Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft
File: lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft (raw, json)
Hash identifier: 5p9hbC1hWjNQpJgAHlTW4dejNVKwz2NsptGgjinqvIE=
Subject key identifier: EE:B4:D8:15:4E:EE:33:FB:F6:86:A6:4E:D5:F6:FF:53:D0:20:18:37
Authority key identifier: 96:6F:8E:37:E4:A6:C8:4B:3F:3B:5B:A7:7E:21:09:D3:EF:59:AA:E0
Certificate issuer: /CN=966f8e37e4a6c84b3f3b5ba77e2109d3ef59aae0
Certificate serial: 0194C3F621B68A474C50D2607E7B2F692D37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lm-ON-SmyEs_O1unfiEJ0-9ZquA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft
Manifest number: 1A
Signing time: Sun 02 Feb 2025 00:01:15 +0000
Manifest this update: Sun 02 Feb 2025 00:01:15 +0000
Manifest next update: Mon 03 Feb 2025 00:01:15 +0000
Files and hashes: 1: lm-ON-SmyEs_O1unfiEJ0-9ZquA.crl (hash: 8DpPyiB8540iWpfdah8alcuftgDgW+BR7FTS0k+I724=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lm-ON-SmyEs_O1unfiEJ0-9ZquA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f6:21:b6:8a:47:4c:50:d2:60:7e:7b:2f:69:2d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=966f8e37e4a6c84b3f3b5ba77e2109d3ef59aae0
Validity
Not Before: Feb 2 00:01:15 2025 GMT
Not After : Feb 3 00:01:15 2025 GMT
Subject: CN=eeb4d8154eee33fbf686a64ed5f6ff53d0201837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:df:8b:3f:b6:0f:9a:e3:18:3d:aa:45:6a:b1:
1d:9c:ee:ba:32:38:92:8c:08:01:13:76:bd:ed:9c:
a1:79:39:f9:6a:a6:9b:24:ae:a6:54:be:24:9e:80:
57:73:48:96:8e:87:1e:94:3d:43:92:1a:3c:33:82:
40:15:27:1c:b5:f9:93:1d:61:e4:97:1f:9b:70:5b:
c8:42:49:a1:b4:94:a3:ec:f8:9a:da:ad:45:e9:34:
ff:08:80:6c:a9:a0:3b:ed:c5:04:eb:39:90:f6:f3:
d0:39:49:96:98:dc:25:57:54:33:a4:31:cc:99:b9:
d6:74:09:44:f9:62:c4:da:02:32:01:9d:90:ed:5d:
dc:50:d2:f3:51:08:11:c2:26:76:b0:dc:d3:3f:48:
d5:df:06:ef:79:cd:26:79:fa:40:59:ab:5f:da:79:
28:be:85:2a:aa:c3:c2:43:34:8b:72:b8:a7:07:eb:
02:37:bf:0b:7d:46:19:40:54:5b:97:11:68:f9:93:
32:66:74:1b:0d:e8:19:42:41:33:13:21:22:39:50:
2a:c8:54:c4:ad:06:1c:93:fa:99:74:95:21:38:0e:
d3:e9:e6:9f:67:44:55:02:6e:65:92:48:d7:d5:e8:
6d:ba:37:fd:c3:76:59:10:51:f8:19:33:94:a7:53:
d8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B4:D8:15:4E:EE:33:FB:F6:86:A6:4E:D5:F6:FF:53:D0:20:18:37
X509v3 Authority Key Identifier:
keyid:96:6F:8E:37:E4:A6:C8:4B:3F:3B:5B:A7:7E:21:09:D3:EF:59:AA:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lm-ON-SmyEs_O1unfiEJ0-9ZquA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/436b56-5b55-4ff4-83bf-98ac665b1908/1/lm-ON-SmyEs_O1unfiEJ0-9ZquA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:f7:bf:5d:e8:51:fc:bc:01:e1:e2:5c:26:5c:06:4d:99:70:
e2:d2:2d:e2:f7:d1:28:7a:81:41:bf:71:30:aa:6b:eb:22:4b:
bb:90:86:d7:f3:8d:92:f2:7d:d8:fd:1c:58:0f:28:41:6c:8b:
4a:69:3e:d9:95:bd:35:c0:5d:dd:1f:60:8d:1b:8e:da:a7:8c:
a1:bb:ee:f0:5d:bb:b4:92:21:81:6c:6e:7b:8e:8e:14:ee:c5:
7e:c1:d5:d9:17:21:bd:ba:3e:5f:c4:28:7f:ea:54:5d:ce:b3:
c9:1d:25:e4:ef:4b:6c:ae:4c:e7:fb:23:f7:b2:cb:15:7e:01:
9f:75:2f:96:8c:69:f6:5c:30:68:9f:4d:45:c5:d4:92:06:77:
b0:d8:6d:33:d9:6f:e3:a9:56:83:b1:16:38:a8:87:3d:04:9a:
8b:4a:72:d6:01:9a:88:65:cc:f2:55:d6:bc:7c:98:7c:b5:dc:
c5:86:12:e0:5e:53:eb:2a:ac:37:a8:36:57:69:87:72:44:68:
6b:7c:78:cd:f9:ad:e7:24:23:05:35:e7:7d:18:9b:6e:b9:9e:
0a:4a:33:60:8a:ef:8b:e2:af:fd:db:0d:91:2a:23:28:05:43:
13:57:67:b3:5e:28:ca:0e:35:ee:6e:e1:3d:7b:12:42:bd:cb:
66:06:79:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTD9iG2ikdMUNJgfnsvaS03MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NmY4ZTM3ZTRhNmM4NGIzZjNiNWJhNzdlMjEwOWQzZWY1
OWFhZTAwHhcNMjUwMjAyMDAwMTE1WhcNMjUwMjAzMDAwMTE1WjAzMTEwLwYDVQQD
EyhlZWI0ZDgxNTRlZWUzM2ZiZjY4NmE2NGVkNWY2ZmY1M2QwMjAxODM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwN+LP7YPmuMYPapFarEdnO66MjiS
jAgBE3a97ZyheTn5aqabJK6mVL4knoBXc0iWjocelD1Dkho8M4JAFScctfmTHWHk
lx+bcFvIQkmhtJSj7Pia2q1F6TT/CIBsqaA77cUE6zmQ9vPQOUmWmNwlV1QzpDHM
mbnWdAlE+WLE2gIyAZ2Q7V3cUNLzUQgRwiZ2sNzTP0jV3wbvec0mefpAWatf2nko
voUqqsPCQzSLcrinB+sCN78LfUYZQFRblxFo+ZMyZnQbDegZQkEzEyEiOVAqyFTE
rQYck/qZdJUhOA7T6eafZ0RVAm5lkkjX1ehtujf9w3ZZEFH4GTOUp1PY0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO602BVO7jP79oamTtX2/1PQIBg3MB8GA1UdIwQY
MBaAFJZvjjfkpshLPztbp34hCdPvWargMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbG0tT04tU215RXNfTzF1bmZpRUowLTlacXVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80MzZiNTYtNWI1NS00ZmY0LTgzYmYt
OThhYzY2NWIxOTA4LzEvbG0tT04tU215RXNfTzF1bmZpRUowLTlacXVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80MzZiNTYtNWI1NS00ZmY0LTgzYmYtOThhYzY2NWIxOTA4
LzEvbG0tT04tU215RXNfTzF1bmZpRUowLTlacXVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEPe/XehR
/LwB4eJcJlwGTZlw4tIt4vfRKHqBQb9xMKpr6yJLu5CG1/ONkvJ92P0cWA8oQWyL
Smk+2ZW9NcBd3R9gjRuO2qeMobvu8F27tJIhgWxue46OFO7FfsHV2Rchvbo+X8Qo
f+pUXc6zyR0l5O9LbK5M5/sj97LLFX4Bn3Uvloxp9lwwaJ9NRcXUkgZ3sNhtM9lv
46lWg7EWOKiHPQSai0py1gGaiGXM8lXWvHyYfLXcxYYS4F5T6yqsN6g2V2mHckRo
a3x4zfmt5yQjBTXnfRibbrmeCkozYIrvi+Kv/dsNkSojKAVDE1dns14oyg417m7h
PXsSQr3LZgZ5kQ==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:55:09 2025 by rpki-client