Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft
File: LzFLwAp-WuIzSeBUBik6fWBgzaE.mft (raw, json)
Hash identifier: AMleS1aQJaz7uUzKzLeqdiaNNKt2ug6Nw10pfI4FItM=
Subject key identifier: 85:E8:8D:2F:FE:85:70:F5:3F:5A:18:02:CD:20:85:E0:45:A9:30:F9
Authority key identifier: 2F:31:4B:C0:0A:7E:5A:E2:33:49:E0:54:06:29:3A:7D:60:60:CD:A1
Certificate issuer: /CN=2f314bc00a7e5ae23349e05406293a7d6060cda1
Certificate serial: 0196C7CD4D8CB90A2173F7FC2F489BF6701C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft
Manifest number: 11FB
Signing time: Tue 13 May 2025 04:00:42 +0000
Manifest this update: Tue 13 May 2025 04:00:42 +0000
Manifest next update: Wed 14 May 2025 04:00:42 +0000
Files and hashes: 1: 1-d5J5W-VmdNEPvaUUIc9QmXJa7c.roa (hash: WEje3N6tM8UQY4DTr2W4pxQIyOYapcmAGgNCDl+FllM=)
2: LzFLwAp-WuIzSeBUBik6fWBgzaE.crl (hash: 034K5RBIDOkh/82lAJ/JpfoTmhv+KbiVMAAJiortv9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:cd:4d:8c:b9:0a:21:73:f7:fc:2f:48:9b:f6:70:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f314bc00a7e5ae23349e05406293a7d6060cda1
Validity
Not Before: May 13 04:00:42 2025 GMT
Not After : May 14 04:00:42 2025 GMT
Subject: CN=85e88d2ffe8570f53f5a1802cd2085e045a930f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:79:1f:c5:8e:a8:7e:c0:5a:1f:1a:2d:e7:62:
94:1f:a6:ed:f4:c7:e3:25:cf:e7:ce:0b:b0:58:12:
39:32:dd:06:59:b5:ba:b4:80:24:a6:78:11:f4:69:
02:7c:44:a7:9b:e6:87:e3:e7:da:41:d9:25:2a:e6:
78:a2:53:d4:29:74:8b:6c:99:27:5c:48:1b:a7:d1:
e1:8c:54:25:33:f4:cb:1d:1d:3f:f4:e2:c9:f3:00:
9d:84:c4:3b:de:37:1d:32:2c:73:3d:37:86:28:b1:
84:52:5f:fb:45:8c:94:53:fb:5f:ab:de:78:69:a8:
48:af:f0:71:a6:ee:f6:6b:04:db:58:61:d7:09:25:
47:2c:58:ea:1d:a6:74:65:59:e0:32:1a:88:ca:26:
0f:82:bf:85:cd:7e:bc:ea:de:ff:0f:7b:40:c1:c2:
12:b3:32:45:40:f6:57:c7:53:c6:7d:03:7c:c6:77:
b6:10:86:68:a4:1d:6a:dc:ed:1f:9a:21:96:5e:7a:
91:76:c9:2a:bd:4f:3f:bf:39:e3:0c:68:96:34:14:
1b:c8:0b:90:df:89:ca:e0:36:78:c8:6f:33:d4:08:
50:47:18:99:30:b5:8a:d7:38:f9:33:c9:37:b1:4d:
82:cd:23:61:5c:8f:35:47:92:25:d5:30:0e:36:94:
16:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E8:8D:2F:FE:85:70:F5:3F:5A:18:02:CD:20:85:E0:45:A9:30:F9
X509v3 Authority Key Identifier:
keyid:2F:31:4B:C0:0A:7E:5A:E2:33:49:E0:54:06:29:3A:7D:60:60:CD:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:fd:1f:57:ca:14:84:ec:5a:a9:53:0b:37:59:d4:52:86:97:
05:d0:b2:36:b3:66:4a:dc:02:20:52:94:44:bc:9e:1d:16:89:
59:38:9a:94:c3:fd:a9:4b:56:27:ad:0e:99:86:d5:4c:23:d6:
23:0f:2b:ee:3a:ca:cf:f7:8d:8f:e1:9c:04:88:6d:b5:66:c3:
1a:84:1c:dd:dc:8d:1e:f2:70:9b:9b:ff:c0:d5:33:46:9d:56:
bb:71:b9:39:fa:82:b9:45:03:df:1d:82:c2:11:f6:1a:23:e6:
48:7e:6c:7a:db:c4:e6:61:19:36:80:c1:ba:f6:cc:32:8a:6e:
df:6f:6f:6e:4b:86:f3:72:42:a6:d0:a7:ce:00:13:c3:f6:e8:
c6:ce:81:ad:59:a0:b5:79:72:51:c6:4e:e2:67:a6:82:34:da:
ba:8e:3a:6e:9f:36:22:d8:9e:0e:dc:09:69:55:c8:c0:0c:ad:
10:54:a1:62:2e:e4:62:c9:60:b9:8b:09:10:01:7d:4d:f6:4d:
2b:41:11:c9:ab:1f:45:e7:e0:c5:f7:f5:af:94:96:d9:5a:1f:
29:42:2a:2e:38:68:6b:f6:94:13:d2:38:a0:40:87:f1:70:16:
37:9f:b1:eb:da:df:5c:d7:38:6e:95:38:ce:1a:e1:17:e6:96:
4c:66:49:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbHzU2MuQohc/f8L0ib9nAcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMzE0YmMwMGE3ZTVhZTIzMzQ5ZTA1NDA2MjkzYTdkNjA2
MGNkYTEwHhcNMjUwNTEzMDQwMDQyWhcNMjUwNTE0MDQwMDQyWjAzMTEwLwYDVQQD
Eyg4NWU4OGQyZmZlODU3MGY1M2Y1YTE4MDJjZDIwODVlMDQ1YTkzMGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3kfxY6ofsBaHxot52KUH6bt9Mfj
Jc/nzguwWBI5Mt0GWbW6tIAkpngR9GkCfESnm+aH4+faQdklKuZ4olPUKXSLbJkn
XEgbp9HhjFQlM/TLHR0/9OLJ8wCdhMQ73jcdMixzPTeGKLGEUl/7RYyUU/tfq954
aahIr/Bxpu72awTbWGHXCSVHLFjqHaZ0ZVngMhqIyiYPgr+FzX686t7/D3tAwcIS
szJFQPZXx1PGfQN8xne2EIZopB1q3O0fmiGWXnqRdskqvU8/vznjDGiWNBQbyAuQ
34nK4DZ4yG8z1AhQRxiZMLWK1zj5M8k3sU2CzSNhXI81R5Il1TAONpQWGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIXojS/+hXD1P1oYAs0gheBFqTD5MB8GA1UdIwQY
MBaAFC8xS8AKflriM0ngVAYpOn1gYM2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHpGTHdBcC1XdUl6U2VCVUJpazZmV0JnemFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9jNWY0OWQtMTBiMC00ODE4LWEwYzQt
N2MwYjliMTlmY2ZiLzEvTHpGTHdBcC1XdUl6U2VCVUJpazZmV0JnemFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9jNWY0OWQtMTBiMC00ODE4LWEwYzQtN2MwYjliMTlmY2Zi
LzEvTHpGTHdBcC1XdUl6U2VCVUJpazZmV0JnemFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADv0fV8oU
hOxaqVMLN1nUUoaXBdCyNrNmStwCIFKURLyeHRaJWTialMP9qUtWJ60OmYbVTCPW
Iw8r7jrKz/eNj+GcBIhttWbDGoQc3dyNHvJwm5v/wNUzRp1Wu3G5OfqCuUUD3x2C
whH2GiPmSH5setvE5mEZNoDBuvbMMopu329vbkuG83JCptCnzgATw/boxs6BrVmg
tXlyUcZO4memgjTauo46bp82ItieDtwJaVXIwAytEFShYi7kYslguYsJEAF9TfZN
K0ERyasfRefgxff1r5SW2VofKUIqLjhoa/aUE9I4oECH8XAWN5+x69rfXNc4bpU4
zhrhF+aWTGZJZg==
-----END CERTIFICATE-----
Generated at Tue May 13 06:23:01 2025 by rpki-client