Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
File: lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft (raw, json)
Hash identifier: X647LE9Y3TppCp0pId/nfS/Y2yOoGJ95bo9q7pgzzqc=
Subject key identifier: 5E:BD:99:5F:A1:C1:6C:1C:92:13:31:CA:7D:14:19:6C:89:BD:FF:4F
Authority key identifier: 96:FC:DA:12:8F:E8:2A:FC:06:E8:AA:D1:C8:E5:CC:DF:B3:55:61:E4
Certificate issuer: /CN=96fcda128fe82afc06e8aad1c8e5ccdfb35561e4
Certificate serial: 019510FDC3C95268E6D1250BDDFFB3BD74A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
Manifest number: 02AE
Signing time: Sun 16 Feb 2025 23:00:20 +0000
Manifest this update: Sun 16 Feb 2025 23:00:20 +0000
Manifest next update: Mon 17 Feb 2025 23:00:20 +0000
Files and hashes: 1: A3mZEclriGszqRGoUvbHgF-KInU.roa (hash: i8Kmi4yyeQAKrcdjfPdTmfjuSQ/uP2lhkQpuex0W13Y=)
2: lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl (hash: P/8mBP3yZuv338sTd/j/C+WBYpdzTFHpPYDwfeUHqI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:c3:c9:52:68:e6:d1:25:0b:dd:ff:b3:bd:74:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96fcda128fe82afc06e8aad1c8e5ccdfb35561e4
Validity
Not Before: Feb 16 23:00:20 2025 GMT
Not After : Feb 17 23:00:20 2025 GMT
Subject: CN=5ebd995fa1c16c1c921331ca7d14196c89bdff4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5e:b1:3e:dd:35:b2:68:d5:89:fa:5f:6a:e8:
9d:1b:58:87:93:43:93:59:4c:3c:d7:2b:73:0e:12:
a7:5c:fb:b4:22:99:0f:8d:e6:56:7b:97:c2:0d:43:
3d:8c:c7:d5:ba:71:fd:3c:35:f3:3a:f4:2c:50:0e:
ed:5c:85:f8:01:d8:8f:88:f2:96:62:2c:ae:f4:87:
79:69:11:d4:b2:4d:7a:09:f9:8b:84:fb:f4:b4:0e:
51:c1:16:2c:14:5f:e4:d4:09:d9:7f:da:f6:f1:1a:
16:b3:9b:61:30:c5:d7:5e:e7:44:d2:95:59:74:45:
b5:cd:47:7a:17:3e:9b:64:d7:b1:0c:4a:35:1c:e9:
3c:dd:f2:5e:ba:00:e4:0c:94:14:ab:97:55:8c:e2:
61:d4:01:c6:c4:bb:70:07:8b:91:e0:7c:92:2e:01:
68:54:00:9a:9e:65:a6:ef:c6:2e:a3:ba:8e:27:bd:
3a:22:b1:a9:02:d4:84:a3:a9:d6:2d:68:de:94:18:
8e:95:92:58:52:7f:21:49:41:b8:39:d9:63:af:ce:
a0:a3:85:d5:6b:ae:7b:6a:52:19:32:20:b7:64:f4:
6d:1c:09:e3:b3:d8:9b:38:d3:76:18:20:e6:86:e4:
dc:94:2e:7c:c0:89:ce:3e:26:5a:06:7e:03:97:32:
6a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:BD:99:5F:A1:C1:6C:1C:92:13:31:CA:7D:14:19:6C:89:BD:FF:4F
X509v3 Authority Key Identifier:
keyid:96:FC:DA:12:8F:E8:2A:FC:06:E8:AA:D1:C8:E5:CC:DF:B3:55:61:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvzaEo_oKvwG6KrRyOXM37NVYeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/53386c-48c5-42ee-bd09-e50abc8e8844/1/lvzaEo_oKvwG6KrRyOXM37NVYeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:9e:91:a0:d8:05:d4:0d:b7:fc:1f:4a:27:96:5f:12:e9:ca:
bc:f9:00:fe:c5:77:15:63:d4:c2:ff:b5:52:00:ff:3a:da:4a:
55:54:d7:34:3f:ed:57:5d:de:e9:7d:e5:b9:9a:c4:fb:ce:c2:
4f:f7:58:a6:f7:58:aa:6e:be:9d:50:36:59:be:04:3d:d7:48:
06:f1:08:28:a1:fa:28:a7:51:93:74:f3:00:6d:c3:eb:53:de:
3b:72:bf:70:a8:5a:65:03:c4:f6:ea:c6:f9:9b:43:ca:8b:94:
7c:07:80:4e:34:91:c4:70:c0:87:cf:0c:32:17:73:93:a0:46:
04:0f:aa:e0:9f:48:a7:b0:88:09:b2:53:c0:14:e6:95:da:7c:
a8:77:17:f6:1a:99:e7:09:b2:28:35:f3:8a:b0:c1:5b:d8:20:
a2:50:3b:da:4f:b9:9b:98:fa:c0:b1:a8:be:d1:70:68:9f:8d:
29:15:cd:ed:90:37:2d:71:6f:b5:3c:27:98:73:f8:3d:eb:2c:
cc:95:14:09:be:87:5a:df:41:3a:ab:4b:e3:0b:ad:66:ea:46:
96:70:62:62:c7:b6:7c:68:4f:fe:b0:2a:55:91:68:4e:f6:8c:
c5:ae:0a:8b:66:6a:3a:a6:06:fb:1f:6a:5b:a6:08:c6:e7:2d:
6a:b5:73:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:47 2025 by rpki-client