Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
File: LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft (raw, json)
Hash identifier: umsOJ32FhhH47CCBTRmxEHW5N9QePovdE6ufprx3WZI=
Subject key identifier: C1:AE:16:3B:F9:EE:AA:E9:04:FF:F7:D7:46:90:C9:45:F5:04:56:91
Authority key identifier: 2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
Certificate issuer: /CN=2e1620890f700f012b0ba60172314e3c85919513
Certificate serial: 0196771F03E87584FFBA6D8A1FFF85F66A33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 12:00:43 +0000
Manifest this update: Sun 27 Apr 2025 12:00:43 +0000
Manifest next update: Mon 28 Apr 2025 12:00:43 +0000
Files and hashes: 1: LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl (hash: fcZa0O5izH9pkf7v37EFfAyauVNf9UBfxhlo4H7vd10=)
2: UEzUyopP5UVcAuE2wQnf6zxgiYA.roa (hash: WO7cSkDAVVG4RqEt/anGaCZXbbFB9XEJIQ0eE+HtSwo=)
3: g1Qj1KnuMxZpXuMaGLTMbgWLRyE.roa (hash: f3NI3BOfnPP1R6nzFdJwSdGpqAlLYVxZtd9uD+YokWY=)
4: x9mgn-wCUD8rT1tTi9C7mbyMAtI.roa (hash: sgZbLcOXGM2ArVU0X49/Qh6v7QEpIvbA1cc08MVfbkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1f:03:e8:75:84:ff:ba:6d:8a:1f:ff:85:f6:6a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1620890f700f012b0ba60172314e3c85919513
Validity
Not Before: Apr 27 12:00:43 2025 GMT
Not After : Apr 28 12:00:43 2025 GMT
Subject: CN=c1ae163bf9eeaae904fff7d74690c945f5045691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e8:f1:ec:c0:b3:f4:a7:25:80:9b:60:57:00:
e0:94:d9:36:ca:52:a4:d4:a2:82:4b:a8:6e:64:b3:
2a:67:44:79:00:2f:1c:c5:ad:a0:44:39:aa:c6:e7:
43:cd:a9:19:14:88:ed:6d:81:92:7e:ae:e3:72:90:
b1:8f:0a:19:19:e2:c8:e6:fd:76:51:01:90:70:12:
c8:24:7f:b9:f0:2a:32:a0:0e:18:70:91:f0:8c:6c:
a0:d1:66:06:8d:c4:1d:bf:c4:eb:1a:22:b7:b2:8c:
f4:1d:dc:48:5f:f2:31:9b:84:9c:24:3e:93:78:04:
69:81:2a:7e:6a:39:ec:cd:ad:8f:c9:f9:9c:1e:9c:
30:fc:da:ac:81:1f:a5:ba:62:04:4f:fc:4e:01:4b:
93:f4:da:fa:c7:d6:86:9a:3d:f5:17:ab:61:5b:3c:
b5:e2:7d:a5:e3:4b:44:98:3f:44:f2:5c:36:b6:3a:
1b:5a:77:d0:ff:27:6d:eb:09:c1:08:8a:8c:d1:b9:
8d:18:94:c3:5f:27:74:76:c8:db:fa:e8:11:89:45:
d4:84:93:2f:6d:33:05:ff:51:06:b5:d4:cf:e8:ac:
b9:62:9a:e7:18:cf:a4:97:ef:77:aa:3d:21:d2:a5:
d2:5b:cf:6d:bc:18:1d:92:42:79:3e:26:64:00:7b:
84:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AE:16:3B:F9:EE:AA:E9:04:FF:F7:D7:46:90:C9:45:F5:04:56:91
X509v3 Authority Key Identifier:
keyid:2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:f4:73:d4:a8:b5:cb:0f:ee:69:15:62:52:7c:48:45:66:81:
4e:19:c0:4a:f1:3b:d1:88:4c:5d:bb:7a:69:47:77:6a:b7:9a:
b7:1c:7a:e4:b8:38:ee:d1:e2:b3:da:59:54:09:26:63:99:e0:
5f:3b:99:9a:83:ba:da:86:1e:da:68:ba:be:a6:0c:5e:7e:96:
77:62:e0:c7:32:07:82:73:69:6a:03:85:e4:df:82:62:c9:36:
8a:04:95:28:b2:af:72:eb:46:17:b5:29:72:02:3b:8f:46:91:
68:d7:0e:b9:8a:26:5c:4b:68:ac:d6:0a:91:51:90:68:34:54:
95:ba:a3:02:5e:5e:23:46:49:cf:3e:d2:98:01:1f:7a:2a:bb:
67:fa:fa:7c:02:ca:4e:ad:da:c4:dc:d0:c9:60:47:1f:83:a7:
56:c2:f5:81:4b:79:ef:f9:31:8b:99:57:cb:32:76:67:46:54:
cd:a5:c6:7a:22:6d:22:a2:97:2c:af:cc:6a:48:be:62:c9:e0:
7f:37:4e:1c:79:73:8f:0b:31:8e:d3:80:72:38:12:79:3e:9d:
d5:f5:9b:10:70:20:39:c2:4c:fc:8b:32:62:e7:93:7e:a4:96:
c0:16:40:a9:0e:ed:d1:77:47:85:ea:3f:56:f7:8c:ed:be:ac:
67:eb:60:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:18:20 2025 by rpki-client