Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
File: lH4-X564CJtcqU845lF8-8WyAGM.mft (raw, json)
Hash identifier: 1GluMOR0tb4xpwaxBTsZ1+B23qyyVLi4tACUXpxaskc=
Subject key identifier: 43:CC:8C:E5:9A:3D:B7:F4:2D:F6:EA:8D:41:73:8F:5F:BF:CF:A6:68
Authority key identifier: 94:7E:3E:5F:9E:B8:08:9B:5C:A9:4F:38:E6:51:7C:FB:C5:B2:00:63
Certificate issuer: /CN=947e3e5f9eb8089b5ca94f38e6517cfbc5b20063
Certificate serial: 019657CB0FDA9A6A5A8BB5EEB874ADF921A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
Manifest number: 038E
Signing time: Mon 21 Apr 2025 10:00:47 +0000
Manifest this update: Mon 21 Apr 2025 10:00:47 +0000
Manifest next update: Tue 22 Apr 2025 10:00:47 +0000
Files and hashes: 1: 8JJmvRAktSEG3OdLUZKBNwR6ws0.roa (hash: TC8WkMj5LqYLotUQsIJXNU0W5IJEuyjKyKXTJdzLmbM=)
2: lH4-X564CJtcqU845lF8-8WyAGM.crl (hash: FDzJw5YNtbkX3T5OM8bEMtMdGz99kuxZcDCnoNEK8dQ=)
3: zozOOHZMPpO8TU7R7OlzFjX6nTU.roa (hash: DO9vuDN/M4q7UhQA8k+ziHqB7tX/m/+CIduSaenQLlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:cb:0f:da:9a:6a:5a:8b:b5:ee:b8:74:ad:f9:21:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947e3e5f9eb8089b5ca94f38e6517cfbc5b20063
Validity
Not Before: Apr 21 10:00:47 2025 GMT
Not After : Apr 22 10:00:47 2025 GMT
Subject: CN=43cc8ce59a3db7f42df6ea8d41738f5fbfcfa668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:10:a0:e9:ee:4e:c8:c8:18:87:8c:ad:a2:21:
2e:44:30:37:81:d5:21:fd:04:0a:77:9b:a6:de:39:
0a:44:a6:6a:3c:70:2d:6c:b0:a0:18:07:6c:a1:f8:
11:96:47:9d:16:ad:93:32:06:db:3a:4b:bc:83:73:
ef:82:1a:f4:90:2b:ad:d8:3a:4b:be:39:e1:49:9b:
f8:b9:34:4d:c4:6c:f6:17:2a:1b:dc:d3:5f:0a:f7:
58:8c:81:0d:65:81:5a:68:8a:44:81:15:3e:85:59:
f0:56:37:58:91:f4:b0:3e:06:8d:15:1b:37:37:37:
df:5d:9b:2c:c6:aa:25:77:e1:1b:0c:0f:27:16:12:
c3:ac:f7:8d:6d:df:c2:4d:5d:b2:1c:b8:d9:12:96:
dd:5f:e6:92:c1:67:de:1a:f1:b0:00:64:99:2c:6e:
44:b4:ac:23:cb:38:7b:f6:6d:12:a1:8d:c2:c6:3a:
8c:57:59:69:74:6f:e8:e1:32:78:c7:f8:46:86:27:
91:de:61:de:4a:78:9a:3b:37:81:34:ad:4f:5e:96:
11:ee:b3:99:74:3c:e0:56:fe:3f:38:70:df:b1:12:
20:30:86:1d:4b:54:77:74:48:0f:7a:06:e3:3f:fd:
e7:e1:6e:34:8f:ba:a0:28:ad:06:69:ac:79:cf:e6:
0e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:CC:8C:E5:9A:3D:B7:F4:2D:F6:EA:8D:41:73:8F:5F:BF:CF:A6:68
X509v3 Authority Key Identifier:
keyid:94:7E:3E:5F:9E:B8:08:9B:5C:A9:4F:38:E6:51:7C:FB:C5:B2:00:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ad:41:b5:99:ea:3e:f6:12:49:43:f5:e6:0b:31:6f:21:64:
ee:b7:aa:44:1e:5f:15:4a:09:13:e3:51:11:14:51:f1:63:67:
d1:6f:5a:c7:51:97:bc:c2:6a:3f:35:a9:31:8c:50:04:f3:3b:
2a:2a:bb:06:82:19:8e:6a:9f:9b:c9:53:78:4f:0a:d1:3f:47:
7f:57:63:ce:dc:bc:18:16:c0:e8:33:df:7a:7a:7c:68:6f:be:
e7:6a:40:2a:86:cc:fe:7b:83:af:56:80:dc:26:76:2e:16:16:
0d:4e:45:3f:f1:31:1f:5f:97:24:a2:88:bc:23:00:ed:ea:69:
b1:ef:f0:3b:25:75:2c:b8:84:1a:87:31:cd:f5:62:6b:ed:ea:
7a:b1:fd:af:59:57:1c:5b:4a:9e:09:ac:2b:dc:11:5e:1e:e0:
29:d8:bc:a2:a6:c5:09:e4:49:ce:68:db:da:f5:be:c4:ee:f5:
74:6d:46:24:95:15:02:55:86:71:11:4a:16:ba:10:0b:31:ff:
48:b9:29:47:90:09:d5:06:7c:d2:23:11:2a:bc:26:5e:0a:65:
07:1e:05:a2:09:7f:6f:87:a4:db:55:e3:fa:5e:ed:19:79:26:
f1:2f:a4:61:b8:55:f7:80:6b:db:e6:c1:57:59:7b:e5:60:6c:
12:85:35:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:16:26 2025 by rpki-client