Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
File: LVXE3X8hL8SJa9DJcYYMBbMO640.mft (raw, json)
Hash identifier: 6ybifKtRkkJjSzAPGa+R5OaF1Hfph4rgSgx5L/R8Elg=
Subject key identifier: 9E:F2:AC:E0:B4:E9:8F:B1:71:A8:6F:31:3D:43:36:78:DB:E1:94:B1
Authority key identifier: 2D:55:C4:DD:7F:21:2F:C4:89:6B:D0:C9:71:86:0C:05:B3:0E:EB:8D
Certificate issuer: /CN=2d55c4dd7f212fc4896bd0c971860c05b30eeb8d
Certificate serial: 01958BBB6368C9CE37FF9A94DC0AF500FF3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
Manifest number: 0EEE
Signing time: Wed 12 Mar 2025 19:01:08 +0000
Manifest this update: Wed 12 Mar 2025 19:01:08 +0000
Manifest next update: Thu 13 Mar 2025 19:01:08 +0000
Files and hashes: 1: 00zUmefDnJyqqgzSdsn0MV9Tkqo.roa (hash: huADW82oDJAq5twpGQcGLwROZsWOsqN3XkZE8P766lk=)
2: LVXE3X8hL8SJa9DJcYYMBbMO640.crl (hash: HLUGGtgPUEocBP1o0X29SJECRNmIzT07NvmzPx/YdVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:bb:63:68:c9:ce:37:ff:9a:94:dc:0a:f5:00:ff:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d55c4dd7f212fc4896bd0c971860c05b30eeb8d
Validity
Not Before: Mar 12 19:01:08 2025 GMT
Not After : Mar 13 19:01:08 2025 GMT
Subject: CN=9ef2ace0b4e98fb171a86f313d433678dbe194b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:72:4e:f4:0d:20:86:2c:6f:d3:31:67:a1:8d:
e0:05:58:ad:6b:31:42:2d:31:03:ee:ef:69:0a:f2:
7c:1d:85:c4:e7:9a:8e:fc:fc:68:c7:02:99:88:4a:
bd:7d:ae:dd:ec:39:57:fc:fd:fa:71:72:12:72:8c:
e9:92:00:d8:40:20:8d:cf:41:3c:6e:82:0b:2f:4d:
85:54:62:e3:c8:57:56:9b:f0:d0:09:ec:90:c7:0d:
92:14:b4:85:cd:57:9c:1e:c8:b3:c6:07:26:24:01:
17:5b:90:7c:a2:a2:91:e0:45:33:72:88:3a:5d:c5:
cd:87:7a:db:d7:c2:73:a4:d3:d2:2d:65:5b:90:a0:
80:c7:a9:0d:6b:5e:89:d7:23:ef:a9:b1:c9:7d:41:
e6:6c:25:a3:04:2a:6a:eb:20:a9:19:6b:95:af:c1:
a4:04:67:c2:81:32:f3:a9:34:6d:a1:b5:30:99:e0:
6a:61:d7:61:e3:a5:c9:61:42:ed:21:e5:3c:8a:d4:
11:3a:9f:bf:44:64:8e:0b:08:22:a8:5a:60:9f:56:
b4:b2:f7:ad:9a:b9:bf:cc:b4:27:75:79:49:e1:43:
12:b2:01:83:bf:2f:da:b0:ef:b1:b5:18:8a:77:45:
94:14:04:6e:b7:df:5b:4d:eb:2b:f8:9d:ab:2e:4e:
31:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F2:AC:E0:B4:E9:8F:B1:71:A8:6F:31:3D:43:36:78:DB:E1:94:B1
X509v3 Authority Key Identifier:
keyid:2D:55:C4:DD:7F:21:2F:C4:89:6B:D0:C9:71:86:0C:05:B3:0E:EB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVXE3X8hL8SJa9DJcYYMBbMO640.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb8145-f6d8-42c3-a97d-80d35e9d39ea/1/LVXE3X8hL8SJa9DJcYYMBbMO640.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:94:6b:5a:6e:d7:b8:ab:bf:d3:28:92:3d:bb:e8:e0:90:e1:
0e:08:68:2a:aa:d9:03:e2:b6:9d:7d:98:f2:a6:02:60:24:e5:
7f:ff:f4:3a:ff:08:cf:77:f2:68:e3:8e:5c:1e:94:24:8e:5d:
e4:45:81:f2:33:a9:e7:34:d0:8f:82:c6:59:0f:83:1f:fe:d0:
56:01:3f:a1:e0:c0:7b:22:25:14:9d:9f:a7:b9:b6:e1:f9:ad:
70:5b:99:43:29:2d:0d:f0:df:9c:81:5a:6d:73:31:0a:8d:48:
a2:03:96:50:7e:86:a9:7d:36:55:86:bb:e8:9f:78:3b:19:86:
23:05:de:91:7d:9c:7d:c5:dd:ac:54:ee:76:46:09:3c:01:d4:
15:f9:a4:c6:22:61:a1:ae:72:9d:72:6c:f2:1a:4e:28:f1:81:
38:de:65:b9:d6:ad:6e:99:f5:f2:cf:11:3c:84:a9:d3:62:e7:
2c:9c:93:14:9a:8f:3f:4a:97:f4:33:11:4a:a8:7c:e7:07:d3:
7c:89:1d:c4:e6:60:df:b0:8c:8f:f7:dc:95:c1:b3:17:b1:9f:
23:8d:4c:1f:2c:58:d7:3a:6b:30:9e:c1:8d:6e:42:e2:bb:8b:
f8:e7:87:75:1c:a2:36:8f:40:8f:01:b8:97:18:10:fb:78:d7:
5c:33:b9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:11 2025 by rpki-client