Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
File: LZrhAubK20caMKDIWTPgOQvy-co.mft (raw, json)
Hash identifier: oCnhZTXUUXrFYtu1cCjjW2o8ogUfWjY6o3+MUD0e+Ms=
Subject key identifier: F5:0E:56:A8:0D:67:CD:BF:9A:DF:D8:61:56:51:3B:D9:6F:EF:D6:03
Authority key identifier: 2D:9A:E1:02:E6:CA:DB:47:1A:30:A0:C8:59:33:E0:39:0B:F2:F9:CA
Certificate issuer: /CN=2d9ae102e6cadb471a30a0c85933e0390bf2f9ca
Certificate serial: 01974F6A09BC0ABCFC572C04B78D8AD95F36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LZrhAubK20caMKDIWTPgOQvy-co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
Manifest number: 0B6D
Signing time: Sun 08 Jun 2025 12:00:38 +0000
Manifest this update: Sun 08 Jun 2025 12:00:38 +0000
Manifest next update: Mon 09 Jun 2025 12:00:38 +0000
Files and hashes: 1: LZrhAubK20caMKDIWTPgOQvy-co.crl (hash: g3SeZWTMR53FqNS0Q5xoj1wFyUgj+/voE+xbYzk6rXw=)
2: pl2IcfdvWd1nTAPO2kcXwuCa2Cs.roa (hash: 85u+tpWuF05Mbmd2ccACruWRfJ5rpPXoHevfa/3sNY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
rsync://rpki.ripe.net/repository/DEFAULT/LZrhAubK20caMKDIWTPgOQvy-co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:6a:09:bc:0a:bc:fc:57:2c:04:b7:8d:8a:d9:5f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d9ae102e6cadb471a30a0c85933e0390bf2f9ca
Validity
Not Before: Jun 8 12:00:38 2025 GMT
Not After : Jun 9 12:00:38 2025 GMT
Subject: CN=f50e56a80d67cdbf9adfd86156513bd96fefd603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:80:3a:e0:14:d7:58:14:d3:a8:2c:da:35:8e:
26:b8:d4:66:a1:7a:c6:d6:2a:9c:53:87:e9:7c:22:
a1:03:3c:f7:2f:46:67:66:3a:3a:2c:fe:84:d6:af:
d7:28:fa:88:12:fb:ea:32:65:0d:c7:07:af:12:4a:
14:f0:31:c8:25:15:14:8a:4b:fc:91:c1:9b:4f:db:
a8:98:5b:cd:99:30:c2:63:02:c0:a1:9d:6e:e7:77:
bd:89:3b:48:49:7e:bc:00:37:4f:33:fb:48:95:d4:
6c:b4:59:38:83:8c:6a:c1:d8:ea:f1:7e:44:b2:fe:
6b:80:2a:a8:44:99:1c:7f:91:6f:ee:2c:7b:95:2f:
22:8d:13:73:b6:8d:43:17:6a:76:9a:8d:e7:0a:8f:
43:5c:6e:cb:19:e1:d9:15:85:7d:fe:17:4c:d5:cb:
d0:90:cd:7c:b4:15:3d:d8:c2:ec:0d:8e:1e:5a:06:
c5:29:7f:c5:ad:0d:a6:1b:5d:cd:73:37:32:09:ec:
be:28:1c:d3:a4:e3:63:ed:72:bd:e6:e6:0c:b4:95:
2d:a5:ea:04:38:2a:ba:97:fa:5a:0d:fa:7c:05:8c:
22:54:85:a4:be:f8:71:86:6c:d4:fa:3b:3e:f2:ab:
76:e4:92:43:4d:7b:db:73:29:ad:63:24:a7:54:2a:
a3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:0E:56:A8:0D:67:CD:BF:9A:DF:D8:61:56:51:3B:D9:6F:EF:D6:03
X509v3 Authority Key Identifier:
keyid:2D:9A:E1:02:E6:CA:DB:47:1A:30:A0:C8:59:33:E0:39:0B:F2:F9:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZrhAubK20caMKDIWTPgOQvy-co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:03:f8:09:28:7b:c5:5c:32:51:59:4c:80:8b:87:f1:69:31:
91:59:5a:fd:fb:29:5d:1f:70:f6:a3:84:6e:ad:43:04:e7:bc:
9a:76:46:41:01:36:ce:e5:15:21:b5:74:66:e0:ff:3f:4a:95:
a2:da:84:5d:ed:97:49:ff:9c:f7:09:02:2c:42:3c:04:c8:27:
f7:c9:67:03:d3:4a:30:92:55:5f:e8:75:b5:88:74:8a:fe:d8:
43:8a:a3:3c:6c:44:eb:f1:12:39:ae:56:00:c4:90:34:9f:41:
fc:c6:1b:25:e6:2c:fd:70:09:11:03:b0:dc:8b:92:11:f9:23:
92:e6:67:08:41:1c:9a:bf:6d:0e:c0:d8:b9:3f:44:dc:e1:16:
b2:43:37:56:37:76:31:21:a7:aa:92:52:f6:9c:d3:ed:a5:8f:
16:19:ce:6e:ac:11:12:9d:92:ed:69:2e:8f:99:f3:df:47:be:
fd:71:bc:3e:c3:c7:cd:b7:ca:d2:80:56:36:4c:64:6a:ab:90:
45:4f:14:43:51:14:af:77:f9:23:e2:ea:6d:60:1c:ad:77:55:
46:e3:7e:3f:5d:fb:7f:fe:2b:0a:2b:89:6b:c6:e0:b3:fb:a0:
f7:45:af:af:80:29:87:41:95:f2:2c:b3:bb:d6:1d:53:db:2f:
ed:b6:f1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:58:42 2025 by rpki-client