Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
File: lmAVV4yUjzG_dKHh__1_o-NGAgY.mft (raw, json)
Hash identifier: u7VvQVyyACrztwcheqqWl6k8CiRC++BwCJrND7oSwqs=
Subject key identifier: 7D:20:F2:DB:D9:5E:8E:5A:83:A2:13:49:1D:DA:40:95:50:FC:22:68
Authority key identifier: 96:60:15:57:8C:94:8F:31:BF:74:A1:E1:FF:FD:7F:A3:E3:46:02:06
Certificate issuer: /CN=966015578c948f31bf74a1e1fffd7fa3e3460206
Certificate serial: 0196778D14BE5DA389096B6C7AAF2E4A1752
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
Manifest number: 0B9C
Signing time: Sun 27 Apr 2025 14:00:56 +0000
Manifest this update: Sun 27 Apr 2025 14:00:56 +0000
Manifest next update: Mon 28 Apr 2025 14:00:56 +0000
Files and hashes: 1: OE686EGR1IVKz-bx67_ZsH11lHQ.roa (hash: S5Z4RalwztbreTYazKn4Yw+ySxhuT6+PltCXQ/y03p0=)
2: lmAVV4yUjzG_dKHh__1_o-NGAgY.crl (hash: xEz4shG0hye5/XgeBeJ378Nm9l60Se/BPqK2NdilNJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:8d:14:be:5d:a3:89:09:6b:6c:7a:af:2e:4a:17:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=966015578c948f31bf74a1e1fffd7fa3e3460206
Validity
Not Before: Apr 27 14:00:56 2025 GMT
Not After : Apr 28 14:00:56 2025 GMT
Subject: CN=7d20f2dbd95e8e5a83a213491dda409550fc2268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f4:74:44:bb:9a:57:0f:71:c1:97:48:2f:4c:
2a:45:c9:a3:78:31:62:54:0d:a9:a7:1b:3e:4d:3b:
85:5c:76:d5:0f:ae:d5:0d:51:13:54:24:d6:ee:2c:
2d:d1:b7:ba:c8:e3:52:07:d4:48:6e:be:ba:47:51:
57:a1:e4:27:ed:f9:98:a7:d0:8f:d9:63:65:32:2f:
ce:15:38:bd:86:a9:40:2c:00:4c:42:6f:55:85:bf:
f6:43:9b:0e:ed:27:c0:50:e0:fb:de:19:56:11:07:
c7:e3:97:22:9d:38:5d:79:54:b5:ee:6a:2e:e4:74:
b6:32:53:a5:73:5e:90:27:06:4b:0f:85:76:22:9e:
d1:05:e7:2a:5f:41:0f:ff:b6:da:ff:f9:1d:96:73:
36:9d:be:af:5d:40:43:69:41:a1:5b:73:2b:49:71:
ab:79:27:89:9d:9a:de:49:41:fe:aa:47:cd:a7:df:
7e:d1:e2:e7:60:e1:42:30:2e:68:b2:95:43:80:b1:
8e:d6:45:3a:dd:fa:40:8d:7c:1c:2e:73:4b:ae:21:
11:02:d1:d6:31:1e:36:56:27:dd:0a:b1:70:98:cd:
03:fc:bf:78:d1:bc:da:99:ae:72:c2:6f:0e:03:76:
25:96:39:40:6f:e4:f1:87:67:12:af:4d:2e:42:c1:
c0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:20:F2:DB:D9:5E:8E:5A:83:A2:13:49:1D:DA:40:95:50:FC:22:68
X509v3 Authority Key Identifier:
keyid:96:60:15:57:8C:94:8F:31:BF:74:A1:E1:FF:FD:7F:A3:E3:46:02:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:99:f4:53:01:d0:f6:ec:8d:4f:57:bb:8f:f2:63:e8:6d:e6:
5d:34:a2:99:3d:a1:d6:4b:28:b0:73:7b:3e:58:4b:60:a5:fe:
77:05:97:52:bc:e4:12:c3:36:79:6d:b1:de:31:c1:75:74:77:
dd:e6:4f:ec:cf:c8:55:07:cc:91:fd:ff:45:14:7f:ae:e2:6d:
2c:78:bb:48:a2:31:81:a3:53:5b:f4:06:cc:c8:58:91:bb:dd:
72:a2:32:a4:83:89:54:82:39:a7:82:85:46:30:47:ea:d4:d3:
ad:a2:a0:16:d4:2c:25:9d:4f:d4:4d:f2:e8:ed:71:37:3d:72:
4c:75:64:84:e9:4c:af:ce:5c:f9:a3:91:ac:99:63:63:08:2e:
92:89:35:1f:de:ba:44:33:13:65:d0:65:b7:fa:26:70:f2:d5:
7e:c7:90:7b:4a:69:07:f5:6a:2a:35:f9:51:bb:37:a8:bc:89:
a3:a6:0e:a9:ea:a5:aa:92:e7:5d:be:42:49:8c:78:1c:56:1a:
b4:72:2c:ef:5d:a9:5a:8c:b3:ad:a0:09:c0:80:b7:18:2d:30:
41:f8:70:1a:92:9c:4b:1a:86:31:73:56:f3:5f:12:8b:8e:8e:
d6:84:c0:7e:26:6a:0b:a5:91:37:72:c3:57:02:75:4c:ff:40:
7f:38:ff:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:10:15 2025 by rpki-client