Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/04cb8b-0f54-45fb-9f1e-ac2b74d0c699/1/Lvkmmrf2FMHs-iNZko7uXe85oJ0.mft
File: Lvkmmrf2FMHs-iNZko7uXe85oJ0.mft (raw, json)
Hash identifier: yzZTTAQIKe/sbdN4B08/FMujiatfZzVK32EHX9oryZQ=
Subject key identifier: 2D:64:4B:64:77:AC:90:A3:DF:1B:2F:7D:C2:24:68:62:19:FB:19:D2
Authority key identifier: 2E:F9:26:9A:B7:F6:14:C1:EC:FA:23:59:92:8E:EE:5D:EF:39:A0:9D
Certificate issuer: /CN=2ef9269ab7f614c1ecfa2359928eee5def39a09d
Certificate serial: 0196AA9E32C50087EE76D0FDFED5FF99D238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lvkmmrf2FMHs-iNZko7uXe85oJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/04cb8b-0f54-45fb-9f1e-ac2b74d0c699/1/Lvkmmrf2FMHs-iNZko7uXe85oJ0.mft
Manifest number: AC
Signing time: Wed 07 May 2025 12:00:16 +0000
Manifest this update: Wed 07 May 2025 12:00:16 +0000
Manifest next update: Thu 08 May 2025 12:00:16 +0000
Files and hashes: 1: Lvkmmrf2FMHs-iNZko7uXe85oJ0.crl (hash: hHTV1iIs7IQ8tCr+U9Koqg24I+3mpUdEj0kdjHeCZlU=)
2: S7R40cp3GhnKkmjft9RMef_54Y8.roa (hash: 8lQswAz9iKln85edEU2eDSuB3VyL1jNQyiwguuxfyac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/04cb8b-0f54-45fb-9f1e-ac2b74d0c699/1/Lvkmmrf2FMHs-iNZko7uXe85oJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/04cb8b-0f54-45fb-9f1e-ac2b74d0c699/1/Lvkmmrf2FMHs-iNZko7uXe85oJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lvkmmrf2FMHs-iNZko7uXe85oJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 12:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:9e:32:c5:00:87:ee:76:d0:fd:fe:d5:ff:99:d2:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ef9269ab7f614c1ecfa2359928eee5def39a09d
Validity
Not Before: May 7 12:00:16 2025 GMT
Not After : May 8 12:00:16 2025 GMT
Subject: CN=2d644b6477ac90a3df1b2f7dc224686219fb19d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ed:ce:42:1d:d3:cb:ab:a4:74:6c:9a:27:25:
29:44:fb:24:b8:01:a2:4e:f8:20:b2:fa:53:db:d3:
bf:59:bf:c5:7c:99:d7:70:46:ed:87:6a:a0:64:0b:
63:b3:27:d4:f8:8d:91:6a:c0:a0:09:38:8d:70:ef:
b4:1d:98:af:f2:81:99:db:69:1e:49:6b:4b:1e:07:
3d:08:fc:78:ee:df:ad:63:04:65:9f:20:98:bb:53:
75:29:08:f4:24:93:69:6e:46:55:50:cc:49:7b:6e:
99:2a:f7:dc:cc:4b:c4:54:7a:d2:bb:f8:25:8a:62:
2a:47:a1:a0:af:7b:00:18:30:4c:40:d2:d6:a3:62:
f7:8b:86:2b:3a:e9:d2:7e:42:06:a7:01:fb:3d:fe:
f6:24:f4:35:d6:28:20:61:3e:cf:62:4d:0c:58:00:
58:ed:6b:89:3e:1a:01:04:ee:3c:22:71:ae:8b:f4:
38:bb:db:b0:29:84:61:d1:f5:87:e6:c2:61:34:d8:
5a:84:54:92:27:30:c6:5f:1d:21:c4:d3:4f:88:35:
12:00:8a:84:20:fc:62:05:16:1d:2b:21:ad:f2:c5:
e2:f7:4f:72:72:5b:7c:ba:68:5b:aa:b5:a6:0f:25:
1e:f6:14:49:8e:21:9b:51:c3:f0:67:5b:1b:9e:ef:
19:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:64:4B:64:77:AC:90:A3:DF:1B:2F:7D:C2:24:68:62:19:FB:19:D2
X509v3 Authority Key Identifier:
keyid:2E:F9:26:9A:B7:F6:14:C1:EC:FA:23:59:92:8E:EE:5D:EF:39:A0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lvkmmrf2FMHs-iNZko7uXe85oJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/04cb8b-0f54-45fb-9f1e-ac2b74d0c699/1/Lvkmmrf2FMHs-iNZko7uXe85oJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/04cb8b-0f54-45fb-9f1e-ac2b74d0c699/1/Lvkmmrf2FMHs-iNZko7uXe85oJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:0d:a1:2f:33:96:53:38:f7:90:75:fd:75:3d:2d:f3:95:92:
fb:ba:4e:46:73:e7:6b:d2:2a:3d:92:be:cf:da:1a:73:bc:37:
fa:48:b2:99:69:07:2d:b5:24:19:02:14:50:44:a1:38:3e:73:
64:bc:67:48:78:e4:f4:e0:26:30:5e:6b:7c:f9:47:42:c1:4b:
32:cb:94:0d:69:dd:a5:a4:45:5d:86:f3:d2:5e:64:63:a8:35:
8e:40:64:0d:9b:ce:50:0e:52:29:52:9c:85:a4:85:06:f4:fa:
af:d4:95:15:87:9b:eb:8f:9f:0e:7d:22:5a:4b:03:92:e4:6e:
bb:87:d5:9d:63:c1:94:e4:04:fc:a3:df:69:cb:bf:de:0b:15:
f6:1c:4c:71:c5:88:82:c8:0c:23:9f:ac:da:3e:57:6a:37:a1:
93:99:6e:fb:99:b0:25:60:df:e4:06:ce:19:bf:d3:41:cd:66:
29:ed:35:fe:bd:ce:e9:11:d3:b6:f1:9c:05:6d:8e:26:03:94:
1a:35:7f:a3:ba:7b:39:2a:38:43:da:c8:26:1a:17:29:54:3a:
f6:d9:f2:84:b3:ea:56:de:85:93:ab:86:d7:57:a0:bd:5c:ab:
f6:ab:5e:5f:5a:ab:f0:ce:05:91:cd:ba:3b:56:d2:5f:1d:3d:
e2:0c:a6:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 22:33:25 2025 by rpki-client