Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.mft
File: LzE27RCZhYClF9lZiryjPZumZZk.mft (raw, json)
Hash identifier: hwrBNMVnEmKF8ILUp7tRpr2WtpgE2zrDAJ0yNpRFQtk=
Subject key identifier: 71:89:F6:D3:4D:2E:3D:B0:73:3A:FF:EE:9D:13:67:48:97:1F:96:7B
Authority key identifier: 2F:31:36:ED:10:99:85:80:A5:17:D9:59:8A:BC:A3:3D:9B:A6:65:99
Certificate issuer: /CN=2f3136ed10998580a517d9598abca33d9ba66599
Certificate serial: 019741405C23D5C5639728ABD68AF3452E83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.mft
Manifest number: 0FCA
Signing time: Thu 05 Jun 2025 18:00:26 +0000
Manifest this update: Thu 05 Jun 2025 18:00:26 +0000
Manifest next update: Fri 06 Jun 2025 18:00:26 +0000
Files and hashes: 1: 3Q4-nm9Afpxwl-rsuAE0uraA2Ho.roa (hash: w0/s8wW3wnSLtMZE2Dd4d4ibLqmaSIOhu54oA3SxPvE=)
2: LzE27RCZhYClF9lZiryjPZumZZk.crl (hash: N3Z7/3x72jRyyCNqKxQEiHbsaWw9rZELfvJDMGO6jiQ=)
3: c_TSc_0VUPCSIkbFn_FPzPGM0F8.roa (hash: xezFlPzrJalHbTLvZaHt78Rcv/0Gq1ZU28yG/tCK5zY=)
4: wja0xc3i-_VJO7AZ0z7ZjeeL82M.roa (hash: QA/QlmJQtis0AZ9FebPI4hzl4Iy3CUu4wS0j2Y2SaNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:41:40:5c:23:d5:c5:63:97:28:ab:d6:8a:f3:45:2e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f3136ed10998580a517d9598abca33d9ba66599
Validity
Not Before: Jun 5 18:00:26 2025 GMT
Not After : Jun 6 18:00:26 2025 GMT
Subject: CN=7189f6d34d2e3db0733affee9d136748971f967b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4e:fd:31:95:a2:e9:b2:b2:2b:80:05:39:22:
a6:2a:70:26:83:66:cb:89:ee:cf:e2:51:e9:1a:8a:
83:c8:a1:5e:3b:e9:11:13:5a:d0:98:83:86:e3:ee:
3f:f8:fd:d8:86:4f:20:50:70:c1:bd:bb:85:46:9a:
cb:6a:92:84:59:df:b2:14:17:a8:af:ec:9a:50:86:
5a:94:c9:47:28:d4:7d:c3:c3:39:e2:0d:8a:1b:d3:
7f:37:4f:9c:f6:64:cb:f3:3a:03:96:03:cb:24:d4:
a9:c4:6c:43:7f:90:aa:04:72:c4:24:75:77:21:43:
d9:4c:00:95:94:4e:49:7a:87:0f:1c:88:64:19:08:
38:25:2e:63:78:8c:5e:8d:ea:ea:93:ca:b4:a5:8a:
90:78:f9:f6:57:16:b8:33:38:c5:0b:f3:75:8c:20:
f2:eb:16:06:f0:7d:3e:0e:21:9b:e3:24:fe:5c:ab:
18:04:5a:8e:c5:c5:1c:26:84:c5:05:8c:43:15:ea:
13:0d:d7:2e:d6:f8:92:4d:0f:1e:ee:36:22:d2:94:
f1:d8:5f:3e:5c:4d:aa:03:5b:10:8c:ca:60:15:87:
ed:af:a0:78:52:50:c3:c6:d4:77:6b:6c:5e:20:b8:
4e:b9:21:bb:2a:ae:9e:ec:34:3f:96:21:56:f6:f7:
de:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:89:F6:D3:4D:2E:3D:B0:73:3A:FF:EE:9D:13:67:48:97:1F:96:7B
X509v3 Authority Key Identifier:
keyid:2F:31:36:ED:10:99:85:80:A5:17:D9:59:8A:BC:A3:3D:9B:A6:65:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:00:92:ec:af:7f:3f:bf:97:d1:09:a9:10:a3:2f:c6:81:80:
ec:62:92:6c:31:f5:0e:09:23:45:1e:79:f6:f9:ee:ea:67:8e:
18:96:c7:95:3b:85:b1:d5:99:9d:9d:4c:04:39:29:c3:ce:99:
04:61:b5:5c:3c:c0:17:88:3b:b3:72:61:21:e2:73:b1:a8:67:
70:41:80:76:72:9c:10:8c:d0:4e:33:10:21:77:74:51:33:c7:
a8:7d:b8:84:1c:b5:12:4b:18:34:81:ed:af:b6:c8:84:c4:22:
c3:28:3d:01:b2:11:46:2b:e3:e5:3b:2d:61:cb:a3:d6:88:35:
f5:1e:99:c6:8c:08:49:1e:98:d3:a7:7a:36:79:24:74:43:ab:
d2:10:f3:e1:a0:74:b0:06:4b:57:2f:a1:e5:42:74:9d:08:19:
d1:77:b1:d7:c3:45:73:1b:42:88:24:28:90:14:e8:a5:de:1f:
6f:75:67:81:69:28:92:b9:3c:7e:f6:04:03:bc:bf:8d:3e:c4:
d8:95:d0:02:5d:c5:df:bf:08:b1:f3:88:37:ff:37:bd:a6:e1:
a9:5e:51:9b:0b:f9:54:c4:2e:9e:49:0b:87:ed:60:52:11:4f:
b2:47:05:37:69:c4:fe:bb:3b:f6:23:f3:81:11:9d:72:d9:31:
49:04:4d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 03:55:39 2025 by rpki-client