Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
File: LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft (raw, json)
Hash identifier: ed5cgC8tYY5/Kk4G6LOXtr+cpyey4rJSCVPI9BrrOdk=
Subject key identifier: 8F:E5:54:50:44:C9:FF:9A:FA:82:FF:1E:45:F6:B0:73:BD:93:6D:F1
Authority key identifier: 2D:9E:31:C9:02:9E:E4:4B:D6:81:B5:15:33:03:35:C6:A1:CF:DE:EE
Certificate issuer: /CN=2d9e31c9029ee44bd681b515330335c6a1cfdeee
Certificate serial: 0197B6D7BC66D871D95FFD9EBDE9660E9644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 14:01:21 +0000
Manifest this update: Sat 28 Jun 2025 14:01:21 +0000
Manifest next update: Sun 29 Jun 2025 14:01:21 +0000
Files and hashes: 1: 5rwnt7U3zNdamjh9hhJ_HA_VCqo.roa (hash: LxqMIG4f6G1y41E4bvnnaVLXMyv0wjoLuCjGmeNYJdQ=)
2: LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl (hash: QW4+DURKKufIXvE3OmfIKvc7RZOuCmtsIjFw6/Yrrxc=)
3: NwLeIR_NPESbC4GUi2khijtoK7k.roa (hash: Cvm1rAd7KCGPEyQkopdZwWDBR/07H5izzQrtF4lbhAA=)
4: upgE53Ne0KMFUsGR-miso-8-5TQ.roa (hash: u1TgVu5CTRcoIplPeSQE03Pq8xZKbvkqbqoHvKMUbWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:bc:66:d8:71:d9:5f:fd:9e:bd:e9:66:0e:96:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d9e31c9029ee44bd681b515330335c6a1cfdeee
Validity
Not Before: Jun 28 14:01:21 2025 GMT
Not After : Jun 29 14:01:21 2025 GMT
Subject: CN=8fe5545044c9ff9afa82ff1e45f6b073bd936df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:40:9b:1c:11:54:bf:36:4e:b0:ac:0b:95:8d:
62:69:ab:6c:9e:93:14:13:5f:9a:b4:63:dc:0d:a9:
55:5a:05:b6:0e:ef:b9:c7:0e:4c:b5:4d:e2:f1:ab:
cb:f3:47:69:b8:54:3c:cc:43:4f:44:2d:31:2b:0a:
fb:7a:79:1b:a8:98:47:97:2e:db:a9:c0:d5:16:a6:
cd:22:7a:4e:2f:34:71:84:ea:74:67:45:59:e3:f9:
c2:46:fa:4e:36:4d:0c:dc:fe:96:d8:de:40:01:f4:
74:b7:8b:cd:da:36:0f:f6:04:65:33:c6:db:d8:35:
e0:d0:5a:9e:6a:72:37:e2:20:1e:54:04:a6:aa:c6:
f3:3b:04:e8:cd:f8:d2:22:83:1e:06:a2:27:89:5b:
fb:67:91:9c:6e:1d:e3:8f:b5:5f:ea:7c:6d:b5:9d:
08:a4:01:8e:8d:07:d7:ce:54:0b:e5:fa:dc:0d:c8:
c2:43:b1:0a:a6:af:32:f8:7b:c7:0c:e2:1c:25:09:
c8:47:3e:4e:d1:4a:f2:4e:ee:bd:2e:bd:88:c3:ff:
1a:7b:3b:4d:c3:c0:26:3a:36:a3:75:81:bd:75:ec:
d3:16:6a:48:82:78:6d:72:09:45:ba:37:89:d8:ff:
89:a1:cf:aa:97:0a:6d:62:64:b1:72:d2:92:d3:37:
16:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E5:54:50:44:C9:FF:9A:FA:82:FF:1E:45:F6:B0:73:BD:93:6D:F1
X509v3 Authority Key Identifier:
keyid:2D:9E:31:C9:02:9E:E4:4B:D6:81:B5:15:33:03:35:C6:A1:CF:DE:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:1b:6d:0e:1b:33:1f:e1:59:1d:87:14:37:9f:f1:ec:87:74:
32:2f:28:01:77:df:75:38:82:c8:67:c6:93:bb:a3:53:05:73:
f9:1f:ba:f3:a1:be:7e:b9:eb:a7:e4:50:b7:0f:d6:14:43:3a:
31:ff:61:3a:64:07:d4:cb:38:8b:b1:4c:3e:f4:c6:dc:82:3b:
95:e3:bf:3f:6c:5c:58:07:1a:53:75:5a:4d:b9:05:a5:66:5e:
1f:7e:dd:c3:74:bd:bb:2d:14:82:7c:95:a8:76:8a:f7:13:0a:
3b:c7:f4:3f:6f:4c:de:84:a0:fa:4e:24:7b:fa:f8:6e:93:9d:
ac:56:6e:d7:67:3b:29:ab:b2:39:91:10:12:59:ce:f0:bb:42:
fc:b4:64:8d:32:70:d0:75:09:54:b9:b5:28:88:ba:d9:4c:fc:
d6:92:92:bd:c0:51:9b:04:e8:c2:5a:fd:0f:e6:a7:d4:28:32:
ef:32:78:c8:bf:77:6f:34:a0:9a:3d:19:df:e1:6c:c2:38:75:
e6:0b:3a:5e:e4:19:9d:78:a1:64:75:ab:6a:d0:9a:87:96:ab:
75:f0:03:6f:99:b6:69:91:80:2b:0d:4c:c5:6b:02:d1:8f:35:
ce:35:da:20:c3:1e:3b:76:99:aa:b8:bd:40:1a:0a:10:f6:ea:
46:d6:19:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:24 2025 by rpki-client