Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
File: lmAVV4yUjzG_dKHh__1_o-NGAgY.mft (raw, json)
Hash identifier: ORTGJZ1zHQRnv8EI89To85tkH0pq2YF9PZTt2EUw8hI=
Subject key identifier: 87:89:C5:83:92:C5:49:48:E3:B0:23:44:35:75:F4:AA:53:62:23:93
Authority key identifier: 96:60:15:57:8C:94:8F:31:BF:74:A1:E1:FF:FD:7F:A3:E3:46:02:06
Certificate issuer: /CN=966015578c948f31bf74a1e1fffd7fa3e3460206
Certificate serial: 019768F2DDB0EBD8D7694B48BF2DC27C2369
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
Manifest number: 0C19
Signing time: Fri 13 Jun 2025 11:00:36 +0000
Manifest this update: Fri 13 Jun 2025 11:00:36 +0000
Manifest next update: Sat 14 Jun 2025 11:00:36 +0000
Files and hashes: 1: OE686EGR1IVKz-bx67_ZsH11lHQ.roa (hash: S5Z4RalwztbreTYazKn4Yw+ySxhuT6+PltCXQ/y03p0=)
2: lmAVV4yUjzG_dKHh__1_o-NGAgY.crl (hash: WeOlMdQKFjG5gFRUxQSau0opUcesfAZlwje3ksuwnkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:dd:b0:eb:d8:d7:69:4b:48:bf:2d:c2:7c:23:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=966015578c948f31bf74a1e1fffd7fa3e3460206
Validity
Not Before: Jun 13 11:00:36 2025 GMT
Not After : Jun 14 11:00:36 2025 GMT
Subject: CN=8789c58392c54948e3b023443575f4aa53622393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cd:a6:2c:ff:cb:5a:5a:a4:d7:d2:44:8b:2b:
68:f1:12:05:0c:4f:3f:83:06:13:8a:ae:96:7f:df:
bc:14:f1:78:f0:7e:19:c8:6d:dc:25:4f:0e:00:31:
06:31:9a:9d:d1:c9:c1:2c:4f:f6:b4:f3:e6:aa:69:
1d:7e:cf:7c:2c:41:ef:aa:2a:fd:08:dd:a2:17:12:
80:46:66:b3:36:a4:6a:1d:07:8d:5a:98:1d:06:1f:
13:6d:4e:c0:4b:2e:5f:ec:58:b8:57:83:34:83:71:
55:62:bd:75:91:db:fa:f3:7a:49:55:44:d6:aa:9c:
81:b4:b1:f2:07:20:b0:c3:f0:cb:16:2d:c6:ed:88:
43:f8:4a:d1:f1:54:6c:e8:7e:fb:db:85:9e:43:ef:
31:22:fa:f0:93:17:b1:18:6d:ae:3c:05:a5:d5:f7:
58:b5:6f:30:99:5d:d6:73:b3:b8:55:8a:f8:8a:68:
67:cc:03:a2:6b:a8:6c:00:26:b0:67:cd:c7:40:90:
b1:2f:18:e5:6d:36:12:85:2f:5a:99:86:df:35:7b:
1d:e3:f9:8e:86:c3:8c:b1:31:ec:59:33:8e:0e:be:
ca:96:26:b9:4e:77:eb:07:7d:d5:77:51:4a:34:e6:
ce:d2:de:3a:f9:9c:57:f0:46:25:60:8e:45:6a:c9:
37:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:89:C5:83:92:C5:49:48:E3:B0:23:44:35:75:F4:AA:53:62:23:93
X509v3 Authority Key Identifier:
keyid:96:60:15:57:8C:94:8F:31:BF:74:A1:E1:FF:FD:7F:A3:E3:46:02:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:35:d3:b1:c9:b2:96:e6:65:df:e3:02:b0:97:e5:07:fc:b9:
19:25:1c:6a:3d:65:df:9c:43:31:d3:93:80:8b:be:c1:ec:38:
0b:1a:97:1f:d0:f4:4b:39:e3:af:01:20:02:6f:89:f9:aa:df:
d7:1c:56:2e:a7:36:a1:98:e4:d9:67:7d:ef:5f:b1:51:3d:36:
5d:30:ac:41:09:6e:38:d7:ef:cb:9d:45:e3:a4:06:e8:54:59:
9b:3b:4c:ed:44:21:f0:92:a4:55:22:30:7a:bb:f9:85:5e:3b:
13:39:7e:84:91:aa:d4:c8:ae:71:70:48:43:18:e9:06:39:d3:
ea:90:31:d6:ac:26:47:da:c6:6b:16:08:b1:10:a8:cc:34:06:
52:03:37:a4:b8:85:f8:a1:e2:3e:19:5e:de:80:f6:3b:56:d7:
60:0b:b3:58:a0:63:2a:66:48:b1:43:4e:e8:d2:e6:f3:0a:38:
42:96:e4:8a:e6:90:09:16:aa:21:e6:2b:3d:7a:07:d1:08:5c:
67:0a:ec:70:0c:f8:d2:03:a6:c0:0a:81:52:9a:80:8d:63:a7:
15:e1:68:21:4f:01:a1:12:da:01:06:07:5f:18:0a:60:cf:42:
03:46:d8:90:d4:61:53:05:f1:6a:ff:f0:26:6e:83:90:38:91:
05:66:75:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:27:27 2025 by rpki-client