Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
File: lH4-X564CJtcqU845lF8-8WyAGM.mft (raw, json)
Hash identifier: PdHfLwfhUbHw9QE5GZQ9BT+xPeQqX72pO3GCFysOX6A=
Subject key identifier: 63:14:91:CD:EE:7A:B6:D2:0B:16:F3:5D:67:18:01:37:E8:91:F0:72
Authority key identifier: 94:7E:3E:5F:9E:B8:08:9B:5C:A9:4F:38:E6:51:7C:FB:C5:B2:00:63
Certificate issuer: /CN=947e3e5f9eb8089b5ca94f38e6517cfbc5b20063
Certificate serial: 01968247425F4DEA992FDB4B07665A2C6873
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
Manifest number: 03A4
Signing time: Tue 29 Apr 2025 16:00:30 +0000
Manifest this update: Tue 29 Apr 2025 16:00:30 +0000
Manifest next update: Wed 30 Apr 2025 16:00:30 +0000
Files and hashes: 1: 8JJmvRAktSEG3OdLUZKBNwR6ws0.roa (hash: TC8WkMj5LqYLotUQsIJXNU0W5IJEuyjKyKXTJdzLmbM=)
2: lH4-X564CJtcqU845lF8-8WyAGM.crl (hash: 4Xn27oYC/RsUBYML+IzILMcQtJSHpUtukyitFmZDqMw=)
3: zozOOHZMPpO8TU7R7OlzFjX6nTU.roa (hash: DO9vuDN/M4q7UhQA8k+ziHqB7tX/m/+CIduSaenQLlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:47:42:5f:4d:ea:99:2f:db:4b:07:66:5a:2c:68:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947e3e5f9eb8089b5ca94f38e6517cfbc5b20063
Validity
Not Before: Apr 29 16:00:30 2025 GMT
Not After : Apr 30 16:00:30 2025 GMT
Subject: CN=631491cdee7ab6d20b16f35d67180137e891f072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a4:c5:f6:14:b2:79:4a:ff:f8:5c:a2:ee:0a:
cb:a7:8d:08:f3:75:fe:ec:fb:b5:e1:cb:35:84:4b:
64:a7:01:a9:4b:a9:a5:3e:5c:fd:95:f6:c5:85:d7:
5a:81:9a:98:15:62:2f:b1:de:47:4b:d9:80:78:bb:
0d:4a:36:99:9f:90:fc:96:71:be:5a:94:f3:f4:cc:
ca:21:aa:db:4d:74:0e:5e:47:2c:33:5d:2d:83:86:
0e:7a:21:ee:71:cc:ec:dd:41:39:46:ee:2a:01:02:
0b:4d:8e:91:7b:2f:07:6d:d7:b0:11:0c:b7:b6:8f:
46:26:a3:3d:94:fc:0a:a6:e5:8a:58:fe:72:2a:9e:
92:42:45:10:9c:b5:20:c4:65:39:c8:e6:80:6c:18:
01:84:7c:c2:e1:31:87:02:17:9a:fd:eb:41:ee:c0:
65:e7:20:7e:bc:ef:6b:ae:60:f5:de:a3:08:f5:74:
8b:58:67:dd:2c:04:f9:68:78:09:3f:99:ef:e4:fa:
c2:c2:0e:15:82:25:d3:f7:82:b3:5a:11:7b:95:bd:
ce:7d:03:a1:41:e0:6b:46:2f:1c:1a:e9:f2:e6:f2:
41:72:9d:34:3e:6a:ce:c2:ff:1b:e1:f8:d9:4f:5f:
f8:c6:36:43:a6:6c:62:e5:d5:53:c5:d0:56:23:c8:
73:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:14:91:CD:EE:7A:B6:D2:0B:16:F3:5D:67:18:01:37:E8:91:F0:72
X509v3 Authority Key Identifier:
keyid:94:7E:3E:5F:9E:B8:08:9B:5C:A9:4F:38:E6:51:7C:FB:C5:B2:00:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lH4-X564CJtcqU845lF8-8WyAGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4c26-e34a-4336-90c8-f90ae9966428/1/lH4-X564CJtcqU845lF8-8WyAGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:15:27:06:8a:79:36:f6:69:55:e1:5a:d1:97:9f:99:66:b0:
83:4e:8b:3c:2c:8d:84:b6:99:b6:1b:d7:1a:34:63:0f:9b:d3:
8e:ec:81:a2:75:a0:80:0d:fa:7a:b4:dc:b9:a4:02:2b:5b:fc:
c2:4d:26:6e:b5:b1:5c:f7:76:41:cd:60:b1:f8:46:f2:aa:f6:
8a:10:d8:4d:c6:12:57:20:0b:c0:24:26:a3:42:e3:8a:6d:dc:
a4:6b:b4:33:bd:a7:79:4c:4a:21:a2:a4:83:0e:3e:76:fc:6e:
69:43:bb:f8:b4:24:da:c7:96:aa:67:bd:dd:c3:e8:5b:5f:d5:
ba:37:41:a6:d9:41:53:44:02:6c:39:4d:15:ea:dc:0e:85:ec:
8e:1c:de:b2:04:69:0b:68:68:0a:0d:b5:56:8d:26:cf:e4:9e:
fa:65:60:6e:3c:71:0f:39:f7:7f:1d:8f:32:55:ce:20:8d:a9:
a1:c0:c7:b7:a1:b3:b0:cd:15:d2:9c:01:e3:29:9d:76:1e:98:
85:00:0b:46:4a:10:ec:55:bf:71:82:90:a0:0b:8f:3b:4e:e0:
54:6f:1d:dc:9f:a8:b1:42:6f:32:c9:c7:21:81:97:38:9f:ed:
86:5a:7e:93:ee:36:36:c2:45:8c:23:17:ce:5e:59:eb:a3:20:
31:f8:b2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:43:56 2025 by rpki-client