Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
File: LhmWbA6l3zqYf4NlUktRKMun_JA.mft (raw, json)
Hash identifier: fSKd7srnWU5iczZ85rEI40gKhwTpd27s6qDFTwEOUOo=
Subject key identifier: E3:54:79:69:D1:3B:E3:DC:88:7B:04:6F:75:62:96:5F:2E:6D:8E:4C
Authority key identifier: 2E:19:96:6C:0E:A5:DF:3A:98:7F:83:65:52:4B:51:28:CB:A7:FC:90
Certificate issuer: /CN=2e19966c0ea5df3a987f8365524b5128cba7fc90
Certificate serial: 01967ED89C235B7681A99841F184BB125941
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
Manifest number: 1514
Signing time: Tue 29 Apr 2025 00:00:47 +0000
Manifest this update: Tue 29 Apr 2025 00:00:47 +0000
Manifest next update: Wed 30 Apr 2025 00:00:47 +0000
Files and hashes: 1: EB2pKsJqEpEjhB4YuLKeyjkIp9Q.roa (hash: ruDUWZ/Fl5sEVfjlgGOsVStJ3zZdJ/uyG7EZiN/zjl0=)
2: LhmWbA6l3zqYf4NlUktRKMun_JA.crl (hash: hHyv9tQcc8Z6z4DPkhUdiUde9PBkJwX+C0Qz5Ld2+uQ=)
3: iOSgDas4E473RISs54ZCqJXEL1Y.roa (hash: cm025SWzl2vuQDv4U8M4vf0+/0CnnGay76ie0c/nESQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:d8:9c:23:5b:76:81:a9:98:41:f1:84:bb:12:59:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e19966c0ea5df3a987f8365524b5128cba7fc90
Validity
Not Before: Apr 29 00:00:47 2025 GMT
Not After : Apr 30 00:00:47 2025 GMT
Subject: CN=e3547969d13be3dc887b046f7562965f2e6d8e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:06:d7:f8:2a:b9:98:fc:cf:7e:a6:0b:50:e0:
58:64:59:b0:de:48:32:bd:5f:15:b4:e8:78:08:02:
dd:0b:42:a3:73:3a:df:c2:ab:99:d8:40:f3:3e:99:
5d:84:86:7b:38:00:8b:3f:e8:55:f5:fb:25:26:d9:
fc:0e:d4:bc:77:26:83:bc:34:d4:39:32:2d:5b:54:
f0:38:3f:ff:ae:c6:c9:fb:7c:06:7b:c8:c2:af:1a:
90:11:5e:57:6b:d5:80:87:64:a6:ce:96:fc:2a:0b:
d4:f3:c5:2b:aa:4f:bd:1c:ca:63:2e:c1:bf:61:bb:
84:7e:49:28:75:c7:93:5b:a5:8d:83:a1:78:50:b5:
45:2a:09:26:09:17:d6:a3:41:47:28:0a:b2:a9:2c:
f7:b9:b2:af:c3:ae:46:05:fe:0a:92:1e:ae:43:2a:
97:34:15:5a:b0:80:99:f7:20:2e:9b:42:ca:79:bd:
9f:33:4e:de:84:db:c0:f6:6a:28:3a:cd:2b:d1:3c:
7d:2d:a6:68:96:40:ca:b8:68:ee:b3:bb:db:a6:4a:
fc:4f:ce:2e:ff:1f:07:02:d5:be:a9:7a:b3:77:3b:
f1:46:26:f8:24:27:25:7b:96:6b:6a:75:1d:28:b7:
de:c9:02:1d:c8:4d:74:31:a1:ca:7a:e8:07:70:02:
51:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:54:79:69:D1:3B:E3:DC:88:7B:04:6F:75:62:96:5F:2E:6D:8E:4C
X509v3 Authority Key Identifier:
keyid:2E:19:96:6C:0E:A5:DF:3A:98:7F:83:65:52:4B:51:28:CB:A7:FC:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ae:98:6b:73:5b:76:57:eb:d8:14:41:ae:67:ac:ae:1a:61:
e0:6f:68:68:63:ad:7f:d2:e3:e8:d4:31:97:bb:84:9b:1e:8d:
52:e9:bd:4b:4f:04:49:51:e4:5a:1c:d2:be:b8:f8:13:3e:93:
ea:84:d3:82:c7:46:d5:ba:7b:0c:b3:f6:f9:f9:e5:1b:54:2c:
45:ee:34:34:a2:fa:05:fb:3e:0c:53:50:3e:7f:e4:50:6b:a3:
d7:e0:73:7b:9a:bb:d1:fa:d0:71:eb:33:1a:a2:d8:e6:fa:56:
31:0c:e8:b0:49:3f:7f:af:9b:50:a4:9e:bd:ad:5a:0c:61:a2:
b9:d5:87:3c:31:30:80:40:25:a0:ca:a4:f2:45:bb:6f:d7:ec:
57:46:c5:ad:80:41:a4:a5:33:db:78:74:b5:7c:d7:c2:65:2e:
46:b1:ba:95:7a:a3:f5:e9:c7:49:09:96:d7:b0:8d:8d:96:c6:
93:ee:4d:b6:73:bf:48:c2:63:7b:f4:b8:ad:92:8a:e7:cb:a5:
a3:9b:73:55:c5:48:72:7a:19:b7:5f:2b:cf:4a:05:8c:ff:ea:
83:47:7a:ba:bc:27:f6:b6:fd:dc:35:ee:b6:f2:cf:78:03:0d:
0c:6b:c1:c1:13:ee:a5:25:81:2b:2d:26:28:90:e0:49:7b:79:
39:a3:c1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:05:07 2025 by rpki-client