Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft
File: lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft (raw, json)
Hash identifier: XeUR/HLPKshnTH4zggJjHqwGHavLUfZi1VcSyVoDgZc=
Subject key identifier: C9:52:8F:B2:79:C3:25:E2:95:2A:40:A1:2D:F0:6E:74:89:96:DD:F4
Authority key identifier: 96:65:C8:11:0D:0D:D8:6A:7E:BB:09:38:AA:32:E0:9D:1D:B1:22:F6
Certificate issuer: /CN=9665c8110d0dd86a7ebb0938aa32e09d1db122f6
Certificate serial: 01977ED5B2A8FADBADB32025883622622A21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft
Manifest number: 0E3D
Signing time: Tue 17 Jun 2025 17:00:23 +0000
Manifest this update: Tue 17 Jun 2025 17:00:23 +0000
Manifest next update: Wed 18 Jun 2025 17:00:23 +0000
Files and hashes: 1: hDr7XZdy7Zu__1e0bkoorUALVGI.roa (hash: Ah9s+DUMovObb0WEEgnVu12bFf+2vlp0mJLr4ANjGq0=)
2: lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.crl (hash: KzSB2e0itnvtPqj4d8T0mhCGU8lcqcg3jaFdRx87JYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:d5:b2:a8:fa:db:ad:b3:20:25:88:36:22:62:2a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9665c8110d0dd86a7ebb0938aa32e09d1db122f6
Validity
Not Before: Jun 17 17:00:23 2025 GMT
Not After : Jun 18 17:00:23 2025 GMT
Subject: CN=c9528fb279c325e2952a40a12df06e748996ddf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3e:00:7c:f4:96:68:8d:3d:3e:5c:5c:9b:da:
f2:0e:0a:df:4e:12:82:13:43:fc:4f:7a:fa:55:44:
fd:f4:c7:d7:a2:f1:8f:ee:65:29:9d:9d:82:bc:9b:
07:b2:f3:80:c2:d2:46:90:6a:15:2b:e3:38:01:0e:
af:28:dd:44:5a:bf:3c:0d:57:13:0a:d5:65:d0:79:
55:ba:89:cd:00:e0:5b:bb:8c:5b:16:82:3b:79:5f:
41:e8:1e:de:b6:c7:0f:41:73:b7:ef:f7:c4:a9:ed:
b5:8a:41:d0:a4:38:82:98:6e:0a:47:ab:bf:6d:a7:
d2:46:38:c2:2d:51:46:dd:31:09:73:f4:c9:7f:de:
cb:93:07:93:ec:f5:ed:d1:0e:73:51:7e:b5:41:db:
87:c6:ad:1a:5a:65:a2:b3:e6:8e:8a:fd:ec:44:4d:
36:56:89:2c:e1:6d:82:d2:41:9f:ef:56:a4:aa:fe:
8d:16:26:d9:1c:60:f0:a5:46:24:1a:18:b8:fb:ab:
c7:50:e1:52:cc:80:c7:af:aa:b2:58:3d:2c:e0:d2:
b6:1f:76:ef:4a:81:f3:81:2e:b1:52:8c:b7:aa:0a:
75:cc:9b:f1:0b:cc:ed:0f:47:61:32:ae:ff:5e:6f:
1d:7f:1e:59:db:55:88:71:20:68:7e:9a:65:73:27:
f7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:52:8F:B2:79:C3:25:E2:95:2A:40:A1:2D:F0:6E:74:89:96:DD:F4
X509v3 Authority Key Identifier:
keyid:96:65:C8:11:0D:0D:D8:6A:7E:BB:09:38:AA:32:E0:9D:1D:B1:22:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:01:6b:bc:13:10:a7:f6:e5:06:76:e3:e9:2f:01:c8:60:f6:
b7:04:94:1b:1e:3b:5b:3b:67:1a:47:b3:f3:e4:ec:96:c2:d9:
f8:c8:85:7f:e7:01:ad:4e:ee:b5:82:86:2f:48:36:a9:38:14:
2b:0e:2f:49:d5:6a:83:89:8c:fa:4d:c6:35:20:c4:e3:fe:3d:
aa:9e:fd:a5:e5:ea:a7:76:76:f8:6d:d2:83:a8:09:3e:ec:42:
bb:47:5c:73:73:d4:0f:7d:cc:eb:76:f6:0d:4d:c7:0e:7b:ac:
96:dd:0a:5b:11:d3:72:5e:76:ca:18:53:f4:75:c1:c2:9d:75:
11:b7:6d:e5:5b:19:1b:e5:98:b2:fe:e1:29:a7:56:8f:61:be:
35:12:f6:a4:71:cc:85:fe:6f:84:db:2b:63:f6:c8:25:80:b7:
a1:a4:5b:93:62:0d:10:69:5f:51:78:37:6c:5f:dc:2a:ff:90:
7b:13:35:53:b1:2b:0a:8d:0f:5e:08:8f:2f:e9:79:e4:a8:61:
3b:54:0c:b4:06:af:ac:7f:7b:ed:1d:12:e5:11:64:f5:5d:5b:
1e:3d:24:87:5d:8d:ec:1f:77:19:e5:8f:ae:1b:de:5e:ca:58:
98:dc:08:c3:a7:9d:ed:01:46:a9:73:c9:17:29:da:7a:39:d0:
32:4b:f6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 20:30:21 2025 by rpki-client