Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft
File: lHjtPq1if84WxRgCUMRmIXMY1lw.mft (raw, json)
Hash identifier: sX9wYDKyvSQhtgo6R+PaWyM3ziBUI+imSYjZ4Ek5RhE=
Subject key identifier: 5B:7D:A6:28:E4:86:34:35:21:AE:2D:31:A4:D7:A2:35:11:05:31:18
Authority key identifier: 94:78:ED:3E:AD:62:7F:CE:16:C5:18:02:50:C4:66:21:73:18:D6:5C
Certificate issuer: /CN=9478ed3ead627fce16c5180250c466217318d65c
Certificate serial: 0196B89107DF46DD926A09A390FCE0BE755C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft
Manifest number: 1530
Signing time: Sat 10 May 2025 05:00:34 +0000
Manifest this update: Sat 10 May 2025 05:00:34 +0000
Manifest next update: Sun 11 May 2025 05:00:34 +0000
Files and hashes: 1: df6eEH1lcm-NQu74tYmhvofIQ3M.roa (hash: 2j1bAmdfTQz3oXGIdGeOLHdjury5pLuTexUtxV+TqRE=)
2: lHjtPq1if84WxRgCUMRmIXMY1lw.crl (hash: tN8IRJbAdyvMPjKzM2ABimUEtjnb83JtWmBq2O1PkuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:91:07:df:46:dd:92:6a:09:a3:90:fc:e0:be:75:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9478ed3ead627fce16c5180250c466217318d65c
Validity
Not Before: May 10 05:00:34 2025 GMT
Not After : May 11 05:00:34 2025 GMT
Subject: CN=5b7da628e486343521ae2d31a4d7a23511053118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:67:4a:fe:17:0c:a9:cc:f2:c7:7f:94:bd:34:
9c:9f:85:aa:52:3f:7a:bc:0c:46:c7:36:ea:dc:30:
15:39:e0:2e:6c:66:f1:82:31:d1:65:1c:36:3e:7e:
18:af:4f:22:1f:bd:1e:c5:e9:0c:ed:1a:8b:cd:f1:
fa:df:e3:c6:30:17:5a:41:03:3d:d4:72:36:76:ec:
94:e3:79:a4:9e:17:ae:c0:f8:ce:3c:32:f8:53:b0:
56:32:13:da:de:30:62:96:45:93:69:a4:91:34:a7:
1b:e3:02:07:a3:04:be:ec:19:b3:3f:55:b4:90:19:
1f:93:ca:70:3c:85:50:3a:3e:7e:0e:be:a5:96:c9:
3e:34:7c:a7:81:d6:26:de:b5:f7:9b:7d:e1:64:d5:
8b:86:9e:0a:3b:51:7a:06:28:b9:c6:c4:f6:45:75:
e0:d7:16:ad:3d:82:0a:af:aa:f7:14:a1:eb:16:56:
62:28:73:e4:50:36:81:59:49:e3:82:c2:dd:87:80:
5e:20:17:08:35:12:e8:9a:16:a8:c8:16:80:c1:e2:
93:e2:a7:48:65:96:db:42:03:69:4b:8f:eb:79:b1:
35:7c:d2:7a:a5:da:ae:59:7c:02:6c:e3:32:73:68:
3e:bc:e7:1d:dc:dd:db:2d:b3:d6:c3:72:33:f8:02:
86:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:7D:A6:28:E4:86:34:35:21:AE:2D:31:A4:D7:A2:35:11:05:31:18
X509v3 Authority Key Identifier:
keyid:94:78:ED:3E:AD:62:7F:CE:16:C5:18:02:50:C4:66:21:73:18:D6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHjtPq1if84WxRgCUMRmIXMY1lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e4be23-b536-4e30-9a5b-5d5d02bb7199/1/lHjtPq1if84WxRgCUMRmIXMY1lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:fb:15:0b:f4:93:49:98:2c:33:ab:ce:4b:4f:59:8c:96:c7:
3e:74:15:3f:48:d5:e1:3f:99:e9:4f:57:d1:f5:15:63:7f:b9:
90:43:fc:03:81:28:be:c5:3d:3c:0c:ee:2d:bf:36:75:9e:e4:
30:1b:57:ed:ec:bc:e2:f4:cb:3c:cd:36:1f:ba:03:2f:6a:e4:
9a:87:83:81:d9:4c:ce:b1:99:6d:4c:50:77:67:85:ef:ca:03:
b6:10:71:33:23:8d:33:cc:e3:66:a4:53:c4:99:21:2d:09:b6:
80:34:b1:40:85:78:c9:b8:7c:0e:84:fc:0f:66:98:4d:42:8d:
44:46:3f:97:99:8d:e6:b8:20:92:e7:70:b6:dc:1f:fa:3d:a4:
9c:30:95:3e:65:cc:5e:47:15:8d:45:7b:c7:3a:1d:44:92:f1:
d1:1e:25:58:75:c7:14:f4:88:b5:e2:10:ee:5d:f5:13:17:2f:
0d:a2:4d:60:f3:28:4b:a4:d3:dd:5d:fc:33:79:84:22:7e:8b:
0d:b2:83:e5:ab:dd:71:40:82:ea:dd:a2:5a:d2:57:55:13:21:
96:e1:67:d7:06:f6:2a:5a:97:0e:eb:ef:19:e8:ff:b7:64:6f:
cb:9b:85:8a:c3:c4:82:29:aa:cc:d3:f4:21:c3:0d:48:cc:44:
ba:01:83:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 15:18:52 2025 by rpki-client