Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
File: LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft (raw, json)
Hash identifier: MsUtX8ImtS5E8DxZK5qECSYcLpYmtUlFAIoiDt/RPKY=
Subject key identifier: 72:B4:BE:3B:D4:34:F1:EE:53:F0:54:EC:8B:EE:14:51:5B:D1:E8:59
Authority key identifier: 2D:9E:31:C9:02:9E:E4:4B:D6:81:B5:15:33:03:35:C6:A1:CF:DE:EE
Certificate issuer: /CN=2d9e31c9029ee44bd681b515330335c6a1cfdeee
Certificate serial: 01965191F2D0B17D073808878931F19C004B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
Manifest number: 1500
Signing time: Sun 20 Apr 2025 05:00:41 +0000
Manifest this update: Sun 20 Apr 2025 05:00:41 +0000
Manifest next update: Mon 21 Apr 2025 05:00:41 +0000
Files and hashes: 1: 5rwnt7U3zNdamjh9hhJ_HA_VCqo.roa (hash: LxqMIG4f6G1y41E4bvnnaVLXMyv0wjoLuCjGmeNYJdQ=)
2: LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl (hash: kuVSSR3dTzl4AzriCUC7pj2ffwGU3OG4sHW5lq28PFQ=)
3: NwLeIR_NPESbC4GUi2khijtoK7k.roa (hash: Cvm1rAd7KCGPEyQkopdZwWDBR/07H5izzQrtF4lbhAA=)
4: upgE53Ne0KMFUsGR-miso-8-5TQ.roa (hash: u1TgVu5CTRcoIplPeSQE03Pq8xZKbvkqbqoHvKMUbWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:91:f2:d0:b1:7d:07:38:08:87:89:31:f1:9c:00:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d9e31c9029ee44bd681b515330335c6a1cfdeee
Validity
Not Before: Apr 20 05:00:41 2025 GMT
Not After : Apr 21 05:00:41 2025 GMT
Subject: CN=72b4be3bd434f1ee53f054ec8bee14515bd1e859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9d:84:11:49:eb:d4:7c:5c:62:06:af:78:9f:
fa:0f:96:86:be:a2:2e:99:db:c4:96:bf:1b:94:7e:
db:74:56:97:59:f6:18:19:db:d4:cd:f2:8b:24:ed:
7d:d6:f7:e3:4f:7a:38:6b:4c:89:6d:50:0b:e2:a5:
24:ab:b8:61:65:04:f5:c9:f6:e7:e6:69:7f:9e:a7:
ba:d5:c7:13:66:be:06:87:58:07:a3:24:22:f9:86:
cd:25:66:79:b6:b3:95:e3:ee:cd:ee:f3:bd:64:f5:
f1:4a:64:d5:fe:9c:bb:a3:cc:c1:3f:46:87:5d:ff:
0e:a9:02:74:80:81:b3:1f:6c:bd:b5:4e:a1:21:e7:
7c:3b:bd:c8:bb:61:64:cc:d2:d3:53:43:29:5e:3f:
82:cc:2a:b5:c6:3b:46:ff:52:62:9b:43:42:d9:59:
73:e4:2d:f2:77:57:7e:28:84:11:98:90:39:58:12:
8a:a8:24:81:d2:44:73:93:b2:75:08:60:8e:18:b5:
dc:6d:0b:18:e1:e0:4c:da:92:bb:e4:83:ae:64:26:
9b:67:b1:71:20:9a:4a:d3:14:10:2e:94:33:18:ec:
ac:1b:e5:79:f1:cf:a2:2c:f8:ba:b2:bd:0f:e6:6f:
c3:df:fc:8a:85:0a:d1:b3:0d:ad:c9:d2:23:f3:be:
35:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B4:BE:3B:D4:34:F1:EE:53:F0:54:EC:8B:EE:14:51:5B:D1:E8:59
X509v3 Authority Key Identifier:
keyid:2D:9E:31:C9:02:9E:E4:4B:D6:81:B5:15:33:03:35:C6:A1:CF:DE:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:9c:ab:11:1c:40:4f:7a:96:1d:2e:fd:a9:05:60:d9:99:6c:
f1:cd:72:83:5c:35:a4:50:cf:ea:aa:26:d5:8e:89:8c:81:8f:
f9:4b:66:f2:00:17:04:c0:e5:2a:01:b6:9c:2e:a9:93:5f:09:
4e:55:24:cd:b3:4a:ce:d8:d9:c1:41:1e:38:d4:13:36:87:f1:
97:80:09:b0:f9:00:33:08:90:92:70:3b:be:9c:e9:2c:9a:2d:
b4:26:66:7a:cc:fc:0c:06:3f:4c:d6:0c:7b:12:c9:72:7f:1b:
f0:0b:a6:c7:55:7a:3a:17:2c:3e:22:42:27:c9:b4:96:89:7a:
85:35:a1:4b:4b:61:0a:51:91:0f:72:64:78:80:99:39:5b:21:
06:1b:d3:4c:11:af:6b:e8:b0:25:b0:e1:a6:af:cb:0f:5a:8a:
40:00:05:10:58:c5:53:3d:80:2a:a3:a4:21:75:49:e5:0a:95:
1c:a2:d8:6d:5a:03:44:3d:93:50:f8:e3:1a:36:c0:a8:44:69:
e8:66:d1:7e:4e:0b:32:d3:e9:45:04:4d:2e:61:fe:be:79:78:
25:c8:d0:0b:45:70:bb:08:a0:de:86:30:23:5e:d9:04:2f:77:
a9:2d:ba:a5:d6:70:2d:3b:a1:c5:0b:14:ce:8b:d1:a0:d0:5f:
7c:96:9d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:34:44 2025 by rpki-client