Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft
File: Lz6vTsdU9KDj2EyiU61AbunH3hU.mft (raw, json)
Hash identifier: CbZaULi2TVvwQGR2+64xx61aWhEGOVCP+sz3GS8WzVQ=
Subject key identifier: D3:06:2D:09:FF:B2:3E:1E:76:4B:BC:F6:07:17:16:FB:96:3A:31:4E
Authority key identifier: 2F:3E:AF:4E:C7:54:F4:A0:E3:D8:4C:A2:53:AD:40:6E:E9:C7:DE:15
Certificate issuer: /CN=2f3eaf4ec754f4a0e3d84ca253ad406ee9c7de15
Certificate serial: 019671C1FFCB6EEDB3461A32485CF820F9C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft
Manifest number: 1189
Signing time: Sat 26 Apr 2025 11:01:01 +0000
Manifest this update: Sat 26 Apr 2025 11:01:01 +0000
Manifest next update: Sun 27 Apr 2025 11:01:01 +0000
Files and hashes: 1: GGXhG4jYLlNwNhb_4jLsATV3sZ4.roa (hash: coSPb15gvXo5/kLV6jjcSbTa8zuHjiQZwBsQ1ZTodzg=)
2: Lz6vTsdU9KDj2EyiU61AbunH3hU.crl (hash: NIJSuiqHZOnt1mE5/yogrXf9Y9AUFwtVPDb+sLEpzdk=)
3: ffIXUQgNnNxkun86gvscnN9T0cI.roa (hash: VW5SzImNSTB3Slsj3lqEAsmeeuKYUrnsLBc5k+WJ/m8=)
4: lVizdiQgX20fzcRSA4GIK4wJrtQ.roa (hash: XzPZ+5jYbipWydPDPeCQpQP8Pnh6Ui1fyKGQoWrzSvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:c1:ff:cb:6e:ed:b3:46:1a:32:48:5c:f8:20:f9:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f3eaf4ec754f4a0e3d84ca253ad406ee9c7de15
Validity
Not Before: Apr 26 11:01:01 2025 GMT
Not After : Apr 27 11:01:01 2025 GMT
Subject: CN=d3062d09ffb23e1e764bbcf6071716fb963a314e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9f:4d:99:3f:67:73:ae:d2:69:ac:2c:0b:40:
f8:b8:72:64:b2:8b:cf:93:87:3d:b3:d1:6d:55:e3:
32:41:af:1a:d1:d2:36:8f:dd:09:a9:a5:49:3d:b7:
6b:d1:f8:6e:96:e2:49:2d:4d:3c:c7:b4:ce:91:e3:
eb:53:db:88:6b:34:1c:7b:5e:e8:2a:e7:95:f1:38:
55:2e:f9:ba:0f:22:5d:64:8e:6c:eb:e3:a2:d8:1a:
3c:a8:f9:b9:a3:16:78:a0:47:24:73:7f:40:d9:35:
4b:0b:da:86:86:1f:b3:f5:66:55:f3:4a:fb:95:b4:
0f:6a:c0:10:6d:e2:47:7d:6c:cf:d4:c8:36:68:9a:
db:c1:06:6b:3a:f3:c7:c3:62:86:37:e5:ce:ce:b2:
c9:6b:e7:54:29:fc:fa:c8:e5:20:67:48:e6:7e:97:
7d:2f:48:09:54:81:67:3e:cc:ec:1e:47:9a:b0:6e:
9b:00:df:ca:75:08:89:b1:4d:b6:63:46:c6:48:24:
60:f1:6c:61:f2:0f:c7:75:f0:42:e1:b2:c2:62:6e:
4a:3a:1a:95:14:9d:e3:3c:0d:31:a8:7f:84:d0:64:
de:85:dc:41:b0:c3:91:cb:57:74:f0:d4:6f:45:65:
37:0c:82:86:f5:e7:23:e6:d9:37:5e:0d:1c:02:16:
ac:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:06:2D:09:FF:B2:3E:1E:76:4B:BC:F6:07:17:16:FB:96:3A:31:4E
X509v3 Authority Key Identifier:
keyid:2F:3E:AF:4E:C7:54:F4:A0:E3:D8:4C:A2:53:AD:40:6E:E9:C7:DE:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:af:fc:09:e4:bd:6e:32:0b:dc:e9:0e:3d:fa:35:dd:c6:fe:
10:fd:2b:32:64:9d:98:8d:53:b6:ce:1d:d2:a7:7a:20:de:57:
c0:1e:5f:10:cb:e2:71:97:87:e7:5a:67:6f:b4:85:da:ad:66:
f8:7f:e4:2c:49:b6:4e:fa:5d:d8:db:9e:8e:01:22:3a:f9:a5:
70:76:a3:ae:85:c3:e6:6e:3c:e4:2b:6b:36:0a:c7:a1:42:3d:
5c:eb:96:ee:99:20:7c:2d:f8:2e:eb:ad:e4:65:b6:21:41:ed:
07:51:88:ed:42:4a:8c:cd:84:f5:73:95:29:b5:33:ad:c4:c1:
6c:2c:05:ef:1f:eb:82:94:6a:8d:21:bb:8e:c6:10:f5:a9:89:
8a:b6:ac:ac:8a:cc:f4:c3:3e:9b:75:5f:22:23:ac:da:86:0c:
37:c6:1c:6c:61:44:57:ae:10:32:d4:d0:69:39:aa:17:6b:50:
77:08:e4:82:4a:a8:34:90:de:8d:78:62:72:7c:e5:c6:0d:46:
72:03:a4:e4:d8:15:72:b4:21:f4:b4:3c:50:84:78:9d:39:9d:
89:13:1b:fd:31:91:b3:c5:99:61:5d:c6:33:c1:48:c8:be:b6:
0d:2f:c5:6a:bb:dc:41:16:2f:60:c4:45:4b:6f:2c:84:9f:92:
97:65:9b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:02:11 2025 by rpki-client