Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/04cb8b-0f54-45fb-9f1e-ac2b74d0c699/1/Lvkmmrf2FMHs-iNZko7uXe85oJ0.mft
File: Lvkmmrf2FMHs-iNZko7uXe85oJ0.mft (raw, json)
Hash identifier: EgA/1mfas6E/mce1gbOQWG67uuhfXFG5dPnX0Et7PDw=
Subject key identifier: 3B:DD:EC:7F:38:C8:0E:33:62:AB:E3:73:C5:9D:98:E1:6B:41:6B:88
Authority key identifier: 2E:F9:26:9A:B7:F6:14:C1:EC:FA:23:59:92:8E:EE:5D:EF:39:A0:9D
Certificate issuer: /CN=2ef9269ab7f614c1ecfa2359928eee5def39a09d
Certificate serial: 0196748BBBB4C49FB030F9FAC24439597AB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lvkmmrf2FMHs-iNZko7uXe85oJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/04cb8b-0f54-45fb-9f1e-ac2b74d0c699/1/Lvkmmrf2FMHs-iNZko7uXe85oJ0.mft
Manifest number: 90
Signing time: Sun 27 Apr 2025 00:00:36 +0000
Manifest this update: Sun 27 Apr 2025 00:00:36 +0000
Manifest next update: Mon 28 Apr 2025 00:00:36 +0000
Files and hashes: 1: Lvkmmrf2FMHs-iNZko7uXe85oJ0.crl (hash: 2xkY5q9ApcD5reSUYLrV1oU+CIVgEiHXUHOE7GCk2wg=)
2: S7R40cp3GhnKkmjft9RMef_54Y8.roa (hash: 8lQswAz9iKln85edEU2eDSuB3VyL1jNQyiwguuxfyac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/04cb8b-0f54-45fb-9f1e-ac2b74d0c699/1/Lvkmmrf2FMHs-iNZko7uXe85oJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/04cb8b-0f54-45fb-9f1e-ac2b74d0c699/1/Lvkmmrf2FMHs-iNZko7uXe85oJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lvkmmrf2FMHs-iNZko7uXe85oJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 00:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:bb:b4:c4:9f:b0:30:f9:fa:c2:44:39:59:7a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ef9269ab7f614c1ecfa2359928eee5def39a09d
Validity
Not Before: Apr 27 00:00:36 2025 GMT
Not After : Apr 28 00:00:36 2025 GMT
Subject: CN=3bddec7f38c80e3362abe373c59d98e16b416b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:62:4d:30:ab:fc:e2:49:ba:42:2b:68:03:d5:
bb:94:fc:c9:ea:9a:97:f0:4c:ae:88:8d:7b:cb:71:
0f:06:38:7f:bb:78:64:55:8c:27:e0:05:11:c7:1b:
30:0b:de:74:a0:ce:c3:26:81:08:fe:32:d7:e1:9b:
97:67:2e:ec:60:a8:9a:37:c4:c6:0d:2a:aa:47:cf:
5f:7d:e5:94:c3:11:4d:37:91:fe:58:73:21:e4:b4:
a7:3f:a6:8e:49:7a:a7:60:ec:01:52:24:b7:df:5d:
ce:35:37:37:f0:f3:c1:e1:91:d7:66:75:bd:6a:f2:
bd:84:87:95:f2:d8:dc:54:ce:b0:4a:0a:27:b5:87:
2e:b1:32:8a:9b:2c:54:d7:9e:60:4d:9d:2f:23:18:
f3:08:81:61:a7:59:20:38:96:05:16:6b:43:b5:d8:
1e:e3:30:a7:96:cb:42:6a:54:de:3d:f5:b6:10:4b:
7f:1a:c4:b3:67:c4:4e:44:61:7a:61:13:21:14:11:
87:be:aa:73:95:b4:35:0e:12:62:26:8a:ac:25:d1:
44:bd:0d:54:99:21:9a:b4:0b:e2:3d:a4:9d:85:2b:
3e:fd:d4:d4:f6:8f:ec:91:2c:a8:b9:5b:07:46:ba:
40:9e:45:f2:a1:34:6e:f7:a2:8e:46:33:18:1c:3f:
01:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DD:EC:7F:38:C8:0E:33:62:AB:E3:73:C5:9D:98:E1:6B:41:6B:88
X509v3 Authority Key Identifier:
keyid:2E:F9:26:9A:B7:F6:14:C1:EC:FA:23:59:92:8E:EE:5D:EF:39:A0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lvkmmrf2FMHs-iNZko7uXe85oJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/04cb8b-0f54-45fb-9f1e-ac2b74d0c699/1/Lvkmmrf2FMHs-iNZko7uXe85oJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/04cb8b-0f54-45fb-9f1e-ac2b74d0c699/1/Lvkmmrf2FMHs-iNZko7uXe85oJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:7c:03:bf:b2:e0:85:00:06:30:9d:a2:a1:fb:3f:86:a8:95:
97:58:12:a0:b2:35:05:95:61:6a:e9:7a:b8:fe:b1:0e:cb:7b:
e2:b0:33:d5:b7:38:9c:fd:5f:b3:5d:29:e8:45:d6:e6:58:61:
d7:69:9f:52:d0:33:3c:f1:13:5e:d1:e9:35:4f:23:08:2d:5a:
db:3f:6e:90:08:1c:6a:42:e0:9b:23:1e:c5:21:6e:00:5d:a3:
5f:a0:6f:e7:0a:0a:60:2d:61:0e:a7:0f:4a:26:b0:ac:f8:b0:
70:fd:d5:a5:79:47:df:eb:a1:ab:2b:b7:ea:36:09:df:fe:f0:
4c:cf:15:3c:b8:18:86:6c:c7:b3:47:b1:13:e6:ed:e2:b5:4e:
bf:fb:50:d6:ed:69:62:02:b7:43:f1:de:f9:03:22:b8:59:ea:
1a:15:e8:f4:b8:7f:71:81:e4:30:04:74:9f:af:c9:42:55:93:
a2:17:79:46:af:52:b5:c3:b9:b6:b3:26:35:11:7c:61:39:da:
3e:9f:dc:01:4a:37:46:65:b6:50:13:eb:22:ee:9f:09:87:98:
ab:55:d4:34:76:d0:b8:d8:d5:82:70:81:1b:57:92:8a:9e:83:
d7:70:0f:09:84:cb:6e:b8:dd:ee:93:0d:5e:0b:3c:bf:e3:2f:
57:c7:b4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:43:50 2025 by rpki-client