Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.mft
File: LzE27RCZhYClF9lZiryjPZumZZk.mft (raw, json)
Hash identifier: SVn4+VRSW43F7eITe4g7SwdQxE8KNOVySjMmxIsQwdA=
Subject key identifier: 8E:86:49:AA:34:58:30:D9:77:E0:1B:CD:6F:9B:E0:D6:CB:F9:95:93
Authority key identifier: 2F:31:36:ED:10:99:85:80:A5:17:D9:59:8A:BC:A3:3D:9B:A6:65:99
Certificate issuer: /CN=2f3136ed10998580a517d9598abca33d9ba66599
Certificate serial: 01967342357BFF0910BFB3CBAA51D84BFC3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.mft
Manifest number: 0F5E
Signing time: Sat 26 Apr 2025 18:00:40 +0000
Manifest this update: Sat 26 Apr 2025 18:00:40 +0000
Manifest next update: Sun 27 Apr 2025 18:00:40 +0000
Files and hashes: 1: 1-yugL-SGYJzA0SlIwsrWzOp3cgA.roa (hash: O2bNI1scy+7X4n9DPZtywaN+gf/oDuWIcE8taLKp6lk=)
2: LzE27RCZhYClF9lZiryjPZumZZk.crl (hash: XsLpaGDX2KvE4P9OL3iMjlKTw0Ek/hQX3UXem4IRZb0=)
3: rTnE_4SSvKLdBmzoX1z2eYDdLlo.roa (hash: ahybXpUR1qe0NeSWLYaG6olTaEIqlXgXDv7V6mdJiXU=)
4: tjGJDt_M-VxsgPS8YmM7UNvHHRo.roa (hash: ByJAYyuv1Y5nwy0y2xRNrrdrD4R0wOXmShNxbo80fvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:42:35:7b:ff:09:10:bf:b3:cb:aa:51:d8:4b:fc:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f3136ed10998580a517d9598abca33d9ba66599
Validity
Not Before: Apr 26 18:00:40 2025 GMT
Not After : Apr 27 18:00:40 2025 GMT
Subject: CN=8e8649aa345830d977e01bcd6f9be0d6cbf99593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b2:c7:b9:2e:a8:93:2a:bc:87:11:d9:89:f6:
d7:3e:89:04:ef:d5:c6:fe:8f:56:93:8c:ef:0d:02:
2a:08:7b:8f:87:10:46:10:95:95:52:34:80:df:d6:
37:63:8e:d7:32:27:31:d0:92:28:9d:7e:64:82:69:
e0:08:15:62:a9:02:4e:59:27:0a:32:a7:86:bb:2b:
07:25:1e:07:51:db:9e:a3:53:04:30:34:da:45:f6:
5a:7c:a1:8c:d9:04:0e:31:72:ec:01:ca:0a:2e:df:
f0:86:9f:89:81:1a:fc:19:b5:04:73:e8:7a:cc:7e:
4e:dd:67:cf:8e:02:7f:c8:96:08:ed:98:02:02:fb:
a2:d4:11:0c:03:87:41:18:08:87:87:2d:57:8c:c7:
4f:bd:b9:2e:1c:3f:43:6a:89:bc:24:f8:5a:e3:00:
41:43:5c:6b:73:73:15:8f:db:94:23:57:58:51:1d:
e3:36:d1:36:1d:fd:0a:bd:aa:9e:a2:55:a1:48:20:
24:cf:4e:e0:40:d7:ea:d4:d5:89:02:e4:9b:3e:d1:
41:b0:a6:d2:bb:09:f3:b8:71:77:8f:87:0d:fd:03:
30:56:9c:3d:34:ec:8d:3f:48:d1:74:0d:cf:13:a2:
c9:d5:50:38:0b:40:90:ab:c8:31:22:e3:85:dc:4a:
04:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:86:49:AA:34:58:30:D9:77:E0:1B:CD:6F:9B:E0:D6:CB:F9:95:93
X509v3 Authority Key Identifier:
keyid:2F:31:36:ED:10:99:85:80:A5:17:D9:59:8A:BC:A3:3D:9B:A6:65:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:36:ba:23:8f:53:12:19:75:ff:4b:8c:b1:42:c5:fe:57:c4:
47:32:51:e0:8c:f7:a9:12:21:2e:51:7f:e8:97:d2:55:16:e2:
5f:9b:04:a4:52:5d:63:7e:6f:a3:9d:de:8f:1e:90:58:33:82:
93:71:d5:15:f6:a5:fc:ae:81:05:eb:71:f9:76:c9:0a:19:25:
45:81:fc:31:31:3f:60:fd:5a:8a:53:38:33:f2:8a:b2:bf:82:
26:70:d6:59:ff:c5:1f:3a:9e:84:69:4c:1c:5c:f8:06:8e:c4:
17:f8:c8:e8:60:c4:94:83:ef:f0:f9:3d:9a:88:53:e0:c9:57:
ac:6c:5a:e0:91:1f:29:ea:9f:27:f8:af:b1:c1:e9:db:2d:b6:
a8:ac:dd:15:45:f4:0a:f0:7a:f2:03:0d:73:88:96:03:c2:00:
10:02:4b:6d:37:f4:90:eb:f0:a5:dc:97:f0:0e:74:e1:fa:5f:
99:dc:9f:fe:d2:e1:78:ee:ea:d4:ed:c5:d3:99:d6:d2:8d:19:
f6:bc:cf:d7:ff:f4:da:2e:9f:db:bb:68:90:28:58:bb:fe:4d:
44:45:78:cd:2e:f7:d6:f9:1b:c9:55:3d:96:66:60:7b:e8:2f:
21:5e:b9:ed:1f:d5:bd:f4:44:33:80:2f:e9:5e:8f:6e:46:2b:
1c:56:12:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:19:17 2025 by rpki-client