Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
File: LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft (raw, json)
Hash identifier: PNKKx/5PQAbTWkWM2kBYoYNEAuzD3IRrhnhk/sjycyo=
Subject key identifier: FC:C0:3C:97:4E:51:53:A4:D2:01:36:36:CF:30:CF:03:C3:79:CC:DB
Authority key identifier: 2D:9E:31:C9:02:9E:E4:4B:D6:81:B5:15:33:03:35:C6:A1:CF:DE:EE
Certificate issuer: /CN=2d9e31c9029ee44bd681b515330335c6a1cfdeee
Certificate serial: 01967FEB16F8FC7C1F16D0E1A4B551A8A3AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
Manifest number: 1518
Signing time: Tue 29 Apr 2025 05:00:35 +0000
Manifest this update: Tue 29 Apr 2025 05:00:35 +0000
Manifest next update: Wed 30 Apr 2025 05:00:35 +0000
Files and hashes: 1: 5rwnt7U3zNdamjh9hhJ_HA_VCqo.roa (hash: LxqMIG4f6G1y41E4bvnnaVLXMyv0wjoLuCjGmeNYJdQ=)
2: LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl (hash: Y3YEFar3hcnNUnyyMiBvMgAOWH0f1+Gcwi+qoshXgmY=)
3: NwLeIR_NPESbC4GUi2khijtoK7k.roa (hash: Cvm1rAd7KCGPEyQkopdZwWDBR/07H5izzQrtF4lbhAA=)
4: upgE53Ne0KMFUsGR-miso-8-5TQ.roa (hash: u1TgVu5CTRcoIplPeSQE03Pq8xZKbvkqbqoHvKMUbWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:eb:16:f8:fc:7c:1f:16:d0:e1:a4:b5:51:a8:a3:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d9e31c9029ee44bd681b515330335c6a1cfdeee
Validity
Not Before: Apr 29 05:00:35 2025 GMT
Not After : Apr 30 05:00:35 2025 GMT
Subject: CN=fcc03c974e5153a4d2013636cf30cf03c379ccdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d0:d2:ce:ad:c0:fe:2e:93:39:88:6e:46:d7:
a5:7f:3a:89:b6:b0:60:1b:b8:d6:08:98:30:74:7a:
5c:8c:6f:a9:43:86:07:db:31:a2:1b:06:f2:32:ac:
ca:d2:b9:0c:e2:67:9f:38:26:7a:f8:3e:87:0b:9d:
cc:25:4c:64:5d:fc:1b:1e:81:59:f8:93:00:8e:5c:
21:86:20:69:c6:00:58:ba:03:6f:3b:6e:a2:34:88:
c6:c2:32:48:99:d5:2c:19:ec:89:bb:26:8c:3b:83:
27:73:08:ad:32:74:74:3b:b9:3f:b7:cb:6b:4a:be:
b0:ce:f3:aa:ee:39:74:99:59:1a:5e:b6:3c:9f:2e:
d1:be:1f:42:09:b7:e0:50:ad:ee:d0:10:d5:04:8b:
83:26:7a:dc:12:e0:10:e1:a0:fb:33:4d:f7:74:48:
e6:73:5b:fb:95:f3:56:03:74:46:20:d2:03:f4:59:
57:a0:44:46:4a:cb:c6:c9:1a:57:2d:20:93:ea:ad:
e9:54:04:0d:b3:2e:06:1f:a1:33:ee:4e:b3:3d:0a:
4f:bc:96:01:13:72:71:94:b1:c1:e9:46:84:96:3a:
84:6a:c6:7f:65:2c:13:e8:7a:64:c6:a2:1c:8d:de:
8e:1f:ee:6b:aa:30:17:f7:aa:c4:74:b0:93:30:9e:
64:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C0:3C:97:4E:51:53:A4:D2:01:36:36:CF:30:CF:03:C3:79:CC:DB
X509v3 Authority Key Identifier:
keyid:2D:9E:31:C9:02:9E:E4:4B:D6:81:B5:15:33:03:35:C6:A1:CF:DE:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:98:90:11:90:31:28:c2:1b:3e:40:ea:d9:f1:70:73:45:e5:
13:ec:32:65:c0:55:e5:24:4f:89:90:58:30:cc:31:fc:1b:2a:
7c:9c:db:b4:7a:c7:ac:e8:bd:ce:ba:b2:ed:56:d6:db:bf:37:
14:94:01:0c:96:6b:31:09:ff:ea:2e:d2:4e:73:38:b4:a6:81:
f2:70:85:ca:fb:47:86:84:7b:b8:a5:d7:be:ad:1e:1a:8e:d7:
6b:c5:0a:8a:b4:4d:9a:9d:62:47:b7:54:69:e0:6d:10:b8:6b:
38:07:42:db:84:fb:3a:7f:62:27:d4:9a:68:59:e9:70:4b:a5:
1c:ac:da:50:b4:09:cb:42:29:d5:c3:f7:7f:7d:95:7c:c0:a0:
e5:8c:90:27:10:b7:45:96:be:82:03:70:20:24:86:a1:2a:b8:
64:96:4c:53:0b:9e:8b:08:64:3d:64:cb:47:3e:fa:07:ce:8d:
59:f3:f8:2b:8a:6b:5d:5b:93:25:a4:3e:5e:3a:06:2a:1d:25:
d9:3c:35:88:da:0e:38:39:ab:f9:ca:55:8e:e6:84:f5:16:5b:
0e:b8:97:35:22:3c:d9:50:4c:26:8f:58:31:52:59:6e:bb:07:
b3:4b:e0:f2:b1:ba:a0:05:af:52:53:d4:07:bf:cb:9a:25:fa:
82:87:04:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:25:34 2025 by rpki-client