Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft
File: LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft (raw, json)
Hash identifier: dmBkwjjHe3e87iCkKsWnZyy/b1QQlS8VTSmQ2Rkf7uM=
Subject key identifier: 0F:68:A1:28:BE:0C:EA:9D:85:32:B7:3B:0B:2B:21:EA:1F:CC:13:64
Authority key identifier: 2E:62:76:13:62:54:83:0B:B4:90:7E:98:C2:58:E4:93:B4:2A:AA:3A
Certificate issuer: /CN=2e6276136254830bb4907e98c258e493b42aaa3a
Certificate serial: 0197B88F871F05ED172007B87A75C0120E65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft
Manifest number: 150C
Signing time: Sat 28 Jun 2025 22:01:43 +0000
Manifest this update: Sat 28 Jun 2025 22:01:43 +0000
Manifest next update: Sun 29 Jun 2025 22:01:43 +0000
Files and hashes: 1: LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.crl (hash: v7Pr1sQGPoebT1MupYSnGNws3ldbwfELh2iPaQ1DN8k=)
2: fNli-LiQ9awKyhQw-GNSvJ_42w0.roa (hash: L98lyb6k01PaEjUwasFWjyw8Arv6ILhrmJTj2kl/6vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:87:1f:05:ed:17:20:07:b8:7a:75:c0:12:0e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6276136254830bb4907e98c258e493b42aaa3a
Validity
Not Before: Jun 28 22:01:43 2025 GMT
Not After : Jun 29 22:01:43 2025 GMT
Subject: CN=0f68a128be0cea9d8532b73b0b2b21ea1fcc1364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6a:62:a0:fa:1e:c9:cd:c5:9c:d9:df:5e:06:
c1:97:8a:e2:a0:90:f1:1f:bb:a9:b2:b2:fa:59:08:
c0:9c:02:a8:54:13:e0:a1:9a:a6:80:f1:a7:97:cd:
f3:a6:63:9a:71:3d:9b:86:ab:55:c1:c4:bd:14:23:
d8:2b:23:dc:e1:71:16:14:55:3c:ea:5e:5d:d8:e7:
af:89:c0:72:0f:28:06:05:fb:74:79:ca:56:12:92:
05:dc:5a:51:57:20:96:a2:e7:01:ab:36:da:a5:38:
d1:d0:07:2a:3b:ae:3f:a7:d4:58:40:ec:a8:8a:7f:
a3:a1:f0:48:2f:70:c3:d4:e8:e5:e5:49:09:b4:e6:
30:58:e4:7d:d9:c3:ac:31:dd:13:e2:79:37:52:c6:
49:45:0a:f1:a9:29:d0:1b:66:9f:2c:bd:24:c5:f5:
91:f4:1a:9d:46:04:e9:6a:f2:5c:7c:c1:2d:69:bc:
ca:3e:3f:58:2d:9c:df:e2:fc:3d:93:74:7c:8f:4b:
1d:04:94:ca:aa:ae:56:34:3d:b8:fb:f9:37:22:04:
1f:c9:62:00:b7:66:0e:1a:77:5c:4f:0e:96:9d:81:
7c:74:e9:65:43:74:83:e2:60:74:4c:76:d6:03:65:
10:59:4e:d8:78:a1:f0:93:76:69:e4:eb:91:da:cb:
16:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:68:A1:28:BE:0C:EA:9D:85:32:B7:3B:0B:2B:21:EA:1F:CC:13:64
X509v3 Authority Key Identifier:
keyid:2E:62:76:13:62:54:83:0B:B4:90:7E:98:C2:58:E4:93:B4:2A:AA:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6a9b24-d4d3-40c1-8173-93b914701470/1/LmJ2E2JUgwu0kH6Ywljkk7Qqqjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:bd:14:d6:9e:db:40:7a:e8:85:da:35:6b:63:af:aa:8d:9d:
48:fb:cb:c3:d6:e0:1c:db:26:bc:69:de:74:ac:5b:36:82:e1:
fb:1a:5c:68:40:4a:92:d5:96:01:17:ed:41:e5:54:59:c9:90:
b6:7d:60:a5:29:d2:1b:99:2b:03:af:4c:da:82:97:d4:f8:20:
ba:01:ea:9b:e2:cf:84:9b:a6:a2:fd:54:22:d5:74:3e:e5:7c:
95:9d:41:d0:e4:40:f0:16:85:0c:1a:f1:cb:16:6e:95:47:ea:
9c:a2:69:4b:a5:1c:80:77:17:c1:c4:be:30:45:e2:8b:98:4b:
89:3c:e4:45:10:b3:18:96:3e:cc:eb:09:11:b0:05:2a:d7:fe:
61:2b:b5:ef:d7:11:49:d4:39:c9:05:f8:83:4b:6d:d9:09:da:
6f:e2:6b:a1:c6:5f:d5:ec:e9:20:9e:67:05:1a:3e:c1:52:0d:
f6:60:2a:37:c1:37:5e:0a:18:df:44:8b:04:d5:0e:b2:23:d1:
0b:d0:59:3b:26:cb:01:a2:a0:7f:d8:62:58:fe:26:3c:bb:71:
0a:5d:3b:e2:e5:ca:7a:f7:d8:bf:42:c0:97:34:14:8a:19:e5:
0b:44:78:78:60:02:c2:38:96:34:88:b5:c3:94:b2:26:0f:c4:
f0:ab:8a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:12:46 2025 by rpki-client