Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/34d94d-2cc6-409d-95f3-949b91e9f48d/1/lpMmVir3Dnnz1RJIjikOkkMtWgE.mft
File: lpMmVir3Dnnz1RJIjikOkkMtWgE.mft (raw, json)
Hash identifier: 5M/OdNcPR4xSPhXgj0vyjT2YgD1IKdscGTxkUOg83mY=
Subject key identifier: 5E:1D:A9:8A:01:B4:89:C4:C5:09:A6:BA:CA:65:8C:05:40:9B:35:39
Authority key identifier: 96:93:26:56:2A:F7:0E:79:F3:D5:12:48:8E:29:0E:92:43:2D:5A:01
Certificate issuer: /CN=969326562af70e79f3d512488e290e92432d5a01
Certificate serial: 0196564A6E93DD456FD5FCCAA587CE020F5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lpMmVir3Dnnz1RJIjikOkkMtWgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/34d94d-2cc6-409d-95f3-949b91e9f48d/1/lpMmVir3Dnnz1RJIjikOkkMtWgE.mft
Manifest number: 11A8
Signing time: Mon 21 Apr 2025 03:00:40 +0000
Manifest this update: Mon 21 Apr 2025 03:00:40 +0000
Manifest next update: Tue 22 Apr 2025 03:00:40 +0000
Files and hashes: 1: _zRJudFm9-SwIj8WqpSjxqhsHho.roa (hash: yl1VlGdcj3D0SfYe9bEEDXwIlAfQxRhpjuP7t/iSfW0=)
2: lpMmVir3Dnnz1RJIjikOkkMtWgE.crl (hash: drjGm3htPoqjE7l3PHH5PB/WmoKbvSAT1CantMCiw1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/34d94d-2cc6-409d-95f3-949b91e9f48d/1/lpMmVir3Dnnz1RJIjikOkkMtWgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/34d94d-2cc6-409d-95f3-949b91e9f48d/1/lpMmVir3Dnnz1RJIjikOkkMtWgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lpMmVir3Dnnz1RJIjikOkkMtWgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:4a:6e:93:dd:45:6f:d5:fc:ca:a5:87:ce:02:0f:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969326562af70e79f3d512488e290e92432d5a01
Validity
Not Before: Apr 21 03:00:40 2025 GMT
Not After : Apr 22 03:00:40 2025 GMT
Subject: CN=5e1da98a01b489c4c509a6baca658c05409b3539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:da:71:95:92:13:b0:6c:36:97:d6:b2:16:44:
05:53:7d:1c:74:11:27:8c:d6:98:b0:d1:d4:fa:6f:
c6:7b:3e:9e:b1:2d:fa:d9:b3:c5:b6:46:b0:66:9e:
3f:0e:1e:52:2b:9d:6f:9d:b2:cb:a0:24:15:8f:7b:
5e:a6:a2:8a:ed:1c:9c:28:2d:03:4d:0c:52:7b:7e:
47:4e:05:c2:eb:b8:82:c7:65:f8:ed:39:3d:8d:1f:
9f:18:af:40:73:5d:ac:7e:c3:07:1a:fe:f1:b1:9b:
c7:ef:8c:68:38:fe:a0:3b:c7:de:a0:56:2a:55:9a:
be:29:45:81:70:a3:e8:d1:50:db:0e:75:52:69:5e:
72:f9:9d:4e:b9:11:e6:0f:43:91:b3:90:e8:84:cc:
c5:ad:c6:69:13:04:c4:74:76:7f:00:cf:5f:ac:5f:
59:e0:56:1e:25:8a:44:a0:d5:7d:e1:30:1e:2d:6c:
48:3c:88:a5:38:a5:10:02:1f:22:e0:42:e5:45:ea:
8a:46:bd:57:2b:7e:7c:6a:7e:ba:f1:eb:49:8d:55:
bc:1c:48:48:c7:f9:95:cf:dc:0d:d9:48:66:00:58:
1e:94:1f:4a:93:ec:54:3e:8b:eb:11:e3:ea:d6:d0:
24:d6:7c:a8:c7:fe:b4:77:bb:a6:e9:7c:ea:5e:63:
09:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:1D:A9:8A:01:B4:89:C4:C5:09:A6:BA:CA:65:8C:05:40:9B:35:39
X509v3 Authority Key Identifier:
keyid:96:93:26:56:2A:F7:0E:79:F3:D5:12:48:8E:29:0E:92:43:2D:5A:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lpMmVir3Dnnz1RJIjikOkkMtWgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/34d94d-2cc6-409d-95f3-949b91e9f48d/1/lpMmVir3Dnnz1RJIjikOkkMtWgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/34d94d-2cc6-409d-95f3-949b91e9f48d/1/lpMmVir3Dnnz1RJIjikOkkMtWgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:06:5f:ae:b4:a7:e7:e9:82:b1:87:ea:a8:2b:38:da:21:c4:
2b:98:a1:3d:ab:ca:1c:ec:e7:3a:52:dc:b9:8b:bd:c9:41:e1:
63:40:e0:09:17:1e:49:2f:09:ae:87:ac:0b:d6:27:36:9a:2e:
23:a7:9c:c4:1b:cc:2d:df:db:d7:e2:97:cf:7e:6c:ac:9b:76:
49:02:40:48:7c:0f:96:41:1d:8c:29:cc:09:31:7a:01:fd:23:
15:52:d2:44:03:92:9c:22:a2:4b:2e:a9:af:35:d4:2f:59:6c:
17:a2:5d:f2:10:89:e2:97:45:43:9b:15:59:ff:37:f3:0f:ba:
b2:79:fc:0c:12:ea:f4:16:25:42:33:3d:34:1b:25:81:9f:de:
6f:f0:49:4c:d0:5b:aa:07:97:78:d9:3f:9f:eb:45:f0:bc:10:
7c:a0:36:f4:6d:b9:05:6a:a4:9c:41:fd:f4:e9:0e:25:a0:af:
8b:9f:ce:f5:e4:45:ee:70:b7:a4:97:69:7d:df:39:61:86:4d:
ba:a1:b7:76:39:18:15:51:35:5d:6e:88:93:03:86:a2:92:95:
3f:94:f4:a8:51:ec:10:21:0e:27:60:cf:11:92:b6:9a:f4:aa:
d1:65:15:e8:2a:9c:57:4e:89:f2:9b:5a:b9:e1:49:8a:a7:6c:
a5:aa:aa:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:43:53 2025 by rpki-client