Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft
File: lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft (raw, json)
Hash identifier: U41dOQ8k3KZe1q2j+GfSuqb/E8sE5ohyiuN0NkZ1AzA=
Subject key identifier: 1C:07:7A:41:D6:09:0A:FD:2A:E4:B6:3C:B0:5B:65:DB:23:11:53:CF
Authority key identifier: 97:35:A9:4F:31:54:6D:43:7B:89:72:0E:84:4B:2F:12:A5:AB:F2:68
Certificate issuer: /CN=9735a94f31546d437b89720e844b2f12a5abf268
Certificate serial: 0196575D2F2B81F8BCF0CB4B8DC14B5C871D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzWpTzFUbUN7iXIOhEsvEqWr8mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft
Manifest number: 0A31
Signing time: Mon 21 Apr 2025 08:00:46 +0000
Manifest this update: Mon 21 Apr 2025 08:00:46 +0000
Manifest next update: Tue 22 Apr 2025 08:00:46 +0000
Files and hashes: 1: K_2uusZ-ceVYTyxoJbEaCXUaJZ8.roa (hash: ECfU3dqUiHJoycwQ/ZQhx1FlZVv9NEnP+CXvi3oehN0=)
2: lzWpTzFUbUN7iXIOhEsvEqWr8mg.crl (hash: ZRtV+DEf4HoGTT0VhQTrNG/sUAuPvn+j5zqJ5b7MF4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lzWpTzFUbUN7iXIOhEsvEqWr8mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:5d:2f:2b:81:f8:bc:f0:cb:4b:8d:c1:4b:5c:87:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9735a94f31546d437b89720e844b2f12a5abf268
Validity
Not Before: Apr 21 08:00:46 2025 GMT
Not After : Apr 22 08:00:46 2025 GMT
Subject: CN=1c077a41d6090afd2ae4b63cb05b65db231153cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9b:a0:85:b3:18:45:0e:05:3d:2c:f7:8b:ec:
0e:80:ef:85:ff:cb:a2:c7:c3:55:30:1a:cf:04:98:
ce:bc:ca:76:7d:88:0c:fb:29:d0:ab:50:75:81:2f:
0a:bc:36:d7:fa:2f:1e:ab:b5:10:02:c4:4e:1e:83:
4d:2d:95:ca:c4:7c:df:c0:27:20:48:13:15:df:69:
14:c3:60:4c:d8:74:41:08:71:cd:de:ba:67:c8:99:
cb:9d:e2:5e:f7:56:eb:0c:ab:27:85:a1:52:fd:42:
2d:90:c2:4f:4d:d1:a5:0d:a4:f7:44:a9:85:d8:5c:
9f:0a:ff:0a:72:12:aa:0e:da:df:96:c0:cb:de:48:
2d:9e:95:88:9f:7e:6c:74:b3:56:c8:84:20:3d:be:
18:cc:ec:c7:72:5f:fc:59:6e:4f:02:e4:60:4f:48:
60:78:68:ba:1d:70:58:f6:65:40:d4:bd:4d:72:80:
8b:bf:58:56:bb:53:f7:d7:24:3b:a5:2c:50:90:78:
4e:ab:c1:15:29:65:a4:bc:6c:37:a7:56:ce:72:87:
9d:6c:28:b3:cc:a6:e3:14:d7:e8:9a:6c:b5:5d:b4:
92:96:12:bc:38:4d:95:87:ca:43:0b:b8:6c:b6:c0:
0c:bd:7a:bd:9b:a4:f1:c2:c5:7b:2e:5e:80:44:7c:
8e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:07:7A:41:D6:09:0A:FD:2A:E4:B6:3C:B0:5B:65:DB:23:11:53:CF
X509v3 Authority Key Identifier:
keyid:97:35:A9:4F:31:54:6D:43:7B:89:72:0E:84:4B:2F:12:A5:AB:F2:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzWpTzFUbUN7iXIOhEsvEqWr8mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:47:b5:94:88:f5:ae:e1:36:9e:21:30:09:77:c7:9f:22:24:
7f:ef:82:ac:68:88:ce:c1:39:de:e4:f5:46:bf:a8:91:4e:27:
f0:a9:47:bb:ab:1c:82:96:a3:d3:2d:0d:b7:c6:cd:82:2c:b2:
a0:bb:dc:0c:40:b5:0e:d0:8e:5a:b2:57:ff:6b:09:77:e7:82:
d8:92:71:5d:45:6a:9f:1d:75:ab:35:63:34:82:3a:26:d9:ce:
65:be:10:83:69:7f:87:33:97:85:81:dc:75:04:53:fa:e6:68:
a2:37:69:c3:1e:22:ff:96:9a:c3:4d:e7:81:96:14:09:c9:a4:
fd:b9:99:2b:e5:c5:2a:09:a8:19:a6:b3:47:cf:7b:f0:d7:b9:
7e:d8:3f:7b:fe:71:9d:df:8a:ad:f7:e8:9b:62:4e:ff:b0:89:
b4:02:7b:b0:1d:4c:ef:28:78:80:41:43:39:4b:e3:be:55:11:
ca:7c:64:9c:20:86:45:8c:9c:50:00:f2:fa:2f:c6:64:4f:c2:
de:a9:67:57:8a:8d:ee:5f:66:3d:b0:06:59:7a:04:70:4d:25:
15:c5:97:36:cf:43:76:00:2f:2e:ff:55:f2:27:55:d6:5a:92:
3d:d1:fe:36:37:d7:9e:63:88:13:53:6b:41:15:51:45:54:91:
9d:0f:4c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:33:57 2025 by rpki-client