Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
File: Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft (raw, json)
Hash identifier: 9MREI5YQgtS8rZdYgr/Dj3oHbvzlzSC2D45207toe3A=
Subject key identifier: EA:EB:0C:D6:FF:9E:44:74:34:67:18:AD:97:0B:CC:0C:7F:CF:93:C9
Authority key identifier: 2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
Certificate issuer: /CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Certificate serial: 0196458DBF29BFD00B36CFC6120D56F0EAF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
Manifest number: 14CA
Signing time: Thu 17 Apr 2025 21:00:39 +0000
Manifest this update: Thu 17 Apr 2025 21:00:39 +0000
Manifest next update: Fri 18 Apr 2025 21:00:39 +0000
Files and hashes: 1: Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl (hash: fxijmCFG7G/BXs4AsfSbGg2LnbxlynABPx+JNik5ULM=)
2: M21MDqZhLpMUHwm9053y5X5hUu4.roa (hash: SYGPLAqkM4uXfmWggV4XyNi06NaAyivAORW2HClwZBk=)
3: nXQPLiO12M3Y_MzU88OuVYMZ5_U.roa (hash: T3shL01w4f9E1vbhrlXsqoTnaDV8nANG2xjOAb2Kx6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:8d:bf:29:bf:d0:0b:36:cf:c6:12:0d:56:f0:ea:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e67f3e4e1977abe98ccb20ca1afa858f1e6681c
Validity
Not Before: Apr 17 21:00:39 2025 GMT
Not After : Apr 18 21:00:39 2025 GMT
Subject: CN=eaeb0cd6ff9e4474346718ad970bcc0c7fcf93c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9a:95:57:48:95:ff:07:dd:ac:67:5a:5d:53:
20:f9:a8:0e:33:38:37:39:8e:a6:bf:0a:10:a5:46:
0e:1e:81:0b:ad:cc:6f:64:fb:38:4d:4d:e5:11:21:
b7:72:9b:ad:ad:d4:7a:bb:93:a3:25:17:80:64:2e:
0f:d6:2a:19:40:4b:a2:13:96:0e:03:ac:c3:4a:d1:
d7:c6:dc:7e:99:f0:99:04:3b:f1:88:c3:da:87:85:
d4:34:e1:11:6c:7c:5e:e1:3d:e9:a5:28:6e:14:14:
b4:49:07:b1:28:f8:55:31:29:69:cc:49:eb:18:df:
5c:0f:3b:36:ba:65:45:71:84:28:2d:60:c1:51:f5:
14:9e:82:12:85:a7:1e:39:d6:d2:f0:ab:89:1d:a5:
c2:5f:87:4e:7c:6c:3a:e5:39:cc:1d:74:7b:37:49:
da:de:dc:16:3e:26:52:0f:a2:12:0e:8a:3e:0c:c1:
7f:1d:15:7d:b0:2c:82:c9:11:2d:ae:75:f9:73:c5:
a9:6a:6e:13:aa:e5:52:ad:a3:1f:bd:e5:a0:f9:c8:
c9:3a:45:7a:6d:50:e3:d0:af:d6:17:59:a9:2a:fb:
79:ee:62:bd:90:31:4d:87:fc:07:2e:fc:d9:62:9a:
f9:fc:6b:1e:18:96:05:c2:47:d6:ef:7f:cb:09:b4:
b7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:EB:0C:D6:FF:9E:44:74:34:67:18:AD:97:0B:CC:0C:7F:CF:93:C9
X509v3 Authority Key Identifier:
keyid:2E:67:F3:E4:E1:97:7A:BE:98:CC:B2:0C:A1:AF:A8:58:F1:E6:68:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lmfz5OGXer6YzLIMoa-oWPHmaBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/06be8f-a265-426a-aa0a-e479c6b9ff2b/1/Lmfz5OGXer6YzLIMoa-oWPHmaBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:bb:74:3c:88:17:bd:85:40:a5:62:3b:6b:10:13:a6:2d:de:
cf:88:76:2f:30:1c:75:30:96:b7:33:af:29:54:48:1f:77:3a:
8a:fb:d6:25:23:84:97:4d:7c:b7:cd:58:c0:39:78:27:b3:57:
6f:82:64:e8:0d:be:1b:1e:e7:7f:96:fe:93:3c:24:01:98:2b:
5d:eb:0e:7c:a4:8c:3b:8e:61:2f:d8:ef:7d:f8:2d:ef:a4:d1:
3d:55:77:25:f7:a1:ef:f2:ae:3a:60:52:2d:b7:6e:3f:f2:17:
d8:ba:5c:61:21:4e:cb:e6:c3:0e:2d:e1:55:60:d5:01:3b:ca:
b5:7e:7c:8c:9e:bf:90:62:09:b0:fd:f4:c8:09:b5:79:49:c3:
3c:96:cf:06:bc:8d:ba:fd:9d:ee:90:29:6c:7a:eb:cd:e5:ea:
6c:35:d7:fe:55:a9:95:8b:4b:cb:63:6a:b1:6d:70:9c:d9:53:
95:93:99:90:87:67:c7:b8:c9:43:79:e9:e0:9a:48:2a:32:06:
a7:a0:e3:b2:b3:81:54:cf:86:f9:4e:40:b9:8f:a9:e8:f8:a5:
46:50:f2:18:aa:c5:6b:16:9b:a5:a1:35:dc:a9:e7:52:01:1c:
dc:6b:a7:4d:c8:ae:a0:d0:d3:b0:c5:81:16:9a:a4:4b:3a:f5:
19:01:f4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:58:35 2025 by rpki-client