Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
File: lmr8FNShmnwsFo6yyB1WIrMBSes.mft (raw, json)
Hash identifier: ggKIP803MuvAKienrb44ZBNGH+vJe8Gg0qi6lp4Iekk=
Subject key identifier: C8:74:7C:87:5F:A2:46:B1:E6:6A:D5:2E:C6:ED:93:56:C2:34:A5:B5
Authority key identifier: 96:6A:FC:14:D4:A1:9A:7C:2C:16:8E:B2:C8:1D:56:22:B3:01:49:EB
Certificate issuer: /CN=966afc14d4a19a7c2c168eb2c81d5622b30149eb
Certificate serial: 0196B6A25F6ABDB1AECF3DA939963A81845D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
Manifest number: 152F
Signing time: Fri 09 May 2025 20:00:16 +0000
Manifest this update: Fri 09 May 2025 20:00:16 +0000
Manifest next update: Sat 10 May 2025 20:00:16 +0000
Files and hashes: 1: YBabozhq7Bm__rh2KvKvZaWJJSk.roa (hash: ZpYTHURBPLv+zLOzTtEUmCp4scPYCX2Bazth3B2lfOY=)
2: lmr8FNShmnwsFo6yyB1WIrMBSes.crl (hash: X0AkC35YBJFZhHxp7c3HPfhET2STNTN5QystY1A3c30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:a2:5f:6a:bd:b1:ae:cf:3d:a9:39:96:3a:81:84:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=966afc14d4a19a7c2c168eb2c81d5622b30149eb
Validity
Not Before: May 9 20:00:16 2025 GMT
Not After : May 10 20:00:16 2025 GMT
Subject: CN=c8747c875fa246b1e66ad52ec6ed9356c234a5b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:29:03:8e:81:75:03:f3:22:37:2e:b9:6d:27:
43:e4:1f:27:86:99:6f:53:d6:61:76:3b:6c:66:08:
75:d1:50:56:79:62:4e:ff:4e:2d:64:03:0d:b1:eb:
93:d6:d7:ff:0c:d4:f0:ba:ec:03:b1:ba:ca:54:de:
41:04:66:41:c6:de:8b:d0:4b:43:88:20:0c:8e:c6:
c6:54:f6:da:23:f1:df:2c:cb:82:ec:4d:a1:dd:96:
b6:20:13:c0:c2:07:16:a0:a7:60:34:17:6a:22:bd:
6e:b5:ad:c6:ce:80:3c:59:9c:4e:96:d2:b7:aa:1d:
b4:e6:ab:f6:e7:9a:70:d8:48:7b:a0:99:5a:21:24:
0a:c6:af:89:19:14:e9:47:ea:aa:ee:a9:16:24:3c:
0d:5d:4f:19:d1:c6:c0:4b:b1:b0:28:fe:eb:22:28:
a1:65:d5:51:7b:8a:64:48:80:88:db:c3:47:79:de:
db:8d:70:1b:bc:4e:53:ce:47:c3:12:ba:a1:b4:02:
2f:24:c0:36:de:51:0d:ae:fd:d0:cd:43:46:1a:2a:
64:15:69:d6:d9:ab:41:68:04:e2:d0:4c:81:d9:80:
4d:54:40:b1:d8:02:d0:ca:89:da:ff:40:87:d0:13:
48:ae:4d:26:7e:02:c5:a6:66:f9:86:39:e1:01:54:
7a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:74:7C:87:5F:A2:46:B1:E6:6A:D5:2E:C6:ED:93:56:C2:34:A5:B5
X509v3 Authority Key Identifier:
keyid:96:6A:FC:14:D4:A1:9A:7C:2C:16:8E:B2:C8:1D:56:22:B3:01:49:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmr8FNShmnwsFo6yyB1WIrMBSes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1f7c98-18aa-47d8-ab41-1161edb9bf0e/1/lmr8FNShmnwsFo6yyB1WIrMBSes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:43:0c:ea:da:d0:86:32:d7:ee:73:31:67:9a:e1:65:70:36:
67:92:87:a2:96:9e:2c:ae:56:c5:18:dc:0e:cc:e9:e2:6d:50:
d3:c2:e6:74:e9:c0:18:57:dd:e5:9b:21:3f:7e:6b:d5:65:3d:
7c:76:1a:c9:ac:84:64:0c:36:59:52:cb:1f:5a:5e:f6:80:c9:
ba:2c:b3:54:89:1e:43:b0:d8:64:25:4b:aa:1e:6d:0a:b0:60:
13:f9:ef:c5:b4:5c:94:9b:83:76:fb:24:5f:3b:03:58:29:ea:
12:ea:42:13:f1:df:cf:6c:67:5e:be:5b:0c:96:1e:4e:6b:68:
9d:4a:69:4c:44:c0:53:fe:1d:cb:20:1b:8b:10:15:3f:18:19:
20:b6:87:74:0e:43:9b:0d:d5:fb:28:2e:a5:7d:d8:c7:bf:62:
09:dc:f6:84:50:f4:4b:48:90:a9:16:76:fe:a1:2a:26:ff:99:
cd:62:d5:a2:3e:d3:05:8d:21:62:8c:5b:c4:83:86:e8:0e:8a:
7f:ba:10:2a:18:ec:20:84:e6:75:87:87:b7:20:03:88:42:ba:
df:cb:09:59:38:46:bb:39:ec:da:84:a9:eb:81:dc:66:66:a9:
a0:af:7a:6c:86:8f:b0:8f:82:4f:9a:35:5c:3f:bb:8b:0b:13:
c3:65:4f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:26:10 2025 by rpki-client