Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
File: lmAVV4yUjzG_dKHh__1_o-NGAgY.mft (raw, json)
Hash identifier: pgzMzYMKfkEl5Ar17Swbhxz1YSX0BnfSw+4zDbmTnPc=
Subject key identifier: 84:7B:54:F3:D8:58:BC:F5:81:21:F4:01:E2:26:CC:27:5E:29:10:64
Authority key identifier: 96:60:15:57:8C:94:8F:31:BF:74:A1:E1:FF:FD:7F:A3:E3:46:02:06
Certificate issuer: /CN=966015578c948f31bf74a1e1fffd7fa3e3460206
Certificate serial: 0196B935F03BCC352062C0661A05CA941351
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
Manifest number: 0BBE
Signing time: Sat 10 May 2025 08:00:41 +0000
Manifest this update: Sat 10 May 2025 08:00:41 +0000
Manifest next update: Sun 11 May 2025 08:00:41 +0000
Files and hashes: 1: OE686EGR1IVKz-bx67_ZsH11lHQ.roa (hash: S5Z4RalwztbreTYazKn4Yw+ySxhuT6+PltCXQ/y03p0=)
2: lmAVV4yUjzG_dKHh__1_o-NGAgY.crl (hash: d54pf6SFz6Id+PZdRL1fK1M7bs7qwF+R3igehOUl5Ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:35:f0:3b:cc:35:20:62:c0:66:1a:05:ca:94:13:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=966015578c948f31bf74a1e1fffd7fa3e3460206
Validity
Not Before: May 10 08:00:41 2025 GMT
Not After : May 11 08:00:41 2025 GMT
Subject: CN=847b54f3d858bcf58121f401e226cc275e291064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b1:56:86:dc:31:3c:fe:2e:77:9b:a5:bd:a0:
1c:02:66:c1:8a:e1:05:6f:aa:d9:25:29:52:15:f5:
89:f2:49:f9:fc:b7:a7:de:74:ec:6e:95:2d:1d:1a:
35:c4:42:b6:ed:fe:29:ee:fc:ed:97:d6:5c:46:94:
cb:c4:c9:7a:fc:7d:1c:cb:19:e7:57:d4:84:6a:af:
84:35:36:b9:c9:12:78:65:d7:1d:48:42:43:bd:27:
ba:77:54:a0:f5:0d:42:f9:1c:97:38:ba:f9:33:fc:
90:fe:9f:ca:5a:04:f7:64:0c:17:2c:da:be:13:1a:
e5:ca:7d:91:9c:29:8c:60:17:8e:5d:77:a9:c3:e2:
c2:11:af:c4:c2:ed:32:18:4e:a5:8b:ef:1a:72:0d:
f3:d2:1c:e6:2a:7f:3a:71:79:08:6b:d6:92:cc:dc:
bf:a8:b8:e1:8e:97:2d:34:df:d9:6b:4f:63:6c:71:
66:ff:d5:f8:ca:95:ab:04:f3:96:f5:e7:38:4a:5e:
3d:d5:b6:e7:c2:4e:d3:9b:a4:6f:dd:f1:bf:78:07:
5c:47:c7:8f:7f:7a:f5:38:9b:2b:dc:17:23:96:bb:
7e:4d:4d:9a:72:08:df:ec:41:83:e0:56:9c:01:02:
e8:ae:8b:b7:71:23:f6:37:80:3e:ad:56:37:c4:7e:
c2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7B:54:F3:D8:58:BC:F5:81:21:F4:01:E2:26:CC:27:5E:29:10:64
X509v3 Authority Key Identifier:
keyid:96:60:15:57:8C:94:8F:31:BF:74:A1:E1:FF:FD:7F:A3:E3:46:02:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:8f:c0:1c:b5:6a:95:ad:5a:55:b3:55:e8:8e:cf:94:f5:e4:
0c:e2:89:1d:a4:43:97:ea:25:b0:4f:9b:df:02:7a:e6:70:1e:
89:29:e1:3b:e6:8d:ac:16:48:24:9e:b2:1c:9a:b2:0c:16:29:
7d:a8:1a:30:34:50:b8:b3:89:26:3f:e0:2c:63:dd:fa:86:b5:
56:1a:c2:23:d4:81:77:52:2c:a3:13:ca:81:24:28:25:ff:df:
47:51:5b:dd:44:63:48:23:1e:5c:7f:4a:1a:93:77:66:1c:8b:
f8:16:06:78:6f:97:ea:1e:de:38:9d:bd:fe:94:5d:db:b0:89:
71:21:f7:23:9a:e3:a8:15:99:61:eb:c4:e4:43:87:b6:c8:f4:
84:94:2f:b9:4d:1e:15:86:c6:2b:d9:cc:7e:d4:2b:fb:ce:11:
cc:c6:71:0b:f8:ed:5e:a2:71:a6:67:66:37:b1:4c:27:0e:43:
86:21:60:b8:5c:5d:02:a7:fd:ed:71:f1:41:21:83:0c:d3:c8:
32:03:67:58:52:e4:b2:42:70:33:03:59:7a:f2:54:1f:e6:48:
00:05:8f:ab:3c:b3:d7:34:9b:c3:60:16:ee:10:07:02:71:bb:
3f:5f:f0:01:40:e2:fe:df:64:20:4f:2f:89:e0:25:c4:22:5f:
a4:33:5c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:21:25 2025 by rpki-client