Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft
File: LzQYB_ILBFGcVSuzjONykUt8w0U.mft (raw, json)
Hash identifier: usDkj/FV0YeyfPkwXqv4+E6hhmCP3YGBSafi8CMDZOk=
Subject key identifier: CC:3A:1C:7E:E8:E6:E6:1F:9D:7A:29:9E:E0:CC:17:03:64:3E:C5:12
Authority key identifier: 2F:34:18:07:F2:0B:04:51:9C:55:2B:B3:8C:E3:72:91:4B:7C:C3:45
Certificate issuer: /CN=2f341807f20b04519c552bb38ce372914b7cc345
Certificate serial: 01969AF485A6FB22C6951A32A05FEACCB5FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzQYB_ILBFGcVSuzjONykUt8w0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft
Manifest number: 14B2
Signing time: Sun 04 May 2025 11:00:38 +0000
Manifest this update: Sun 04 May 2025 11:00:38 +0000
Manifest next update: Mon 05 May 2025 11:00:38 +0000
Files and hashes: 1: LzQYB_ILBFGcVSuzjONykUt8w0U.crl (hash: 3Y91EruT2rtyXMM7LplQJ4YWXugszUjSyOVuHHl7p2U=)
2: m-E10aW5L1-wveMhnPgC3UzI6ig.roa (hash: 1KS/uNhBScsES7reUi1gAa2nyjHWcWgOFVT/DR6eey8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LzQYB_ILBFGcVSuzjONykUt8w0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9a:f4:85:a6:fb:22:c6:95:1a:32:a0:5f:ea:cc:b5:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f341807f20b04519c552bb38ce372914b7cc345
Validity
Not Before: May 4 11:00:38 2025 GMT
Not After : May 5 11:00:38 2025 GMT
Subject: CN=cc3a1c7ee8e6e61f9d7a299ee0cc1703643ec512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bd:e4:ba:1e:8f:a1:47:0e:8d:ca:e0:c8:25:
f7:e5:0c:af:06:14:3c:41:a7:c1:29:62:a3:09:11:
3c:ab:dd:0d:69:fc:f8:13:e7:6f:2c:f8:af:63:49:
86:6f:71:4a:93:bc:51:fd:f2:0c:0d:1a:2c:25:b0:
f8:d5:88:79:e7:c4:bf:5f:45:4b:b2:e2:4b:70:ab:
9f:85:fa:33:7f:86:f9:1b:1b:ad:12:5d:b1:b5:84:
c6:fb:fe:d1:fd:22:74:73:08:ce:43:27:03:ef:56:
97:96:cc:28:ea:48:81:5b:ed:6b:f6:0f:a2:1b:49:
2e:f4:af:ac:95:43:91:64:6f:a3:f3:8a:ed:39:e7:
d7:f5:5e:b5:2d:5a:25:d1:8c:f0:1f:6f:0a:c5:85:
61:1a:c7:17:ff:6b:f7:b0:25:dd:2d:8c:0c:28:fc:
aa:78:8a:85:6c:18:4f:63:6a:37:16:90:52:3e:8b:
52:38:e2:e2:0b:c6:d1:cc:f1:ba:04:36:12:f2:d9:
16:90:2b:80:c5:28:45:13:65:46:6a:2b:30:85:80:
35:13:29:b8:e4:9b:b0:94:28:a7:f8:cb:37:8c:0b:
1b:00:99:6e:ad:eb:fe:19:e9:fe:55:f8:9b:a2:99:
d6:1e:e5:07:66:3e:9c:ee:cc:43:04:c0:35:95:70:
1c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:3A:1C:7E:E8:E6:E6:1F:9D:7A:29:9E:E0:CC:17:03:64:3E:C5:12
X509v3 Authority Key Identifier:
keyid:2F:34:18:07:F2:0B:04:51:9C:55:2B:B3:8C:E3:72:91:4B:7C:C3:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzQYB_ILBFGcVSuzjONykUt8w0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:61:e4:c8:c3:13:8c:bc:f8:96:9b:d0:ab:3e:01:34:b1:7f:
97:ee:63:71:29:15:c7:ab:ad:c8:91:6a:19:0b:76:cb:e1:d5:
41:52:f0:d1:05:06:cc:1f:54:fd:49:67:58:0d:d0:60:d0:a2:
5a:95:07:2e:7a:99:ac:a1:d8:d9:1b:97:98:96:3d:af:6e:df:
d5:34:c7:ec:fc:e7:3b:a5:1e:fd:5f:fa:63:c9:ee:fb:00:96:
ad:c3:ef:81:d9:00:ac:69:e2:9a:37:86:46:bc:70:35:82:14:
46:30:20:1a:81:ce:14:ea:2b:67:54:46:11:2c:01:68:05:f1:
23:13:59:07:9c:78:a7:25:ae:ca:e3:e0:8d:35:42:96:62:a1:
2f:dd:91:49:52:dd:c4:26:0c:94:31:bd:67:35:d1:4b:83:3d:
f5:a3:93:9f:01:e8:ac:a8:5f:ef:96:61:7e:0b:f8:c8:1a:1f:
fc:2a:94:13:c9:1b:15:b8:04:9f:bc:9c:83:43:89:c3:4a:62:
6c:55:07:99:2c:58:8e:0b:0e:1f:6a:1b:cc:64:43:64:ec:3e:
4c:24:2d:c7:c5:0d:e7:4f:e6:b8:c8:df:95:33:db:da:82:e6:
7b:8f:32:ac:76:c1:54:d3:b4:f1:ae:c8:e4:c9:26:1f:db:4a:
26:f6:fb:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 17:07:55 2025 by rpki-client