Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
File: LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft (raw, json)
Hash identifier: TTxELX+MMqZXLq24Hmma9D25XuBz1mxMwi216rdmfRE=
Subject key identifier: 29:6D:A0:37:E2:74:AF:EB:AB:6F:E4:1C:D9:A7:7D:F6:7A:0B:87:A5
Authority key identifier: 2D:9E:31:C9:02:9E:E4:4B:D6:81:B5:15:33:03:35:C6:A1:CF:DE:EE
Certificate issuer: /CN=2d9e31c9029ee44bd681b515330335c6a1cfdeee
Certificate serial: 0196C382400DBC83729707DADACBF8BA5FB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
Manifest number: 153B
Signing time: Mon 12 May 2025 08:00:15 +0000
Manifest this update: Mon 12 May 2025 08:00:15 +0000
Manifest next update: Tue 13 May 2025 08:00:15 +0000
Files and hashes: 1: 5rwnt7U3zNdamjh9hhJ_HA_VCqo.roa (hash: LxqMIG4f6G1y41E4bvnnaVLXMyv0wjoLuCjGmeNYJdQ=)
2: LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl (hash: lbHeGHB39GlMrM/YaJxDh3SSYWyeWZBY8/ETsK4lzjc=)
3: NwLeIR_NPESbC4GUi2khijtoK7k.roa (hash: Cvm1rAd7KCGPEyQkopdZwWDBR/07H5izzQrtF4lbhAA=)
4: upgE53Ne0KMFUsGR-miso-8-5TQ.roa (hash: u1TgVu5CTRcoIplPeSQE03Pq8xZKbvkqbqoHvKMUbWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:82:40:0d:bc:83:72:97:07:da:da:cb:f8:ba:5f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d9e31c9029ee44bd681b515330335c6a1cfdeee
Validity
Not Before: May 12 08:00:15 2025 GMT
Not After : May 13 08:00:15 2025 GMT
Subject: CN=296da037e274afebab6fe41cd9a77df67a0b87a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:8b:3b:9b:e5:6e:c2:dc:ca:78:a9:af:9e:76:
c4:a4:2f:83:88:30:f3:73:58:f3:83:15:78:2f:31:
6d:f7:6d:22:6f:7c:0b:44:43:ed:ea:2a:62:fc:50:
8f:fd:6a:c3:73:48:2d:1a:aa:89:61:34:f8:04:bb:
61:59:06:fc:28:58:57:61:84:fc:9b:55:a0:5d:d5:
62:22:41:c9:d7:b1:2d:ec:5f:eb:4b:4a:f6:c6:da:
0f:50:d0:53:c3:5b:11:3f:23:7f:87:40:0f:e5:26:
75:51:f3:ee:e8:75:d8:91:15:cd:27:01:2e:e1:09:
ac:da:4c:df:1e:b7:21:88:6e:bb:9e:43:43:c3:35:
6e:8c:96:2a:b3:31:9e:e3:86:25:be:e2:5d:a2:9d:
4a:98:f8:7e:8e:aa:e0:f6:ff:fd:1b:9f:0b:4a:e9:
d2:bf:60:9d:2e:b4:db:5a:82:8b:41:8b:6d:cc:3e:
f3:45:a6:bc:4d:3f:e7:ef:18:70:55:f0:df:39:82:
60:4f:8d:6c:37:a3:76:58:02:e7:82:63:d7:aa:f7:
e5:36:10:a2:75:07:7a:9e:ed:3c:ac:cf:9f:51:e3:
89:97:ff:15:07:62:af:fb:c8:2f:83:94:ec:b9:b5:
cc:8e:49:36:d9:af:ec:ac:8e:28:0c:ef:8b:bf:9b:
8d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:6D:A0:37:E2:74:AF:EB:AB:6F:E4:1C:D9:A7:7D:F6:7A:0B:87:A5
X509v3 Authority Key Identifier:
keyid:2D:9E:31:C9:02:9E:E4:4B:D6:81:B5:15:33:03:35:C6:A1:CF:DE:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:1a:32:04:29:23:75:2a:81:3a:60:be:bb:44:9f:be:aa:11:
c6:e1:cf:6f:56:0c:39:45:30:8a:ca:1c:e9:df:e2:18:f3:23:
dc:45:66:2e:71:3c:04:66:72:27:2e:3c:d7:a3:51:7a:53:57:
78:19:f1:c5:3c:1e:96:49:e0:23:70:4a:1d:07:d9:b9:5c:2c:
60:8b:21:73:03:0b:00:28:c5:1f:45:b5:9d:7a:e3:67:a4:07:
aa:4b:4d:9d:d5:10:3b:89:5d:1c:cb:ea:5d:a5:5e:2d:a1:df:
83:48:d5:83:6e:45:23:39:ae:17:92:49:d3:e3:2e:db:97:4b:
51:06:45:a2:a7:9f:81:2b:04:4f:34:00:0b:49:8c:c6:f2:90:
34:b1:22:15:8a:2e:6b:f3:8b:e8:53:4f:15:98:f7:11:30:ca:
3f:dc:4f:15:3d:ca:ab:19:41:bc:31:58:92:e2:5a:cc:91:a8:
f9:c0:8f:22:5b:97:18:1f:d5:b1:28:a1:58:88:96:56:5e:2c:
7f:3b:04:c5:66:ee:5b:8b:43:00:a1:a8:4c:a4:c1:a4:32:8a:
a2:40:bb:75:4b:a1:30:2f:02:55:10:13:ca:20:f6:fd:70:68:
5a:29:dd:4a:6c:ac:5e:48:71:b0:f9:aa:4b:6d:0f:aa:29:9b:
f3:12:0b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:18:40 2025 by rpki-client