Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
File: lUoq7ghhdLAScvrnea1DHrCSrrc.mft (raw, json)
Hash identifier: lPka9tave56vfTDhpLLUrxR4gUN3u8M0Z4gsEm5w0a8=
Subject key identifier: 91:4F:D5:2C:64:F2:25:FA:22:AC:B6:1F:DA:6E:10:18:F4:F5:EC:81
Authority key identifier: 95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
Certificate issuer: /CN=954a2aee086174b01272fae779ad431eb092aeb7
Certificate serial: 019645FB7E142B0D435D3A941DFBB60EC344
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
Manifest number: 14FF
Signing time: Thu 17 Apr 2025 23:00:31 +0000
Manifest this update: Thu 17 Apr 2025 23:00:31 +0000
Manifest next update: Fri 18 Apr 2025 23:00:31 +0000
Files and hashes: 1: 6z0Q8mDUMTUFPn8NEmiVcMraCdw.roa (hash: fkp8K1gu61varmdzOzYMZH6d4Wsqa3Y47Q5J8kmYv1w=)
2: 7sdmE5F3pe9bAPKXf0f9cnjhnG0.roa (hash: fYhVRjTbda7iEUSislvjMDJFaxgfGZj3hsK3i//5Xak=)
3: H3J9vQn6K2WpcdcY5HgOFWtNqro.roa (hash: xKCbCFvdaEaZUoBRTwlz8wWkQD7E1NB3Xk+GOW8NOkg=)
4: SHnk_yFs5TSkbtqQ5cCS3qWVobY.roa (hash: Ajdz5jpsdOUtu+sq17fM1dWOMUvOtdvwwcm7jylQXUs=)
5: XM5CbKTTxKcej30VMBJNJ0Fqfyk.roa (hash: CFUQDHC9f19rcnj4bn1rpO47Eij7J9ivJ2f3k7x1qdw=)
6: lUoq7ghhdLAScvrnea1DHrCSrrc.crl (hash: 4TTFxcJhccbkwffLgSeO0hDh6mnCw2hxGdSgdjkYBg4=)
7: moYZTBKvPSG4btrjulSkg5IFyz0.roa (hash: 6aUdQOfwMXy22wY7pvBt6ynhj6U7FZPNFhYHyrILLNI=)
8: zQSqcApOIlR6_yHJBYuZ2ciPt3Q.roa (hash: 5DPAi2kks5u9Bus3Asxn5EjHBrdWHv0pv/j5caKoCFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:fb:7e:14:2b:0d:43:5d:3a:94:1d:fb:b6:0e:c3:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954a2aee086174b01272fae779ad431eb092aeb7
Validity
Not Before: Apr 17 23:00:31 2025 GMT
Not After : Apr 18 23:00:31 2025 GMT
Subject: CN=914fd52c64f225fa22acb61fda6e1018f4f5ec81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4c:64:49:b3:8e:57:cb:8f:f3:a6:ee:0e:ee:
ca:59:61:c8:95:8b:07:89:ec:e2:e1:dd:64:2a:80:
ea:48:ae:cb:3c:bc:8d:de:af:f2:30:f8:e6:84:ab:
c9:e8:5f:0e:4f:12:b4:7f:f1:4a:f7:f3:e4:f9:b9:
cb:d6:08:e5:e4:56:41:bf:61:0b:4a:87:30:0d:e4:
10:52:bd:ff:79:8e:c7:ca:e7:83:0a:1f:d6:5e:e9:
32:59:da:c9:26:1a:f7:ad:e1:82:08:b7:db:6b:30:
9e:0d:5d:10:86:a8:00:df:e5:df:15:30:ba:1f:b3:
8a:7a:5d:e8:e3:ea:7a:60:9e:60:44:23:1d:41:a5:
c9:75:13:e5:57:7e:f8:b7:41:0f:ef:74:f7:de:07:
df:d5:c0:3c:49:19:28:a9:f3:00:24:b3:7f:3d:45:
a7:3c:f7:89:c0:83:f3:54:0e:c5:61:ad:9b:ac:56:
8c:c9:90:b6:09:84:84:2e:c1:cc:eb:ce:27:56:99:
e1:6c:6e:30:9a:17:f6:7e:92:ab:62:9d:de:0c:c7:
d0:87:cc:49:b1:39:2d:86:7f:06:f1:96:f9:1a:04:
bf:5d:a0:2d:03:22:de:1e:3b:69:5a:5a:75:ae:77:
4a:b9:9a:8a:0c:10:b8:b0:e1:98:95:82:58:5a:f7:
3b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:4F:D5:2C:64:F2:25:FA:22:AC:B6:1F:DA:6E:10:18:F4:F5:EC:81
X509v3 Authority Key Identifier:
keyid:95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e9:79:83:ca:2a:97:b7:14:42:4d:1a:ba:60:89:c7:04:87:
ba:75:a1:30:39:02:96:62:2b:97:95:3b:6e:f7:7b:2f:65:da:
53:27:5c:96:77:03:66:c8:dc:ed:6b:a8:0d:82:ad:c3:0d:9a:
b7:96:3e:58:d0:d0:03:5f:dd:cd:d9:b3:cf:73:a3:5e:ae:26:
16:5e:4c:28:e8:de:50:cb:4d:72:d9:3a:34:90:c3:82:9e:44:
8d:4c:dc:bf:e4:69:e6:20:04:f4:99:2d:98:ed:5f:a7:b5:a9:
53:16:50:32:40:31:2d:25:9f:45:5c:b2:74:1d:39:e9:3e:58:
05:5a:f2:7e:6c:cf:3f:f7:86:c8:4f:bf:a0:24:a5:ae:af:91:
71:73:68:46:d9:fc:b4:95:d1:90:ee:4a:6e:6d:2a:64:1b:8c:
c7:13:68:05:8e:05:13:55:26:a3:54:38:85:6d:82:b0:11:03:
05:25:b3:b2:b6:2b:ef:fb:82:bf:c0:a7:66:c6:82:37:65:6c:
e8:ec:df:06:52:6c:be:8f:ac:b6:f2:cf:af:5d:f3:73:64:93:
08:d9:1a:b0:b1:67:d9:2a:51:00:91:e4:2e:5d:b2:55:43:9a:
70:f6:80:45:f8:19:c6:c3:5a:09:19:17:a1:64:3c:f3:1b:49:
38:be:d0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:37:45 2025 by rpki-client