Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft
File: lhebOdHB0o9QY8qSHWAH42Phxgs.mft (raw, json)
Hash identifier: wAyl6t4MExiq1RmfUtHAyDdqPgqB3dfVh24rQFvh8n0=
Subject key identifier: 2D:9E:5D:DC:62:1F:69:C8:70:3E:AB:15:E6:24:57:B8:87:2A:34:C8
Authority key identifier: 96:17:9B:39:D1:C1:D2:8F:50:63:CA:92:1D:60:07:E3:63:E1:C6:0B
Certificate issuer: /CN=96179b39d1c1d28f5063ca921d6007e363e1c60b
Certificate serial: 01969CAC6D7CEB2B40D961AB59EE217E575B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhebOdHB0o9QY8qSHWAH42Phxgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft
Manifest number: 1523
Signing time: Sun 04 May 2025 19:01:07 +0000
Manifest this update: Sun 04 May 2025 19:01:07 +0000
Manifest next update: Mon 05 May 2025 19:01:07 +0000
Files and hashes: 1: lhebOdHB0o9QY8qSHWAH42Phxgs.crl (hash: S/2vq/o0bRaTn0/8HKVC9506VO6LtEz4lOX5OHR7rEo=)
2: zIbC2a3NLstRoJ1KbSzBvFb6vZ0.roa (hash: YltSOQHV02hFJedVO9/8WLk8TMz1RedE7tGsvMysOE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhebOdHB0o9QY8qSHWAH42Phxgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 19:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9c:ac:6d:7c:eb:2b:40:d9:61:ab:59:ee:21:7e:57:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96179b39d1c1d28f5063ca921d6007e363e1c60b
Validity
Not Before: May 4 19:01:07 2025 GMT
Not After : May 5 19:01:07 2025 GMT
Subject: CN=2d9e5ddc621f69c8703eab15e62457b8872a34c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3f:7e:45:35:30:6a:27:81:f0:6f:d8:09:73:
3f:24:0d:7c:1c:ab:f5:32:fc:4b:89:77:d2:2e:7f:
21:b8:ff:f4:f6:53:8c:4e:9d:ad:4e:14:08:c3:56:
0f:21:30:86:cc:e3:53:08:8f:ea:e0:22:85:7c:b1:
10:93:c7:64:a5:d7:53:07:f9:63:a3:f4:ee:e4:a3:
e6:57:74:81:6a:1e:18:6f:4c:a3:a9:fe:de:7d:95:
a3:fb:be:4a:71:b0:85:bd:e4:a2:9f:6a:0b:51:b8:
a5:41:8c:2d:9c:0d:bd:14:77:a4:33:42:c7:f9:01:
b3:20:c9:20:e4:03:ae:9d:a3:f2:e8:6d:32:13:a1:
50:f5:8a:6f:66:00:bb:13:66:32:94:b5:e9:7a:b2:
ba:d7:74:66:59:8f:90:55:c0:25:44:d0:2d:ff:3f:
1f:0f:ca:e6:b0:89:3c:3b:de:9a:2e:3a:34:07:57:
fe:6d:a2:d5:8c:b0:4a:19:e2:d1:a6:61:d7:c9:54:
c8:e6:f0:40:61:8d:b6:6b:f4:0d:76:7a:21:48:45:
92:59:99:47:9b:c0:e3:13:a9:f6:cb:2b:07:49:0e:
5e:d2:80:aa:ce:98:fa:46:06:a7:ff:40:ba:5c:75:
7d:9d:7b:da:82:0a:f6:19:be:07:09:29:55:1d:6e:
4b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:9E:5D:DC:62:1F:69:C8:70:3E:AB:15:E6:24:57:B8:87:2A:34:C8
X509v3 Authority Key Identifier:
keyid:96:17:9B:39:D1:C1:D2:8F:50:63:CA:92:1D:60:07:E3:63:E1:C6:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhebOdHB0o9QY8qSHWAH42Phxgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cddf94-8d51-41cd-8a5b-a0b4930cbd1e/1/lhebOdHB0o9QY8qSHWAH42Phxgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:46:26:c1:16:be:4b:8a:da:29:2d:72:b4:6a:f8:2c:20:5a:
1a:23:e7:ae:02:c1:a7:86:bc:19:9f:95:ce:d2:d9:ff:3b:c0:
49:60:9b:16:9e:a6:1a:70:4c:31:63:57:3c:94:49:cb:1d:97:
36:8c:75:11:97:4d:ce:8d:81:ba:ac:8d:7a:66:12:2d:4b:4a:
47:37:67:d6:a2:66:2b:7d:15:f1:2c:7c:c1:7b:f0:ad:9c:e6:
1a:da:0d:cd:25:3a:93:cd:f4:da:be:71:ee:35:0a:38:4d:bc:
28:74:02:2a:a2:99:d9:a1:6f:8d:c2:24:fa:34:bf:a5:17:c7:
48:5d:6d:b9:bc:f4:1d:ed:6e:34:48:99:d5:84:34:64:44:af:
63:47:1d:62:ed:43:67:53:98:88:74:f4:bd:16:82:a7:7f:14:
41:ec:98:27:d4:0a:5d:0b:b3:3a:a9:e5:62:38:bc:a4:a9:d7:
19:ad:8a:af:17:b4:d2:e2:2a:12:01:24:4f:0d:f1:1c:e8:88:
89:35:0f:f7:f0:f6:51:96:f7:4e:ff:66:39:b8:2a:5e:10:e7:
9a:78:db:2c:13:99:16:93:40:14:74:9b:e6:c0:20:b6:a1:b9:
c5:72:57:00:19:a6:91:e3:ae:20:eb:49:bf:7f:39:f7:d5:fe:
04:dd:8f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:26:02 2025 by rpki-client