Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
File: lmAVV4yUjzG_dKHh__1_o-NGAgY.mft (raw, json)
Hash identifier: huChd1ZzEiovNlXY3PsrwLTTc9uMrZb62gs5ZuHi2Q4=
Subject key identifier: BC:8D:68:94:BE:00:46:21:B6:3E:CB:55:A2:D3:5B:DB:DB:F4:F9:AA
Authority key identifier: 96:60:15:57:8C:94:8F:31:BF:74:A1:E1:FF:FD:7F:A3:E3:46:02:06
Certificate issuer: /CN=966015578c948f31bf74a1e1fffd7fa3e3460206
Certificate serial: 019654C9C80005FAEA74ADB78524CC15FC25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
Manifest number: 0B8A
Signing time: Sun 20 Apr 2025 20:00:32 +0000
Manifest this update: Sun 20 Apr 2025 20:00:32 +0000
Manifest next update: Mon 21 Apr 2025 20:00:32 +0000
Files and hashes: 1: OE686EGR1IVKz-bx67_ZsH11lHQ.roa (hash: S5Z4RalwztbreTYazKn4Yw+ySxhuT6+PltCXQ/y03p0=)
2: lmAVV4yUjzG_dKHh__1_o-NGAgY.crl (hash: FifXRaFBt8N3njEWT+bdzy0FlgNqhtVSjlgCnPX5Pgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 20:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:c8:00:05:fa:ea:74:ad:b7:85:24:cc:15:fc:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=966015578c948f31bf74a1e1fffd7fa3e3460206
Validity
Not Before: Apr 20 20:00:32 2025 GMT
Not After : Apr 21 20:00:32 2025 GMT
Subject: CN=bc8d6894be004621b63ecb55a2d35bdbdbf4f9aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8f:e7:69:af:b0:60:03:7b:0b:23:b2:8c:f5:
1d:d7:90:30:a2:2c:55:93:bc:95:a6:42:ba:10:d5:
38:36:ef:45:2f:6d:35:a0:df:98:b5:1f:a7:bf:bf:
75:5e:e6:7d:38:ab:cf:f5:18:ad:40:0d:54:7d:98:
d6:f6:e1:ec:03:16:df:d6:5f:fb:f7:67:de:28:1a:
42:f8:01:43:fe:3d:00:f1:c7:77:ff:ef:7e:fe:8c:
43:e2:e9:e8:b2:03:7b:0b:36:30:38:d5:cb:df:0f:
7f:0c:2b:61:ac:78:5a:a5:76:29:ed:58:19:9d:8f:
ee:2c:a9:96:8d:28:8f:18:a8:05:fc:df:c7:53:be:
52:3d:a6:fa:8c:02:f6:ae:3f:81:68:ab:18:38:34:
86:41:77:c7:e1:23:0c:6c:dc:8e:e7:b0:84:1c:a3:
9f:a6:37:11:cf:f1:6f:d8:5f:3e:e9:cc:a1:79:4a:
e8:fd:f3:b8:ca:ed:c0:72:ba:7f:e0:e9:30:c6:db:
32:42:9c:f8:fa:13:93:de:14:8c:d5:b1:48:c8:ab:
9d:d5:30:0f:51:a4:e3:4a:a7:2f:82:5c:8c:e5:f3:
5c:54:98:98:66:ad:2f:41:92:55:45:98:7f:60:10:
b2:0e:ad:c3:20:96:2e:81:5d:3e:01:11:72:9d:8c:
51:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:8D:68:94:BE:00:46:21:B6:3E:CB:55:A2:D3:5B:DB:DB:F4:F9:AA
X509v3 Authority Key Identifier:
keyid:96:60:15:57:8C:94:8F:31:BF:74:A1:E1:FF:FD:7F:A3:E3:46:02:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:0a:6b:d6:c8:b3:a7:9d:a0:1d:e7:75:b9:0e:8d:c7:8a:0b:
e0:fd:79:56:6c:95:88:85:01:fa:c1:f2:0f:d5:b4:9a:b5:91:
fe:aa:c2:49:50:9b:65:71:0d:2a:a8:ac:7d:73:1a:af:cc:86:
fd:7a:fe:74:61:fe:e8:29:45:e0:5c:30:cf:60:0d:7a:bf:77:
98:84:50:7b:5d:c7:17:fa:29:e8:15:c4:95:4d:f3:1c:80:4d:
64:cb:57:cf:ee:7c:74:06:a5:38:9b:f1:ea:0a:f6:84:de:5a:
e2:07:72:22:9b:cd:0d:51:60:ec:b4:5e:be:f7:09:51:6b:50:
8e:89:f5:a4:4c:46:2e:7e:4d:a7:95:36:29:53:3e:91:7f:dc:
24:a1:50:f9:6b:e6:79:35:7e:f2:89:2c:4a:c6:1e:1b:38:63:
10:e4:5a:fe:95:67:f4:af:5a:b6:9b:95:36:9c:5a:73:57:6a:
79:63:51:30:b0:a2:b4:9d:8c:b3:60:74:5d:a2:66:d5:07:aa:
c2:87:27:73:3a:36:5a:1c:ad:fd:44:2b:c2:5a:bd:ff:dc:98:
48:62:ce:6d:ff:54:23:89:3e:0d:28:22:ce:11:68:03:28:b3:
3c:50:30:aa:ba:d1:a1:35:a4:7f:45:31:75:18:12:c8:f3:d2:
53:d9:77:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:39:26 2025 by rpki-client