Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
File: LZrhAubK20caMKDIWTPgOQvy-co.mft (raw, json)
Hash identifier: BkQMe7k58haMpB8/puP9w4HnpGyrQlkUbKXxhtYBYJA=
Subject key identifier: 75:8A:26:52:80:33:A0:F3:93:82:1A:9B:DB:FA:5B:05:97:7C:11:EA
Authority key identifier: 2D:9A:E1:02:E6:CA:DB:47:1A:30:A0:C8:59:33:E0:39:0B:F2:F9:CA
Certificate issuer: /CN=2d9ae102e6cadb471a30a0c85933e0390bf2f9ca
Certificate serial: 0196BE92E68FDFD7D4983CA919EFE2738243
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LZrhAubK20caMKDIWTPgOQvy-co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
Manifest number: 0B22
Signing time: Sun 11 May 2025 09:00:20 +0000
Manifest this update: Sun 11 May 2025 09:00:20 +0000
Manifest next update: Mon 12 May 2025 09:00:20 +0000
Files and hashes: 1: LZrhAubK20caMKDIWTPgOQvy-co.crl (hash: vJ5mD46uAFJJNAfLY7FR+HLqjrYDeRJiCcuzVcj6aVg=)
2: pl2IcfdvWd1nTAPO2kcXwuCa2Cs.roa (hash: 85u+tpWuF05Mbmd2ccACruWRfJ5rpPXoHevfa/3sNY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
rsync://rpki.ripe.net/repository/DEFAULT/LZrhAubK20caMKDIWTPgOQvy-co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:92:e6:8f:df:d7:d4:98:3c:a9:19:ef:e2:73:82:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d9ae102e6cadb471a30a0c85933e0390bf2f9ca
Validity
Not Before: May 11 09:00:20 2025 GMT
Not After : May 12 09:00:20 2025 GMT
Subject: CN=758a26528033a0f393821a9bdbfa5b05977c11ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:42:2a:d0:c9:69:fa:b8:f3:36:b5:dc:be:84:
65:a3:1c:7d:62:53:13:f6:65:01:18:3d:b8:0c:06:
78:a3:be:6f:31:d6:9c:2d:1b:1a:51:ea:5b:9d:80:
22:55:b9:d1:07:0d:3d:44:05:3c:f4:a3:78:78:97:
6a:6d:4e:98:fb:bb:2f:26:34:56:90:29:c9:78:be:
5a:ee:04:0a:50:92:16:06:56:ee:3a:4e:0d:a3:2b:
72:4f:b3:55:fa:90:a0:04:14:42:62:49:b5:1b:bf:
13:ca:80:95:8e:18:70:f2:76:a6:2f:0a:32:0e:fb:
51:ff:96:1f:48:ca:56:58:24:e0:88:f9:4f:0b:f1:
02:33:c0:67:c7:84:5b:d2:56:fb:c0:4f:6c:ed:54:
ba:90:89:af:17:72:6e:0d:d5:6b:6a:cb:20:f7:5d:
5d:67:05:a2:4c:07:bf:93:5b:89:ca:dd:a6:0d:83:
08:fc:16:4a:e3:58:5f:a9:39:59:9c:05:62:6a:67:
45:d7:56:18:98:e9:d1:f3:04:24:8a:15:f5:f5:3f:
db:5e:29:c2:1f:a7:d1:97:78:33:b9:77:54:25:b1:
65:20:bd:84:46:67:c0:45:8b:93:b0:fe:07:fb:ba:
1c:d0:36:6f:71:ba:c0:14:7e:12:18:26:65:bb:93:
fe:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:8A:26:52:80:33:A0:F3:93:82:1A:9B:DB:FA:5B:05:97:7C:11:EA
X509v3 Authority Key Identifier:
keyid:2D:9A:E1:02:E6:CA:DB:47:1A:30:A0:C8:59:33:E0:39:0B:F2:F9:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZrhAubK20caMKDIWTPgOQvy-co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:dd:9c:b2:7d:57:b0:dd:c2:03:e0:36:3b:c3:34:41:bc:9b:
87:32:4d:38:ce:5b:ea:ab:cd:55:71:e5:24:66:2f:0e:ce:44:
79:5e:88:2a:04:17:83:b1:86:27:16:19:45:04:90:7a:a9:6a:
0d:21:2d:c4:7c:f1:23:1e:49:ec:82:f4:f5:6c:d7:78:3e:37:
35:57:ed:c7:fc:e5:35:12:b8:12:2c:2d:08:7d:9e:1d:3b:b5:
e1:8d:b0:01:bc:83:94:d0:1c:4c:f6:32:ba:0a:df:c1:1d:70:
d3:3c:bf:6c:f0:79:b9:13:48:8e:e7:80:1d:3a:04:1a:4f:04:
7c:24:33:36:f6:b3:3f:0c:4e:38:20:48:cf:b1:0a:16:50:47:
d3:59:7e:2f:c8:a4:ad:6e:3b:80:fb:68:5b:6b:e3:0d:00:cf:
78:4c:49:d8:c5:70:99:be:37:b4:90:81:48:d1:a2:5a:e2:0f:
55:11:55:0b:37:a9:1b:6d:00:d9:00:66:54:b3:54:33:95:93:
35:c4:23:29:c7:b8:cd:58:e2:3b:9e:6f:61:31:14:cb:e1:b6:
a3:06:c7:1c:70:7b:a0:0f:9c:ba:a7:3d:ec:be:9c:07:a3:df:
94:a4:a8:ae:63:88:8f:1a:69:43:ac:3c:ff:78:53:de:be:bf:
c8:a4:52:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:48:56 2025 by rpki-client