Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
File: LeznL7uve9CXXt2mdjtoB3Nk4gI.mft (raw, json)
Hash identifier: kKMgdf/Kqa/cjUbBef2dVJH7NokR69ZDI896ilfWdew=
Subject key identifier: 85:14:F9:48:8F:42:37:CD:DE:D1:70:1B:8D:15:42:FB:EB:27:0A:66
Authority key identifier: 2D:EC:E7:2F:BB:AF:7B:D0:97:5E:DD:A6:76:3B:68:07:73:64:E2:02
Certificate issuer: /CN=2dece72fbbaf7bd0975edda6763b68077364e202
Certificate serial: 019683FFAA12C04FA3B328FF892CF8FCAA32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
Manifest number: 0C0C
Signing time: Wed 30 Apr 2025 00:01:32 +0000
Manifest this update: Wed 30 Apr 2025 00:01:32 +0000
Manifest next update: Thu 01 May 2025 00:01:32 +0000
Files and hashes: 1: LeznL7uve9CXXt2mdjtoB3Nk4gI.crl (hash: vvHdl65oQjRm6M8SVWN4olmg3d+AOqVzWBRSSX77G/8=)
2: TA33cBaeT_PxTkoehPSm-MChmOs.roa (hash: 4c0Qg8yQCrvvSBEDpGCuCqQbR5CZ/qYPkb3j2jOAtJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:ff:aa:12:c0:4f:a3:b3:28:ff:89:2c:f8:fc:aa:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dece72fbbaf7bd0975edda6763b68077364e202
Validity
Not Before: Apr 30 00:01:32 2025 GMT
Not After : May 1 00:01:32 2025 GMT
Subject: CN=8514f9488f4237cdded1701b8d1542fbeb270a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:55:bc:f1:e5:e0:b0:02:9c:09:3e:d2:c0:6d:
bc:77:de:f3:41:15:d7:95:e6:b9:be:88:36:15:df:
9c:88:e2:d5:88:bc:9d:51:c3:e6:b9:d0:3f:85:7f:
78:ab:f1:f6:7d:a7:75:e4:f2:cf:e9:f5:37:04:c6:
4e:1f:36:5e:9b:44:08:b3:4c:57:7b:e9:04:4f:64:
8d:7f:e9:e3:02:af:7b:9a:94:97:0b:2f:9e:bd:f9:
3a:9d:a1:14:b7:81:c8:d2:81:93:b8:60:01:a5:03:
f8:30:1e:55:b4:8b:6c:cb:cc:2f:fe:ac:5c:5e:6b:
8a:7b:dc:a5:29:4a:4d:6c:3b:be:ab:cc:1a:8f:ef:
ae:c1:67:4e:24:b4:8d:09:4c:60:d7:d0:b2:5b:3e:
86:dc:71:f1:ab:d0:14:55:c9:0b:66:20:cd:21:7b:
2c:4f:20:46:fc:91:22:4c:97:2e:63:f1:7f:2a:4a:
8f:8c:38:14:c9:46:1b:c4:32:bc:28:3e:6c:fd:f0:
53:48:9d:1a:72:d4:43:65:b8:72:ca:7c:1b:f8:42:
9c:e0:a3:ce:c4:4b:03:20:11:6c:e6:ea:b0:47:b3:
c9:4d:46:99:fa:9f:18:01:6a:a6:19:03:5e:33:cc:
66:59:1b:21:fc:e4:98:13:8e:d8:32:46:37:1c:58:
f5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:14:F9:48:8F:42:37:CD:DE:D1:70:1B:8D:15:42:FB:EB:27:0A:66
X509v3 Authority Key Identifier:
keyid:2D:EC:E7:2F:BB:AF:7B:D0:97:5E:DD:A6:76:3B:68:07:73:64:E2:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LeznL7uve9CXXt2mdjtoB3Nk4gI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/026cb1-4c0f-47d8-b700-d51ae4aa127b/1/LeznL7uve9CXXt2mdjtoB3Nk4gI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:c8:79:b1:54:9a:db:2a:b4:c5:3e:fe:bf:04:32:0e:b8:5e:
47:7c:51:02:e6:52:e6:f0:e7:57:04:09:9c:22:27:32:1a:86:
69:8f:75:16:e4:57:f2:bb:f8:70:b4:0c:93:41:f8:e6:06:6e:
25:13:11:56:ef:27:36:47:32:a7:76:ae:d2:c9:86:9f:0a:3a:
b9:d1:8f:60:95:b4:fb:ce:de:39:9d:e4:1d:0e:3d:5b:b6:9c:
3a:06:32:cb:0a:d5:10:b7:f2:27:3d:19:da:87:87:8a:8d:f6:
ed:fd:3b:4b:89:3e:01:ab:bb:d1:f9:26:97:e7:73:41:14:a9:
d8:83:3f:a0:fe:ed:fd:89:a5:04:30:85:7b:ea:c2:8a:05:85:
81:5e:3f:6d:54:e7:0b:8b:d0:a4:d7:fe:52:00:eb:d7:df:69:
8c:e0:66:e5:9a:16:fb:0c:74:50:67:57:6f:c5:a0:e1:1b:16:
32:20:09:de:fa:54:08:97:e6:3e:41:00:4b:8a:1f:56:a2:23:
77:43:46:ee:fa:0b:04:9b:ff:c6:13:dc:3a:d3:2b:ae:d2:23:
62:31:da:d5:03:e4:08:a9:59:6d:60:21:06:6f:20:e7:62:2d:
79:84:59:2e:ad:bf:b1:47:9e:91:3d:12:a5:05:69:a7:16:c7:
be:77:0c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:53:55 2025 by rpki-client