Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft
File: LMNcIJCZlCHTPGNZybbmgYKg8nM.mft (raw, json)
Hash identifier: Q/tfS2QW/drxIvcevxaAX/cooJMFrqPVqop468em9S0=
Subject key identifier: F3:49:30:1D:85:64:D1:7B:86:EC:6D:06:08:E2:C5:0F:9E:4D:BA:DF
Authority key identifier: 2C:C3:5C:20:90:99:94:21:D3:3C:63:59:C9:B6:E6:81:82:A0:F2:73
Certificate issuer: /CN=2cc35c2090999421d33c6359c9b6e68182a0f273
Certificate serial: 0196D889B0D020C2B54F8D1F3313AD32537C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMNcIJCZlCHTPGNZybbmgYKg8nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft
Manifest number: 14D1
Signing time: Fri 16 May 2025 10:00:24 +0000
Manifest this update: Fri 16 May 2025 10:00:24 +0000
Manifest next update: Sat 17 May 2025 10:00:24 +0000
Files and hashes: 1: LMNcIJCZlCHTPGNZybbmgYKg8nM.crl (hash: pEehFn83hcRaoE+VBBQO4KSwWQPD0fZGgIW2fO8XHy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LMNcIJCZlCHTPGNZybbmgYKg8nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d8:89:b0:d0:20:c2:b5:4f:8d:1f:33:13:ad:32:53:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cc35c2090999421d33c6359c9b6e68182a0f273
Validity
Not Before: May 16 10:00:24 2025 GMT
Not After : May 17 10:00:24 2025 GMT
Subject: CN=f349301d8564d17b86ec6d0608e2c50f9e4dbadf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:15:26:3c:29:9e:97:bf:7a:ab:d8:44:30:22:
83:22:13:39:90:bf:d2:77:ef:28:9b:74:1d:d1:eb:
61:9a:f3:3e:12:fe:bd:05:aa:be:2c:b2:52:b2:27:
71:3c:8b:f7:27:bd:ad:f8:06:65:82:41:7f:01:25:
55:28:f8:5a:fd:1e:5b:d4:07:f5:01:44:0a:be:dd:
59:50:53:aa:61:e5:37:27:0a:2d:c6:9a:63:48:d2:
4b:35:36:2d:bc:94:25:f6:3f:df:43:70:61:5d:ad:
70:ec:f8:51:41:0b:9f:9d:18:69:b2:75:e4:39:ef:
35:7f:9f:1f:a6:bd:22:9c:19:e1:d5:b7:b5:08:77:
48:5a:0b:47:00:cc:e2:0c:4c:49:d2:c9:d5:40:41:
8b:c8:ff:e1:8e:53:5a:36:24:04:0e:8c:9a:ca:02:
b7:36:b3:76:39:67:17:e8:20:f9:21:32:dc:3a:9c:
96:8c:0a:23:36:16:d1:b2:6e:44:8a:15:94:8c:10:
25:08:ac:7d:39:45:d8:50:14:79:ac:fd:33:be:db:
c4:d6:b7:19:8e:35:75:3b:e5:0e:ac:ed:8d:ca:a0:
53:7d:eb:e4:93:e0:9b:74:aa:3f:ec:8c:ba:a0:97:
53:11:71:78:53:0d:97:2d:c6:64:c2:7b:2d:4d:31:
7e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:49:30:1D:85:64:D1:7B:86:EC:6D:06:08:E2:C5:0F:9E:4D:BA:DF
X509v3 Authority Key Identifier:
keyid:2C:C3:5C:20:90:99:94:21:D3:3C:63:59:C9:B6:E6:81:82:A0:F2:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMNcIJCZlCHTPGNZybbmgYKg8nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:b0:0a:6d:99:6d:47:4b:de:03:9f:2c:ed:e4:2a:6a:fa:67:
3e:3a:a4:6d:36:d3:34:18:ec:3d:e8:0b:8a:22:52:0b:43:bf:
71:70:51:0c:ac:29:7a:db:f2:9a:73:bf:cf:bc:a6:b3:a4:04:
df:44:2f:3c:52:96:3d:34:a0:13:aa:2e:1d:5a:5f:e8:f7:b0:
47:e5:76:91:ce:44:8b:ef:58:86:fa:60:d6:68:1a:60:f5:91:
3b:7a:f1:fd:ca:a5:61:ec:63:6f:ff:e4:f9:98:ea:8e:fb:4e:
ec:9b:e9:00:cd:8d:37:fc:65:e4:8b:89:53:5d:fb:0c:8c:1d:
2c:0c:8d:ac:a9:cd:d2:cb:39:4d:f7:63:74:40:cc:11:a2:b7:
7a:3b:1b:d5:2c:43:ca:19:03:d3:cc:1a:86:b9:da:5a:53:b7:
3c:d7:40:2a:ae:49:ee:d0:0a:45:bc:2e:23:b7:fe:15:9f:43:
e8:e0:93:64:b0:80:3b:18:4c:71:53:4c:99:cf:fc:0d:81:2f:
67:f8:62:61:07:de:10:1c:d2:bc:9a:5b:88:49:94:ad:2e:34:
87:82:60:c2:09:58:25:3f:50:74:1a:b3:cc:bf:1a:1d:b0:b3:
8e:dd:a1:7a:29:ec:be:91:a4:58:fd:80:a7:53:3e:1d:f3:fd:
94:ba:a2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 12:14:39 2025 by rpki-client