Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft
File: LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft (raw, json)
Hash identifier: ccm8mLjkieMDgvKNeGseqhsvM3I82Onoioo9wlC0E2I=
Subject key identifier: 9C:DA:C8:95:26:B1:D6:C4:43:A9:66:A3:79:76:1D:4D:FC:7A:92:38
Authority key identifier: 2D:5F:E0:56:F7:67:7E:43:A6:EF:1A:A1:A0:A0:5C:07:C4:B4:B6:5C
Certificate issuer: /CN=2d5fe056f7677e43a6ef1aa1a0a05c07c4b4b65c
Certificate serial: 0196767A5BFD65F0D3DD146E1962ACE8815C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LV_gVvdnfkOm7xqhoKBcB8S0tlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft
Manifest number: 02E1
Signing time: Sun 27 Apr 2025 09:00:52 +0000
Manifest this update: Sun 27 Apr 2025 09:00:52 +0000
Manifest next update: Mon 28 Apr 2025 09:00:52 +0000
Files and hashes: 1: LV_gVvdnfkOm7xqhoKBcB8S0tlw.crl (hash: JnJSL1nFxTXvXwes1uFzhPhbRz1/eNkpq6tRoW2A67c=)
2: qnFffULuZkD3WAJFMjcSjE8KLV0.roa (hash: 3RoDeJIvhLdUQNKp3436G/+SXszr4AzKvXyWP5Iyh00=)
3: wqY_ixYVjH1acrjorGcEZywYgRk.roa (hash: XpP+SvIXR1YO15boQPEoJQXvWDeccH3hUbCAlDZexo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LV_gVvdnfkOm7xqhoKBcB8S0tlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:5b:fd:65:f0:d3:dd:14:6e:19:62:ac:e8:81:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d5fe056f7677e43a6ef1aa1a0a05c07c4b4b65c
Validity
Not Before: Apr 27 09:00:52 2025 GMT
Not After : Apr 28 09:00:52 2025 GMT
Subject: CN=9cdac89526b1d6c443a966a379761d4dfc7a9238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f3:64:56:09:c5:3b:f4:b9:21:09:94:c9:be:
0c:d7:ab:f3:58:c9:98:93:9e:24:4a:30:8b:6d:c3:
51:e1:cf:f9:42:8c:62:de:d6:97:1c:20:6f:52:be:
7c:46:c5:37:bb:35:e5:e0:09:b9:f5:4a:de:f3:92:
d4:4e:e5:5e:5d:cc:b0:c5:9b:a8:2c:ff:05:9b:9b:
69:72:22:15:69:0d:c6:3f:95:aa:65:b1:fc:0a:00:
3d:d2:a8:b0:66:d2:50:d4:c1:7a:1f:01:28:d6:3b:
64:a4:3e:f0:86:bc:42:3d:8d:99:56:2f:c0:84:b5:
05:e5:64:bf:62:ff:9e:bb:e4:46:62:0a:11:bd:84:
84:76:ee:1a:e0:c2:e5:cd:ea:6b:71:ea:26:7b:89:
37:52:ae:bb:96:c3:1a:27:1f:4b:73:65:05:6c:03:
1e:5d:bc:e7:3e:08:35:55:20:e5:66:33:e6:fe:74:
fa:85:31:f4:4f:26:9a:51:e0:3f:1a:83:96:e5:3a:
97:c8:e1:84:ad:de:ae:8b:21:0e:bb:e7:e0:e6:f5:
34:e4:f5:ee:30:dc:1c:99:6d:80:10:eb:dd:7c:50:
c8:e0:60:8f:73:31:25:18:4f:48:cc:3c:3c:09:9e:
0f:cf:68:05:e2:93:32:c5:36:9c:15:5c:6f:92:4c:
a8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:DA:C8:95:26:B1:D6:C4:43:A9:66:A3:79:76:1D:4D:FC:7A:92:38
X509v3 Authority Key Identifier:
keyid:2D:5F:E0:56:F7:67:7E:43:A6:EF:1A:A1:A0:A0:5C:07:C4:B4:B6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LV_gVvdnfkOm7xqhoKBcB8S0tlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:25:e6:ae:82:bf:22:c5:cf:d7:0d:19:74:40:36:d4:dd:83:
3a:eb:7a:71:8e:82:31:75:ba:69:c7:94:0f:5b:e6:50:16:2a:
e2:bc:ff:de:b1:62:1e:0e:7a:90:9a:79:63:e9:7c:93:16:57:
6d:88:f3:8a:04:49:30:f5:5e:67:8f:70:b5:7f:7e:f6:ef:f1:
09:58:7a:1e:d7:0a:b4:56:64:be:f0:4c:8a:75:88:f0:37:52:
75:47:c8:db:19:37:6a:51:e8:5f:76:fe:87:25:43:1a:a0:86:
81:a7:f4:e6:7d:8a:a0:54:08:fe:04:2f:07:90:2f:06:36:c8:
aa:3f:b3:58:3e:5f:81:ed:20:ac:b2:43:2b:4d:b7:6d:cd:41:
d3:76:33:25:f5:13:d3:31:27:cf:da:1b:05:02:91:0d:ee:55:
56:03:9e:72:60:3e:5f:ea:1b:92:37:cb:bc:72:34:71:6f:e7:
85:00:d0:d9:da:a4:9c:13:4a:48:ef:69:45:9d:cb:ba:8c:96:
70:c6:fb:1c:f7:cb:b3:b7:51:69:89:46:cf:b3:f3:8b:d2:8f:
6d:2f:5a:c9:e2:22:39:c6:fe:ce:0c:ad:a4:c6:c9:d4:31:7d:
6a:84:53:f6:ee:4f:3a:c4:59:5a:8f:de:62:5c:3d:4d:5c:af:
9a:3a:bd:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:02:50 2025 by rpki-client