Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
File: LAzrgevOhZ9Qko6O0-HwqFERUts.mft (raw, json)
Hash identifier: j1OjmnDx7jXrSSk4pkMh9rEAvfXJT2A9HRSN2i1hd+s=
Subject key identifier: 45:AE:9C:99:88:F3:CA:91:32:48:6D:08:F4:23:F5:D5:06:20:F2:84
Authority key identifier: 2C:0C:EB:81:EB:CE:85:9F:50:92:8E:8E:D3:E1:F0:A8:51:11:52:DB
Certificate issuer: /CN=2c0ceb81ebce859f50928e8ed3e1f0a8511152db
Certificate serial: 01974CA00E23B80C5B3ABE870244DA72D4E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
Manifest number: 0967
Signing time: Sat 07 Jun 2025 23:00:47 +0000
Manifest this update: Sat 07 Jun 2025 23:00:47 +0000
Manifest next update: Sun 08 Jun 2025 23:00:47 +0000
Files and hashes: 1: LAzrgevOhZ9Qko6O0-HwqFERUts.crl (hash: Qvpbt4rM4aIno4A8v7VTglna1o2Lp07iUmYvoKEJdSY=)
2: Nw-tf2Fdg1IBaL0ZaEM215Hb70k.roa (hash: D6voi0MuqX48csC8cycT9bMohcrVdXkjR0ufp2F3pwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:a0:0e:23:b8:0c:5b:3a:be:87:02:44:da:72:d4:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c0ceb81ebce859f50928e8ed3e1f0a8511152db
Validity
Not Before: Jun 7 23:00:47 2025 GMT
Not After : Jun 8 23:00:47 2025 GMT
Subject: CN=45ae9c9988f3ca9132486d08f423f5d50620f284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:44:78:b4:78:c5:c3:32:66:23:23:bc:7f:ae:
b1:83:c2:72:2b:41:28:34:12:83:04:17:0b:f4:b0:
6b:0d:80:77:84:32:24:e4:af:ff:c2:2e:b3:42:0e:
e2:f3:cd:ea:3d:4a:89:0e:91:9b:2d:70:e1:8b:5e:
17:3e:93:32:4e:ce:e2:dc:ab:c6:59:2e:a9:d6:c5:
7e:56:0b:fd:a7:f6:49:3d:7c:a7:50:9b:5b:2d:99:
c4:d8:89:cd:97:33:73:7f:aa:e2:05:5d:38:df:8f:
42:82:8d:18:ef:28:63:82:2f:11:9c:4e:e2:f1:ee:
de:70:44:24:9e:db:da:94:c0:ff:e2:80:ac:6f:2c:
20:c9:db:05:d0:a4:89:f9:00:da:8b:dd:e5:99:68:
db:cd:10:f3:5a:60:d6:fe:c0:00:4f:5d:12:35:6f:
d2:8f:7a:e1:70:3c:e4:dc:82:f7:3c:8b:e8:db:17:
2b:7b:e3:fe:46:3e:51:65:06:f6:89:92:6c:7d:c6:
8f:ca:17:2d:6d:a4:4a:93:09:8c:e9:94:3e:75:27:
1f:6e:39:d1:64:16:a5:62:45:15:4a:08:38:b1:1a:
b7:a2:1c:d0:b1:ed:16:2f:ee:5c:da:54:9a:59:73:
34:8c:46:09:f9:63:1c:53:9f:69:22:88:aa:d3:aa:
b5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:AE:9C:99:88:F3:CA:91:32:48:6D:08:F4:23:F5:D5:06:20:F2:84
X509v3 Authority Key Identifier:
keyid:2C:0C:EB:81:EB:CE:85:9F:50:92:8E:8E:D3:E1:F0:A8:51:11:52:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:87:a2:07:1b:40:8b:44:ad:b3:3e:86:0a:0f:2c:2d:0e:e6:
87:79:8f:4b:c8:64:bd:cf:87:28:67:b0:29:32:a2:37:19:13:
cd:a6:c4:d1:f5:f4:17:34:90:e2:82:7a:37:fe:d1:29:37:28:
92:88:06:a4:d2:7f:3c:0a:ae:c0:bd:0e:8e:95:61:5d:53:5a:
41:b9:01:a8:a7:d9:42:09:81:ef:67:e0:4a:04:6f:9a:7e:db:
c1:83:41:a5:ca:cd:ae:2c:d4:0e:c7:c4:ff:e6:6d:0c:78:0d:
07:aa:4a:8e:7e:bf:26:cf:f7:e9:a8:3d:d4:ec:fc:4c:97:1c:
d1:a1:9a:30:c9:95:5d:72:26:6a:15:24:c2:9b:41:bf:52:2d:
c6:0e:dd:eb:9e:ec:92:a7:f6:62:7a:c8:fd:b3:0d:79:59:0c:
44:15:61:85:b6:75:96:b7:18:cf:b6:90:d2:f1:76:02:3c:40:
d1:df:64:3f:86:e3:7b:27:90:78:06:4e:86:bf:14:4d:a8:e0:
2d:66:c0:aa:1a:43:3c:3f:5d:da:fc:28:74:c0:10:c5:3d:50:
b3:a6:4a:1f:5e:2b:ba:38:f5:bf:19:ae:dc:22:69:af:2c:fa:
9f:36:14:5d:b5:44:d5:a7:7e:06:0e:5f:c1:17:0c:21:1a:78:
ba:a0:c1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:40:29 2025 by rpki-client