Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft
File: lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft (raw, json)
Hash identifier: 6zC4TIRJdmVBE7rqrUS6dvpGF+9Ofl0dEX8pbNak7R8=
Subject key identifier: 33:8D:26:A3:99:12:E8:28:A3:E9:43:EC:88:AC:F4:EE:BD:75:55:FE
Authority key identifier: 96:65:C8:11:0D:0D:D8:6A:7E:BB:09:38:AA:32:E0:9D:1D:B1:22:F6
Certificate issuer: /CN=9665c8110d0dd86a7ebb0938aa32e09d1db122f6
Certificate serial: 01967DFC96F12CDF6B58F1DB673442C61D67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft
Manifest number: 0DB8
Signing time: Mon 28 Apr 2025 20:00:27 +0000
Manifest this update: Mon 28 Apr 2025 20:00:27 +0000
Manifest next update: Tue 29 Apr 2025 20:00:27 +0000
Files and hashes: 1: hDr7XZdy7Zu__1e0bkoorUALVGI.roa (hash: Ah9s+DUMovObb0WEEgnVu12bFf+2vlp0mJLr4ANjGq0=)
2: lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.crl (hash: QUIFpu6DoEXbbhXYivQYfmTJGl3BV0qmcPcfDrItcWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:fc:96:f1:2c:df:6b:58:f1:db:67:34:42:c6:1d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9665c8110d0dd86a7ebb0938aa32e09d1db122f6
Validity
Not Before: Apr 28 20:00:27 2025 GMT
Not After : Apr 29 20:00:27 2025 GMT
Subject: CN=338d26a39912e828a3e943ec88acf4eebd7555fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2d:cf:0a:78:46:00:49:e2:11:7f:48:de:1b:
ec:20:eb:9d:62:7a:0a:35:09:e6:69:01:77:7f:52:
85:25:ed:d9:fb:fa:9e:a3:89:ef:f7:5b:ac:cf:d6:
7c:2a:b4:d1:65:4f:42:3d:ad:d6:ba:99:c7:11:dc:
56:b3:cf:00:74:96:42:f2:f7:ae:61:a3:50:c0:9f:
1b:e6:58:9c:09:09:50:b3:16:4f:39:ea:80:9e:aa:
14:e7:e4:c0:29:f8:cf:d7:e4:98:64:e6:ac:41:93:
9a:4c:e6:e6:5f:8f:a0:33:34:08:3c:15:da:71:81:
f6:a4:6d:3e:ab:b5:00:32:1f:e3:da:71:e0:fe:9f:
1d:8e:29:dd:b5:2e:1b:1f:74:5d:1c:42:18:d6:23:
2c:1d:87:e6:bc:ec:31:bf:ba:05:5f:81:4a:8f:ae:
0d:f8:40:e3:14:cb:f2:5b:d2:82:45:5d:71:b7:0d:
88:1d:fc:50:09:52:e1:d4:e3:5f:7d:0c:62:9a:6b:
12:21:1c:41:34:b5:df:2c:8b:f5:7d:59:ed:7d:39:
c7:7c:83:dc:a6:02:b7:af:6c:1d:6f:7e:3a:2b:84:
a6:db:9d:45:9d:6e:39:d5:08:96:08:b3:4b:03:4f:
9d:11:e9:ba:64:72:76:16:86:39:96:57:fa:bc:d2:
5c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:8D:26:A3:99:12:E8:28:A3:E9:43:EC:88:AC:F4:EE:BD:75:55:FE
X509v3 Authority Key Identifier:
keyid:96:65:C8:11:0D:0D:D8:6A:7E:BB:09:38:AA:32:E0:9D:1D:B1:22:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:00:b7:bb:af:43:26:67:4e:80:8b:94:fe:69:07:83:b3:d1:
77:61:c0:aa:9b:90:ff:42:d7:a2:1f:33:11:88:fd:2e:73:2c:
ea:09:b0:a8:b7:ce:5e:5d:05:d3:34:6f:83:81:12:a3:84:e2:
6e:96:6e:7b:ec:fc:91:da:a0:ca:34:1e:a4:9e:08:21:fa:ff:
22:6e:5b:99:4c:d8:13:10:f6:26:4b:40:fc:f7:57:e3:0d:66:
ca:9d:6f:ea:ef:b8:9f:0f:4c:98:1a:84:ca:d2:74:8a:5c:51:
25:77:38:aa:fe:f6:ce:ac:f2:f5:5f:dd:fb:5c:92:d8:0b:05:
40:b2:9d:06:86:0f:a5:bf:7e:5d:ae:3e:e4:77:af:ab:d2:94:
c5:05:0e:d4:ea:77:cc:15:63:78:cb:ab:05:aa:c6:e3:fc:94:
d2:ba:d8:07:fb:b6:19:0e:96:1a:3c:38:55:c7:84:14:cd:93:
85:15:58:89:51:89:c0:ab:60:69:97:cc:f7:44:bb:ab:18:83:
15:c3:54:75:c3:0d:1b:75:5f:9a:45:1d:2b:d8:2b:e8:6b:2c:
a8:d2:65:8e:b1:ba:10:d1:a4:49:d6:40:82:ad:fa:14:21:2f:
ae:c7:c8:c3:5d:77:64:1e:90:5e:89:f1:2f:00:0d:ef:6b:71:
cd:42:37:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:36:26 2025 by rpki-client