Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
File: lHMg0DCTAXjm987vkdKrh4TT3BY.mft (raw, json)
Hash identifier: QlQ5wYKGe3lJc0llkNuf40n1ubXwL3vAja8BihUtBKA=
Subject key identifier: 69:74:A5:52:94:6E:87:7F:8D:37:CA:BD:01:91:A8:5C:2A:C2:97:71
Authority key identifier: 94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
Certificate issuer: /CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Certificate serial: 0196C2DD7F162125F2A8DF6784685B28EE17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
Manifest number: 1163
Signing time: Mon 12 May 2025 05:00:17 +0000
Manifest this update: Mon 12 May 2025 05:00:17 +0000
Manifest next update: Tue 13 May 2025 05:00:17 +0000
Files and hashes: 1: 5QMHmJgfqvSExR78QZoDl1UWmsA.roa (hash: Dbmsjz6HJzMNQXjckNup+UFifmkcVaFAdGg2/Xlr06g=)
2: 9Hm8EAVuf4tqOcHaH0y7y-1Ym9k.roa (hash: FodBXOCVdl5JGOEkTl9E8+4jK0F+A6PAABCoahGBKds=)
3: ChcX6dEQMX7PgnkGnKeX9TQTPSU.roa (hash: 9GX5XaBmVeFjM4n7HjAG7e5pB9imRwZnEdAGfd1ulvc=)
4: I2s0NE0e0ldLesJa5IwWq_3YoQY.roa (hash: 32nxkp+mnSpxawrjeJdAmkwgRYzly761fgfPTbswaVo=)
5: PMaHuXs3WWXL_wMiCfpWp06YsGo.roa (hash: 9cmCaAVftyHuRhOLzikzJqVe0HoECs2yXEC681pBBp4=)
6: lHMg0DCTAXjm987vkdKrh4TT3BY.crl (hash: EECps1qp+zd20dJ2QiL91ilVvsVRF8LD4ddUulSV2Yk=)
7: wV_UPXPoWr2rMigTEJujKEPHkRU.roa (hash: sWrQ1dC0i8v5NdCh/KJb/CYIzz2swLex9WzWGoX8cPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:dd:7f:16:21:25:f2:a8:df:67:84:68:5b:28:ee:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Validity
Not Before: May 12 05:00:17 2025 GMT
Not After : May 13 05:00:17 2025 GMT
Subject: CN=6974a552946e877f8d37cabd0191a85c2ac29771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ff:18:e6:87:12:ad:de:65:4a:ae:20:ab:7b:
91:37:55:fd:55:30:7c:3b:0b:db:e6:79:59:ae:01:
7e:0d:c7:e3:64:f5:3d:d3:16:fd:35:5f:46:12:22:
6c:6a:be:4e:33:22:4c:6f:cc:ed:7c:cf:74:61:d4:
75:d7:ef:30:23:74:61:e6:10:e8:5c:39:89:b8:27:
19:3e:2f:eb:be:a4:46:73:a0:9d:d0:4b:ea:68:62:
b0:94:bc:11:8f:68:c6:df:da:d5:86:89:0c:c1:ec:
20:64:b1:ab:10:1e:05:91:43:a4:2f:ab:f7:0a:2c:
f5:86:36:1d:e9:ea:21:7f:f5:74:10:a0:2a:af:8f:
74:48:98:33:27:26:53:23:b4:f7:83:e0:0f:34:cc:
f1:9e:cc:07:f6:f6:b1:e7:e1:94:c1:e4:ed:85:5d:
cf:98:70:b9:61:7d:ee:8e:1c:8a:db:c8:da:85:80:
23:4a:d4:01:9a:89:d3:4b:a8:24:48:db:7a:cd:9a:
3b:b8:7d:c4:03:76:95:cf:47:51:d7:c5:03:16:a8:
3b:91:27:f9:9c:ea:b2:c5:21:5e:ad:2a:51:4f:5e:
b4:85:52:45:3c:24:30:5e:dd:7d:8b:99:81:66:97:
68:fc:87:2a:4e:ea:df:e4:7c:01:6a:b9:ff:e2:7c:
95:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:74:A5:52:94:6E:87:7F:8D:37:CA:BD:01:91:A8:5C:2A:C2:97:71
X509v3 Authority Key Identifier:
keyid:94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:e7:dd:30:39:c6:1e:42:83:68:86:c3:fc:31:e3:aa:05:d8:
25:24:b1:79:90:a4:ef:09:06:aa:19:ae:e1:ae:3a:81:db:16:
62:b1:f6:a6:bc:e2:70:99:5f:8f:1b:31:b5:3c:6b:c0:51:fe:
92:25:d6:ba:7c:27:0e:25:51:b6:df:81:5a:1f:00:d7:65:19:
ee:0c:39:03:6e:0e:a8:4d:97:7d:c8:0b:36:f2:f9:a0:b7:d1:
41:22:ea:b4:b8:dc:43:41:59:fb:7d:5a:b9:a5:7e:61:f0:b1:
d7:41:03:0c:43:37:c1:e8:cb:cf:30:0d:07:a7:43:a1:96:e3:
a0:d4:0e:69:04:c4:2f:1b:6d:22:65:6f:1b:43:ba:e8:81:8f:
84:fd:7f:4a:cc:23:d0:19:fe:67:ca:e7:93:21:9c:39:65:df:
82:67:f8:f2:35:19:77:92:be:8a:e3:97:9b:21:a8:ce:0b:87:
4b:4c:65:f4:d0:bc:e8:bd:0d:9f:41:32:22:34:6d:22:92:be:
07:ce:8b:67:a6:49:87:ae:36:66:98:d8:a8:96:bf:c1:cc:a0:
54:46:30:ac:d1:dd:8d:d9:59:16:98:b8:e3:b9:5e:96:39:f0:
8c:d5:5e:9a:4a:a3:6e:d3:9a:05:46:3a:c1:57:48:74:b1:22:
61:9e:5a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:18:28 2025 by rpki-client