Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
File: Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft (raw, json)
Hash identifier: CCt3XXDhSRcvlHDNkdZLUuDaQdnsko/qKXXkM+YEAnc=
Subject key identifier: C0:9E:45:13:F4:1F:D3:9B:8F:E6:9C:F3:1E:7F:31:01:A4:6A:5C:0B
Authority key identifier: 2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
Certificate issuer: /CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Certificate serial: 019675D573BEF1419497DDA331377CFD7AB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
Manifest number: 14E3
Signing time: Sun 27 Apr 2025 06:00:45 +0000
Manifest this update: Sun 27 Apr 2025 06:00:45 +0000
Manifest next update: Mon 28 Apr 2025 06:00:45 +0000
Files and hashes: 1: Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl (hash: 957ChwqK7F5PZif+pz/KOnRdGlAhD6jlqvJxKXIzX3w=)
2: M21MDqZhLpMUHwm9053y5X5hUu4.roa (hash: SYGPLAqkM4uXfmWggV4XyNi06NaAyivAORW2HClwZBk=)
3: nXQPLiO12M3Y_MzU88OuVYMZ5_U.roa (hash: T3shL01w4f9E1vbhrlXsqoTnaDV8nANG2xjOAb2Kx6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:73:be:f1:41:94:97:dd:a3:31:37:7c:fd:7a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Validity
Not Before: Apr 27 06:00:45 2025 GMT
Not After : Apr 28 06:00:45 2025 GMT
Subject: CN=c09e4513f41fd39b8fe69cf31e7f3101a46a5c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:23:5e:1e:a4:bf:3b:51:3c:e9:ea:d6:56:4c:
0d:d2:d3:c1:53:f1:83:cf:6d:e9:20:9a:d7:12:d3:
91:60:aa:f3:89:e3:89:19:c7:08:ee:fe:0c:f8:8b:
20:0b:82:21:1b:c5:1c:31:5f:ab:97:2f:91:48:9f:
70:dc:69:0a:05:c2:77:b1:e9:ca:6f:d5:6f:18:08:
9a:35:0a:9e:1c:f0:2a:b0:07:58:97:bb:a7:72:16:
8a:be:7e:f0:2d:d1:f6:09:c3:ff:70:cc:eb:9c:04:
c2:27:62:98:d1:70:0e:fa:b3:e6:7f:1c:db:12:0f:
12:b7:74:2d:bc:a5:e1:22:fa:d7:d5:37:5a:73:d3:
4c:ea:72:a2:52:77:66:89:9c:88:9d:0d:c3:44:6b:
de:3c:62:30:63:90:c6:9e:af:4e:9a:3c:e5:81:39:
bd:0b:09:04:9b:bd:7c:da:5d:87:72:2e:29:f7:1c:
4e:64:3b:be:d5:87:30:a4:82:ff:af:8e:31:a5:ae:
b2:b5:0d:ef:75:fe:05:8b:95:f7:67:46:4c:44:37:
93:e9:e1:f0:8b:35:45:01:02:fe:bb:17:75:e0:e5:
8a:0b:a5:0a:f5:c0:eb:10:1b:42:c0:c8:9a:b6:70:
01:b5:9c:e1:d0:33:67:fa:7d:0f:cd:aa:9a:64:94:
bd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:9E:45:13:F4:1F:D3:9B:8F:E6:9C:F3:1E:7F:31:01:A4:6A:5C:0B
X509v3 Authority Key Identifier:
keyid:2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c2:7f:f5:66:93:0b:b1:b2:92:8e:54:18:aa:ca:04:81:3e:
31:ff:b0:a6:eb:9a:e7:54:74:d7:8d:9b:8a:13:8a:4a:97:e8:
43:72:08:4d:0b:53:00:61:3c:57:de:9b:80:e1:62:4b:5e:05:
c7:a3:83:55:5b:b4:f6:7b:a3:78:48:19:b4:1f:c4:ca:48:e6:
ea:51:24:d3:a2:be:a6:7a:b6:84:46:86:80:03:48:04:14:fa:
6b:32:2d:af:59:2a:ed:0d:2f:40:ca:df:c5:00:c6:c1:f2:14:
ce:6a:bb:68:f0:57:a3:3b:8a:52:47:ff:8c:cd:26:f0:15:8b:
f6:9e:4f:9f:f0:51:8b:43:3e:a4:00:6b:46:af:34:ef:09:07:
0e:74:9d:db:73:b1:71:1a:c2:cf:ec:bc:e1:4f:9c:72:6d:5d:
6f:d8:93:d4:2e:17:f6:92:cc:17:0f:20:47:0d:56:d5:0d:b2:
4c:9f:30:f3:57:77:8f:ea:a0:9c:29:0c:89:c1:ab:de:29:4e:
bf:48:0e:c7:27:b1:f5:64:71:c6:81:fc:0b:64:27:d8:c1:54:
ed:8c:de:86:59:19:6f:25:37:19:58:c9:7a:64:db:d4:b5:91:
ca:70:5f:b7:1c:b0:cd:62:e1:57:65:21:c5:4a:e7:df:5d:f2:
e4:8c:d4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:20:51 2025 by rpki-client