Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft
File: LzFLwAp-WuIzSeBUBik6fWBgzaE.mft (raw, json)
Hash identifier: HVweyNsk9X7j25GSTrZT7TYX3ajglQ0CB0U433ca1dY=
Subject key identifier: 08:A9:90:76:6A:61:99:85:ED:BB:58:15:A0:F1:FA:CC:7A:F3:BF:AE
Authority key identifier: 2F:31:4B:C0:0A:7E:5A:E2:33:49:E0:54:06:29:3A:7D:60:60:CD:A1
Certificate issuer: /CN=2f314bc00a7e5ae23349e05406293a7d6060cda1
Certificate serial: 019771BF255E6F2CE48418E1A6D2876E3AE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft
Manifest number: 1253
Signing time: Sun 15 Jun 2025 04:00:41 +0000
Manifest this update: Sun 15 Jun 2025 04:00:41 +0000
Manifest next update: Mon 16 Jun 2025 04:00:41 +0000
Files and hashes: 1: 1-d5J5W-VmdNEPvaUUIc9QmXJa7c.roa (hash: WEje3N6tM8UQY4DTr2W4pxQIyOYapcmAGgNCDl+FllM=)
2: LzFLwAp-WuIzSeBUBik6fWBgzaE.crl (hash: AK9mViTZcmrG6GBA4BZaTcCq2tHhOFiP/UtSv5hTFPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:bf:25:5e:6f:2c:e4:84:18:e1:a6:d2:87:6e:3a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f314bc00a7e5ae23349e05406293a7d6060cda1
Validity
Not Before: Jun 15 04:00:41 2025 GMT
Not After : Jun 16 04:00:41 2025 GMT
Subject: CN=08a990766a619985edbb5815a0f1facc7af3bfae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5d:3e:fa:c4:6b:38:ce:69:5b:37:88:04:af:
60:3e:19:5c:dd:73:8f:95:a3:22:2e:40:36:e2:25:
94:30:6b:62:9c:6a:eb:4d:d0:96:29:15:d0:f2:a0:
ae:a9:9a:04:20:a1:ad:d6:65:ed:db:4d:64:09:50:
60:76:b3:7b:f6:fb:90:58:c5:41:2f:b6:65:ac:16:
ed:53:43:b7:e2:e7:b8:47:01:0c:98:c2:83:73:3e:
a8:f1:6a:37:97:13:04:18:ce:2e:8b:88:54:ac:74:
95:5b:fe:99:8e:25:49:9b:87:63:9a:b5:f4:87:1a:
f2:1d:c6:9c:c3:15:9b:fb:a0:f7:e3:23:d7:e4:6b:
f3:64:25:1e:00:ec:39:d7:ba:1f:9d:af:24:3d:01:
bd:e1:25:8f:43:db:3e:72:1d:d9:62:d1:9f:04:4d:
dd:88:0d:03:7b:40:8e:9c:ad:0d:a8:8f:f3:0f:29:
3f:78:d3:81:ae:7c:da:24:aa:36:36:6d:85:0b:40:
f8:ba:8b:a1:57:99:f1:dd:f3:0a:35:86:3e:dc:25:
0f:34:e9:72:2c:53:c8:a8:19:42:b8:c1:3c:36:f2:
00:ce:0f:ea:35:fb:5d:9b:b4:98:79:a9:af:4e:5c:
80:e4:9e:f0:35:49:cf:be:f1:12:97:8f:1e:71:2b:
04:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A9:90:76:6A:61:99:85:ED:BB:58:15:A0:F1:FA:CC:7A:F3:BF:AE
X509v3 Authority Key Identifier:
keyid:2F:31:4B:C0:0A:7E:5A:E2:33:49:E0:54:06:29:3A:7D:60:60:CD:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:c7:06:69:f7:94:9c:e3:c3:ea:63:99:ae:64:e9:8f:20:5c:
a5:b3:65:62:ce:69:29:bc:e9:b5:8e:fd:88:30:e6:c7:14:b0:
a2:1b:71:cc:db:66:14:fb:b5:95:29:cc:7c:17:fa:63:1b:58:
61:3c:d5:67:0e:71:aa:ad:bf:72:62:f4:b2:3d:23:3d:3f:57:
0a:8a:93:0a:ef:36:50:d4:38:41:eb:c2:68:b0:9f:21:b7:ca:
a0:7b:39:cc:5f:c4:e7:c2:ed:ad:1e:6d:c1:b1:2e:0b:0e:e6:
0f:b6:7d:bd:9a:4e:76:7f:db:b1:4f:50:64:c4:f3:df:3b:45:
79:d6:b9:11:0e:c4:85:95:51:f8:a1:f5:3e:cf:2a:ea:46:e8:
30:8b:5c:9e:b4:33:2a:66:57:86:e7:c7:90:8d:9f:65:23:1a:
d4:89:93:1e:15:f0:69:3d:de:db:ef:29:83:3e:ad:ff:35:2c:
76:7d:2d:ae:1d:f5:a4:f9:c5:32:68:3a:ac:b1:ab:44:c2:e0:
f8:4f:f4:cf:3d:5e:bb:e7:26:bd:05:4c:e3:79:79:4b:10:a1:
aa:0f:75:67:e9:25:85:80:f0:44:57:78:49:7b:75:51:05:58:
b7:d7:b0:bc:76:ec:8c:d0:fa:73:a1:1c:79:98:90:a1:ba:67:
63:98:10:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:49:12 2025 by rpki-client