Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
File: LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft (raw, json)
Hash identifier: tS682+cdOoAsIPHPa0Dr0mP+9pKkRir4XM5Hj+09vTY=
Subject key identifier: 1C:0D:5A:20:F4:03:28:7C:20:BD:3F:A2:EE:BB:60:49:B2:BE:35:34
Authority key identifier: 2D:9E:31:C9:02:9E:E4:4B:D6:81:B5:15:33:03:35:C6:A1:CF:DE:EE
Certificate issuer: /CN=2d9e31c9029ee44bd681b515330335c6a1cfdeee
Certificate serial: 0197507C8DD60D22E652E382BB9EAA8631FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
Manifest number: 1584
Signing time: Sun 08 Jun 2025 17:00:29 +0000
Manifest this update: Sun 08 Jun 2025 17:00:29 +0000
Manifest next update: Mon 09 Jun 2025 17:00:29 +0000
Files and hashes: 1: 5rwnt7U3zNdamjh9hhJ_HA_VCqo.roa (hash: LxqMIG4f6G1y41E4bvnnaVLXMyv0wjoLuCjGmeNYJdQ=)
2: LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl (hash: rKM+KekhX7iArk0i5JyR5EZsNWGtBJyWoOFCRobix0s=)
3: NwLeIR_NPESbC4GUi2khijtoK7k.roa (hash: Cvm1rAd7KCGPEyQkopdZwWDBR/07H5izzQrtF4lbhAA=)
4: upgE53Ne0KMFUsGR-miso-8-5TQ.roa (hash: u1TgVu5CTRcoIplPeSQE03Pq8xZKbvkqbqoHvKMUbWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:7c:8d:d6:0d:22:e6:52:e3:82:bb:9e:aa:86:31:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d9e31c9029ee44bd681b515330335c6a1cfdeee
Validity
Not Before: Jun 8 17:00:29 2025 GMT
Not After : Jun 9 17:00:29 2025 GMT
Subject: CN=1c0d5a20f403287c20bd3fa2eebb6049b2be3534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:44:eb:70:66:8e:9b:fa:55:28:78:7f:83:30:
18:f6:18:b8:cb:ee:84:db:b5:b8:6b:25:4a:11:57:
1d:65:be:38:d7:8e:c9:f7:1e:b4:c1:b8:87:de:df:
af:c3:6a:91:93:50:33:15:ac:c6:49:49:f8:5f:26:
4c:23:1b:e4:84:7d:96:64:79:9c:f3:a1:8c:d2:bd:
d8:f2:b9:01:cd:c2:1b:7f:27:9d:dd:e3:e3:50:06:
45:ee:47:24:ce:69:12:17:a3:2a:d4:39:7a:e6:e2:
c2:b8:b4:13:5e:a8:e4:72:95:d1:9c:ec:97:be:cc:
cd:73:48:cd:93:8c:c8:6a:de:78:ab:fe:01:3e:70:
fb:d3:ec:e5:b2:9d:22:a7:3f:e3:3d:78:de:17:b0:
0e:10:3d:aa:56:dc:a4:12:6b:94:b5:59:30:a1:6d:
8d:62:85:e7:c0:c3:7c:87:ef:2b:b6:d7:8b:e6:fe:
db:c6:89:dc:0a:7a:b8:fe:00:44:15:67:c1:57:ff:
63:bd:6b:7a:3c:93:ee:04:79:af:36:19:77:e3:03:
80:4c:42:71:f6:c3:20:ce:16:f8:61:f3:ff:b8:15:
84:9f:05:ea:58:d2:1a:cd:56:97:22:be:f4:19:11:
d8:2f:53:2a:1d:91:02:5a:a7:31:eb:23:8b:44:2d:
cf:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:0D:5A:20:F4:03:28:7C:20:BD:3F:A2:EE:BB:60:49:B2:BE:35:34
X509v3 Authority Key Identifier:
keyid:2D:9E:31:C9:02:9E:E4:4B:D6:81:B5:15:33:03:35:C6:A1:CF:DE:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:cc:e0:b5:60:f3:69:bd:14:b7:ce:6a:d7:43:4c:d0:c8:f6:
95:0f:b1:9f:02:cd:9c:a3:73:51:f2:d0:41:2b:6a:0d:c6:c3:
7d:a8:f1:6e:98:9f:f8:3a:5d:27:3f:62:f2:99:15:d3:f2:f5:
92:f1:50:69:9c:a6:78:26:80:f7:b7:4f:ab:26:4e:f3:f9:71:
d6:06:72:81:9f:e4:c9:93:29:1a:cc:61:c0:c9:8d:07:a3:0a:
ef:ec:d5:3d:06:3b:f5:ed:54:98:c6:04:28:59:31:a3:d2:37:
cc:01:da:80:1b:73:bd:3a:1e:99:8a:1a:40:37:16:c7:91:ae:
3d:4b:79:e7:05:45:34:33:b9:b1:8e:cb:20:78:99:b6:9e:45:
e4:bf:07:61:92:2c:17:4c:44:c3:51:3b:50:76:8b:39:ec:0a:
ea:3d:c3:8a:4b:42:22:34:dd:62:94:41:d1:6c:f2:e5:00:ba:
0d:31:10:8b:24:34:0a:66:4e:a6:15:6e:f4:c9:34:23:72:7d:
e8:19:37:6c:a6:1f:7f:e0:e0:42:bb:ae:07:a9:5e:0e:4d:df:
cd:06:b6:cc:40:7a:55:90:02:6e:e1:90:29:f0:3a:e7:77:fe:
a2:a4:56:37:8f:42:7a:d6:b9:6b:d6:41:2c:ec:91:94:21:73:
e2:17:78:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:27:21 2025 by rpki-client