Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
File: LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft (raw, json)
Hash identifier: dIBTESnkQAdeGPvwAvKu54OMY8Dywek7gV963KuS574=
Subject key identifier: D2:01:A9:93:A3:CB:54:AD:74:F0:DA:A5:E4:B6:A7:2A:7E:7C:64:8B
Authority key identifier: 2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA
Certificate issuer: /CN=2c754ae473d9c154b804b70ed31881e025d926aa
Certificate serial: 01958B842E20471D47AB03B13578D8C1BBFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
Manifest number: 0A71
Signing time: Wed 12 Mar 2025 18:00:50 +0000
Manifest this update: Wed 12 Mar 2025 18:00:50 +0000
Manifest next update: Thu 13 Mar 2025 18:00:50 +0000
Files and hashes: 1: LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl (hash: kEHDURa12XweNxMtFU8/FmKjmms90qhcOOHiZEtmVyk=)
2: RIso09h5--_F82YqfcCEAd3EpSw.roa (hash: dWlymz3qci5T5aLh2Je4Ec71LNxokFg1VFDedEjsW+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 18:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:84:2e:20:47:1d:47:ab:03:b1:35:78:d8:c1:bb:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c754ae473d9c154b804b70ed31881e025d926aa
Validity
Not Before: Mar 12 18:00:50 2025 GMT
Not After : Mar 13 18:00:50 2025 GMT
Subject: CN=d201a993a3cb54ad74f0daa5e4b6a72a7e7c648b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:31:57:cd:97:8f:43:38:ab:6e:0a:ee:9f:d0:
25:30:32:72:0b:73:58:95:a7:0f:82:4c:fc:a6:ea:
64:34:77:02:a0:bb:a4:bc:89:88:3c:c9:c0:01:fb:
0f:f5:8f:fb:c6:a1:c9:19:2e:2b:85:3e:cd:52:9b:
00:5f:d2:ba:11:ad:e1:ad:15:7b:61:74:40:76:12:
82:4d:f2:90:b7:88:60:04:c0:04:43:1e:2f:c8:ec:
9d:23:78:e0:00:c6:e5:e0:9a:64:bb:c5:3d:d9:be:
8c:54:de:28:5c:92:29:98:9e:4c:b3:1e:07:b6:4a:
7a:59:a5:6d:c4:4d:c4:68:4f:ec:5a:d3:ae:9a:ee:
82:73:dc:a6:09:15:d8:e9:00:78:ce:73:0c:0a:fe:
10:16:7f:00:13:79:96:b4:dc:38:a7:b1:06:38:c6:
4a:c6:87:ae:83:58:12:3a:53:ea:3d:de:8b:e0:96:
d1:5e:17:bc:0b:9d:17:53:7a:a5:9d:85:98:0a:7e:
28:ba:0e:d6:fc:73:2c:45:2d:c6:13:70:60:3d:57:
99:09:81:d3:98:f8:08:4b:33:82:38:05:8c:c3:85:
4f:87:7e:ea:b5:b3:79:2d:70:30:56:f4:5a:c6:72:
35:c0:f9:c0:73:d4:b5:09:bc:2e:f0:32:9b:36:7b:
80:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:01:A9:93:A3:CB:54:AD:74:F0:DA:A5:E4:B6:A7:2A:7E:7C:64:8B
X509v3 Authority Key Identifier:
keyid:2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:f4:2e:bf:9b:15:73:5a:b3:34:1c:9b:b7:84:db:3a:d0:e3:
24:2a:03:4b:5d:09:09:3d:1f:75:6c:e9:6c:bb:d1:34:ee:c3:
3d:5f:5f:3e:03:f0:bf:c0:49:08:b6:dc:68:03:05:dc:10:36:
9c:ae:57:c9:3c:9b:7e:1d:d9:0e:76:06:54:51:91:ea:a5:ce:
21:39:80:ee:92:ab:de:6e:46:e5:01:70:73:a7:d3:b4:3a:2d:
7f:c5:cc:2c:6b:8d:48:12:d0:db:c8:c3:52:b5:78:7f:9a:0a:
cc:b3:0c:4b:30:de:99:38:d0:e7:3b:9a:77:6d:fb:bb:c4:ff:
2e:6c:12:1f:b7:e5:29:ce:20:a5:49:0a:23:e7:6d:aa:77:66:
cc:47:c1:5a:77:44:ce:ba:08:95:23:f2:e3:7b:d5:dc:50:9c:
41:2b:bb:2c:2c:bd:85:ab:e8:5c:b0:26:ae:69:72:13:4f:88:
44:b1:82:23:fb:13:f1:05:9e:19:16:c0:04:3e:55:85:d7:a9:
dc:ba:2c:a9:8f:e5:3b:68:f8:36:63:6c:05:21:7c:a8:44:23:
e9:cd:fb:69:9f:7a:b9:3f:60:93:c7:2b:c3:43:bd:94:4b:7b:
9b:ba:ac:a5:db:2a:07:18:a0:c3:47:98:88:26:af:d7:1e:1a:
e2:9c:6b:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWLhC4gRx1HqwOxNXjYwbv9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjNzU0YWU0NzNkOWMxNTRiODA0YjcwZWQzMTg4MWUwMjVk
OTI2YWEwHhcNMjUwMzEyMTgwMDUwWhcNMjUwMzEzMTgwMDUwWjAzMTEwLwYDVQQD
EyhkMjAxYTk5M2EzY2I1NGFkNzRmMGRhYTVlNGI2YTcyYTdlN2M2NDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjFXzZePQzirbgrun9AlMDJyC3NY
lacPgkz8pupkNHcCoLukvImIPMnAAfsP9Y/7xqHJGS4rhT7NUpsAX9K6Ea3hrRV7
YXRAdhKCTfKQt4hgBMAEQx4vyOydI3jgAMbl4Jpku8U92b6MVN4oXJIpmJ5Msx4H
tkp6WaVtxE3EaE/sWtOumu6Cc9ymCRXY6QB4znMMCv4QFn8AE3mWtNw4p7EGOMZK
xoeug1gSOlPqPd6L4JbRXhe8C50XU3qlnYWYCn4oug7W/HMsRS3GE3BgPVeZCYHT
mPgISzOCOAWMw4VPh37qtbN5LXAwVvRaxnI1wPnAc9S1Cbwu8DKbNnuAsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNIBqZOjy1StdPDapeS2pyp+fGSLMB8GA1UdIwQY
MBaAFCx1SuRz2cFUuAS3DtMYgeAl2SaqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEhWSzVIUFp3VlM0QkxjTzB4aUI0Q1haSnFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC80YTA5NDktZGY1OC00MDA1LTk3Njgt
ZmM1MzkzYzU3ODg3LzEvTEhWSzVIUFp3VlM0QkxjTzB4aUI0Q1haSnFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC80YTA5NDktZGY1OC00MDA1LTk3NjgtZmM1MzkzYzU3ODg3
LzEvTEhWSzVIUFp3VlM0QkxjTzB4aUI0Q1haSnFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGfQuv5sV
c1qzNBybt4TbOtDjJCoDS10JCT0fdWzpbLvRNO7DPV9fPgPwv8BJCLbcaAMF3BA2
nK5XyTybfh3ZDnYGVFGR6qXOITmA7pKr3m5G5QFwc6fTtDotf8XMLGuNSBLQ28jD
UrV4f5oKzLMMSzDemTjQ5zuad237u8T/LmwSH7flKc4gpUkKI+dtqndmzEfBWndE
zroIlSPy43vV3FCcQSu7LCy9havoXLAmrmlyE0+IRLGCI/sT8QWeGRbABD5Vhdep
3LosqY/lO2j4NmNsBSF8qEQj6c37aZ96uT9gk8crw0O9lEt7m7qspdsqBxigw0eY
iCav1x4a4pxrrA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:30:22 2025 by rpki-client