Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.mft
File: LmvtcNteZzyB8S5zZaNsTz2ie3E.mft (raw, json)
Hash identifier: CWRP8p+olgiyyLw1ZepjIOzCGS+Aow+ZVLe/6SzpwYo=
Subject key identifier: 88:CE:6D:66:E4:18:D3:2A:37:8E:8B:72:86:B9:26:7C:71:15:E4:4C
Authority key identifier: 2E:6B:ED:70:DB:5E:67:3C:81:F1:2E:73:65:A3:6C:4F:3D:A2:7B:71
Certificate issuer: /CN=2e6bed70db5e673c81f12e7365a36c4f3da27b71
Certificate serial: 01965500DB293B05A2D9593FD9456FB4DC94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmvtcNteZzyB8S5zZaNsTz2ie3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.mft
Manifest number: 1011
Signing time: Sun 20 Apr 2025 21:00:41 +0000
Manifest this update: Sun 20 Apr 2025 21:00:41 +0000
Manifest next update: Mon 21 Apr 2025 21:00:41 +0000
Files and hashes: 1: LmvtcNteZzyB8S5zZaNsTz2ie3E.crl (hash: heRZmzD4u9isU6JMO+xxfK0MdPcIhLozoFmROI5oqwE=)
2: cLEFI3xQS9CocTbeHuHrBA7ho04.roa (hash: Oc8zbYVVumhuzpzB+yVW8PsOP/g+K8DFdyeD3cFkIFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmvtcNteZzyB8S5zZaNsTz2ie3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:db:29:3b:05:a2:d9:59:3f:d9:45:6f:b4:dc:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6bed70db5e673c81f12e7365a36c4f3da27b71
Validity
Not Before: Apr 20 21:00:41 2025 GMT
Not After : Apr 21 21:00:41 2025 GMT
Subject: CN=88ce6d66e418d32a378e8b7286b9267c7115e44c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3f:28:5c:aa:38:ba:40:48:d7:62:95:fc:a0:
2a:51:f3:6a:7c:e6:42:5b:06:dc:0f:b7:8b:f5:89:
8f:b6:14:fa:87:57:d1:54:e2:55:36:81:ae:96:f9:
d0:b8:2a:e6:b9:7b:f6:89:23:c9:fc:ca:3a:f0:9f:
b2:79:ca:34:90:af:2c:5e:25:c6:8d:10:58:45:12:
a4:ff:56:15:58:9b:db:5c:0b:da:d4:3c:86:cc:06:
40:fb:0d:0b:57:f2:09:5b:29:98:89:6c:ab:f5:e4:
d9:21:a0:5b:67:2f:a3:64:05:4e:e1:8c:e8:d1:a9:
cf:20:f4:ec:fc:39:9d:2a:ff:e4:bf:0f:34:c3:b9:
49:94:ed:3f:c7:eb:70:9f:f2:2e:86:b2:76:ba:72:
b1:78:5c:96:c5:93:79:31:97:ed:13:48:b6:29:34:
16:3e:9e:a5:1d:54:10:b8:dc:e4:08:8c:5d:8b:12:
14:9a:34:dc:92:36:90:d8:9f:cc:b5:7c:35:0e:85:
aa:02:eb:c0:42:3d:6b:19:c5:e7:18:ed:1e:19:b2:
18:b0:5f:8f:21:9e:7f:95:5d:55:2e:e2:52:d6:43:
2e:89:f0:10:c8:54:04:17:85:40:61:cd:fa:18:42:
5d:e4:32:41:bb:99:83:8f:e7:1a:be:56:43:89:ad:
d1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:CE:6D:66:E4:18:D3:2A:37:8E:8B:72:86:B9:26:7C:71:15:E4:4C
X509v3 Authority Key Identifier:
keyid:2E:6B:ED:70:DB:5E:67:3C:81:F1:2E:73:65:A3:6C:4F:3D:A2:7B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmvtcNteZzyB8S5zZaNsTz2ie3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:9b:39:02:02:b1:89:50:fb:9b:01:0f:04:f9:c2:86:68:ba:
74:8d:b3:5f:4b:3d:31:9e:05:72:ed:e5:ca:75:9a:c7:33:87:
cf:84:a5:c7:ad:6a:de:fb:6a:cb:f7:61:93:b7:c5:58:9a:a1:
0e:a7:59:8e:9f:64:42:c4:87:1c:3a:40:7b:b3:93:c3:91:b3:
ce:d0:19:a4:ed:ff:94:c7:c4:d8:60:aa:e6:2a:b2:26:c6:a6:
4a:a9:f7:53:a3:cd:16:ed:6e:5d:41:86:89:ee:64:72:41:ee:
e9:df:68:55:f4:02:14:e5:3a:67:d7:a6:24:f6:fd:32:c3:eb:
f1:51:f0:8c:c2:99:2b:40:79:58:ef:9b:e1:bf:ac:24:8f:a8:
63:08:c7:1b:15:9e:b8:4c:ec:b9:85:5e:7a:da:e2:10:f1:22:
2c:a5:c6:9b:1a:a8:94:b5:95:5d:c7:69:a7:d4:5b:4f:46:0e:
71:93:18:7f:e9:e0:65:77:39:ab:46:d6:66:ff:7a:c0:47:7c:
74:d1:b4:8b:6f:2a:fe:5b:74:1e:ff:87:88:72:0f:34:7a:bc:
75:22:d4:9d:02:ad:0b:8a:6c:c3:2c:75:06:5c:0a:3a:b2:bf:
ba:df:63:d4:ac:91:68:c6:c6:e3:ce:24:04:8e:e0:4e:e4:c0:
3c:4a:c3:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVANspOwWi2Vk/2UVvtNyUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNmJlZDcwZGI1ZTY3M2M4MWYxMmU3MzY1YTM2YzRmM2Rh
MjdiNzEwHhcNMjUwNDIwMjEwMDQxWhcNMjUwNDIxMjEwMDQxWjAzMTEwLwYDVQQD
Eyg4OGNlNmQ2NmU0MThkMzJhMzc4ZThiNzI4NmI5MjY3YzcxMTVlNDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2T8oXKo4ukBI12KV/KAqUfNqfOZC
WwbcD7eL9YmPthT6h1fRVOJVNoGulvnQuCrmuXv2iSPJ/Mo68J+yeco0kK8sXiXG
jRBYRRKk/1YVWJvbXAva1DyGzAZA+w0LV/IJWymYiWyr9eTZIaBbZy+jZAVO4Yzo
0anPIPTs/DmdKv/kvw80w7lJlO0/x+twn/IuhrJ2unKxeFyWxZN5MZftE0i2KTQW
Pp6lHVQQuNzkCIxdixIUmjTckjaQ2J/MtXw1DoWqAuvAQj1rGcXnGO0eGbIYsF+P
IZ5/lV1VLuJS1kMuifAQyFQEF4VAYc36GEJd5DJBu5mDj+cavlZDia3R0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIjObWbkGNMqN46Lcoa5JnxxFeRMMB8GA1UdIwQY
MBaAFC5r7XDbXmc8gfEuc2WjbE89ontxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG12dGNOdGVaenlCOFM1elphTnNUejJpZTNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MTU3NDgtMzIzZS00ZmZmLWE1Mjct
NjIzMTU2NDRiM2NlLzEvTG12dGNOdGVaenlCOFM1elphTnNUejJpZTNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC80MTU3NDgtMzIzZS00ZmZmLWE1MjctNjIzMTU2NDRiM2Nl
LzEvTG12dGNOdGVaenlCOFM1elphTnNUejJpZTNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAops5AgKx
iVD7mwEPBPnChmi6dI2zX0s9MZ4Fcu3lynWaxzOHz4Slx61q3vtqy/dhk7fFWJqh
DqdZjp9kQsSHHDpAe7OTw5GzztAZpO3/lMfE2GCq5iqyJsamSqn3U6PNFu1uXUGG
ie5kckHu6d9oVfQCFOU6Z9emJPb9MsPr8VHwjMKZK0B5WO+b4b+sJI+oYwjHGxWe
uEzsuYVeetriEPEiLKXGmxqolLWVXcdpp9RbT0YOcZMYf+ngZXc5q0bWZv96wEd8
dNG0i28q/lt0Hv+HiHIPNHq8dSLUnQKtC4pswyx1BlwKOrK/ut9j1KyRaMbG484k
BI7gTuTAPErD7A==
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:40:44 2025 by rpki-client