Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
File: 0LhJubyQQqFVczGTfkrXFRivYc8.mft (raw, json)
Hash identifier: 31LbPfNgM8ok2ySg5+n6E5v2eAAbF7wNmeDlJ5vkJj0=
Subject key identifier: A7:BB:29:AA:5E:26:C0:55:6A:A1:D3:88:9E:6C:8D:31:81:A2:E1:97
Authority key identifier: D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
Certificate issuer: /CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Certificate serial: 0196B6A31BF34D000C5FC09AAF46E6047B54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
Manifest number: 153B
Signing time: Fri 09 May 2025 20:01:04 +0000
Manifest this update: Fri 09 May 2025 20:01:04 +0000
Manifest next update: Sat 10 May 2025 20:01:04 +0000
Files and hashes: 1: 0LhJubyQQqFVczGTfkrXFRivYc8.crl (hash: I0g3n9jjmzwSLbIk6HNSaPskE7K3RbxjKjfGym4xgjo=)
2: 1-eb9r-ZDRcfXM319Xm17VSwOe2g.roa (hash: gjasaH7lkMMANTCzqIlftWjMy6V6Szhqm9mZMjotXY4=)
3: H0lhlyvHrJBUbelTUSco_7dJSjQ.roa (hash: L/m4BXMaiGyOl/b45Q9sPqlYrX5v9RjW3QD40e1E52s=)
4: eANGg9nd8brobQxQsq-OUws_-A0.roa (hash: lEUfEgigb66go+VnP4oXCP4ZNWVGI/eBV8YRKR1wILc=)
5: fchmYh0XMmIa-Ncr7a7fqAnAY00.roa (hash: ZlxUCwJ7bUmXJFbrCkwij8tMOrG795eaKW3Q7cSegWE=)
6: gbFyA5kAyF3D91TwTtuIgfKJGwg.roa (hash: P+ljc7ooXveuyv4fpj4pataLqZnV6kSVgO14/6L0j+k=)
7: m885sdRVL7vvTw9o72IDISfg7CA.roa (hash: G7PZpicKtRlgQZhGAEn8Nx8P/JZomwfCGr+1m/KgFYQ=)
8: ncGsNjTWkIf28hHD5IvPQUyPHT4.roa (hash: OTRCAQhrm/oTjMPsGhu8HQvEnrVxNQI7H4S1GDdgIBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:a3:1b:f3:4d:00:0c:5f:c0:9a:af:46:e6:04:7b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Validity
Not Before: May 9 20:01:04 2025 GMT
Not After : May 10 20:01:04 2025 GMT
Subject: CN=a7bb29aa5e26c0556aa1d3889e6c8d3181a2e197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d1:32:65:96:fc:c6:8e:25:fe:a4:e4:a4:4f:
a2:29:4a:b0:d3:e5:ac:9f:44:f2:87:f5:42:d2:7c:
8a:5d:53:cb:90:51:a9:58:2d:d0:5b:47:3e:14:68:
95:e7:57:a0:cf:50:db:9f:06:0b:32:34:07:01:31:
f8:fe:9d:fb:3f:5f:89:5b:f7:65:97:18:5d:59:bb:
cf:3d:c9:ec:26:41:c8:f5:94:15:f6:bd:33:0e:44:
78:b9:d7:e0:33:d3:1c:21:bf:b1:ae:f8:b0:c0:11:
1f:97:87:4b:bf:67:06:7a:2b:13:d6:60:15:a6:76:
1c:aa:57:a2:13:4c:82:65:7a:36:98:5d:3f:b7:3d:
e5:0c:1e:45:4c:89:15:1b:48:df:ac:c8:02:5f:be:
f2:cc:ad:c7:71:01:1c:bc:20:31:f4:9d:ad:43:38:
a8:41:5b:07:2f:25:45:10:58:46:9e:23:c3:27:28:
50:20:09:2d:0c:12:79:6b:bb:01:58:8c:3d:b6:7d:
4d:72:9d:43:49:89:9b:1b:7d:19:2c:45:ce:c2:92:
ca:8b:30:86:14:b4:21:6b:2a:4c:6d:7a:2a:40:8a:
40:f9:2c:55:9c:0f:8b:cd:34:47:e9:f0:cf:eb:06:
41:3e:7c:be:8e:be:53:0d:b4:07:42:da:93:04:da:
47:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:BB:29:AA:5E:26:C0:55:6A:A1:D3:88:9E:6C:8D:31:81:A2:E1:97
X509v3 Authority Key Identifier:
keyid:D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:92:55:9a:32:d6:93:4e:75:e7:79:53:5f:ef:63:93:c4:f9:
42:c4:79:32:80:64:af:33:79:49:65:e0:28:f9:74:bf:d9:18:
24:f9:89:27:00:54:cc:e3:90:95:85:86:9d:03:1e:8b:1b:ca:
51:d6:29:4c:1b:d8:7d:5a:94:37:01:29:dd:ac:0a:18:e0:76:
af:bc:a5:5c:69:00:06:69:c8:03:ed:11:07:de:80:33:aa:78:
07:8d:b1:c9:bb:50:b8:b1:b1:43:99:69:e7:78:d0:53:85:18:
b6:31:d8:69:d5:51:a9:5f:2b:cd:18:66:0b:03:a7:6e:b3:47:
45:7c:f0:ad:94:1c:05:6a:b5:13:1b:b8:c8:ad:1f:a7:1b:0a:
bf:25:32:e8:49:89:40:04:27:1b:70:48:f4:3d:97:1f:94:81:
b2:ab:e7:4a:f2:a8:b5:f6:b6:f9:37:f0:95:4e:4c:a8:49:92:
2b:29:67:d2:a8:81:32:ec:6c:fc:b2:ab:f2:a3:c3:ae:a7:71:
16:3e:82:27:2a:9c:92:78:9d:6d:23:7b:9d:a1:de:35:68:6c:
af:66:45:bd:7e:68:19:2a:e6:ca:4f:97:23:c0:9c:eb:59:b6:
09:ba:b3:f5:4c:d3:00:c2:c8:30:c1:80:8b:84:cc:e6:f0:b8:
c8:54:16:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 22:11:13 2025 by rpki-client