Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.mft
File: LHwKdxsw0nQoUIDdxC42eYOW8iw.mft (raw, json)
Hash identifier: ZWzNqI80jKOb6tNOx29g74fCAzGrs8+BHPF7ueWXDnM=
Subject key identifier: 4A:63:28:62:7F:49:17:63:2A:61:50:F3:ED:FB:51:52:DF:DF:70:68
Authority key identifier: 2C:7C:0A:77:1B:30:D2:74:28:50:80:DD:C4:2E:36:79:83:96:F2:2C
Certificate issuer: /CN=2c7c0a771b30d274285080ddc42e36798396f22c
Certificate serial: 0196734219C59B36052BC3788E35D71263E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHwKdxsw0nQoUIDdxC42eYOW8iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.mft
Manifest number: 1230
Signing time: Sat 26 Apr 2025 18:00:33 +0000
Manifest this update: Sat 26 Apr 2025 18:00:33 +0000
Manifest next update: Sun 27 Apr 2025 18:00:33 +0000
Files and hashes: 1: LHwKdxsw0nQoUIDdxC42eYOW8iw.crl (hash: 3b9q+Npu2qd3rAxJKUWk6x7iLLuTnRG4TzSvV4J3s9U=)
2: _wYBYYAWsBdIPcz67gJjf_cpxBc.roa (hash: WT5EAFrH+ID6hV4wr/zaJ0InnDxoXdrcj+f2kf7QcuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHwKdxsw0nQoUIDdxC42eYOW8iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:42:19:c5:9b:36:05:2b:c3:78:8e:35:d7:12:63:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c7c0a771b30d274285080ddc42e36798396f22c
Validity
Not Before: Apr 26 18:00:33 2025 GMT
Not After : Apr 27 18:00:33 2025 GMT
Subject: CN=4a6328627f4917632a6150f3edfb5152dfdf7068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:eb:53:c7:e3:e5:af:36:9e:22:51:9d:df:12:
72:ce:88:e9:ea:86:99:6e:56:32:d5:26:e7:5c:f2:
8f:32:c4:ed:f4:8b:61:35:bc:5c:bc:ec:e9:74:7b:
c4:e2:3c:50:1f:c2:8d:1d:31:8e:15:9c:ba:82:43:
bd:e6:5b:de:f0:e3:6a:6d:46:f1:c3:e1:bb:9b:a9:
0b:90:11:9a:5c:7f:5f:66:59:dc:7b:f8:78:b7:c8:
74:c8:82:b6:9c:cd:b4:c8:10:0b:3f:e6:04:d2:17:
7f:88:6e:84:39:b4:de:10:63:c9:9c:cd:4b:de:94:
4d:b7:2e:a5:17:45:25:26:50:dd:79:cf:8e:8e:da:
fa:62:7c:90:db:59:d9:be:46:05:8b:c7:f7:88:17:
e5:e5:a4:da:55:eb:a8:e1:13:04:73:55:2f:3e:b2:
3b:00:fd:21:4a:7e:a3:18:03:7d:b8:93:da:e8:dc:
7b:fd:cc:6b:93:e2:36:32:cb:f0:c4:b5:54:a6:c2:
47:23:9b:5b:be:0a:7a:84:15:b9:c5:be:48:42:e2:
92:06:5a:97:8a:85:f6:8c:43:54:7d:d8:c5:ac:5a:
cb:18:75:1a:f9:d8:27:88:d4:01:65:03:c5:10:71:
0d:40:3e:ba:b1:94:f4:87:81:6f:d4:3b:17:14:b2:
2f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:63:28:62:7F:49:17:63:2A:61:50:F3:ED:FB:51:52:DF:DF:70:68
X509v3 Authority Key Identifier:
keyid:2C:7C:0A:77:1B:30:D2:74:28:50:80:DD:C4:2E:36:79:83:96:F2:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHwKdxsw0nQoUIDdxC42eYOW8iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:e2:79:ba:b5:b7:47:b3:57:08:bc:58:e4:be:0b:6c:1b:de:
92:75:ed:f8:bf:b3:8a:f3:e3:a0:77:ce:d8:4a:5a:36:61:14:
bc:f8:5f:48:10:cf:9f:fd:07:19:07:10:1c:51:c7:a2:28:46:
0e:0a:73:44:be:99:fa:e2:cf:dc:de:dd:83:73:99:8e:13:eb:
23:d0:09:4d:2c:f9:be:e8:04:f7:5c:86:1e:1e:db:9a:92:1d:
e4:50:07:0e:85:e3:d6:7a:42:a9:2b:04:e1:a0:bd:17:9d:cb:
2f:02:01:d4:64:f7:6a:7f:d7:c9:ab:8e:cb:b5:07:12:c6:58:
48:c2:c3:ec:db:a4:2c:b4:4a:a3:fe:a1:8d:f2:f0:15:a6:15:
e3:03:bc:23:ef:e9:d0:31:e2:2a:ff:12:10:41:a9:eb:9e:92:
0e:62:63:11:41:88:93:99:98:24:45:46:a1:56:22:a4:d0:87:
d7:63:5a:0e:32:05:f8:fa:ea:31:72:45:9e:d9:5d:92:16:f2:
28:69:ab:3c:a0:6f:85:91:57:94:a7:e1:95:ae:31:aa:ee:b2:
ec:5d:b9:43:a1:f2:27:64:29:22:11:f6:47:78:10:0b:8c:5f:
85:73:07:1e:2b:39:5e:bc:d8:ab:52:3f:85:50:8b:90:c3:f3:
8c:e1:43:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZzQhnFmzYFK8N4jjXXEmPmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjN2MwYTc3MWIzMGQyNzQyODUwODBkZGM0MmUzNjc5ODM5
NmYyMmMwHhcNMjUwNDI2MTgwMDMzWhcNMjUwNDI3MTgwMDMzWjAzMTEwLwYDVQQD
Eyg0YTYzMjg2MjdmNDkxNzYzMmE2MTUwZjNlZGZiNTE1MmRmZGY3MDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+tTx+PlrzaeIlGd3xJyzojp6oaZ
blYy1SbnXPKPMsTt9IthNbxcvOzpdHvE4jxQH8KNHTGOFZy6gkO95lve8ONqbUbx
w+G7m6kLkBGaXH9fZlnce/h4t8h0yIK2nM20yBALP+YE0hd/iG6EObTeEGPJnM1L
3pRNty6lF0UlJlDdec+Ojtr6YnyQ21nZvkYFi8f3iBfl5aTaVeuo4RMEc1UvPrI7
AP0hSn6jGAN9uJPa6Nx7/cxrk+I2MsvwxLVUpsJHI5tbvgp6hBW5xb5IQuKSBlqX
ioX2jENUfdjFrFrLGHUa+dgniNQBZQPFEHENQD66sZT0h4Fv1DsXFLIv2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEpjKGJ/SRdjKmFQ8+37UVLf33BoMB8GA1UdIwQY
MBaAFCx8CncbMNJ0KFCA3cQuNnmDlvIsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEh3S2R4c3cwblFvVUlEZHhDNDJlWU9XOGl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9kNWY4MDEtNDQyNi00ZjQ1LThmMjYt
OWNjZGQzYzg3M2E2LzEvTEh3S2R4c3cwblFvVUlEZHhDNDJlWU9XOGl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9kNWY4MDEtNDQyNi00ZjQ1LThmMjYtOWNjZGQzYzg3M2E2
LzEvTEh3S2R4c3cwblFvVUlEZHhDNDJlWU9XOGl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVOJ5urW3
R7NXCLxY5L4LbBveknXt+L+zivPjoHfO2EpaNmEUvPhfSBDPn/0HGQcQHFHHoihG
DgpzRL6Z+uLP3N7dg3OZjhPrI9AJTSz5vugE91yGHh7bmpId5FAHDoXj1npCqSsE
4aC9F53LLwIB1GT3an/XyauOy7UHEsZYSMLD7NukLLRKo/6hjfLwFaYV4wO8I+/p
0DHiKv8SEEGp656SDmJjEUGIk5mYJEVGoVYipNCH12NaDjIF+PrqMXJFntldkhby
KGmrPKBvhZFXlKfhla4xqu6y7F25Q6HyJ2QpIhH2R3gQC4xfhXMHHis5XrzYq1I/
hVCLkMPzjOFDYA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 20:48:20 2025 by rpki-client