Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
File: lzvsM65zjJiViBnGwTuzNe40q0w.mft (raw, json)
Hash identifier: Lf9h03DnUejleW720l5EPSndfGg3rC982hjSOKAUoYs=
Subject key identifier: 1A:91:C4:D0:17:5E:6E:5C:16:76:D3:F1:4B:06:62:22:E6:59:B6:23
Authority key identifier: 97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
Certificate issuer: /CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Certificate serial: 0196BBC928EE0E484BE7AAC56002B0867528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
Manifest number: 0BDA
Signing time: Sat 10 May 2025 20:00:44 +0000
Manifest this update: Sat 10 May 2025 20:00:44 +0000
Manifest next update: Sun 11 May 2025 20:00:44 +0000
Files and hashes: 1: 04AAIWN8CdjN6G01O3D_l5i-Jvk.roa (hash: Mv4GpM35beFDVPlXDkHbY9A9imQnPo9JK9qNbOoM+YU=)
2: 9-T9tTEpFFagDxBNkX4Bbf2UnDM.roa (hash: G5P+io7+nluFSPyZaIxd4Qa6X2iCyWaqgj9ylJYiWn8=)
3: lzvsM65zjJiViBnGwTuzNe40q0w.crl (hash: yzGv/SvpiUGlLzNDllLuzKkenMtw7Eddz/i1rIr4O7Q=)
4: tuawZTEX7vHBTQMJyQg0WD-oypg.roa (hash: IFKGL2W7O7px/Tqsp660BBZcbUWDZWgLugycTaSmqvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:c9:28:ee:0e:48:4b:e7:aa:c5:60:02:b0:86:75:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Validity
Not Before: May 10 20:00:44 2025 GMT
Not After : May 11 20:00:44 2025 GMT
Subject: CN=1a91c4d0175e6e5c1676d3f14b066222e659b623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4c:b7:0b:51:b7:04:a9:60:59:56:d5:07:e9:
c0:c9:62:fc:0d:44:73:5e:0c:b7:6a:9a:90:be:61:
13:fa:db:67:65:15:1e:77:af:c2:08:90:e1:24:db:
f8:8d:59:1e:62:2c:0a:67:50:5e:17:14:6c:54:fc:
e2:65:06:e9:91:59:aa:04:cf:8e:4d:d4:a8:b6:62:
28:5f:0d:f5:08:fa:13:69:cc:f3:6d:03:dd:6e:0a:
4d:a7:10:12:00:40:66:04:6a:1a:99:cf:8a:4f:97:
69:25:9d:64:2a:04:7f:08:c1:f7:f2:79:12:e0:aa:
2b:8e:6e:12:ee:bf:f6:3f:69:76:7d:c3:f5:b7:e5:
8e:d0:bd:35:d6:ff:cc:1f:50:ff:0e:a8:07:2f:bb:
17:19:28:64:ba:c6:9d:95:fb:d0:98:c8:ee:e2:dd:
dc:5b:67:07:8f:5c:74:e0:41:6b:b8:e2:a7:af:41:
b1:be:74:62:79:12:ee:55:72:57:37:70:39:8a:81:
ba:c8:99:59:e6:d9:3b:e6:8e:1a:05:77:82:db:3a:
1a:f6:8c:ec:51:e6:ee:e5:d7:01:b9:67:bf:53:48:
11:a0:c5:f1:b5:74:82:e9:c2:17:dc:ba:32:07:61:
4c:81:69:0a:0b:79:7a:69:d7:82:31:e4:e9:e9:06:
f9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:91:C4:D0:17:5E:6E:5C:16:76:D3:F1:4B:06:62:22:E6:59:B6:23
X509v3 Authority Key Identifier:
keyid:97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ac:6f:12:23:be:90:84:07:78:67:c4:0f:00:24:59:d8:f9:
af:96:bf:25:b8:4b:b0:b7:98:c2:87:cb:71:72:a5:b1:bf:96:
da:6b:72:8d:15:d0:21:a7:27:95:a9:19:02:30:61:1c:df:ef:
40:77:0a:1e:0e:0d:50:09:8a:19:8d:fb:e7:a0:53:e9:c8:17:
92:f2:79:51:da:cb:23:46:cd:55:65:e0:3b:44:27:14:0b:1c:
cd:6e:3a:eb:44:2d:78:2e:77:31:7f:4f:ce:d1:d5:8d:f0:ef:
56:f2:29:fc:a0:c4:b5:79:a0:97:7d:dd:ed:e6:85:f3:4e:a7:
8a:bb:6b:44:c5:8e:8f:c7:dd:40:6a:a6:46:02:c3:96:97:15:
c4:b3:9c:bf:06:2f:35:3b:72:f2:fa:1d:d9:f3:96:07:89:ce:
00:f3:d1:a9:da:ed:8b:46:e9:75:01:02:0a:32:f1:73:46:44:
64:6a:fd:d0:3e:8f:af:76:e0:50:b5:14:03:fb:42:29:fc:6b:
ba:e3:73:bf:07:77:03:62:c7:89:a0:b2:53:8b:f1:ba:b8:86:
94:29:06:5c:50:92:57:da:8c:9b:15:41:a6:c0:b0:c0:c8:6c:
7e:16:7b:4c:b9:b7:00:89:bd:c8:ee:64:f6:46:02:aa:52:c5:
11:b7:3b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:19:35 2025 by rpki-client