Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
File: lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft (raw, json)
Hash identifier: tb1kdrH/FlyAWLcWhH5AqwTw39X82mJYeekFqVwwHZw=
Subject key identifier: 63:79:5A:95:69:A6:58:E6:C3:C1:2B:77:22:F7:36:57:36:24:07:DC
Authority key identifier: 96:11:26:4B:B9:E4:E6:FA:99:44:9E:E4:56:C5:D0:53:F3:AD:01:C5
Certificate issuer: /CN=9611264bb9e4e6fa99449ee456c5d053f3ad01c5
Certificate serial: 01967567C704F9228659DBE902EE8CF3C2E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
Manifest number: 14A0
Signing time: Sun 27 Apr 2025 04:00:57 +0000
Manifest this update: Sun 27 Apr 2025 04:00:57 +0000
Manifest next update: Mon 28 Apr 2025 04:00:57 +0000
Files and hashes: 1: CgkoHi9RsjYjtbh7r--tHry08fQ.roa (hash: 9zVo3gN7fK+I6ZtoEWyk2DDHUy2shoezHq0ybpjSZPI=)
2: lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl (hash: 9Ui9RVN1yYAKnHyK2qbf+tBVA5E+FfSVl3Sv/69+F0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:c7:04:f9:22:86:59:db:e9:02:ee:8c:f3:c2:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9611264bb9e4e6fa99449ee456c5d053f3ad01c5
Validity
Not Before: Apr 27 04:00:57 2025 GMT
Not After : Apr 28 04:00:57 2025 GMT
Subject: CN=63795a9569a658e6c3c12b7722f73657362407dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4f:8c:49:8a:15:dd:67:38:b2:7b:ff:81:70:
78:30:a9:10:ee:bf:b0:1b:c7:22:26:f0:68:a1:03:
69:a8:eb:8c:8d:f6:3d:26:99:ac:f6:57:0f:dd:07:
2d:a3:80:9e:8a:1b:db:9c:8a:23:4c:6b:b7:b3:4d:
77:37:e2:bd:bb:51:ab:7c:82:4f:0a:58:d4:f9:f9:
17:14:38:19:2c:f5:98:06:28:37:c9:01:9f:83:07:
be:ca:0b:cc:0d:d9:12:e8:e1:7f:cb:05:36:af:ab:
d9:0e:b3:4d:03:b6:6b:72:8e:ce:6b:80:04:c1:12:
5c:f0:83:0c:f7:74:68:02:d9:0c:f5:59:80:0c:6c:
58:92:26:e0:20:48:f6:ec:c0:c9:f7:9f:ce:93:34:
d7:70:8e:b3:db:ce:96:1b:ff:0e:73:46:50:25:90:
1c:98:7e:ee:4a:26:17:aa:37:67:3e:46:00:c7:c9:
1c:cb:b3:46:58:8c:41:cb:6f:5d:96:a0:bc:c4:03:
55:f7:c8:21:6f:0a:f5:4e:99:85:af:d1:b1:5b:f5:
9f:58:a7:01:47:98:dd:17:b2:96:6d:0d:6e:01:f2:
77:b8:a1:81:68:1c:cc:05:2a:e8:14:e6:83:93:8e:
20:56:78:66:7a:73:3f:ac:45:d1:91:45:f0:b3:3a:
c3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:79:5A:95:69:A6:58:E6:C3:C1:2B:77:22:F7:36:57:36:24:07:DC
X509v3 Authority Key Identifier:
keyid:96:11:26:4B:B9:E4:E6:FA:99:44:9E:E4:56:C5:D0:53:F3:AD:01:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:19:8f:ac:de:47:60:fa:9f:1e:85:30:11:5b:ae:e7:f2:6f:
ec:b9:93:78:fd:3e:a5:f2:ab:a9:04:f3:6c:a3:df:3a:88:bf:
4f:1f:b2:92:1a:d2:5d:6e:c4:71:b2:33:cc:0f:99:7a:4d:3c:
94:ff:21:f9:7c:c7:d0:05:18:e3:15:48:af:42:cf:06:e5:75:
1f:47:66:2d:2b:58:71:53:d3:c5:af:9c:88:f1:de:ed:87:f6:
21:56:db:7e:41:7a:b1:4d:bc:54:12:f0:8d:06:ef:80:ea:09:
d3:89:6c:c7:c6:2f:82:59:4a:14:20:8a:56:b2:6c:86:28:3c:
a8:ce:00:64:18:c3:2c:cb:75:b2:04:d4:75:63:c4:83:42:fe:
8c:a9:f4:85:f5:ed:7c:3b:99:75:06:d5:f4:97:bf:e7:b8:1e:
c3:33:e3:5c:72:e6:c5:70:ac:8c:77:8a:c8:cf:44:14:90:f7:
2a:64:fc:46:c6:bc:2a:bb:53:0d:4f:e4:5a:f1:00:57:0f:17:
80:00:56:6e:e6:ac:23:a6:f1:2e:8a:57:d0:37:48:2b:7b:86:
c5:24:ae:4d:23:a7:dc:d6:a3:f9:8a:83:8e:27:a3:d5:4c:bf:
ec:71:dc:00:a6:e6:08:45:83:7b:24:cd:ff:d6:ea:32:66:75:
83:09:cb:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:14:13 2025 by rpki-client