Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
File: LZrhAubK20caMKDIWTPgOQvy-co.mft (raw, json)
Hash identifier: DMz8LTxbSPkg70/d4dcRA1Axx6gbWwUD/TZfUSXC1mU=
Subject key identifier: 4A:10:80:42:A4:55:92:3E:89:BE:0F:17:74:C2:89:22:BC:5C:9C:28
Authority key identifier: 2D:9A:E1:02:E6:CA:DB:47:1A:30:A0:C8:59:33:E0:39:0B:F2:F9:CA
Certificate issuer: /CN=2d9ae102e6cadb471a30a0c85933e0390bf2f9ca
Certificate serial: 0197B7B2F292762724CD0459061EE5FFA474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LZrhAubK20caMKDIWTPgOQvy-co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
Manifest number: 0BA3
Signing time: Sat 28 Jun 2025 18:00:47 +0000
Manifest this update: Sat 28 Jun 2025 18:00:47 +0000
Manifest next update: Sun 29 Jun 2025 18:00:47 +0000
Files and hashes: 1: LZrhAubK20caMKDIWTPgOQvy-co.crl (hash: XNauAX3Mcu1opjqra8KgtrgfHr9PWiXD4cdAdJxcoBI=)
2: pl2IcfdvWd1nTAPO2kcXwuCa2Cs.roa (hash: 85u+tpWuF05Mbmd2ccACruWRfJ5rpPXoHevfa/3sNY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
rsync://rpki.ripe.net/repository/DEFAULT/LZrhAubK20caMKDIWTPgOQvy-co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:f2:92:76:27:24:cd:04:59:06:1e:e5:ff:a4:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d9ae102e6cadb471a30a0c85933e0390bf2f9ca
Validity
Not Before: Jun 28 18:00:47 2025 GMT
Not After : Jun 29 18:00:47 2025 GMT
Subject: CN=4a108042a455923e89be0f1774c28922bc5c9c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:10:12:19:a8:e3:9e:72:02:df:15:e4:71:42:
a6:b4:12:5c:82:7d:f0:8d:41:89:38:fc:cd:e5:59:
20:e3:9d:0f:43:13:90:bd:af:13:e8:62:ad:a1:4f:
6b:e8:95:80:6e:d6:22:a2:09:47:e6:d3:4c:c7:92:
ac:13:cb:1e:de:2f:52:14:50:4f:01:96:09:28:8f:
41:34:a6:23:c2:16:04:1e:36:59:21:27:c7:c1:1d:
ce:0a:67:72:37:e9:54:39:f4:cb:9e:24:6a:3a:75:
9e:47:27:9c:5a:0a:c1:2e:ec:6f:a3:fa:ca:86:8d:
22:33:f3:31:e4:f6:8f:61:6d:d1:38:19:44:7d:ea:
59:54:17:50:3e:5a:e0:48:0b:0f:7c:da:9c:0b:9c:
8d:b2:0e:cf:35:57:97:dd:92:cf:04:82:3d:b9:ce:
81:27:39:47:c2:b7:4c:ca:aa:86:27:1f:fc:3d:27:
a2:25:ce:86:18:9f:71:cd:45:f5:cd:84:c2:f5:0a:
32:cf:da:69:11:37:04:4f:3a:b9:98:d9:f3:55:1c:
06:c9:dd:05:6f:2a:0f:78:58:34:4c:93:31:1a:a0:
3e:ab:d0:d6:4d:38:f8:32:e0:02:76:df:4e:88:4c:
92:b4:55:2b:ac:21:02:db:a4:18:12:57:7c:f0:a8:
4f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:10:80:42:A4:55:92:3E:89:BE:0F:17:74:C2:89:22:BC:5C:9C:28
X509v3 Authority Key Identifier:
keyid:2D:9A:E1:02:E6:CA:DB:47:1A:30:A0:C8:59:33:E0:39:0B:F2:F9:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZrhAubK20caMKDIWTPgOQvy-co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:4a:3f:84:3f:60:27:ba:f2:8e:b5:9b:41:57:ff:f7:1c:f4:
ee:e8:3e:5f:bd:45:a6:0a:8f:1a:bf:1d:56:ea:18:12:e3:80:
24:53:ba:8d:f6:1a:de:a2:e8:90:87:8d:f2:51:cf:6d:c9:d1:
64:1b:8d:e0:36:e4:b2:2a:61:f7:de:97:8d:37:76:3c:e4:d4:
e9:ad:af:be:eb:a8:b3:64:e4:b1:b6:2d:8b:2d:45:dd:dd:01:
ac:86:df:b3:51:b7:c4:8b:09:ec:c5:69:cf:8b:a3:40:0f:a9:
5f:10:71:0b:02:ad:69:33:d9:63:28:b2:e1:5c:cf:03:a4:d8:
1b:ff:ad:57:d6:48:cb:b4:64:54:47:02:51:27:b5:86:ae:c2:
f3:fe:51:16:b5:87:2a:40:37:e9:2e:4c:41:a6:b6:39:e9:ba:
7f:ca:18:f7:42:3c:16:83:c4:3f:4e:44:2f:3a:54:de:7d:e1:
98:92:40:c1:ce:39:74:67:00:0b:1f:c6:88:00:97:a6:57:1c:
d3:40:f5:e9:0e:ba:1f:62:6d:e0:e0:f7:3f:4e:81:5b:00:92:
b4:12:98:d8:32:cb:f7:3c:5c:c3:08:ce:47:fd:4a:d2:74:f0:
0e:97:f0:92:c4:5e:a7:7a:c4:b4:fb:06:60:28:c4:ad:da:63:
4a:9c:b7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:57:34 2025 by rpki-client