Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft
File: _LteLg_Zgy1zse-Pnkhv_QCz14k.mft (raw, json)
Hash identifier: gFkTBI5S+ic/7Db/HweYTmzvPRg/WX/XiS2SHoxFYEQ=
Subject key identifier: AE:59:2F:BF:75:26:11:80:B8:F1:24:F4:D8:94:CE:CF:09:73:DA:1C
Authority key identifier: FC:BB:5E:2E:0F:D9:83:2D:73:B1:EF:8F:9E:48:6F:FD:00:B3:D7:89
Certificate issuer: /CN=fcbb5e2e0fd9832d73b1ef8f9e486ffd00b3d789
Certificate serial: 0196B9DA4E236E43EED04116060AC54A45E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LteLg_Zgy1zse-Pnkhv_QCz14k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft
Manifest number: 1533
Signing time: Sat 10 May 2025 11:00:13 +0000
Manifest this update: Sat 10 May 2025 11:00:13 +0000
Manifest next update: Sun 11 May 2025 11:00:13 +0000
Files and hashes: 1: IK8VN_iyq26ReyybdZRgLTbp_h4.roa (hash: dThLkrPmFPQLdA53lP5J5dXCbHy3K9TicE7H7Mr22pg=)
2: _LteLg_Zgy1zse-Pnkhv_QCz14k.crl (hash: kbBdqONsr41g7PUgVVmZ9ES4vuT8G/nrrrLBXSuWjv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft
rsync://rpki.ripe.net/repository/DEFAULT/_LteLg_Zgy1zse-Pnkhv_QCz14k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:da:4e:23:6e:43:ee:d0:41:16:06:0a:c5:4a:45:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcbb5e2e0fd9832d73b1ef8f9e486ffd00b3d789
Validity
Not Before: May 10 11:00:13 2025 GMT
Not After : May 11 11:00:13 2025 GMT
Subject: CN=ae592fbf75261180b8f124f4d894cecf0973da1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a3:c1:73:1e:60:92:66:4e:a9:c5:3a:1a:6f:
0b:ea:e5:6a:dd:bf:76:fb:d8:9d:ef:86:63:43:ad:
1b:71:00:13:a6:e0:4f:fe:51:22:7f:35:af:33:65:
7b:71:ad:ec:ec:32:dc:84:8b:74:6a:a5:e1:f2:e6:
62:a8:01:68:df:d6:a5:27:c0:a6:ed:48:b3:25:ba:
5c:6c:da:f4:40:bf:a9:e5:f3:b7:78:18:3a:b1:dc:
f2:3e:41:3b:15:c5:f7:ed:6f:db:82:83:67:4f:72:
cb:49:8c:5b:df:a0:b3:44:03:fa:8e:c1:aa:42:9f:
3f:ef:4a:f5:80:e3:c2:4f:db:37:06:4b:c2:17:e3:
04:be:c9:d1:57:e5:77:88:cd:b2:07:63:a3:ab:44:
32:85:d3:69:7d:27:2f:25:ce:a6:09:e9:90:c9:7f:
b8:57:5c:3b:92:51:3d:6f:61:bd:56:9c:64:89:a4:
15:05:61:b9:0c:eb:15:d9:12:af:01:65:05:73:37:
c9:00:19:8a:30:9a:bf:66:92:68:70:f1:a3:a7:6d:
89:42:bb:39:d5:91:4d:55:d1:bc:dc:14:33:02:1d:
c3:88:de:d8:3a:81:7e:3f:c1:c1:d0:4f:c2:09:4e:
a3:65:cb:ef:2a:45:c2:68:c6:83:be:f0:89:59:94:
a8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:59:2F:BF:75:26:11:80:B8:F1:24:F4:D8:94:CE:CF:09:73:DA:1C
X509v3 Authority Key Identifier:
keyid:FC:BB:5E:2E:0F:D9:83:2D:73:B1:EF:8F:9E:48:6F:FD:00:B3:D7:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LteLg_Zgy1zse-Pnkhv_QCz14k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:1a:c2:18:fd:60:d2:27:09:79:ed:01:ec:a9:79:78:ae:64:
25:b5:5a:20:b7:36:79:f0:ec:ec:30:01:45:56:3c:fd:b3:a7:
7f:d7:58:b1:7f:e9:ce:05:34:e7:c1:68:d4:17:15:26:84:3c:
5c:07:b6:e9:66:f9:be:f0:bb:dd:6e:b2:2f:31:7f:70:f8:c1:
18:ff:8a:4f:d4:70:09:c9:3b:0e:f6:1e:19:c5:c9:1a:13:db:
54:a9:b7:0c:14:db:28:73:21:f4:15:8b:2b:6b:54:eb:64:02:
c3:d6:75:3b:ac:d9:09:98:77:97:55:9c:04:99:12:59:8c:ad:
af:b5:2f:7f:a8:39:dd:d6:27:af:56:0d:d7:cd:50:0a:4e:e2:
1c:3e:bc:62:8b:54:66:83:aa:4b:94:c8:2e:df:30:2d:22:29:
23:24:ef:f1:8f:98:c7:46:bd:d7:06:07:52:22:28:ff:a0:ac:
b3:1e:b9:71:7a:ac:fd:d6:27:dc:b9:47:c8:91:2a:d6:c0:66:
8a:c7:6d:b1:68:06:31:a0:59:74:26:c0:2e:57:70:37:23:1c:
a4:97:6d:da:83:a6:8f:ff:ce:b3:bf:49:69:fe:3c:d8:e0:5e:
52:b5:58:b7:16:30:b7:e6:05:c5:f9:51:ed:e1:da:a2:f4:9a:
db:9d:24:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 15:18:37 2025 by rpki-client