Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.mft
File: LzE27RCZhYClF9lZiryjPZumZZk.mft (raw, json)
Hash identifier: tNf7zmQ1jhZoyptHLE/vn7ei3rImp99VwdTST+cVcbU=
Subject key identifier: 45:2D:70:15:4A:B2:FD:C1:13:41:8F:D6:EA:CD:DD:C6:FA:D0:C6:E8
Authority key identifier: 2F:31:36:ED:10:99:85:80:A5:17:D9:59:8A:BC:A3:3D:9B:A6:65:99
Certificate issuer: /CN=2f3136ed10998580a517d9598abca33d9ba66599
Certificate serial: 0196071CF501B0884A0F7049C40C858095A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.mft
Manifest number: 0F26
Signing time: Sat 05 Apr 2025 18:01:00 +0000
Manifest this update: Sat 05 Apr 2025 18:01:00 +0000
Manifest next update: Sun 06 Apr 2025 18:01:00 +0000
Files and hashes: 1: 1-yugL-SGYJzA0SlIwsrWzOp3cgA.roa (hash: O2bNI1scy+7X4n9DPZtywaN+gf/oDuWIcE8taLKp6lk=)
2: LzE27RCZhYClF9lZiryjPZumZZk.crl (hash: xZZLDIeAFD9wCuFwKnOFA49eQ9ZZyXZlnjEOM5x8r7U=)
3: rTnE_4SSvKLdBmzoX1z2eYDdLlo.roa (hash: ahybXpUR1qe0NeSWLYaG6olTaEIqlXgXDv7V6mdJiXU=)
4: tjGJDt_M-VxsgPS8YmM7UNvHHRo.roa (hash: ByJAYyuv1Y5nwy0y2xRNrrdrD4R0wOXmShNxbo80fvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 18:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:07:1c:f5:01:b0:88:4a:0f:70:49:c4:0c:85:80:95:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f3136ed10998580a517d9598abca33d9ba66599
Validity
Not Before: Apr 5 18:01:00 2025 GMT
Not After : Apr 6 18:01:00 2025 GMT
Subject: CN=452d70154ab2fdc113418fd6eacdddc6fad0c6e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c8:2f:a6:99:ce:02:9b:c1:2c:cb:c0:60:fc:
ff:42:e7:d4:03:0c:20:15:2c:9f:6f:90:e2:97:41:
7b:c0:54:ec:4e:01:0d:51:32:0f:50:71:e8:2b:a2:
fd:67:47:10:dc:5b:0f:dc:d3:94:e2:52:68:95:2e:
c9:c2:13:ec:c6:96:51:c6:69:ee:32:47:5f:9e:f5:
92:77:e6:46:49:1a:07:6b:7c:d6:b6:2f:53:7a:c4:
3e:a2:e7:03:9e:9b:45:e9:d1:ff:1f:e9:78:e6:b3:
37:60:e3:af:e6:d7:83:cd:25:73:77:80:a9:95:d1:
a2:bf:ce:df:04:69:d9:9b:68:04:94:2e:b0:af:f5:
64:51:b6:80:d3:49:b3:69:c3:87:05:6b:55:8f:10:
b7:dd:3a:d1:3a:81:a9:fd:9f:0a:14:b3:c9:83:93:
20:ff:aa:02:03:3c:95:72:f6:6c:23:44:04:36:7c:
33:62:a7:67:54:2d:0c:ea:23:32:b2:a0:a3:f6:fa:
46:b2:ab:68:34:70:9b:b9:29:c3:62:3e:66:d2:40:
77:dc:d2:90:01:37:23:00:ac:b0:a6:e4:ed:75:aa:
27:30:96:f3:11:b7:28:5f:0b:92:10:8f:a2:f0:97:
e5:2d:03:6c:35:2c:65:d8:5c:99:5a:42:52:f8:7e:
dd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2D:70:15:4A:B2:FD:C1:13:41:8F:D6:EA:CD:DD:C6:FA:D0:C6:E8
X509v3 Authority Key Identifier:
keyid:2F:31:36:ED:10:99:85:80:A5:17:D9:59:8A:BC:A3:3D:9B:A6:65:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:86:33:29:70:8d:bc:c3:ae:d2:e8:9f:c9:93:7b:95:09:ff:
d5:97:51:1b:fa:63:01:aa:34:8c:3b:4c:14:78:72:20:bf:ed:
6f:fd:ca:4d:91:7e:1d:4a:b0:f3:3f:0d:69:34:47:35:74:43:
bc:36:c9:99:0b:90:9a:a8:26:e0:ac:01:ab:cd:c0:90:a6:58:
92:6f:16:2a:f2:4a:a4:3f:0c:21:e7:4e:69:fd:f4:1a:fe:78:
dc:7b:32:d0:ef:64:a9:7f:5b:d5:a0:b3:e3:9e:91:2f:d0:1a:
79:99:a6:66:22:55:07:9c:e5:a8:b5:0e:01:dc:fc:24:2a:9e:
60:48:75:f4:ba:5a:1d:5b:dc:d2:13:3d:8f:b1:eb:1e:77:86:
0f:0e:c4:cf:27:12:8b:f5:d4:d9:9e:03:2e:73:de:e8:76:49:
71:d1:d8:9f:2a:25:aa:94:48:e8:0d:17:14:87:43:4a:0b:11:
74:fd:61:39:99:0c:9e:31:1d:ac:ba:41:9c:a5:73:1e:31:f1:
88:bf:5b:93:ee:4a:e2:96:4d:d9:5a:5d:4b:4c:c3:48:c4:1a:
4c:7e:51:a7:a2:27:52:c6:22:46:04:f3:ce:1e:91:85:4c:d1:
ac:93:e7:83:b3:2c:59:02:81:27:78:57:9f:68:00:69:3d:80:
68:41:f4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:37:25 2025 by rpki-client