Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
File: LZrhAubK20caMKDIWTPgOQvy-co.mft (raw, json)
Hash identifier: f+RQQO2UkteDRyCXxVnacAAqAsmk8V8yqYWdzEc6RmQ=
Subject key identifier: AC:C1:2B:75:40:08:F1:8E:2B:0C:4A:12:32:06:82:B0:EB:06:E8:B2
Authority key identifier: 2D:9A:E1:02:E6:CA:DB:47:1A:30:A0:C8:59:33:E0:39:0B:F2:F9:CA
Certificate issuer: /CN=2d9ae102e6cadb471a30a0c85933e0390bf2f9ca
Certificate serial: 01965E0402BBCED44605F6722254B879C2D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LZrhAubK20caMKDIWTPgOQvy-co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
Manifest number: 0AF0
Signing time: Tue 22 Apr 2025 15:00:43 +0000
Manifest this update: Tue 22 Apr 2025 15:00:43 +0000
Manifest next update: Wed 23 Apr 2025 15:00:43 +0000
Files and hashes: 1: LZrhAubK20caMKDIWTPgOQvy-co.crl (hash: N+FQW0TN0TvFeUeN+2Spx3JBLEqUqbBNJwCu5WnJb8g=)
2: pl2IcfdvWd1nTAPO2kcXwuCa2Cs.roa (hash: 85u+tpWuF05Mbmd2ccACruWRfJ5rpPXoHevfa/3sNY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
rsync://rpki.ripe.net/repository/DEFAULT/LZrhAubK20caMKDIWTPgOQvy-co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:04:02:bb:ce:d4:46:05:f6:72:22:54:b8:79:c2:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d9ae102e6cadb471a30a0c85933e0390bf2f9ca
Validity
Not Before: Apr 22 15:00:43 2025 GMT
Not After : Apr 23 15:00:43 2025 GMT
Subject: CN=acc12b754008f18e2b0c4a12320682b0eb06e8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d1:a1:4d:d6:6a:90:56:cc:4d:7a:bc:9d:b9:
74:a4:ae:10:7a:65:77:e1:0c:5c:ef:1f:1b:49:be:
dd:f9:30:55:bf:3a:9e:90:ed:3b:1d:dc:4f:35:ee:
b5:37:41:93:fd:d3:6a:81:bc:e0:26:95:3f:07:1c:
f4:7c:48:80:46:42:d6:02:af:7f:68:ba:48:ae:82:
d5:7a:38:e8:4c:48:c6:82:d7:de:ca:7f:77:a3:32:
ab:d2:eb:bc:57:be:5f:2c:f6:14:47:1d:bf:a5:49:
cb:3f:8b:83:36:73:4d:08:9e:b6:2d:60:c5:76:f2:
4d:d4:0e:1c:a6:23:1d:bb:9a:e5:6d:59:09:07:2e:
0e:4a:f6:9b:40:7c:f1:06:eb:b8:5f:c3:54:87:cd:
42:44:a6:5f:0a:03:c7:0f:12:c5:4b:69:03:b2:43:
a0:ba:73:32:85:63:18:ff:e2:0f:a5:23:37:ef:06:
8f:ac:1a:83:42:8d:ec:3a:8f:3f:69:a9:b7:da:08:
f3:45:9f:e7:60:08:dc:b9:c2:5c:bd:6e:21:b4:73:
bc:95:91:56:fa:9d:15:34:d9:98:cd:69:32:c7:1a:
12:5d:76:d0:5d:08:55:85:eb:ef:bd:02:78:26:19:
ee:86:53:d7:79:ee:43:e2:11:70:82:d9:15:b1:57:
08:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C1:2B:75:40:08:F1:8E:2B:0C:4A:12:32:06:82:B0:EB:06:E8:B2
X509v3 Authority Key Identifier:
keyid:2D:9A:E1:02:E6:CA:DB:47:1A:30:A0:C8:59:33:E0:39:0B:F2:F9:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZrhAubK20caMKDIWTPgOQvy-co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:d7:01:40:18:c4:bd:72:5e:77:9b:3f:c9:ed:68:2e:d7:50:
0c:8e:8c:37:e6:6c:19:16:d5:42:a5:e5:4a:cd:06:41:f1:a2:
e4:54:b7:fa:66:37:d2:27:49:32:44:41:2d:d9:e8:cf:24:f1:
86:d3:96:b2:ec:0b:c7:e4:44:22:7e:cc:2e:da:e4:38:3c:f5:
b2:66:d8:db:19:ae:5b:07:ef:87:e3:4c:22:13:5d:c0:d0:09:
a1:0d:4c:09:9f:57:11:cb:13:a3:4f:d5:4a:67:02:06:96:10:
68:e7:06:e5:8d:7d:59:3b:00:5e:6a:a0:88:98:1e:3e:94:fa:
19:12:aa:f3:c3:44:3a:37:ab:5c:ab:bb:b8:48:68:13:79:e2:
73:45:1e:ea:bb:8c:7d:22:db:13:d1:0c:7c:c1:69:40:d0:fa:
d1:04:a0:0a:85:71:f6:0b:4e:12:5a:f4:09:29:ee:84:b4:1a:
4a:30:d4:30:62:a5:42:83:a9:b4:4c:49:89:3d:8f:e1:1c:bf:
bb:25:af:96:44:f3:82:7b:10:66:36:d7:6d:4d:77:a6:5d:95:
c2:2d:d1:4c:09:a6:29:36:70:e8:09:0e:2a:93:18:70:b8:54:
35:ff:f3:e0:a9:20:36:2a:27:76:86:ab:b6:cc:eb:a1:85:69:
4f:e7:af:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:56:43 2025 by rpki-client