Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
File: lhud90XDLfJ98z68_VNvGeE0dP4.mft (raw, json)
Hash identifier: UmP1uYCUtBn3l1BUNG2DVOhxnC4vXbUHuIcdHF7AZeI=
Subject key identifier: FC:F6:32:59:08:DF:C2:30:54:26:7A:58:4D:27:58:70:82:38:60:20
Authority key identifier: 96:1B:9D:F7:45:C3:2D:F2:7D:F3:3E:BC:FD:53:6F:19:E1:34:74:FE
Certificate issuer: /CN=961b9df745c32df27df33ebcfd536f19e13474fe
Certificate serial: 0196730B801B763721F9384F56547A4E5623
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
Manifest number: 0E27
Signing time: Sat 26 Apr 2025 17:00:55 +0000
Manifest this update: Sat 26 Apr 2025 17:00:55 +0000
Manifest next update: Sun 27 Apr 2025 17:00:55 +0000
Files and hashes: 1: 3LMtRmONGNLMLTZbv-22SKS_G_A.roa (hash: pio5aJGvlnIF4jwmfbABDVK+nPuVznK9IHAqeg47uOI=)
2: 8cYySboA2VaDBExXOdn2f8YI2Iw.roa (hash: XrQTlxZOLpNHFd8Q5dqkWIouJ0kbCEk8FXuJ6lAGYRM=)
3: AW_xXvWFujKuLbVm-SnUT_Zjgxw.roa (hash: nFG/6G17wzGxW8RG1K73vy6beJj5zW9L3o6YXtPyInc=)
4: lhud90XDLfJ98z68_VNvGeE0dP4.crl (hash: NSSA+GZfkaOmiR7YzDgh5Qq6+5G/KdSRke+pWQ0fyc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:0b:80:1b:76:37:21:f9:38:4f:56:54:7a:4e:56:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961b9df745c32df27df33ebcfd536f19e13474fe
Validity
Not Before: Apr 26 17:00:55 2025 GMT
Not After : Apr 27 17:00:55 2025 GMT
Subject: CN=fcf6325908dfc23054267a584d27587082386020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:61:f0:75:41:76:8c:5b:13:7a:cf:e3:4f:c8:
02:a1:f4:1f:03:f3:17:0b:b1:35:68:a1:96:e3:a6:
0f:3e:6f:30:92:3c:f1:94:01:52:75:08:0d:ab:69:
f1:3e:eb:7d:65:83:c5:5f:90:92:c1:18:f8:cf:5d:
25:3b:53:80:56:ba:da:1b:29:9a:94:b7:43:55:80:
c6:30:9f:71:a1:4b:84:78:49:c3:c8:76:fe:8b:5e:
9c:d8:10:3b:f8:85:f5:07:f0:90:bc:14:9d:20:c8:
9e:aa:9a:b5:72:aa:e5:56:f5:fb:41:95:4b:49:7b:
30:6e:3b:07:50:67:78:f5:e3:4b:ff:4c:50:f5:ff:
4c:cc:e2:5c:fd:36:6e:52:55:6e:9d:a8:ec:a9:37:
ee:73:e3:3d:d5:85:a8:72:6d:e3:d9:57:e9:91:c0:
4d:41:0d:44:51:dd:7b:52:f8:94:86:a2:fd:85:f8:
4f:f3:95:89:12:50:ab:4d:a8:3b:aa:b4:4d:87:47:
51:50:0a:28:d4:d1:aa:55:e6:35:6a:fd:84:e5:dc:
f3:a8:d6:6c:4c:fd:6f:ac:7c:b7:7c:e3:50:48:9f:
79:43:3d:a4:89:44:36:86:a8:5f:c0:58:aa:e6:b7:
d1:01:b6:17:62:a9:97:5c:da:77:d9:3a:d4:a5:c6:
37:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F6:32:59:08:DF:C2:30:54:26:7A:58:4D:27:58:70:82:38:60:20
X509v3 Authority Key Identifier:
keyid:96:1B:9D:F7:45:C3:2D:F2:7D:F3:3E:BC:FD:53:6F:19:E1:34:74:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:58:78:4b:28:f8:91:8c:3d:5a:b9:8a:d0:0f:45:98:57:9a:
cd:8a:d8:3b:62:a8:a4:08:ae:32:f3:2c:6f:a3:36:85:6d:51:
44:66:61:5b:1e:4f:56:dc:03:81:6c:ef:d6:82:3a:32:1f:83:
ba:82:11:bc:18:d7:f6:90:ab:c9:83:0b:7e:1c:5b:f8:fa:fd:
42:cd:50:4d:ff:de:f5:8d:bb:68:ca:e5:98:2a:a1:1e:bb:e6:
51:54:78:98:95:a6:59:80:1b:58:f8:79:72:bd:16:9e:9f:f4:
12:e1:92:21:7c:e1:93:65:67:d8:17:25:8b:ef:d4:31:ce:5c:
f1:53:51:54:9b:d3:5b:4f:46:f8:55:33:53:0c:5f:1a:79:13:
95:97:03:5f:85:72:7f:e6:5f:2e:18:7e:26:bf:0f:3c:e7:7b:
6b:cb:45:e6:89:66:74:e9:ba:39:33:11:bf:c8:ef:79:48:04:
59:25:de:a6:4f:d0:de:b4:17:79:9c:d0:41:ea:d3:8e:5c:36:
35:73:86:1a:ab:56:2b:a6:13:18:ca:b4:81:ba:87:70:91:f1:
cb:fc:62:32:f7:2d:64:d5:45:93:a0:ef:8b:5e:07:1d:be:21:
8b:b3:5f:30:d1:0c:66:9c:17:06:34:a7:0a:f2:b9:cf:bf:dc:
72:41:a0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:20:06 2025 by rpki-client