Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.mft
File: LM5dUfp1u7btlipBZu9vhjCgJYE.mft (raw, json)
Hash identifier: AOPFvNebeeS5Ldh6HSqqC/9N4vfPjNM9O0jddEgRnp8=
Subject key identifier: 34:B6:7A:41:30:18:C9:D0:1C:10:DD:2A:0A:0D:FC:A2:04:72:43:DD
Authority key identifier: 2C:CE:5D:51:FA:75:BB:B6:ED:96:2A:41:66:EF:6F:86:30:A0:25:81
Certificate issuer: /CN=2cce5d51fa75bbb6ed962a4166ef6f8630a02581
Certificate serial: 0196CCBC6CFD8DC1C422F9A21EC481B38D9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LM5dUfp1u7btlipBZu9vhjCgJYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.mft
Manifest number: 11DA
Signing time: Wed 14 May 2025 03:00:22 +0000
Manifest this update: Wed 14 May 2025 03:00:22 +0000
Manifest next update: Thu 15 May 2025 03:00:22 +0000
Files and hashes: 1: LM5dUfp1u7btlipBZu9vhjCgJYE.crl (hash: bdJHgpQ0CZs/5tWzG7JSvH3X+lDoeU7I0/jC4fWIVj0=)
2: gwJ9hMltFlWaOeN-R_fhzG-JI24.roa (hash: wuy2X0I9Yx6e8bAqg0gf/bu0yRoRH3AWoeZNQfjdFoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LM5dUfp1u7btlipBZu9vhjCgJYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:bc:6c:fd:8d:c1:c4:22:f9:a2:1e:c4:81:b3:8d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cce5d51fa75bbb6ed962a4166ef6f8630a02581
Validity
Not Before: May 14 03:00:22 2025 GMT
Not After : May 15 03:00:22 2025 GMT
Subject: CN=34b67a413018c9d01c10dd2a0a0dfca2047243dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0e:6f:0c:20:10:27:8c:1e:e3:eb:90:a3:ca:
04:f6:18:dc:5c:48:ca:c1:9a:00:08:7a:ad:9e:ea:
ea:41:65:41:43:63:3b:e6:00:21:29:99:b2:f8:eb:
9c:fd:1b:5d:f7:b6:7c:c7:00:fe:ac:67:f0:d4:86:
27:d0:67:60:76:a1:44:06:2a:12:4c:9b:cf:92:1a:
b5:73:5f:4a:bd:d5:f3:c9:99:ac:67:7a:22:ba:bb:
31:a8:5c:28:a9:47:6c:a7:17:43:87:97:91:07:36:
d0:a0:9c:40:b1:43:ac:7e:cf:f6:88:fa:bc:61:68:
b4:a5:5b:bd:21:51:6f:37:81:03:63:33:69:7f:d1:
33:e3:b6:f9:7a:9a:b2:19:94:3e:d5:5d:86:b6:ed:
06:a6:30:4f:e9:eb:88:b5:8f:aa:55:bd:d5:e1:53:
12:9f:f2:e0:d1:83:92:e4:fb:f2:e6:a1:c6:98:26:
2a:61:4e:98:b7:78:b5:87:af:1f:8b:0b:99:95:8b:
8a:79:21:65:70:86:c9:c8:47:28:57:75:74:a9:77:
fa:d8:61:36:7e:32:ea:81:21:ea:38:36:aa:28:33:
c5:0e:fc:ff:2b:8a:28:b1:65:c4:d8:96:3b:ab:50:
bb:cc:b5:9c:9e:9c:af:0c:00:8e:24:b9:24:86:ac:
e5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B6:7A:41:30:18:C9:D0:1C:10:DD:2A:0A:0D:FC:A2:04:72:43:DD
X509v3 Authority Key Identifier:
keyid:2C:CE:5D:51:FA:75:BB:B6:ED:96:2A:41:66:EF:6F:86:30:A0:25:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LM5dUfp1u7btlipBZu9vhjCgJYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2b5ed6-3a7c-4631-b49d-bf55b8b1669c/1/LM5dUfp1u7btlipBZu9vhjCgJYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ea:f7:44:da:21:dd:c7:d9:a3:98:a6:31:cc:93:aa:c3:8e:
d0:04:fa:bb:fb:eb:af:29:08:ab:4c:d9:79:7a:e9:2c:e9:c8:
3f:79:89:f8:40:8c:12:d8:9e:5e:d3:f8:e3:80:d9:0d:3b:2e:
81:8c:56:f2:c5:10:62:3a:de:c6:48:ab:1c:de:dd:93:3f:58:
e1:27:73:57:76:0e:ff:97:75:e7:c6:bd:82:c6:37:14:60:b1:
80:a4:84:91:95:87:44:d2:1a:7f:2e:72:e4:6d:c2:17:77:48:
a5:6e:07:e0:22:89:b2:1d:19:fc:ff:bd:99:ec:92:a3:1b:a0:
02:cb:68:5d:03:be:99:4b:7f:8b:cc:a1:72:ae:cf:2c:0e:42:
28:6e:95:02:74:6e:5a:c5:4a:e8:08:04:44:d2:7f:46:28:94:
ce:62:53:3a:b9:75:f3:cb:e4:06:8e:7a:77:d3:15:1f:c4:08:
9f:64:a8:65:af:24:f7:c3:d4:f5:77:cf:0b:77:7b:cb:1a:25:
ff:8a:9b:64:d1:8a:89:93:f3:6d:7f:95:69:6b:81:49:c2:91:
f3:a2:be:7d:cd:8f:06:37:3f:fe:ed:1e:33:ca:78:5e:3c:0a:
21:fb:b0:61:1d:28:ee:b0:fb:05:37:ac:10:4c:69:0a:69:53:
14:2f:5e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 05:47:49 2025 by rpki-client