Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft
File: LHXzXSVsxKW4gxm7fku7oynkk0E.mft (raw, json)
Hash identifier: kOM3mpCVsOIcuOW1Y0oMT/KuPrCygV9vJ5AkzL+2H1w=
Subject key identifier: B4:44:64:6C:EA:33:57:AD:CF:27:DE:1F:9B:BE:45:84:DB:AA:0E:A5
Authority key identifier: 2C:75:F3:5D:25:6C:C4:A5:B8:83:19:BB:7E:4B:BB:A3:29:E4:93:41
Certificate issuer: /CN=2c75f35d256cc4a5b88319bb7e4bbba329e49341
Certificate serial: 0196A8E6C62ED535B1D580A00DB26DBE87AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHXzXSVsxKW4gxm7fku7oynkk0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft
Manifest number: 0D40
Signing time: Wed 07 May 2025 04:00:18 +0000
Manifest this update: Wed 07 May 2025 04:00:18 +0000
Manifest next update: Thu 08 May 2025 04:00:18 +0000
Files and hashes: 1: LHXzXSVsxKW4gxm7fku7oynkk0E.crl (hash: aIgcsAlPM4ZiUSzIHgjyVrp/tsoeaET15KA5SCJaZGA=)
2: YkA8Ssik5dMp6e7KGDWmp6DJ7AM.roa (hash: kaPK3T3qFTRqHUlFynSutBS2oYj5+768wNKSaLHwTTo=)
3: l2XBgGbcIMQ-iwqh11S1_yjLWig.roa (hash: nZxnXhBR3pemT3iBrE0kPVvVmqlAyhaBxoPDBmxVBEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHXzXSVsxKW4gxm7fku7oynkk0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:e6:c6:2e:d5:35:b1:d5:80:a0:0d:b2:6d:be:87:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c75f35d256cc4a5b88319bb7e4bbba329e49341
Validity
Not Before: May 7 04:00:18 2025 GMT
Not After : May 8 04:00:18 2025 GMT
Subject: CN=b444646cea3357adcf27de1f9bbe4584dbaa0ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:21:6f:25:2f:ba:4c:19:a5:83:d9:f0:09:58:
9d:43:6e:8e:d0:0b:58:72:40:2b:da:14:e3:cb:d6:
53:e8:6f:f4:b6:55:94:42:ab:6f:8c:1a:cc:ff:3f:
5b:48:91:d0:f4:91:52:4c:40:70:35:9e:cf:a9:ee:
26:b2:fc:9b:bb:37:90:e2:33:74:b7:65:24:67:84:
4b:1b:d3:e4:64:fc:13:9c:c0:de:68:f8:b9:ed:b4:
28:a0:60:ac:18:99:65:da:aa:3b:be:57:99:1b:34:
f5:58:67:b6:54:64:af:5e:ff:ba:f2:79:58:5a:cf:
d4:0f:9b:5b:25:6c:5a:5e:7e:3a:29:02:82:53:f2:
36:1a:71:27:a0:ac:9d:9f:33:53:b0:ee:1b:3d:70:
a0:c6:72:01:6f:b9:3d:a7:41:44:c4:4a:9c:22:4b:
d3:0f:31:a3:67:49:8f:20:7d:1a:e3:50:7e:1e:15:
17:ac:9e:56:a2:a8:be:87:d6:f7:2f:29:27:5e:2f:
e7:ed:ea:58:9f:a4:4a:ec:91:0f:a6:ae:03:d6:77:
cb:b0:fd:3f:77:0a:64:a8:a3:cf:09:d1:ff:3c:16:
25:17:0f:71:a5:a9:e8:6f:c1:00:b5:66:30:06:86:
43:d2:80:f7:85:5f:cc:21:bc:94:a1:f2:9d:10:10:
2f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:44:64:6C:EA:33:57:AD:CF:27:DE:1F:9B:BE:45:84:DB:AA:0E:A5
X509v3 Authority Key Identifier:
keyid:2C:75:F3:5D:25:6C:C4:A5:B8:83:19:BB:7E:4B:BB:A3:29:E4:93:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHXzXSVsxKW4gxm7fku7oynkk0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:2f:0b:61:16:8d:e0:fe:a0:30:61:a5:bf:32:72:d0:50:3c:
4e:71:af:2f:e4:ba:af:82:bf:63:a6:d7:92:4f:0a:8f:f2:a6:
ec:8a:78:65:50:f7:11:8a:86:21:8b:9e:0a:49:23:cb:e1:ce:
58:59:a2:98:e1:b3:f3:56:5f:98:da:58:40:0b:23:18:d6:1d:
1a:b7:33:2f:e2:fc:8d:ad:d4:27:c6:ee:3a:2e:b6:e4:ae:53:
e1:8c:b3:2b:e1:f1:7c:3f:59:d6:f7:89:b2:e6:90:de:0d:90:
8b:0d:d6:ea:8d:dc:43:87:c0:f3:51:04:79:34:9a:f5:d6:18:
22:15:d2:e4:28:54:bd:1c:65:08:54:4e:58:e2:0c:77:f5:55:
46:9a:ae:51:16:13:e4:49:3d:ae:b5:0b:6c:25:2f:e9:68:3a:
38:63:59:35:d5:fc:c5:89:63:be:04:7f:33:9a:a6:ae:d6:10:
5e:58:6e:0b:3a:51:82:f6:06:ad:9d:37:a8:b9:3b:f1:cc:aa:
95:ef:2e:06:65:5b:fd:6a:0b:6f:a5:13:27:9b:ba:c5:18:16:
13:42:11:05:13:3d:1c:8e:8f:6e:c7:d5:b6:1a:eb:e1:36:92:
69:88:37:43:31:e8:95:9c:ab:ad:be:26:fb:e3:45:f2:15:a1:
a3:a4:d6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 06:03:08 2025 by rpki-client