Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/08e183-64eb-4999-9f78-7ce7322671eb/1/LzZ8eUn6D2zwWiECfnW4RhLcE7A.mft
File: LzZ8eUn6D2zwWiECfnW4RhLcE7A.mft (raw, json)
Hash identifier: 0VNNWb3DQoCa2ZeM2djp8jGHVDJP1VhAziO4N5YYpXc=
Subject key identifier: F2:B2:7F:D9:1E:BB:49:40:51:28:B6:55:87:6C:6F:7E:BA:70:8F:33
Authority key identifier: 2F:36:7C:79:49:FA:0F:6C:F0:5A:21:02:7E:75:B8:46:12:DC:13:B0
Certificate issuer: /CN=2f367c7949fa0f6cf05a21027e75b84612dc13b0
Certificate serial: 0196C2A70E5F12619723D0A76F724AC84863
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzZ8eUn6D2zwWiECfnW4RhLcE7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/08e183-64eb-4999-9f78-7ce7322671eb/1/LzZ8eUn6D2zwWiECfnW4RhLcE7A.mft
Manifest number: 153D
Signing time: Mon 12 May 2025 04:00:50 +0000
Manifest this update: Mon 12 May 2025 04:00:50 +0000
Manifest next update: Tue 13 May 2025 04:00:50 +0000
Files and hashes: 1: LzZ8eUn6D2zwWiECfnW4RhLcE7A.crl (hash: 1pcXaG1P/lVogw9uTpKV/MCaIB0es26GknysKwKxtuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/08e183-64eb-4999-9f78-7ce7322671eb/1/LzZ8eUn6D2zwWiECfnW4RhLcE7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/08e183-64eb-4999-9f78-7ce7322671eb/1/LzZ8eUn6D2zwWiECfnW4RhLcE7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/LzZ8eUn6D2zwWiECfnW4RhLcE7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:a7:0e:5f:12:61:97:23:d0:a7:6f:72:4a:c8:48:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f367c7949fa0f6cf05a21027e75b84612dc13b0
Validity
Not Before: May 12 04:00:50 2025 GMT
Not After : May 13 04:00:50 2025 GMT
Subject: CN=f2b27fd91ebb49405128b655876c6f7eba708f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a6:77:2b:6f:45:b7:fc:70:8c:33:d0:0b:dd:
76:3e:4c:b9:8f:64:b9:ae:f9:f6:a5:66:82:99:75:
e1:83:e0:95:7e:26:d2:17:d0:af:b4:9d:38:88:61:
34:5b:b2:01:75:0c:01:dc:7d:3c:4b:64:d3:1f:70:
09:80:f4:00:d7:1b:dc:f3:12:6e:42:96:27:91:30:
cf:7d:15:ac:7a:2c:09:fe:28:00:b6:76:5f:66:d7:
17:cd:44:9f:ff:7d:12:f5:94:c0:0e:40:1b:2b:bb:
9c:fb:4c:ba:60:94:35:f6:c0:41:79:0c:5a:5e:11:
05:69:14:de:76:95:7c:5d:7b:cc:67:7b:9a:5b:5c:
2a:32:e7:a8:ee:8f:e2:9b:72:d3:9e:d3:45:fa:2b:
68:68:c3:37:bc:ec:73:b6:8f:24:73:ec:0d:1a:0f:
71:bf:c6:8b:67:d8:ec:b8:2b:31:b2:91:46:d1:57:
1a:11:4f:e3:2e:b1:1b:89:28:00:2c:b8:97:e7:36:
aa:d0:ee:af:18:ca:91:47:ed:75:26:a6:6a:31:d2:
6c:06:07:ad:c9:ca:83:38:ab:ec:19:85:63:85:c7:
a0:9a:43:62:09:6e:25:ae:c0:cb:94:fc:ab:9e:a9:
ac:08:75:da:7f:7b:db:6b:18:0a:42:2f:54:2b:99:
e1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B2:7F:D9:1E:BB:49:40:51:28:B6:55:87:6C:6F:7E:BA:70:8F:33
X509v3 Authority Key Identifier:
keyid:2F:36:7C:79:49:FA:0F:6C:F0:5A:21:02:7E:75:B8:46:12:DC:13:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzZ8eUn6D2zwWiECfnW4RhLcE7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/08e183-64eb-4999-9f78-7ce7322671eb/1/LzZ8eUn6D2zwWiECfnW4RhLcE7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/08e183-64eb-4999-9f78-7ce7322671eb/1/LzZ8eUn6D2zwWiECfnW4RhLcE7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:66:c6:d2:45:8b:99:94:c4:c3:3f:6c:58:11:7f:8a:e3:5b:
19:e5:d6:f5:9d:61:3a:13:5d:69:46:ca:2b:ff:31:96:35:0d:
61:20:aa:b6:e7:ac:50:ee:b2:01:a5:27:de:11:27:fc:73:df:
c9:f6:8b:86:08:f8:f9:4b:96:88:96:0d:59:1b:33:a1:da:60:
ee:93:5d:d6:b9:03:ae:1c:48:f3:16:35:8f:dc:9c:d2:74:3d:
41:69:ee:c9:bf:87:d4:05:33:99:2f:0b:f1:2b:d9:9e:23:62:
90:5d:b8:f5:da:8f:79:73:02:ce:cf:3f:46:55:31:29:70:91:
ed:ce:7b:8b:b4:a6:01:08:30:be:20:58:13:d2:70:cc:d0:a2:
fc:08:c9:0b:00:3b:5c:41:c7:d0:1c:92:d1:7e:6d:68:66:5a:
f2:40:8b:31:e9:7a:d6:1e:c2:52:81:79:68:fd:1e:10:8e:21:
de:ab:88:47:fd:8e:06:1d:70:f7:a1:dd:e7:4d:b4:27:f9:b4:
04:80:06:d6:ca:fc:32:d7:81:04:95:97:47:ed:14:e5:c0:18:
4e:82:ce:b1:15:cb:03:c9:9b:62:b7:fd:94:dd:ae:e1:71:7c:
7f:9c:f8:29:3b:21:ba:90:ba:4e:ef:84:0b:28:b7:7e:71:6d:
2a:4a:a5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:48:38 2025 by rpki-client