Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft
File: lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft (raw, json)
Hash identifier: DYLslGcE9Trg6jjmO2NLtkcUwvt/NyEX52SbUhRSqrM=
Subject key identifier: 7E:06:C6:46:21:EF:18:0F:D6:79:F9:06:29:C6:E0:1C:92:49:0C:3B
Authority key identifier: 96:65:C8:11:0D:0D:D8:6A:7E:BB:09:38:AA:32:E0:9D:1D:B1:22:F6
Certificate issuer: /CN=9665c8110d0dd86a7ebb0938aa32e09d1db122f6
Certificate serial: 01965D27F085A6BB2524EA01929545BE54B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft
Manifest number: 0DA7
Signing time: Tue 22 Apr 2025 11:00:20 +0000
Manifest this update: Tue 22 Apr 2025 11:00:20 +0000
Manifest next update: Wed 23 Apr 2025 11:00:20 +0000
Files and hashes: 1: hDr7XZdy7Zu__1e0bkoorUALVGI.roa (hash: Ah9s+DUMovObb0WEEgnVu12bFf+2vlp0mJLr4ANjGq0=)
2: lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.crl (hash: pwsT3xWluqAmocfk5hvn0DJ/+NFOMozXCjuq6s+CUKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 11:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:27:f0:85:a6:bb:25:24:ea:01:92:95:45:be:54:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9665c8110d0dd86a7ebb0938aa32e09d1db122f6
Validity
Not Before: Apr 22 11:00:20 2025 GMT
Not After : Apr 23 11:00:20 2025 GMT
Subject: CN=7e06c64621ef180fd679f90629c6e01c92490c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5d:0d:bd:d8:a2:1e:71:61:02:33:99:00:5d:
d4:f4:ae:9a:56:80:51:a3:32:c8:4f:4a:2b:2f:72:
ea:28:d1:82:03:99:28:ca:67:a7:31:d4:30:0d:bb:
f8:5a:30:5a:87:f1:07:91:79:ca:a4:9f:68:94:e3:
39:21:dc:5f:99:63:f3:f6:d1:64:19:b0:02:97:bc:
2c:0e:66:20:85:2c:71:9e:5e:9d:a3:fc:65:b4:45:
5b:ce:b5:4a:cd:1b:17:0b:a7:dc:fc:a1:5b:2b:21:
48:85:3b:96:bb:76:e4:02:1f:37:e7:4c:33:79:6c:
d1:18:ee:ba:1d:4b:cb:1d:76:5d:63:9a:54:76:b3:
c5:47:23:c7:93:6a:65:07:b2:08:8e:ab:1c:49:f6:
22:75:63:2c:57:1e:57:9d:7e:db:a0:0d:0f:40:ec:
05:5c:5f:2a:13:d9:ac:bd:0d:db:6c:df:64:27:d2:
51:a1:2f:ba:02:a6:f5:e2:44:a2:0b:82:e2:93:32:
81:2f:a7:1c:27:5c:0f:e1:ac:df:fd:63:c3:ea:fb:
aa:32:a4:16:34:31:6c:80:f5:88:00:b4:1f:1c:d4:
90:d9:e2:fb:01:99:ff:45:08:ed:a1:2d:89:ff:8c:
96:f8:d5:e1:f9:7d:64:3a:40:fa:00:32:35:92:43:
46:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:06:C6:46:21:EF:18:0F:D6:79:F9:06:29:C6:E0:1C:92:49:0C:3B
X509v3 Authority Key Identifier:
keyid:96:65:C8:11:0D:0D:D8:6A:7E:BB:09:38:AA:32:E0:9D:1D:B1:22:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/fa81f4-6600-4079-93c5-4897261ba46b/1/lmXIEQ0N2Gp-uwk4qjLgnR2xIvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:da:51:18:d9:a4:13:69:58:8b:e7:51:18:92:c1:f7:04:51:
81:bf:f9:70:fc:d0:8d:60:b4:4e:b8:f4:3c:a6:85:9b:af:45:
96:3f:de:ed:05:9d:5d:37:cf:a0:bc:d6:2c:55:1b:d8:40:07:
57:64:3b:d6:48:ad:b5:27:6d:e2:0a:91:15:b1:a6:7e:48:ef:
db:c8:66:5b:45:48:6e:19:80:7e:5f:42:1d:8b:2c:32:bd:15:
85:e1:ef:a6:05:07:7c:c8:11:54:b7:a8:a8:a5:a4:5d:15:a7:
b6:ee:a2:9f:4e:23:47:9c:7a:a9:09:8e:83:72:4b:13:17:bb:
a7:97:1d:2a:78:ca:c8:1b:09:c6:91:6d:1d:99:b2:01:8a:41:
2f:9e:2b:bb:b2:df:a1:ef:5b:f4:fb:67:01:8a:9e:d2:de:1b:
d4:3c:3a:87:17:d5:b5:c1:25:88:60:e9:01:4f:d7:9b:6d:36:
1a:53:87:23:7e:ef:ba:ea:9a:73:82:3f:88:67:17:3e:28:4a:
c3:54:00:de:a3:fe:a7:87:4e:ef:c9:ef:10:d2:28:55:19:23:
5b:94:35:6f:61:2d:70:b1:ae:14:66:ee:f3:c7:4c:e2:d4:cc:
6f:eb:1c:b9:0d:b7:d6:88:92:92:ed:2b:d9:d3:7a:b4:03:17:
9a:9d:9d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:34:14 2025 by rpki-client