Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
File: LhmWbA6l3zqYf4NlUktRKMun_JA.mft (raw, json)
Hash identifier: g2fw/cp8G0Pw/cf+VWaRdcFXNJ4rXMWX6M+ViAapEyY=
Subject key identifier: E4:74:61:85:EB:E7:50:77:B8:AC:72:3D:02:8C:A9:4E:F0:C1:53:F7
Authority key identifier: 2E:19:96:6C:0E:A5:DF:3A:98:7F:83:65:52:4B:51:28:CB:A7:FC:90
Certificate issuer: /CN=2e19966c0ea5df3a987f8365524b5128cba7fc90
Certificate serial: 0196B8C7C3D3F1EB204D77CB1410F496090E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
Manifest number: 1532
Signing time: Sat 10 May 2025 06:00:21 +0000
Manifest this update: Sat 10 May 2025 06:00:21 +0000
Manifest next update: Sun 11 May 2025 06:00:21 +0000
Files and hashes: 1: EB2pKsJqEpEjhB4YuLKeyjkIp9Q.roa (hash: ruDUWZ/Fl5sEVfjlgGOsVStJ3zZdJ/uyG7EZiN/zjl0=)
2: LhmWbA6l3zqYf4NlUktRKMun_JA.crl (hash: Y0rvmRYYpfmcP0NbgDxMfn6Dr+tLbriRbusjit/vn3U=)
3: iOSgDas4E473RISs54ZCqJXEL1Y.roa (hash: cm025SWzl2vuQDv4U8M4vf0+/0CnnGay76ie0c/nESQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:c7:c3:d3:f1:eb:20:4d:77:cb:14:10:f4:96:09:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e19966c0ea5df3a987f8365524b5128cba7fc90
Validity
Not Before: May 10 06:00:21 2025 GMT
Not After : May 11 06:00:21 2025 GMT
Subject: CN=e4746185ebe75077b8ac723d028ca94ef0c153f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:15:35:b0:f0:80:3e:d4:08:cb:54:1e:32:8f:
00:32:eb:b3:52:fa:bf:e2:97:b4:af:d4:33:ef:8f:
96:c6:95:2f:44:cd:04:27:e1:6d:1d:9a:5c:5d:e1:
6f:6a:49:db:5d:81:50:ba:62:0f:a9:ec:a2:a9:5d:
fc:49:28:78:b2:92:98:1e:fa:04:c9:85:09:4d:6d:
c6:c1:7b:e4:a1:a9:88:4a:28:2c:45:18:1b:3d:cf:
17:30:2e:52:1f:ff:c6:f2:85:6c:f6:47:c3:de:41:
50:e1:2a:1c:3b:3e:d2:c8:fa:13:f4:76:8e:5b:16:
90:f7:5f:df:71:7d:a6:16:59:67:35:5b:a3:ec:53:
15:42:37:47:c2:30:d3:7c:c4:f9:c8:ce:d6:c8:21:
f4:62:d6:fb:a8:00:92:ba:3b:f3:2f:28:80:87:c6:
38:0d:49:1f:e9:2b:1e:84:e6:67:86:65:33:29:a5:
cc:f2:e0:de:74:c8:83:c9:5d:2f:d6:09:09:34:a2:
57:b1:88:2c:b5:3f:07:6e:00:f7:f4:c3:e8:a0:9b:
c1:23:52:8f:f6:f7:2a:64:84:be:8b:1c:2c:45:75:
19:af:e2:de:64:78:3b:37:69:0d:6b:fd:5a:30:96:
c5:ec:8b:d9:63:d9:30:f0:f8:ab:45:42:6e:d9:94:
1c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:74:61:85:EB:E7:50:77:B8:AC:72:3D:02:8C:A9:4E:F0:C1:53:F7
X509v3 Authority Key Identifier:
keyid:2E:19:96:6C:0E:A5:DF:3A:98:7F:83:65:52:4B:51:28:CB:A7:FC:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:23:a6:a1:1d:3d:7b:ed:b3:be:44:34:2f:92:1a:cf:ec:97:
d4:f4:00:33:f2:ac:97:b9:4b:38:84:5c:b9:7a:67:a6:47:42:
f0:84:1e:f8:cc:12:df:0a:cd:9f:ed:27:46:0f:a0:5c:18:34:
51:c6:9d:c8:66:87:6d:bd:41:1b:8e:46:40:31:c8:57:30:70:
ce:d9:db:fb:ab:d4:2e:d2:a8:28:89:db:80:32:d5:69:64:b7:
56:ef:c8:f0:1f:0b:52:66:ef:72:38:59:38:fd:c0:f2:3b:e0:
df:9c:58:87:15:31:25:23:10:7b:d3:3a:72:45:f7:c0:b8:2f:
c9:d6:a0:4c:36:3f:c2:10:b6:bc:cc:b3:42:36:e6:d8:fd:14:
9f:52:73:d6:0f:b0:52:e1:34:95:59:23:15:6e:7c:86:17:ab:
97:0f:cc:4c:a1:9c:7b:08:03:a3:0d:e5:0c:a7:7f:fa:a8:77:
f4:2f:68:12:36:46:50:e5:5b:5a:9c:68:f6:84:13:2a:d7:19:
0c:4a:2a:f5:97:07:bb:64:a4:70:7d:25:ac:03:a0:dd:6b:e8:
24:6b:b7:bb:fb:e7:79:09:c4:41:b0:e3:44:b8:76:80:68:ec:
69:38:db:16:ef:bc:c4:2f:5e:db:8b:48:ae:f3:27:20:98:b5:
86:e2:31:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:41:45 2025 by rpki-client