Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
File: lhud90XDLfJ98z68_VNvGeE0dP4.mft (raw, json)
Hash identifier: lSioF5LJg4l8Zq7r/e9vh0D1AgspnnT2aLF2bKM6TOY=
Subject key identifier: E4:93:92:E9:BA:30:F5:2D:CC:03:29:C6:3C:30:FC:54:8F:B4:79:EC
Authority key identifier: 96:1B:9D:F7:45:C3:2D:F2:7D:F3:3E:BC:FD:53:6F:19:E1:34:74:FE
Certificate issuer: /CN=961b9df745c32df27df33ebcfd536f19e13474fe
Certificate serial: 01960309BC867E41033E9B783AF8917608F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
Manifest number: 0DED
Signing time: Fri 04 Apr 2025 23:01:31 +0000
Manifest this update: Fri 04 Apr 2025 23:01:31 +0000
Manifest next update: Sat 05 Apr 2025 23:01:31 +0000
Files and hashes: 1: 3LMtRmONGNLMLTZbv-22SKS_G_A.roa (hash: pio5aJGvlnIF4jwmfbABDVK+nPuVznK9IHAqeg47uOI=)
2: 8cYySboA2VaDBExXOdn2f8YI2Iw.roa (hash: XrQTlxZOLpNHFd8Q5dqkWIouJ0kbCEk8FXuJ6lAGYRM=)
3: AW_xXvWFujKuLbVm-SnUT_Zjgxw.roa (hash: nFG/6G17wzGxW8RG1K73vy6beJj5zW9L3o6YXtPyInc=)
4: lhud90XDLfJ98z68_VNvGeE0dP4.crl (hash: GMIecST0B3JlrC+Pr+PZoTXMQ0nmGUf2Fx9urmV8FgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:03:09:bc:86:7e:41:03:3e:9b:78:3a:f8:91:76:08:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961b9df745c32df27df33ebcfd536f19e13474fe
Validity
Not Before: Apr 4 23:01:31 2025 GMT
Not After : Apr 5 23:01:31 2025 GMT
Subject: CN=e49392e9ba30f52dcc0329c63c30fc548fb479ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:f9:c7:72:4a:40:dc:49:67:55:22:1c:3a:c2:
8b:40:c0:36:d5:6b:95:78:04:23:57:ac:36:18:d6:
a7:6c:88:3b:9f:cb:52:b5:bf:14:97:d0:d5:37:d7:
27:a5:9f:f5:9e:8c:9d:e0:95:62:ae:98:6f:7e:6b:
07:26:6c:ee:06:c2:ed:e6:d6:75:f9:d1:47:b0:94:
a9:ff:39:c3:ef:51:ce:a9:88:35:63:9a:0a:2c:70:
75:d3:b4:82:cb:d4:c9:26:dd:e8:85:5a:67:cc:58:
13:b6:2c:50:5a:bf:cb:fc:35:04:af:c6:6c:b7:fa:
76:cb:5a:96:93:d0:d7:72:0e:16:58:ef:b5:9b:2b:
46:e4:e4:9f:f7:53:2d:dc:52:58:7c:04:d9:6f:5a:
f7:37:56:35:f7:78:8f:bb:5e:6d:94:ef:6f:ff:8e:
eb:7c:21:bc:d3:0e:e8:33:f0:b1:bf:7c:d3:18:54:
f8:00:4c:dc:9b:77:58:91:bb:d1:74:27:97:7b:d4:
75:d9:00:f3:2c:ae:7c:8f:b5:bc:a2:9f:13:5f:f5:
9d:fb:8d:d5:8e:ff:8e:1e:28:93:62:b0:0c:b9:8a:
5e:ab:d5:ae:e7:b0:0f:2b:da:2e:b6:a7:91:b0:c0:
13:6a:83:6b:29:91:0e:9a:7a:bf:b0:51:8c:35:27:
71:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:93:92:E9:BA:30:F5:2D:CC:03:29:C6:3C:30:FC:54:8F:B4:79:EC
X509v3 Authority Key Identifier:
keyid:96:1B:9D:F7:45:C3:2D:F2:7D:F3:3E:BC:FD:53:6F:19:E1:34:74:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:5f:8d:af:b5:61:24:f5:ee:a8:02:a0:36:cf:95:73:77:47:
c9:76:f5:26:e7:f1:f9:b5:6b:49:c7:78:ee:03:0a:a1:e3:db:
3a:38:58:f2:f9:46:19:5d:54:81:ea:13:68:31:d8:f6:df:fe:
7f:5a:c1:29:b1:62:93:6d:f9:d2:3a:be:c5:e2:d4:6b:62:51:
c6:23:0a:96:6e:08:89:d0:b0:04:78:a8:fd:4b:2d:c3:df:0e:
a6:8c:40:0f:4f:cd:6e:38:d2:94:85:46:3e:05:46:7d:45:7a:
10:c2:27:1f:c1:e9:3c:a2:3e:71:5b:e1:42:05:30:cd:4c:65:
14:a7:e6:50:ce:26:e4:d7:a5:a7:b6:c4:a3:77:29:25:66:9a:
bb:0f:d4:9d:58:d5:f1:c0:ec:f6:42:dd:5b:8f:12:c6:4e:05:
4c:4b:ee:4a:11:20:e9:11:86:0f:9c:72:a1:f0:2d:02:df:8d:
ad:56:58:a3:60:84:52:63:8d:2a:e5:48:6c:87:84:32:30:3a:
3c:13:8c:b8:a4:7e:0f:6b:4e:ee:69:40:37:8a:ff:54:8c:30:
27:24:6b:bd:57:05:46:48:a4:74:ae:23:0c:25:c3:3c:79:3e:
0e:bb:72:b3:d7:c9:e9:ab:ff:ba:da:ea:bc:4a:e5:1b:6b:53:
00:61:55:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:38:09 2025 by rpki-client