Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
File: lLHL_0vZcPon_e_Uv2iwLWjSud0.mft (raw, json)
Hash identifier: 5m8vPD/FFTg7BviuEzDqj5Uo/4VN5C1wPhjl283wlA8=
Subject key identifier: 4B:9E:E8:ED:48:90:52:91:9E:2C:5A:22:34:28:FF:D1:70:8A:49:6A
Authority key identifier: 94:B1:CB:FF:4B:D9:70:FA:27:FD:EF:D4:BF:68:B0:2D:68:D2:B9:DD
Certificate issuer: /CN=94b1cbff4bd970fa27fdefd4bf68b02d68d2b9dd
Certificate serial: 0196884982F2164BE38569964BFE1A9B5840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
Manifest number: 14D4
Signing time: Wed 30 Apr 2025 20:00:40 +0000
Manifest this update: Wed 30 Apr 2025 20:00:40 +0000
Manifest next update: Thu 01 May 2025 20:00:40 +0000
Files and hashes: 1: 1-tC0rjZV1jihIqCSqr691PhK46c.roa (hash: OZRRaNXEuVkMUwrYkvaXW28rMwl6+wF4euV4WCbSFTw=)
2: lLHL_0vZcPon_e_Uv2iwLWjSud0.crl (hash: Gu3hwmddxMQG5RsuQJPB/2R/8yvxzqE8KoZ+mc1hVOQ=)
3: wXXOQ9H2b6IyrY2B0lg-XuD_B8I.roa (hash: cgMdX3AAi5D4nzcU3HSWbT0lY1xCqmK5843fX99UXkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 20:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:49:82:f2:16:4b:e3:85:69:96:4b:fe:1a:9b:58:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94b1cbff4bd970fa27fdefd4bf68b02d68d2b9dd
Validity
Not Before: Apr 30 20:00:40 2025 GMT
Not After : May 1 20:00:40 2025 GMT
Subject: CN=4b9ee8ed489052919e2c5a223428ffd1708a496a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0a:c4:dd:d1:79:8c:f7:d0:ae:6c:c8:54:0e:
00:d1:bd:ec:c1:42:18:ef:1b:aa:a7:8c:54:dc:b1:
a4:f8:7a:36:d6:9b:e7:79:42:37:c0:ca:90:49:1f:
9a:0f:2b:7e:40:1e:d2:b6:2b:b7:57:9e:8e:f7:fb:
cb:f4:6b:ac:c9:47:17:d6:65:5a:8d:26:e0:dd:3f:
d4:09:3c:16:a4:0b:70:6f:f1:e3:3f:59:53:0a:b2:
4d:92:1c:c1:47:80:55:97:e2:58:fe:0b:d7:41:a4:
b1:36:91:f9:75:d9:b6:b9:e8:79:e1:61:00:03:d5:
c6:35:6c:dc:41:30:96:ff:38:8d:2a:b7:ef:a9:de:
4d:4e:9b:7d:0b:f4:77:a7:81:e1:4f:df:7b:ef:40:
ee:3c:63:70:cc:80:17:eb:e5:5a:ce:24:16:b1:c6:
6a:fa:41:e5:75:c9:c3:e7:41:d5:24:62:6a:83:3e:
91:0f:5b:7c:ff:5e:ae:0a:d0:44:10:59:e7:04:34:
7b:7b:26:6a:65:ab:6f:f4:58:11:5d:01:1e:93:66:
73:b2:0f:eb:0f:42:7d:0b:66:57:f6:1d:18:44:ad:
89:02:ec:19:5a:4c:ec:a5:34:99:0f:61:c2:44:d4:
5d:7c:6d:43:52:50:9a:8a:56:62:86:78:f5:2e:04:
fc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:9E:E8:ED:48:90:52:91:9E:2C:5A:22:34:28:FF:D1:70:8A:49:6A
X509v3 Authority Key Identifier:
keyid:94:B1:CB:FF:4B:D9:70:FA:27:FD:EF:D4:BF:68:B0:2D:68:D2:B9:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLHL_0vZcPon_e_Uv2iwLWjSud0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/063658-8262-4965-9661-0542427b02b9/1/lLHL_0vZcPon_e_Uv2iwLWjSud0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:fb:3c:85:39:75:17:36:cf:8e:ab:e6:d5:c0:c5:4b:88:0a:
f8:26:28:23:ff:3a:0d:42:72:56:63:b8:88:ae:a4:87:0d:6a:
bc:af:26:53:c8:5a:ff:8c:f1:c5:97:13:c5:f0:a7:62:da:0f:
38:0b:39:40:11:d6:cf:69:9b:40:fd:9e:41:46:dd:7f:90:b8:
87:b2:88:77:27:a2:41:0e:93:86:57:80:55:65:67:d9:99:7c:
4e:66:fe:68:77:00:a9:53:6c:0f:9f:08:f1:57:8c:a5:2e:46:
7e:db:5e:50:d7:7b:1f:b4:e0:f4:56:ef:e5:b1:28:c5:ce:4b:
5d:4a:23:a3:54:d9:bc:0e:8f:61:00:c6:ed:e4:e5:7d:22:fc:
a1:04:88:fc:1c:41:0b:36:bf:3f:db:28:59:7e:68:2c:cc:57:
f3:92:f8:3c:46:73:d1:a8:d3:1a:77:8e:bd:40:52:54:d3:09:
01:6a:93:d9:9a:d6:47:97:03:a8:06:c6:35:0e:aa:ef:a8:c9:
d0:6b:4a:72:56:4d:7b:6d:d5:44:84:50:d7:5d:ea:1f:98:cc:
4d:4f:a0:cb:bf:6a:5d:ba:1b:66:22:cf:df:7d:25:e4:e2:b5:
de:7e:72:36:cd:76:aa:d5:8e:34:1a:4f:fa:69:23:80:ed:2c:
fb:d3:44:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:11:16 2025 by rpki-client