Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
File: LAzrgevOhZ9Qko6O0-HwqFERUts.mft (raw, json)
Hash identifier: INZWKQCzyYxnjUvGKOlH7diUGJsL7+qilZ6lCoPaiwo=
Subject key identifier: AA:49:35:43:03:72:97:82:A7:60:4F:E7:2A:F5:DF:D6:D5:E1:69:1E
Authority key identifier: 2C:0C:EB:81:EB:CE:85:9F:50:92:8E:8E:D3:E1:F0:A8:51:11:52:DB
Certificate issuer: /CN=2c0ceb81ebce859f50928e8ed3e1f0a8511152db
Certificate serial: 0197C07F579C9226A230CCE2A74D249F49CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
Manifest number: 09A3
Signing time: Mon 30 Jun 2025 11:01:00 +0000
Manifest this update: Mon 30 Jun 2025 11:01:00 +0000
Manifest next update: Tue 01 Jul 2025 11:01:00 +0000
Files and hashes: 1: LAzrgevOhZ9Qko6O0-HwqFERUts.crl (hash: iYZloQ0cfqduphOByrLvPhkH+/MjbYcEwoNVxtH9FH0=)
2: Nw-tf2Fdg1IBaL0ZaEM215Hb70k.roa (hash: D6voi0MuqX48csC8cycT9bMohcrVdXkjR0ufp2F3pwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:7f:57:9c:92:26:a2:30:cc:e2:a7:4d:24:9f:49:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c0ceb81ebce859f50928e8ed3e1f0a8511152db
Validity
Not Before: Jun 30 11:01:00 2025 GMT
Not After : Jul 1 11:01:00 2025 GMT
Subject: CN=aa49354303729782a7604fe72af5dfd6d5e1691e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:46:37:36:41:24:c0:6c:c8:12:16:e8:10:3c:
84:7d:1f:2a:7e:c8:cf:b1:2b:f0:3a:4e:aa:8d:90:
c9:73:6f:4f:c4:62:0b:19:b0:7d:9f:68:8c:c3:3e:
ec:48:17:8b:e2:0f:ea:90:9c:cd:9e:ad:8f:30:3d:
8e:95:18:47:e1:57:36:3c:df:07:2f:ce:9a:a3:93:
f9:2c:05:d7:b0:2f:a5:46:70:0f:84:7a:df:73:c1:
59:5b:78:70:8a:25:99:56:ed:2e:d6:7b:ab:44:e0:
18:9d:7b:7f:37:0a:43:69:e6:62:9b:44:e3:02:9a:
2f:0d:ee:a7:c9:a5:be:1e:12:ac:a9:d1:da:e2:c2:
fe:ad:69:f0:fb:c7:85:13:9e:62:79:e4:84:65:36:
ee:60:58:b9:75:f2:f4:f3:07:1c:7f:17:fd:59:88:
bf:4f:9b:25:85:31:be:1b:39:0f:94:c9:b0:0f:6e:
50:07:c8:ac:d9:fe:7f:a3:9c:b4:42:46:47:a7:b8:
0d:e4:23:22:c1:d5:5e:0d:37:fe:fb:9d:d7:94:07:
56:bd:cc:54:0d:8d:47:f4:86:f1:16:dd:91:52:12:
8e:fd:a3:c5:d3:ee:a9:d9:da:b0:4d:7e:ad:af:40:
d5:37:c3:43:0a:56:15:bf:7b:e3:96:fb:aa:fb:bf:
dd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:49:35:43:03:72:97:82:A7:60:4F:E7:2A:F5:DF:D6:D5:E1:69:1E
X509v3 Authority Key Identifier:
keyid:2C:0C:EB:81:EB:CE:85:9F:50:92:8E:8E:D3:E1:F0:A8:51:11:52:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:94:30:17:c0:ca:c4:6e:39:8e:16:bc:34:39:77:75:42:7d:
c3:76:e6:5e:34:38:ae:59:99:30:f3:12:6e:d3:1f:b6:cb:10:
97:d9:95:2e:a6:71:16:c0:90:86:98:85:36:f1:2b:41:55:29:
bf:89:24:6d:d8:c1:0a:32:18:eb:fe:80:14:fe:63:dc:a4:af:
74:8b:17:7b:49:c9:a2:4e:5b:90:a3:78:c7:b5:a0:24:fe:0e:
ab:23:a0:dc:e0:91:87:a5:77:62:26:74:49:32:bf:8d:f3:2a:
9a:0c:b2:60:f9:3a:db:22:ea:6f:40:37:ad:47:fa:56:cc:ed:
66:e7:c7:a4:50:b4:3a:19:39:81:63:76:d9:37:cd:08:34:d8:
6e:90:42:6f:b7:58:cc:b5:c2:2b:05:50:d7:b2:76:3d:c7:0f:
a0:d9:fc:36:d0:ac:65:cb:40:4f:00:86:7a:04:38:7d:9b:52:
4f:b3:e0:d0:19:76:bc:3a:8b:e3:de:e4:80:fc:09:67:cf:c9:
7e:81:6a:4a:15:e2:44:de:67:9a:e5:36:c4:9b:2a:d6:47:62:
3a:e0:c8:2d:27:60:fc:95:41:4e:2e:4a:4c:a0:6b:e4:41:f1:
af:e7:da:0c:ff:8e:13:21:dc:b9:88:47:08:ac:33:bc:8a:f8:
3c:28:93:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:52:01 2025 by rpki-client