Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
File: lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft (raw, json)
Hash identifier: H8pH1Zyfccy6Cf1ymOZHGMdG1xrJvDWLFFpoknNft8Y=
Subject key identifier: 95:EB:06:F3:FD:24:4B:3D:0A:FD:70:EE:9D:74:69:D0:74:41:5C:CD
Authority key identifier: 96:11:26:4B:B9:E4:E6:FA:99:44:9E:E4:56:C5:D0:53:F3:AD:01:C5
Certificate issuer: /CN=9611264bb9e4e6fa99449ee456c5d053f3ad01c5
Certificate serial: 01964CD934FAA6FD18E71C416B5403ECFA11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
Manifest number: 148B
Signing time: Sat 19 Apr 2025 07:00:25 +0000
Manifest this update: Sat 19 Apr 2025 07:00:25 +0000
Manifest next update: Sun 20 Apr 2025 07:00:25 +0000
Files and hashes: 1: CgkoHi9RsjYjtbh7r--tHry08fQ.roa (hash: 9zVo3gN7fK+I6ZtoEWyk2DDHUy2shoezHq0ybpjSZPI=)
2: lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl (hash: wbOKbVuB5NbA487OxcFp+JBKzxqsCwCvyEMl5y+XPTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:d9:34:fa:a6:fd:18:e7:1c:41:6b:54:03:ec:fa:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9611264bb9e4e6fa99449ee456c5d053f3ad01c5
Validity
Not Before: Apr 19 07:00:25 2025 GMT
Not After : Apr 20 07:00:25 2025 GMT
Subject: CN=95eb06f3fd244b3d0afd70ee9d7469d074415ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0e:0a:8b:6c:a5:18:26:75:05:a4:4e:29:8c:
78:6a:9c:38:1d:2f:a5:9f:43:a7:47:3a:13:ff:f8:
d9:58:20:a6:a1:07:93:8b:23:2b:06:6a:d0:89:d9:
95:13:e2:4d:7c:11:fc:b4:90:63:45:44:14:54:b3:
66:8e:b4:07:ed:43:c2:c8:04:78:8a:6b:c2:a4:9e:
20:82:34:86:b7:bf:82:14:f4:00:be:2c:d9:d0:6f:
61:64:5d:58:99:4f:1a:0b:3b:70:33:9d:46:8e:f7:
41:de:3e:98:5b:6a:87:04:49:03:24:e6:82:97:d4:
62:5e:3b:d9:18:0c:91:a1:af:fb:46:e6:e2:6f:f1:
39:c5:ab:92:1f:11:a4:bf:f4:6c:a7:49:39:b6:fc:
24:45:53:c6:7a:4e:b2:e0:74:00:57:16:98:31:89:
2b:db:63:07:9a:a2:53:8d:bd:ff:bd:52:21:ae:82:
b6:8a:49:3b:59:78:c7:3b:80:87:ee:76:62:82:eb:
d0:9e:0c:56:48:c1:be:9a:de:b9:9d:37:19:a8:81:
63:d3:45:63:5d:17:c6:2a:1b:13:d6:3c:5f:e2:7f:
8a:6f:c9:14:2c:35:d4:fb:1d:4e:d0:cd:bf:b7:17:
c4:ba:a2:21:bd:4f:a6:60:17:a8:22:12:16:e6:c2:
0a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:EB:06:F3:FD:24:4B:3D:0A:FD:70:EE:9D:74:69:D0:74:41:5C:CD
X509v3 Authority Key Identifier:
keyid:96:11:26:4B:B9:E4:E6:FA:99:44:9E:E4:56:C5:D0:53:F3:AD:01:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:61:65:79:51:23:51:ee:01:97:af:cf:e3:e9:0b:3d:de:f0:
ed:e1:27:b4:44:11:8c:a1:d5:9c:1e:13:ff:24:0e:51:ea:b2:
f9:76:94:9e:40:a0:98:87:69:6f:92:0d:4c:de:37:60:bd:7f:
27:ea:f6:9a:2d:46:f9:89:26:17:91:7d:49:52:e8:d9:1f:29:
3d:05:98:ba:c4:bd:fc:f3:12:d9:67:76:e6:97:42:1d:74:d8:
53:b3:13:f2:b0:a3:9c:61:a3:db:d6:1e:ae:b9:a1:9f:de:1d:
62:ae:56:19:d1:d4:1a:80:7e:4c:76:a3:82:bd:76:1b:c9:55:
ae:fb:b4:c8:38:43:a2:d0:33:44:4a:5c:2f:7a:76:0d:49:6b:
06:41:56:42:f4:9d:a0:95:35:da:bc:85:e3:e3:f7:d4:75:89:
fd:0f:11:5a:9d:90:f6:b0:4a:13:5c:3c:88:40:32:1b:4b:3e:
38:e9:e6:69:69:4f:33:86:0c:03:7f:64:f6:62:a4:a8:ab:ae:
36:88:5a:e5:9d:55:48:19:e1:4c:e6:d9:0b:7b:8d:52:1f:de:
69:74:2a:a3:05:18:62:34:a0:80:71:af:b1:ea:fc:b4:73:6f:
77:dc:9d:fd:cc:d4:f0:c6:89:ae:a6:03:6c:e9:f8:ce:2b:83:
69:9c:2d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:01:30 2025 by rpki-client