Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
File: LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft (raw, json)
Hash identifier: RBGwN8YGV6/OW/8CgrwM9ULIuJhyifjLQELSTJV+LKw=
Subject key identifier: 5A:78:F3:7C:E5:A1:D9:26:5F:00:95:6A:7D:E3:B9:3F:8D:48:8D:CC
Authority key identifier: 2C:72:7D:09:FB:B1:9A:7F:98:5D:75:1A:20:31:1C:1B:AD:4B:07:1F
Certificate issuer: /CN=2c727d09fbb19a7f985d751a20311c1bad4b071f
Certificate serial: 0196748BA13EB40C9AE934AD87006DE4DA7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 00:00:29 +0000
Manifest this update: Sun 27 Apr 2025 00:00:29 +0000
Manifest next update: Mon 28 Apr 2025 00:00:29 +0000
Files and hashes: 1: 9phsu2p4WF8NqnfUkSWWdnt6zzA.roa (hash: f41MILFdl6rcNDj7+ORCxwVOJlnjfxd2bAX97uHKrtw=)
2: LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl (hash: DckGvAbVfNFZ6gQ26DdyrR8GtISTHXtOC3vl8SAzDY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:a1:3e:b4:0c:9a:e9:34:ad:87:00:6d:e4:da:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c727d09fbb19a7f985d751a20311c1bad4b071f
Validity
Not Before: Apr 27 00:00:29 2025 GMT
Not After : Apr 28 00:00:29 2025 GMT
Subject: CN=5a78f37ce5a1d9265f00956a7de3b93f8d488dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:bd:93:ab:b4:66:48:77:01:10:42:1e:62:53:
c6:fb:de:3a:96:8b:ca:c4:a0:ee:15:e4:6c:9f:4c:
ff:22:c1:57:81:2a:d1:5d:1c:6b:dc:45:d1:91:9f:
13:60:3d:61:11:f3:f1:1b:fa:87:3d:03:bf:ae:d1:
d5:97:0f:5c:f8:c2:9d:56:81:29:73:c9:14:ac:f3:
e3:74:dd:0c:b6:36:2f:13:5c:c1:5f:96:bc:bb:71:
06:c7:d0:a8:ef:eb:4a:8b:79:bc:30:62:44:89:d2:
0c:51:55:99:03:28:29:2c:99:5c:09:b7:6d:a0:63:
9b:f2:b1:b2:64:31:c7:21:66:b5:79:57:f7:d0:b3:
29:f9:66:60:bf:93:d1:1c:c2:36:fe:79:f4:95:b9:
f5:74:9f:81:11:75:a4:b9:ad:df:0c:e0:06:ac:6d:
cc:e2:08:f3:94:62:31:6a:d5:62:8c:a7:f3:cc:16:
cd:8b:60:e4:cc:06:9a:e8:22:a6:35:d5:c0:b7:83:
49:7c:2d:ce:01:1a:12:1c:de:b3:3e:2c:61:38:f3:
17:bf:a2:46:a0:23:23:1c:f7:34:d1:42:2e:96:7f:
aa:c5:60:dc:59:3c:90:54:d4:e1:36:68:bf:f6:c1:
50:f1:b8:f6:e8:57:29:a5:91:4d:fa:ba:dd:e1:90:
9c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:78:F3:7C:E5:A1:D9:26:5F:00:95:6A:7D:E3:B9:3F:8D:48:8D:CC
X509v3 Authority Key Identifier:
keyid:2C:72:7D:09:FB:B1:9A:7F:98:5D:75:1A:20:31:1C:1B:AD:4B:07:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:84:d2:17:f9:5b:76:55:40:62:45:5e:6d:9c:f4:77:bd:4e:
64:fd:55:8c:c7:b7:27:e4:18:74:f1:ce:81:af:7a:15:32:e3:
45:5b:0b:41:d8:a3:0e:c8:62:41:20:89:dc:d1:81:10:c4:44:
f6:3d:d9:00:09:b3:71:26:85:59:4f:ab:d0:ae:54:0f:99:85:
28:87:4a:cf:c6:b0:fd:37:63:28:8f:cc:42:e5:51:2a:bb:f0:
d0:4e:10:0b:f8:0e:e9:0b:65:5b:db:fe:07:d9:11:f3:34:ec:
4d:7b:e7:fb:5c:94:2f:21:eb:1b:21:08:27:4d:a8:7e:ce:d4:
d1:89:84:b8:12:f4:9b:dc:5d:ea:12:54:42:84:83:76:ab:06:
f5:51:5c:f2:6c:68:7c:3c:c5:b6:d3:84:bf:ff:9e:e9:a9:e9:
08:99:b7:ff:93:07:57:c8:55:0e:e2:df:b4:9d:c7:0f:e6:cf:
0d:ea:e6:12:35:b1:89:c7:78:42:8a:87:5f:ea:d2:6d:77:55:
a2:7e:29:10:67:aa:5a:97:21:34:37:e2:86:af:da:e6:1a:43:
d7:a1:9b:ee:a5:0f:41:11:60:d0:cc:37:86:a0:3a:18:1a:0e:
37:82:86:af:c2:93:66:88:f4:09:dd:9b:cb:e3:18:5e:a7:17:
c3:f4:c8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:15 2025 by rpki-client