Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
File: lmr8FNShmnwsFo6yyB1WIrMBSes.mft (raw, json)
Hash identifier: F7UyujR1FlMtnXFs0cBQXxzHFUg1Kig2thSHQaBH8+A=
Subject key identifier: BB:3F:A4:FD:47:20:EA:1B:FB:0A:DA:22:A7:D1:BC:13:D0:BE:9D:CC
Authority key identifier: 96:6A:FC:14:D4:A1:9A:7C:2C:16:8E:B2:C8:1D:56:22:B3:01:49:EB
Certificate issuer: /CN=966afc14d4a19a7c2c168eb2c81d5622b30149eb
Certificate serial: 01965424D888BC751E6378B259D949138C85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 17:00:22 +0000
Manifest this update: Sun 20 Apr 2025 17:00:22 +0000
Manifest next update: Mon 21 Apr 2025 17:00:22 +0000
Files and hashes: 1: YBabozhq7Bm__rh2KvKvZaWJJSk.roa (hash: ZpYTHURBPLv+zLOzTtEUmCp4scPYCX2Bazth3B2lfOY=)
2: lmr8FNShmnwsFo6yyB1WIrMBSes.crl (hash: uvk+CnLEIezaCUv6n4kMZ9O638j/WOihCrDT7NniGyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:24:d8:88:bc:75:1e:63:78:b2:59:d9:49:13:8c:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=966afc14d4a19a7c2c168eb2c81d5622b30149eb
Validity
Not Before: Apr 20 17:00:22 2025 GMT
Not After : Apr 21 17:00:22 2025 GMT
Subject: CN=bb3fa4fd4720ea1bfb0ada22a7d1bc13d0be9dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d7:0f:b9:f0:78:62:e6:dd:4e:56:17:4a:03:
17:d5:3e:9e:96:79:66:5d:fe:be:d8:9f:10:a0:07:
f6:d9:18:28:d7:1b:67:d4:bd:30:05:36:4b:00:5d:
79:13:d2:82:7c:39:94:49:23:16:a9:9f:db:39:6e:
7c:57:d1:a9:a0:e0:e3:99:16:ac:c6:64:cd:dd:52:
e4:c4:00:e1:34:2b:66:58:7c:6e:33:9f:72:73:e6:
22:37:0a:2a:48:3c:10:1d:f3:6d:38:25:24:6c:25:
f1:7b:71:77:8f:d7:64:eb:c9:7e:d5:0f:22:73:62:
5e:e2:ab:c6:8c:4a:71:2a:c3:fc:7d:85:02:a9:c5:
43:82:59:06:3b:2b:8f:a5:e4:2d:26:3c:18:ac:bd:
db:b8:86:67:0e:1d:e4:fe:36:68:fb:11:06:73:ca:
ff:df:8f:37:43:13:f3:3b:e3:37:5c:d9:54:d8:43:
85:d5:59:86:ea:67:ad:23:53:b2:bd:8e:5a:da:a4:
8b:52:4a:67:fb:a1:f8:38:c3:48:ae:6c:e3:00:14:
3e:e9:1f:6e:94:8e:bb:6f:d4:45:21:d9:1e:61:a1:
cc:aa:6d:3d:31:a1:8b:f0:74:a7:bf:23:3d:0a:21:
3c:bd:cb:e0:c4:36:19:37:34:30:70:99:9f:13:3d:
8d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:3F:A4:FD:47:20:EA:1B:FB:0A:DA:22:A7:D1:BC:13:D0:BE:9D:CC
X509v3 Authority Key Identifier:
keyid:96:6A:FC:14:D4:A1:9A:7C:2C:16:8E:B2:C8:1D:56:22:B3:01:49:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:d5:95:82:24:ba:65:18:3b:98:15:89:8e:13:dc:3d:95:46:
7d:d6:ae:99:27:28:cf:06:d6:62:31:95:5b:ef:84:e7:ef:71:
87:20:c3:02:fe:c3:2b:25:95:ca:93:df:a0:72:55:73:22:79:
2f:25:23:88:22:23:cc:6e:92:5d:40:67:2c:36:8e:be:01:30:
10:f7:44:86:4a:87:86:bf:62:65:0a:b5:00:60:96:be:db:c5:
5d:f5:47:bf:5b:1b:7c:a8:63:65:ce:fb:61:46:99:9d:6d:39:
d6:29:91:65:af:d0:aa:e2:7b:e6:ba:fd:9f:39:b3:54:39:f4:
8e:92:8d:84:69:d6:72:bd:6e:40:e7:30:cc:27:43:06:8a:6a:
a0:c5:19:41:20:7c:a9:8c:7e:e8:7c:35:09:8b:94:e9:dd:31:
ae:44:ad:30:77:3e:ca:76:a3:4d:e0:97:f8:40:e9:59:62:e5:
38:78:5d:21:2e:fb:13:cc:7d:1b:74:1b:92:83:0d:d4:7b:34:
64:f1:1c:cb:d9:a3:2d:78:8c:8c:a8:48:3b:b9:03:a4:d7:e7:
20:6a:81:fa:6f:b9:8a:ec:20:65:2e:bd:b2:ba:90:fd:d6:5d:
ff:bf:39:6e:88:f0:ed:69:1e:7e:5e:1e:ba:90:b1:31:69:de:
2f:20:48:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUJNiIvHUeY3iyWdlJE4yFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NmFmYzE0ZDRhMTlhN2MyYzE2OGViMmM4MWQ1NjIyYjMw
MTQ5ZWIwHhcNMjUwNDIwMTcwMDIyWhcNMjUwNDIxMTcwMDIyWjAzMTEwLwYDVQQD
EyhiYjNmYTRmZDQ3MjBlYTFiZmIwYWRhMjJhN2QxYmMxM2QwYmU5ZGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5dcPufB4YubdTlYXSgMX1T6elnlm
Xf6+2J8QoAf22Rgo1xtn1L0wBTZLAF15E9KCfDmUSSMWqZ/bOW58V9GpoODjmRas
xmTN3VLkxADhNCtmWHxuM59yc+YiNwoqSDwQHfNtOCUkbCXxe3F3j9dk68l+1Q8i
c2Je4qvGjEpxKsP8fYUCqcVDglkGOyuPpeQtJjwYrL3buIZnDh3k/jZo+xEGc8r/
3483QxPzO+M3XNlU2EOF1VmG6metI1OyvY5a2qSLUkpn+6H4OMNIrmzjABQ+6R9u
lI67b9RFIdkeYaHMqm09MaGL8HSnvyM9CiE8vcvgxDYZNzQwcJmfEz2N7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLs/pP1HIOob+wraIqfRvBPQvp3MMB8GA1UdIwQY
MBaAFJZq/BTUoZp8LBaOssgdViKzAUnrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbG1yOEZOU2htbndzRm82eXlCMVdJck1CU2VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8xZjdjOTgtMThhYS00N2Q4LWFiNDEt
MTE2MWVkYjliZjBlLzEvbG1yOEZOU2htbndzRm82eXlCMVdJck1CU2VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8xZjdjOTgtMThhYS00N2Q4LWFiNDEtMTE2MWVkYjliZjBl
LzEvbG1yOEZOU2htbndzRm82eXlCMVdJck1CU2VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApdWVgiS6
ZRg7mBWJjhPcPZVGfdaumScozwbWYjGVW++E5+9xhyDDAv7DKyWVypPfoHJVcyJ5
LyUjiCIjzG6SXUBnLDaOvgEwEPdEhkqHhr9iZQq1AGCWvtvFXfVHv1sbfKhjZc77
YUaZnW051imRZa/QquJ75rr9nzmzVDn0jpKNhGnWcr1uQOcwzCdDBopqoMUZQSB8
qYx+6Hw1CYuU6d0xrkStMHc+ynajTeCX+EDpWWLlOHhdIS77E8x9G3QbkoMN1Hs0
ZPEcy9mjLXiMjKhIO7kDpNfnIGqB+m+5iuwgZS69srqQ/dZd/785bojw7Wkefl4e
upCxMWneLyBIPw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:49:09 2025 by rpki-client