Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
File: lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft (raw, json)
Hash identifier: W8aeoYEgEm+hek0/Fy02tqs9UcNuB7dvmSRzLwN9hPQ=
Subject key identifier: D8:56:A0:5C:50:7D:34:F8:6E:E5:FB:E1:7E:94:EB:C6:C5:CF:F5:D0
Authority key identifier: 96:11:26:4B:B9:E4:E6:FA:99:44:9E:E4:56:C5:D0:53:F3:AD:01:C5
Certificate issuer: /CN=9611264bb9e4e6fa99449ee456c5d053f3ad01c5
Certificate serial: 0196AF56A6A59E53D11AA5121D68D67F8962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
Manifest number: 14BE
Signing time: Thu 08 May 2025 10:00:13 +0000
Manifest this update: Thu 08 May 2025 10:00:13 +0000
Manifest next update: Fri 09 May 2025 10:00:13 +0000
Files and hashes: 1: CgkoHi9RsjYjtbh7r--tHry08fQ.roa (hash: 9zVo3gN7fK+I6ZtoEWyk2DDHUy2shoezHq0ybpjSZPI=)
2: lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl (hash: sYJVVw+ouzhwbs9i019T32MloZ9B4GFwY0UvPAMV22A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:56:a6:a5:9e:53:d1:1a:a5:12:1d:68:d6:7f:89:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9611264bb9e4e6fa99449ee456c5d053f3ad01c5
Validity
Not Before: May 8 10:00:13 2025 GMT
Not After : May 9 10:00:13 2025 GMT
Subject: CN=d856a05c507d34f86ee5fbe17e94ebc6c5cff5d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8c:ae:ac:9a:84:4e:4c:6e:2c:ff:10:40:28:
b5:99:a5:2f:0e:e1:f0:3b:ae:8f:f5:5a:64:28:a9:
f6:ce:7d:0f:c2:3a:87:3b:e6:16:7f:41:31:1c:4c:
f5:18:e3:40:42:ee:69:ae:5e:a0:a1:cd:31:83:c7:
33:b5:f9:da:a0:50:f3:32:15:12:71:12:4f:a5:26:
1d:41:de:8b:eb:1c:be:b1:d2:03:af:c6:dc:03:47:
49:37:06:a8:fe:7b:4e:bb:e3:80:db:66:59:48:cb:
25:5e:89:44:e7:f7:fc:d1:6d:97:21:89:fa:59:1f:
67:54:d1:a2:18:5a:bf:4f:3d:40:e7:2a:68:55:51:
08:32:eb:a4:4b:95:b7:d9:50:8d:9a:46:e7:c4:d1:
69:11:6e:88:99:82:70:e1:b9:87:e9:51:b5:93:58:
fc:f8:2d:ef:a1:9c:21:c3:65:6d:ae:ab:93:19:c3:
cd:99:4c:d3:cd:0f:54:75:4d:7a:7c:4d:e6:1b:79:
88:1f:c2:60:49:4f:b3:2d:3a:75:3d:fd:a5:2b:2e:
79:38:88:03:96:93:22:05:7e:3e:c5:73:ff:61:91:
5f:52:34:4b:f3:93:63:be:5f:87:12:07:48:2f:85:
cb:4e:0e:4d:6b:36:1b:e8:a9:88:4b:81:9a:e4:6e:
1e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:56:A0:5C:50:7D:34:F8:6E:E5:FB:E1:7E:94:EB:C6:C5:CF:F5:D0
X509v3 Authority Key Identifier:
keyid:96:11:26:4B:B9:E4:E6:FA:99:44:9E:E4:56:C5:D0:53:F3:AD:01:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:3c:4d:19:0d:69:65:f8:ed:98:c7:3b:68:28:be:89:21:ca:
ae:d8:f0:e8:ed:e2:52:9a:88:fb:05:57:e7:58:08:04:96:3c:
fd:fd:c1:8b:5a:74:4e:6a:aa:5a:7e:72:d1:5d:72:24:2b:9a:
51:98:db:1b:73:a7:eb:29:7b:c2:93:41:c4:05:fd:d7:02:7e:
cb:a5:d6:3d:04:c9:ae:ef:20:8a:9b:7c:c8:9e:34:97:f5:c1:
8b:75:55:8d:e9:19:e1:af:61:ad:a1:cd:81:c1:b9:1d:fc:49:
28:a5:44:05:05:6c:c0:96:d0:ea:0b:16:da:44:b5:e2:05:79:
4e:b3:86:d5:a8:0f:b6:e8:a6:e3:a0:fe:95:72:ce:8d:f9:fe:
5a:14:c5:3e:0c:19:e1:0d:c2:10:ab:d9:5a:0f:65:ea:e0:21:
bd:6c:2d:4b:f3:11:07:f4:95:03:1f:9e:1f:a2:47:de:44:50:
c3:6f:b6:2c:c3:2c:8b:ee:b3:84:38:cc:69:dd:1f:d8:0f:51:
90:f3:35:3b:fa:41:bf:30:68:7a:54:df:03:81:24:c3:2d:b2:
bd:d9:7c:33:e7:54:7c:cb:e0:67:8c:9a:e3:5e:6c:9e:67:9a:
24:a5:d4:11:22:0c:82:50:91:3f:df:80:4c:f3:0d:56:5f:a1:
a0:e4:19:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 13:15:28 2025 by rpki-client