Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
File: lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft (raw, json)
Hash identifier: L2PuOINi37fJCDXpQAe2ldtSLzLDgN+bTsAVktP/+2w=
Subject key identifier: 5A:65:3E:6F:96:3A:25:3D:6E:43:1A:22:A8:07:61:D8:FA:EA:4C:51
Authority key identifier: 96:FC:DA:12:8F:E8:2A:FC:06:E8:AA:D1:C8:E5:CC:DF:B3:55:61:E4
Certificate issuer: /CN=96fcda128fe82afc06e8aad1c8e5ccdfb35561e4
Certificate serial: 01965B396FA2F98EB1278150CD728A5012FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
Manifest number: 0359
Signing time: Tue 22 Apr 2025 02:00:12 +0000
Manifest this update: Tue 22 Apr 2025 02:00:12 +0000
Manifest next update: Wed 23 Apr 2025 02:00:12 +0000
Files and hashes: 1: A3mZEclriGszqRGoUvbHgF-KInU.roa (hash: i8Kmi4yyeQAKrcdjfPdTmfjuSQ/uP2lhkQpuex0W13Y=)
2: lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl (hash: lCXPQ7PkjRwT1t8z2ziZTgJsNx65VxtyUUWfHiNn6w8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 02:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:39:6f:a2:f9:8e:b1:27:81:50:cd:72:8a:50:12:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96fcda128fe82afc06e8aad1c8e5ccdfb35561e4
Validity
Not Before: Apr 22 02:00:12 2025 GMT
Not After : Apr 23 02:00:12 2025 GMT
Subject: CN=5a653e6f963a253d6e431a22a80761d8faea4c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:06:9c:71:b8:cc:9a:41:31:75:62:bb:85:80:
6b:d8:52:df:55:33:23:08:4a:5e:f7:94:ea:e3:c4:
d9:96:98:7c:e8:7a:cb:83:3c:05:e6:92:2b:05:d6:
04:89:bf:5a:85:3b:44:5d:2b:6d:62:26:99:20:7b:
07:4d:6c:34:99:80:59:39:35:14:a1:f6:08:bb:c0:
82:95:74:8a:82:38:70:e3:08:ce:66:42:a1:f1:38:
74:f2:84:22:74:e3:12:25:dd:8d:ca:75:f9:c7:1b:
00:17:24:1d:02:4e:ec:78:cc:99:ac:8f:7f:7f:00:
b0:e9:8c:a1:64:dd:0e:b6:cc:a1:5f:a9:09:e6:53:
a9:a6:d4:5d:73:31:72:97:ff:ba:b7:ad:05:6c:cd:
c3:26:3f:93:63:1e:cf:71:18:18:27:27:b6:25:88:
40:ac:27:0a:ec:bc:41:14:71:7f:e9:55:ae:29:fa:
78:92:93:f3:82:ee:3f:74:4b:47:1b:a5:b8:3b:b0:
1b:8e:cc:d3:97:fc:03:75:c2:aa:b3:3d:1b:09:6b:
05:93:5c:b8:c9:82:09:f9:02:9c:50:e5:ca:eb:d5:
2e:02:35:b3:3e:5e:12:a8:ef:09:f4:25:0c:6b:23:
a4:c5:e4:35:31:ff:f3:31:ad:80:26:02:66:5b:c9:
ee:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:65:3E:6F:96:3A:25:3D:6E:43:1A:22:A8:07:61:D8:FA:EA:4C:51
X509v3 Authority Key Identifier:
keyid:96:FC:DA:12:8F:E8:2A:FC:06:E8:AA:D1:C8:E5:CC:DF:B3:55:61:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:27:02:d6:fd:d0:ac:02:00:42:90:74:1f:55:01:f1:27:cb:
1f:25:90:77:3c:ba:9e:49:93:da:3e:67:3d:d5:e3:e1:f5:72:
72:a4:40:43:57:61:a2:b6:e0:3b:22:f3:8a:0e:73:f4:3e:0b:
57:25:04:fb:ae:71:5c:f5:01:6a:d9:f3:29:b2:25:3f:6d:1b:
fc:e5:30:e1:6b:ff:16:91:d4:d1:d8:fc:d2:5a:e2:92:dc:41:
8f:de:76:69:da:ba:34:d6:1c:03:f1:b1:c4:d8:96:7c:1a:eb:
74:6d:88:f9:ca:0a:94:95:09:04:bc:81:1e:a3:f3:d4:c4:5d:
04:c4:af:b3:1b:6c:42:61:2c:f9:a2:44:4e:0f:b0:05:c1:0c:
a6:f7:7d:af:40:37:76:13:eb:19:01:92:f5:be:18:99:ee:e0:
d8:6e:95:53:83:3d:14:fb:46:83:cc:25:17:c6:7c:ae:ad:b6:
6e:4c:04:55:28:fc:f0:33:45:2e:37:25:b4:91:0a:3e:de:72:
57:7d:b7:a9:43:74:78:03:5f:f4:dc:84:a6:be:aa:67:1f:36:
0c:a2:cd:ec:e3:b0:9a:2f:31:4e:84:11:a7:cf:fb:5f:05:e5:
af:12:61:7e:2e:26:f7:54:11:ba:26:ae:d8:8b:53:5e:0b:75:
dd:96:27:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZbOW+i+Y6xJ4FQzXKKUBL8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZmNkYTEyOGZlODJhZmMwNmU4YWFkMWM4ZTVjY2RmYjM1
NTYxZTQwHhcNMjUwNDIyMDIwMDEyWhcNMjUwNDIzMDIwMDEyWjAzMTEwLwYDVQQD
Eyg1YTY1M2U2Zjk2M2EyNTNkNmU0MzFhMjJhODA3NjFkOGZhZWE0YzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwaccbjMmkExdWK7hYBr2FLfVTMj
CEpe95Tq48TZlph86HrLgzwF5pIrBdYEib9ahTtEXSttYiaZIHsHTWw0mYBZOTUU
ofYIu8CClXSKgjhw4wjOZkKh8Th08oQidOMSJd2NynX5xxsAFyQdAk7seMyZrI9/
fwCw6YyhZN0OtsyhX6kJ5lOpptRdczFyl/+6t60FbM3DJj+TYx7PcRgYJye2JYhA
rCcK7LxBFHF/6VWuKfp4kpPzgu4/dEtHG6W4O7AbjszTl/wDdcKqsz0bCWsFk1y4
yYIJ+QKcUOXK69UuAjWzPl4SqO8J9CUMayOkxeQ1Mf/zMa2AJgJmW8nuCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFplPm+WOiU9bkMaIqgHYdj66kxRMB8GA1UdIwQY
MBaAFJb82hKP6Cr8Buiq0cjlzN+zVWHkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHZ6YUVvX29LdndHNktyUnlPWE0zN05WWWVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi81MzM4NmMtNDhjNS00MmVlLWJkMDkt
ZTUwYWJjOGU4ODQ0LzEvbHZ6YUVvX29LdndHNktyUnlPWE0zN05WWWVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi81MzM4NmMtNDhjNS00MmVlLWJkMDktZTUwYWJjOGU4ODQ0
LzEvbHZ6YUVvX29LdndHNktyUnlPWE0zN05WWWVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABScC1v3Q
rAIAQpB0H1UB8SfLHyWQdzy6nkmT2j5nPdXj4fVycqRAQ1dhorbgOyLzig5z9D4L
VyUE+65xXPUBatnzKbIlP20b/OUw4Wv/FpHU0dj80lriktxBj952adq6NNYcA/Gx
xNiWfBrrdG2I+coKlJUJBLyBHqPz1MRdBMSvsxtsQmEs+aJETg+wBcEMpvd9r0A3
dhPrGQGS9b4Yme7g2G6VU4M9FPtGg8wlF8Z8rq22bkwEVSj88DNFLjcltJEKPt5y
V323qUN0eANf9NyEpr6qZx82DKLN7OOwmi8xToQRp8/7XwXlrxJhfi4m91QRuiau
2ItTXgt13ZYnjg==
-----END CERTIFICATE-----
Generated at Tue Apr 22 10:27:06 2025 by rpki-client