Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft
File: LMNcIJCZlCHTPGNZybbmgYKg8nM.mft (raw, json)
Hash identifier: PNlkdvZX0++Wf1BWYU2fftc5NBdpHgXGDNILJ6MWt3c=
Subject key identifier: 0F:11:63:DF:E2:6B:D4:10:70:9C:D1:2D:B5:38:56:91:AA:66:A9:F7
Authority key identifier: 2C:C3:5C:20:90:99:94:21:D3:3C:63:59:C9:B6:E6:81:82:A0:F2:73
Certificate issuer: /CN=2cc35c2090999421d33c6359c9b6e68182a0f273
Certificate serial: 0196534A0E0E49A72176A27C189AF921759D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMNcIJCZlCHTPGNZybbmgYKg8nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft
Manifest number: 148C
Signing time: Sun 20 Apr 2025 13:01:24 +0000
Manifest this update: Sun 20 Apr 2025 13:01:24 +0000
Manifest next update: Mon 21 Apr 2025 13:01:24 +0000
Files and hashes: 1: LMNcIJCZlCHTPGNZybbmgYKg8nM.crl (hash: VqO7Ya9ktEMfErG0OEqx2gZE7UaiM6ZNkEeivsuk2y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LMNcIJCZlCHTPGNZybbmgYKg8nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:4a:0e:0e:49:a7:21:76:a2:7c:18:9a:f9:21:75:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cc35c2090999421d33c6359c9b6e68182a0f273
Validity
Not Before: Apr 20 13:01:24 2025 GMT
Not After : Apr 21 13:01:24 2025 GMT
Subject: CN=0f1163dfe26bd410709cd12db5385691aa66a9f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:54:5e:15:55:ef:37:35:e8:3b:ab:4d:2c:9c:
ca:56:f4:2d:ba:43:55:c0:17:87:83:43:b8:aa:94:
9b:fb:af:57:69:97:f1:d5:c1:f9:6e:68:71:25:d9:
90:43:b4:19:d5:33:67:1a:29:ef:ae:17:c8:4f:00:
9e:30:4b:43:14:0a:8e:db:36:d9:b0:4a:ec:58:43:
93:5a:e1:87:02:7c:43:f7:f2:2b:11:31:aa:6d:77:
cf:73:27:dc:f3:27:4b:ea:f7:2a:bb:7f:99:5f:c5:
e4:98:05:1b:e5:4e:c9:d2:85:5a:a9:6a:e4:36:be:
b5:a3:b8:72:74:5a:6e:22:6a:bd:fc:ef:c3:5c:c0:
71:00:46:0a:9f:ca:ce:b4:c8:23:65:fa:73:70:30:
f6:b7:42:ff:fd:4b:34:7c:73:a1:8b:d0:c2:a0:f7:
b8:f0:c1:34:58:af:65:44:05:d0:5f:75:1f:78:f7:
db:9b:49:6f:6c:76:58:f3:08:49:8d:97:66:0c:11:
98:59:38:31:9e:0e:e0:60:fc:e3:d7:b6:ed:44:85:
f0:2b:12:dd:fa:e6:fa:07:53:c2:cd:1d:53:ba:b5:
48:6f:e8:34:d4:f7:6d:aa:95:db:fb:71:19:a7:85:
ae:4f:69:5d:19:65:90:75:8f:d9:e9:79:22:db:cf:
39:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:11:63:DF:E2:6B:D4:10:70:9C:D1:2D:B5:38:56:91:AA:66:A9:F7
X509v3 Authority Key Identifier:
keyid:2C:C3:5C:20:90:99:94:21:D3:3C:63:59:C9:B6:E6:81:82:A0:F2:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMNcIJCZlCHTPGNZybbmgYKg8nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:60:d2:77:28:f7:b0:7f:af:36:66:45:0e:5d:cc:0e:1f:a9:
ed:b7:13:7d:1f:35:20:d4:19:de:a4:ee:a4:17:51:f7:64:93:
be:e2:ce:3d:26:ea:ee:73:79:2d:b0:f8:b3:82:c8:42:fa:dc:
6a:7f:ff:46:5b:b5:9a:51:64:28:17:30:fc:b7:d8:15:3e:88:
ae:9b:f7:95:f9:f2:e0:f6:51:46:50:df:6f:46:c5:00:fb:fc:
cd:32:84:db:70:7d:49:87:f7:68:dd:76:b2:1f:16:e6:bc:81:
f5:5b:89:78:5f:63:2a:18:1c:45:b4:1a:0e:4b:e3:49:bc:27:
94:39:59:8e:ee:a7:54:77:ba:47:2c:34:8a:0e:64:8a:fb:42:
54:bf:c9:74:28:78:1e:c7:97:a5:f8:c6:55:87:43:f3:4f:ae:
f9:7d:8a:ed:c6:f4:82:61:ed:a3:9a:d5:c6:9f:fc:ff:6d:df:
d0:07:f2:c9:3c:c0:65:34:84:b8:e1:a8:2d:e5:91:1c:d3:7b:
c3:2e:4e:c0:c4:10:e2:ff:9d:51:f8:29:bb:1b:62:87:f6:a6:
27:9a:4e:f1:e0:0e:3c:f7:ee:7a:0c:32:f6:35:c2:b4:e4:ba:
53:1b:37:7b:5e:06:07:d8:89:bd:b6:be:29:67:7f:ba:29:17:
21:84:c1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:29:13 2025 by rpki-client