Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
File: Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft (raw, json)
Hash identifier: GjGNULkQIkDWmgW0I70wKG8cboJAUwLSM6MNlfWB9oE=
Subject key identifier: 04:95:E7:CC:0A:59:8D:7F:60:5A:74:04:C2:1D:05:19:F3:AF:2A:EA
Authority key identifier: 2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
Certificate issuer: /CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Certificate serial: 019776AE904A6CB2BF650AB656483E0DE1FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
Manifest number: 1568
Signing time: Mon 16 Jun 2025 03:00:41 +0000
Manifest this update: Mon 16 Jun 2025 03:00:41 +0000
Manifest next update: Tue 17 Jun 2025 03:00:41 +0000
Files and hashes: 1: Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl (hash: V0x2zfOUKchjDJ7fwUBFQxdKm0z1FN4sWuLPiwIEbZM=)
2: M21MDqZhLpMUHwm9053y5X5hUu4.roa (hash: SYGPLAqkM4uXfmWggV4XyNi06NaAyivAORW2HClwZBk=)
3: nXQPLiO12M3Y_MzU88OuVYMZ5_U.roa (hash: T3shL01w4f9E1vbhrlXsqoTnaDV8nANG2xjOAb2Kx6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:ae:90:4a:6c:b2:bf:65:0a:b6:56:48:3e:0d:e1:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Validity
Not Before: Jun 16 03:00:41 2025 GMT
Not After : Jun 17 03:00:41 2025 GMT
Subject: CN=0495e7cc0a598d7f605a7404c21d0519f3af2aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:75:77:e4:94:17:de:0e:ef:fd:78:4b:c2:9e:
46:f5:70:62:d1:85:5b:03:75:21:24:a1:dc:b0:c6:
77:15:88:74:36:40:4f:8e:c0:3c:a8:5c:3b:40:3f:
cf:16:d6:26:39:39:58:1c:ca:b9:60:25:a3:2e:97:
ec:b5:ea:10:52:71:da:07:57:a6:b6:7b:0e:6a:54:
57:a0:36:28:8e:98:b4:e0:c9:d7:56:37:02:a2:2f:
54:4a:6d:20:22:ce:3f:41:b4:51:de:93:7c:9c:e7:
d2:5b:cf:47:5a:bf:10:32:3e:7d:93:49:36:cc:8e:
12:28:a1:9e:bc:6d:fa:e1:01:58:e1:66:7a:96:98:
79:ef:9b:fc:70:43:30:ac:b1:70:59:a8:85:97:87:
02:2f:21:c4:9f:f1:57:be:82:5a:ca:4b:1b:c4:99:
f1:5d:ad:6d:b7:5d:ec:af:e2:34:b1:7f:86:c5:fb:
dd:77:f8:35:19:81:0a:ea:aa:2e:ef:50:5a:01:a0:
80:f6:80:5c:bd:d0:e0:42:a6:6b:19:39:49:32:a0:
9f:d6:38:1a:ba:80:74:32:5d:f5:e4:b8:e9:62:a5:
e5:87:21:99:4c:3a:e0:90:a9:8a:2e:7d:27:75:8d:
d5:ad:2e:ff:5d:a6:ee:1b:ca:43:2e:21:74:7c:3b:
14:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:95:E7:CC:0A:59:8D:7F:60:5A:74:04:C2:1D:05:19:F3:AF:2A:EA
X509v3 Authority Key Identifier:
keyid:2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:b6:b1:99:06:3c:05:10:67:13:1e:b8:c5:cf:8a:df:12:be:
63:c4:50:54:7b:d8:e6:0e:59:34:b5:29:b3:ef:d9:67:8c:32:
08:63:0e:d9:1b:9a:36:a5:a0:18:86:a4:7e:27:49:1a:c4:56:
55:ad:4f:19:e0:c0:a9:c1:9b:dd:c5:2b:a6:0d:42:2d:d0:23:
a2:08:88:5e:49:96:f7:12:da:df:c7:dd:a4:a7:1c:6e:1b:d1:
84:28:07:ad:e4:59:02:18:21:56:5b:ce:2e:b4:86:cb:99:6d:
e5:45:47:03:0a:13:89:34:c9:71:24:cf:d9:a0:66:af:91:9b:
49:ec:1b:b5:3e:bb:8b:4c:1c:5f:43:18:96:37:59:86:27:04:
6d:78:83:98:f5:e5:69:20:cb:84:0d:18:f7:02:b2:88:a1:04:
c8:37:0d:b5:be:5d:22:23:c9:1c:c1:d4:cd:d6:95:20:19:0c:
46:b0:2c:bc:05:9b:e8:f1:94:93:61:55:7f:08:29:82:cf:9a:
fc:57:86:ef:8e:2f:85:db:ce:3f:f3:86:df:7a:5c:a3:1b:92:
73:c9:66:22:45:f6:d8:d5:b0:fa:b9:6b:b7:60:e4:b5:b7:9f:
42:9d:28:06:2b:bb:4a:4d:97:7a:35:1b:ce:f3:40:42:d7:b3:
9b:a7:7f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:17:32 2025 by rpki-client