Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
File: LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft (raw, json)
Hash identifier: EsUfUoobKxfl4zlMnMlXBGPjPH8U03OwLcpfOP/cVLw=
Subject key identifier: A3:6B:A4:86:B9:49:0D:8A:0A:6B:5B:D2:CF:BE:2A:DC:2B:89:10:DB
Authority key identifier: 2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA
Certificate issuer: /CN=2c754ae473d9c154b804b70ed31881e025d926aa
Certificate serial: 01964AB41C253617DB85BAE97D75D5D74DDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
Manifest number: 0AD4
Signing time: Fri 18 Apr 2025 21:00:39 +0000
Manifest this update: Fri 18 Apr 2025 21:00:39 +0000
Manifest next update: Sat 19 Apr 2025 21:00:39 +0000
Files and hashes: 1: LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl (hash: 3z2jyzDJtVgHo6wSFyJM2Q2ahcQnwxH2U9zuHE6uEhY=)
2: RIso09h5--_F82YqfcCEAd3EpSw.roa (hash: dWlymz3qci5T5aLh2Je4Ec71LNxokFg1VFDedEjsW+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 21:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:b4:1c:25:36:17:db:85:ba:e9:7d:75:d5:d7:4d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c754ae473d9c154b804b70ed31881e025d926aa
Validity
Not Before: Apr 18 21:00:39 2025 GMT
Not After : Apr 19 21:00:39 2025 GMT
Subject: CN=a36ba486b9490d8a0a6b5bd2cfbe2adc2b8910db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2f:66:cf:00:19:03:64:21:f2:1e:67:fb:35:
79:de:cf:36:d7:a0:a5:21:25:eb:58:c2:a3:8d:dc:
33:b4:75:c1:4a:fa:0d:de:ab:fe:32:d3:80:45:9e:
d9:28:dd:51:96:6d:b6:dc:b4:8d:a3:48:40:87:83:
8f:22:1a:92:b4:3e:57:ac:5d:dc:9d:22:c8:7d:87:
53:24:33:82:59:7f:cb:0d:f2:7f:ca:d8:4f:f6:84:
0d:d4:73:5b:32:05:94:38:0a:a2:72:4d:a7:55:1c:
a8:69:2a:40:14:4f:6f:40:93:6e:f4:f5:f0:25:e2:
6f:54:6a:01:42:31:35:ee:3f:c6:90:79:6a:9a:4d:
12:1b:76:89:2b:7e:59:7c:dd:24:52:1c:c8:df:90:
19:e2:3c:e1:e7:b1:92:c6:58:e7:5f:34:f0:c2:51:
e8:42:f4:5e:3d:d0:69:3d:2b:3e:69:cf:0d:48:64:
4d:63:1d:91:96:8a:d2:bc:c3:9d:35:7f:ba:5b:ac:
21:e6:5d:d6:39:6b:4c:c5:3b:b0:c6:1b:79:54:60:
19:6b:da:18:89:9b:59:15:97:a1:f9:56:8b:74:68:
96:fa:9b:77:71:fb:12:f6:3b:5f:a1:ad:29:0d:81:
b3:06:f5:cd:aa:a8:ca:04:1b:fc:9e:30:9b:d2:aa:
d7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:6B:A4:86:B9:49:0D:8A:0A:6B:5B:D2:CF:BE:2A:DC:2B:89:10:DB
X509v3 Authority Key Identifier:
keyid:2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:de:c9:83:85:c5:d5:39:a6:3a:d7:48:2b:1d:1c:52:a5:74:
b1:4d:b6:7b:ec:b6:50:23:97:eb:f7:55:bd:91:3c:c6:06:39:
ff:23:b8:5f:38:a3:fe:cc:03:64:04:eb:4d:e7:9e:4b:06:e0:
e1:a0:0d:8c:03:d4:4d:83:f7:b0:cb:85:fd:38:96:10:71:9c:
cb:cf:2b:4e:5c:e5:78:0d:43:c2:42:9b:a8:0d:dd:d0:e3:da:
f2:e4:7f:4c:f8:6e:06:ca:da:61:8c:2d:b6:16:0a:16:97:be:
9b:b8:f8:c8:d6:05:be:95:c9:19:3f:7c:b4:9a:89:b0:33:7b:
18:db:97:48:e6:75:7e:86:83:37:45:8f:50:19:d2:3a:ee:9a:
a4:28:e8:c0:19:f1:fd:e5:aa:0a:0e:79:70:0b:9a:9f:39:e1:
76:ee:5d:79:cf:08:d1:d2:62:4d:1f:41:e1:93:5a:3a:2b:1a:
fe:81:01:34:15:16:bd:06:e0:9e:5e:e6:ca:63:07:02:1e:ed:
85:06:7b:79:ee:25:89:67:81:7f:23:6e:7e:75:0f:a2:b6:05:
41:ff:71:e4:31:58:76:bc:55:a6:c8:93:fa:7c:d3:97:09:65:
85:7b:98:7d:69:ca:21:7c:50:62:3c:b7:c7:72:a3:65:ac:7c:
52:b0:d5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:22:07 2025 by rpki-client