Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
File: 0LhJubyQQqFVczGTfkrXFRivYc8.mft (raw, json)
Hash identifier: T3UT6PTqo0EWD7uX1xOzuqw/EL82EY2qWd0V4wxU3Yc=
Subject key identifier: 53:93:31:B5:8C:A9:62:F5:E6:40:A6:5A:43:94:6A:B5:EA:B8:AD:A0
Authority key identifier: D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
Certificate issuer: /CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Certificate serial: 019674F97453BE00BDBF62865C8599A50581
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
Manifest number: 1519
Signing time: Sun 27 Apr 2025 02:00:27 +0000
Manifest this update: Sun 27 Apr 2025 02:00:27 +0000
Manifest next update: Mon 28 Apr 2025 02:00:27 +0000
Files and hashes: 1: 0LhJubyQQqFVczGTfkrXFRivYc8.crl (hash: H4D6WeYvx8IxDd3r8u5V5h1rVwud/dMUJhR9EAvdpQw=)
2: 1-eb9r-ZDRcfXM319Xm17VSwOe2g.roa (hash: gjasaH7lkMMANTCzqIlftWjMy6V6Szhqm9mZMjotXY4=)
3: H0lhlyvHrJBUbelTUSco_7dJSjQ.roa (hash: L/m4BXMaiGyOl/b45Q9sPqlYrX5v9RjW3QD40e1E52s=)
4: eANGg9nd8brobQxQsq-OUws_-A0.roa (hash: lEUfEgigb66go+VnP4oXCP4ZNWVGI/eBV8YRKR1wILc=)
5: fchmYh0XMmIa-Ncr7a7fqAnAY00.roa (hash: ZlxUCwJ7bUmXJFbrCkwij8tMOrG795eaKW3Q7cSegWE=)
6: gbFyA5kAyF3D91TwTtuIgfKJGwg.roa (hash: P+ljc7ooXveuyv4fpj4pataLqZnV6kSVgO14/6L0j+k=)
7: m885sdRVL7vvTw9o72IDISfg7CA.roa (hash: G7PZpicKtRlgQZhGAEn8Nx8P/JZomwfCGr+1m/KgFYQ=)
8: ncGsNjTWkIf28hHD5IvPQUyPHT4.roa (hash: OTRCAQhrm/oTjMPsGhu8HQvEnrVxNQI7H4S1GDdgIBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:f9:74:53:be:00:bd:bf:62:86:5c:85:99:a5:05:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Validity
Not Before: Apr 27 02:00:27 2025 GMT
Not After : Apr 28 02:00:27 2025 GMT
Subject: CN=539331b58ca962f5e640a65a43946ab5eab8ada0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7d:5d:ef:8f:df:a3:6e:66:ca:69:fd:82:d5:
cf:13:f5:0b:23:1c:fa:2b:e9:6b:a7:b5:95:ac:d3:
4e:b0:d3:24:1a:a3:ea:2c:da:57:65:2c:b2:2b:61:
5b:aa:22:5a:83:a6:53:76:13:a5:bf:d2:d5:13:63:
93:14:e1:97:7b:58:67:01:aa:09:a5:fd:3f:b5:3c:
d9:df:19:8b:7f:af:e9:64:62:31:bb:8e:a0:aa:1d:
c7:f3:0c:62:10:bc:ba:bc:0d:dd:af:c8:b6:91:e6:
05:67:2c:0c:c9:4a:d8:f2:21:f6:0f:a0:ea:e5:4a:
e7:b0:13:41:af:1a:9b:bc:e8:b1:cc:13:d0:d3:d6:
3f:22:da:88:31:fc:84:ec:4e:b0:5a:0c:f6:e0:d6:
38:6c:be:5d:95:3e:fe:b4:ae:15:f7:28:b8:84:ba:
b6:9b:77:a9:22:41:21:73:6e:76:23:99:82:7b:db:
75:2e:73:e9:76:df:ea:44:b9:8b:ff:f2:f5:fa:d5:
8d:d1:b7:16:da:d3:d4:5f:84:b3:6e:f1:4d:91:41:
4d:25:8a:96:35:4e:56:21:bf:37:2c:f6:59:66:8f:
b2:4a:99:ac:fa:1e:e2:3d:c4:eb:4d:7d:56:84:3d:
ee:26:10:dd:1f:d9:55:7e:ab:78:c5:fa:6b:43:d7:
14:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:93:31:B5:8C:A9:62:F5:E6:40:A6:5A:43:94:6A:B5:EA:B8:AD:A0
X509v3 Authority Key Identifier:
keyid:D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:0d:48:df:52:3d:8b:82:ce:32:4c:55:00:6b:3e:67:f9:3a:
8e:e7:c6:1e:1c:1f:70:3a:4c:56:b0:7f:2c:98:63:72:a3:ea:
59:b2:6b:8d:5e:02:45:1f:5a:6a:49:9f:a6:96:ce:e4:f1:3c:
d1:7b:22:65:b6:e9:b5:11:9f:ac:da:e1:40:bf:44:95:ee:46:
10:48:41:43:7f:3d:c2:a7:c0:45:20:15:e4:e2:5d:f8:68:9c:
c2:a1:5c:46:21:bf:b3:82:8b:b4:12:41:c1:c4:01:b3:25:96:
b0:34:73:c1:96:99:3c:65:43:91:dc:73:46:99:fc:a3:47:78:
61:4d:72:d0:f7:56:ba:14:a9:2d:fa:b1:78:54:63:e4:3e:57:
f8:6f:98:7b:8f:3b:ce:a8:15:33:6f:21:11:98:4f:ae:d5:eb:
85:a3:84:5b:30:1b:38:be:e2:2c:7c:9c:1c:f2:46:f0:b6:0c:
e2:54:29:da:7a:45:20:88:0f:f8:45:56:fe:10:c6:7d:df:94:
ab:f1:19:72:bb:80:25:c2:df:1c:f5:42:9d:f2:f3:51:a6:79:
9c:1a:d9:31:1e:72:9f:44:ca:b0:f4:9f:5a:85:3e:28:c6:c1:
82:f6:bf:d2:fc:e3:ce:d9:fd:4d:b8:61:ab:20:06:88:63:32:
96:e2:b1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:15:02 2025 by rpki-client