Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/be730a-27e6-4136-b2c5-cae40384c6bf/1/LZKAom-DFWYViyYXyV0Z0zjuFdM.mft
File: LZKAom-DFWYViyYXyV0Z0zjuFdM.mft (raw, json)
Hash identifier: 9qf8x45Y9LWiU1Zc+3Hnet2dOi77d726WP9o2W2mzZw=
Subject key identifier: 97:EC:BA:6B:EB:7B:8C:66:FA:17:48:34:6C:22:F9:AC:FD:97:EE:05
Authority key identifier: 2D:92:80:A2:6F:83:15:66:15:8B:26:17:C9:5D:19:D3:38:EE:15:D3
Certificate issuer: /CN=2d9280a26f831566158b2617c95d19d338ee15d3
Certificate serial: 0196A91DA7888767F83F5BCB7414D11386B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LZKAom-DFWYViyYXyV0Z0zjuFdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/be730a-27e6-4136-b2c5-cae40384c6bf/1/LZKAom-DFWYViyYXyV0Z0zjuFdM.mft
Manifest number: 023E
Signing time: Wed 07 May 2025 05:00:14 +0000
Manifest this update: Wed 07 May 2025 05:00:14 +0000
Manifest next update: Thu 08 May 2025 05:00:14 +0000
Files and hashes: 1: LZKAom-DFWYViyYXyV0Z0zjuFdM.crl (hash: V2gYoEZBJ0KMDEwoxhRfwrrLqmgX4IgbBsADCjs2/r0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/be730a-27e6-4136-b2c5-cae40384c6bf/1/LZKAom-DFWYViyYXyV0Z0zjuFdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/be730a-27e6-4136-b2c5-cae40384c6bf/1/LZKAom-DFWYViyYXyV0Z0zjuFdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LZKAom-DFWYViyYXyV0Z0zjuFdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:1d:a7:88:87:67:f8:3f:5b:cb:74:14:d1:13:86:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d9280a26f831566158b2617c95d19d338ee15d3
Validity
Not Before: May 7 05:00:14 2025 GMT
Not After : May 8 05:00:14 2025 GMT
Subject: CN=97ecba6beb7b8c66fa1748346c22f9acfd97ee05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e1:67:25:83:b0:07:f7:f2:f5:93:c5:f0:48:
d3:33:fa:27:43:fd:06:d5:2c:68:35:40:d1:9c:69:
27:4b:60:88:79:a9:85:c0:a5:3b:5a:f5:b7:60:75:
c5:26:0e:b0:8b:3b:d3:89:9b:52:4d:e0:0d:8c:8b:
87:44:65:bc:40:60:5a:5e:70:91:06:ef:e1:cd:84:
61:de:57:1d:23:38:47:22:bc:94:17:f5:5c:7d:d1:
87:b6:57:7d:a6:40:90:9f:62:7e:8f:fd:90:0f:ac:
e4:5b:d1:78:6e:33:d0:68:10:95:1c:f4:67:82:ac:
2a:2d:bb:ad:08:58:eb:0a:98:7e:35:e4:b6:c8:35:
56:4b:41:14:67:48:0c:fe:1d:61:9e:0e:aa:c6:3b:
0e:f9:cc:b7:df:aa:f9:b5:dc:1c:24:12:af:51:95:
c9:ba:53:72:af:90:7f:a5:1d:44:47:55:45:b7:4c:
8a:c5:7e:1f:97:d1:48:11:6e:2a:7e:d6:3c:55:61:
67:9a:9c:bb:10:37:21:a0:3d:be:e8:b9:d9:e5:d7:
50:76:f4:8b:a9:3a:51:15:a0:51:7c:a2:80:41:bb:
f3:dd:e5:ae:b6:5d:30:fc:89:04:fb:13:68:12:2c:
63:4b:b4:e5:f2:ba:ff:9f:de:30:53:ff:29:d6:6a:
01:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:EC:BA:6B:EB:7B:8C:66:FA:17:48:34:6C:22:F9:AC:FD:97:EE:05
X509v3 Authority Key Identifier:
keyid:2D:92:80:A2:6F:83:15:66:15:8B:26:17:C9:5D:19:D3:38:EE:15:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZKAom-DFWYViyYXyV0Z0zjuFdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/be730a-27e6-4136-b2c5-cae40384c6bf/1/LZKAom-DFWYViyYXyV0Z0zjuFdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/be730a-27e6-4136-b2c5-cae40384c6bf/1/LZKAom-DFWYViyYXyV0Z0zjuFdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c1:b6:40:79:42:d0:6d:68:c4:fd:c6:83:80:34:02:e6:8d:
cc:c1:14:f2:88:4b:e2:a1:7f:ff:1d:4c:92:ae:47:0b:c6:b0:
c7:92:9c:d2:ca:22:29:fa:05:91:96:69:ed:95:cc:f8:a9:0d:
c2:92:cd:b5:08:43:de:f4:82:c0:a0:f9:a6:48:88:96:4b:7c:
32:bf:31:78:a5:57:ae:2c:a0:c1:e8:db:9c:dd:0a:23:b5:3e:
c3:90:f7:2c:60:6a:f2:e7:77:8a:ca:57:0e:7f:1e:65:f9:bb:
11:b5:42:f1:53:d1:33:21:46:31:40:f0:38:45:02:df:88:99:
f3:31:94:b8:e7:23:63:60:52:0b:22:20:5f:37:1c:85:a7:9d:
54:33:d7:6c:4d:a4:fe:5e:49:ba:79:11:13:b2:70:ab:3a:4b:
80:4b:e0:7c:19:4b:ee:e6:d5:3b:de:54:45:bb:3e:bb:36:ad:
49:2b:1f:70:01:d8:56:c5:99:2c:05:e4:0c:10:3e:77:6a:30:
62:6f:ca:d1:06:08:05:7b:d7:a5:ff:d9:1d:e3:62:2d:27:37:
bf:3a:56:67:b6:8e:8d:ac:5b:fc:89:ed:1d:b9:9d:92:42:80:
05:87:a6:01:a3:04:fb:36:65:ef:5d:55:ba:53:88:f9:20:49:
cb:c1:3b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 07:11:47 2025 by rpki-client