Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft
File: LzQYB_ILBFGcVSuzjONykUt8w0U.mft (raw, json)
Hash identifier: 3YKIN5tFjed+vtnJeQIGqvoWF70q8tfL1Yd8OQe+xjM=
Subject key identifier: 8A:3E:70:62:98:71:4C:01:DE:E0:3C:90:CD:E1:E4:3A:DD:E9:D4:04
Authority key identifier: 2F:34:18:07:F2:0B:04:51:9C:55:2B:B3:8C:E3:72:91:4B:7C:C3:45
Certificate issuer: /CN=2f341807f20b04519c552bb38ce372914b7cc345
Certificate serial: 0196D2F5CF484FEA5EC4698D061C1F9D6F7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzQYB_ILBFGcVSuzjONykUt8w0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft
Manifest number: 14CF
Signing time: Thu 15 May 2025 08:00:46 +0000
Manifest this update: Thu 15 May 2025 08:00:46 +0000
Manifest next update: Fri 16 May 2025 08:00:46 +0000
Files and hashes: 1: LzQYB_ILBFGcVSuzjONykUt8w0U.crl (hash: zJ7tAAh3FkJRCibGmdNq98i6qokp28ACoSKcGhMV950=)
2: m-E10aW5L1-wveMhnPgC3UzI6ig.roa (hash: 1KS/uNhBScsES7reUi1gAa2nyjHWcWgOFVT/DR6eey8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LzQYB_ILBFGcVSuzjONykUt8w0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d2:f5:cf:48:4f:ea:5e:c4:69:8d:06:1c:1f:9d:6f:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f341807f20b04519c552bb38ce372914b7cc345
Validity
Not Before: May 15 08:00:46 2025 GMT
Not After : May 16 08:00:46 2025 GMT
Subject: CN=8a3e706298714c01dee03c90cde1e43adde9d404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2f:11:d3:bc:cb:6b:58:02:a0:d9:4c:f0:0d:
4b:33:fb:cc:33:c9:be:8c:ba:79:26:d1:1c:a4:dd:
83:3e:f4:24:c4:e4:49:41:9f:ef:99:39:b3:d8:95:
4b:7d:68:b5:2e:bb:ae:6f:4f:3f:d7:cd:ff:2d:62:
ca:70:1d:00:11:6d:cd:84:5b:b9:3e:fa:03:cd:0f:
e8:9d:a2:59:6e:15:f0:f1:90:2b:9e:b7:4a:b7:99:
ea:e9:3b:a1:50:a2:6a:f6:4f:74:48:70:b7:c0:d2:
ff:d8:36:b0:da:eb:f5:76:bc:a0:6e:e1:f0:96:f9:
b8:45:67:e2:8e:ab:24:79:5a:3a:ed:4f:05:b2:4a:
4b:8e:8a:c8:a3:0d:9c:28:44:55:5f:71:85:11:91:
9a:0c:2c:5f:92:87:7b:ab:f8:16:ac:dd:9d:26:e1:
4e:2b:de:92:6b:d4:1b:35:9b:b3:23:9d:0b:9e:50:
fb:f7:f6:a8:87:03:c7:71:13:4f:82:c2:3e:41:c6:
38:b5:38:22:86:0e:da:c4:7c:44:6a:35:25:a6:45:
7b:7b:22:47:1c:e0:26:2b:f7:32:91:13:49:f7:78:
08:a4:dd:12:20:4a:82:d2:9f:ea:0e:69:76:07:ea:
b8:92:39:d3:df:a9:70:1f:37:20:d4:49:21:3c:b4:
84:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:3E:70:62:98:71:4C:01:DE:E0:3C:90:CD:E1:E4:3A:DD:E9:D4:04
X509v3 Authority Key Identifier:
keyid:2F:34:18:07:F2:0B:04:51:9C:55:2B:B3:8C:E3:72:91:4B:7C:C3:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzQYB_ILBFGcVSuzjONykUt8w0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:40:73:ce:c6:64:d1:b5:d5:e9:31:71:48:7f:6e:4e:31:20:
97:5e:11:7b:8c:86:35:19:fc:46:19:aa:35:48:93:0a:04:6f:
cd:08:66:6c:94:38:48:0b:3c:ce:b6:87:2e:73:89:fd:fe:38:
8e:5c:a3:cc:5d:b7:0b:4b:f3:dd:50:0f:b3:93:86:2f:96:d9:
69:05:d9:b1:6d:b6:00:85:ca:7d:dd:ea:df:00:91:5f:d2:85:
be:85:2c:c1:45:3a:a2:45:9b:99:d3:bd:51:e5:15:ee:7e:e7:
52:30:51:a4:90:c7:75:19:8f:b2:bd:a9:4b:0f:ad:1c:65:97:
12:fa:3e:4c:58:20:3d:b4:81:83:79:22:f6:48:71:12:2b:a0:
14:fb:93:e8:9d:ce:69:83:d9:8d:a8:65:2e:48:5c:27:76:67:
57:3b:71:be:46:80:b9:4f:6d:c4:04:ed:c5:49:b4:cf:58:65:
62:76:f6:cf:da:2c:33:0d:b9:33:06:5c:30:1d:85:fa:c6:08:
17:92:6f:a4:ff:75:65:0c:d0:3f:84:bb:c1:86:a6:1b:d3:36:
c6:af:5a:f9:04:fe:73:80:8f:61:8f:19:9f:5b:55:42:0e:8a:
2b:63:13:43:29:46:ad:c5:1f:4a:9b:52:df:d7:87:4c:2f:e4:
40:0e:b3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 14:37:58 2025 by rpki-client