIJtDEpSLMnbA2rqZ1M5Ol52TuOz6SfT1i4EWZr6QtYm+ozeJR
nH3kvUOfEhZz2tl6JMl7lzzWjo/+weRqX4td5NToybu0zrDgpX6o26CmnPpqDcl0
ungnVqGMPkk0pRuhgSI/Jjiwj1E5u2cXnGIWXDNPjIvBTDa2US8k7OmpdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHp0WLdnGP++oJ4XdgzS9Q3jzUPYMB8GA1UdIwQY
MBaAFC4ZlmwOpd86mH+DZVJLUSjLp/yQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGhtV2JBNmwzenFZZjRObFVrdFJLTXVuX0pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hNmI2MTMtNjZiZC00MzEyLThmMGMt
MzZiNWRkYTlmYmU4LzEvTGhtV2JBNmwzenFZZjRObFVrdFJLTXVuX0pBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9hNmI2MTMtNjZiZC00MzEyLThmMGMtMzZiNWRkYTlmYmU4
LzEvTGhtV2JBNmwzenFZZjRObFVrdFJLTXVuX0pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOsd8E5Xb
wLHxfHgnpgJ8tZWoqBL8VDJFyEN4y8UDLg5lz1jAtr/7FyjcGjg1o8N75YnNlvIi
pZ2Rg9RCgHOiWd/yGfa8atLxWqJokX4GMRVTGVe0qBX4/iu1G2Y3lb6Fhy7c2LAN
XBqqutvnwtmqUgqHojg4gaOyE3dKP2h+72qlma1ZV9vmFzALYKOIW9Ol+GGAPJdy
y+y57oybKYK6Vs9/54zJY+Qd2KIZyqzW7mWLLluaDoFPRMQ8lWnDCxMQet3Pwkmu
gd0xjK1NWYWddK46jYo2UCyhaLQPN/XGHVsdJiGrvpiWlMW+S2B1UILXa5FTW+Oj
zkc+05gS106A/w==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:45:02 2025 by rpki-client on console-fra.rpki-client.org