Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/be730a-27e6-4136-b2c5-cae40384c6bf/1/LZKAom-DFWYViyYXyV0Z0zjuFdM.mft
File: LZKAom-DFWYViyYXyV0Z0zjuFdM.mft (raw, json)
Hash identifier: vA4qYmElx6HetXMemLK+/lHG22OMP4XPJOE5UDNmZbg=
Subject key identifier: 39:1A:7A:32:07:EA:F2:E4:5D:AB:F9:79:D7:80:49:66:72:49:DC:28
Authority key identifier: 2D:92:80:A2:6F:83:15:66:15:8B:26:17:C9:5D:19:D3:38:EE:15:D3
Certificate issuer: /CN=2d9280a26f831566158b2617c95d19d338ee15d3
Certificate serial: 019771F60212855F840028D5105DB699E91D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LZKAom-DFWYViyYXyV0Z0zjuFdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/be730a-27e6-4136-b2c5-cae40384c6bf/1/LZKAom-DFWYViyYXyV0Z0zjuFdM.mft
Manifest number: 02A6
Signing time: Sun 15 Jun 2025 05:00:37 +0000
Manifest this update: Sun 15 Jun 2025 05:00:37 +0000
Manifest next update: Mon 16 Jun 2025 05:00:37 +0000
Files and hashes: 1: LZKAom-DFWYViyYXyV0Z0zjuFdM.crl (hash: 4Ps0UKuBQmqRtKLN8bPWcmjIens/Wu8W50OAjECElr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/be730a-27e6-4136-b2c5-cae40384c6bf/1/LZKAom-DFWYViyYXyV0Z0zjuFdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/be730a-27e6-4136-b2c5-cae40384c6bf/1/LZKAom-DFWYViyYXyV0Z0zjuFdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LZKAom-DFWYViyYXyV0Z0zjuFdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f6:02:12:85:5f:84:00:28:d5:10:5d:b6:99:e9:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d9280a26f831566158b2617c95d19d338ee15d3
Validity
Not Before: Jun 15 05:00:37 2025 GMT
Not After : Jun 16 05:00:37 2025 GMT
Subject: CN=391a7a3207eaf2e45dabf979d78049667249dc28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f0:20:77:36:cf:47:69:1a:f5:93:51:26:75:
1e:04:07:ef:0a:38:5a:a3:29:03:10:7f:37:d5:e7:
2b:97:58:7d:cf:98:b4:54:15:54:7b:70:97:c1:2e:
d3:f0:2a:29:45:b3:64:26:41:44:05:87:8a:f5:32:
86:31:c5:4f:fd:d6:9d:bc:ad:3f:54:fe:12:7a:ac:
c4:38:ac:5b:78:0b:03:5c:9c:88:75:68:56:a0:e4:
f1:1b:61:c6:aa:74:31:cc:fa:4a:6a:94:c8:7f:a1:
64:b6:33:a9:b9:f2:03:6c:46:e6:78:03:95:f4:b9:
ff:8c:b3:08:fb:37:b3:e9:8c:5c:24:08:1f:eb:80:
6d:71:8b:c0:a9:18:63:9d:23:3c:91:4f:7e:d9:14:
b4:54:93:a1:a1:87:4c:ac:f7:c2:ca:ea:65:61:07:
1e:89:f2:07:d6:90:8e:56:b7:3d:cc:b9:4e:7f:de:
ce:a9:67:7f:42:1a:3b:15:62:71:4b:3e:19:72:32:
3e:a9:b3:c9:62:8c:0c:96:db:e4:19:8a:0b:07:2a:
b8:bd:28:76:09:99:4c:2f:3e:52:33:c5:6c:86:72:
20:29:1e:72:b4:2a:37:6f:f6:a9:84:c0:b5:e7:3c:
25:02:d3:c5:4d:d5:83:cc:ff:a5:b4:af:36:1d:25:
83:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1A:7A:32:07:EA:F2:E4:5D:AB:F9:79:D7:80:49:66:72:49:DC:28
X509v3 Authority Key Identifier:
keyid:2D:92:80:A2:6F:83:15:66:15:8B:26:17:C9:5D:19:D3:38:EE:15:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZKAom-DFWYViyYXyV0Z0zjuFdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/be730a-27e6-4136-b2c5-cae40384c6bf/1/LZKAom-DFWYViyYXyV0Z0zjuFdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/be730a-27e6-4136-b2c5-cae40384c6bf/1/LZKAom-DFWYViyYXyV0Z0zjuFdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:9d:2d:40:17:6d:66:55:d3:39:67:14:60:8a:69:cd:36:19:
61:e9:0b:b3:9e:14:bf:47:a9:52:05:31:b9:b7:65:a4:eb:25:
21:95:44:af:b4:9b:4b:81:fe:da:07:0e:46:42:23:6b:81:12:
36:03:a2:cc:05:6f:a6:2c:e4:a4:09:d2:78:4f:00:5f:a4:51:
f1:dc:52:8d:8e:d2:d2:39:f0:14:81:06:d3:67:06:c2:9f:c8:
45:e6:40:66:88:ad:2a:49:35:42:7e:e5:8e:b2:ce:93:d2:3e:
00:e6:85:9d:19:0d:fc:78:75:e1:f8:65:99:e0:65:8e:81:16:
1a:94:6b:bd:07:21:cb:b2:1a:e2:a2:a3:aa:b3:79:33:0e:ca:
a4:51:ed:47:5e:e5:9f:18:92:88:db:f2:3c:ad:09:24:83:a8:
a1:0c:14:90:2e:52:a0:be:64:9b:33:65:93:0f:eb:0b:d3:13:
3b:98:9b:3e:56:e2:b9:bc:c3:f5:e5:fb:3b:3c:a7:c7:8d:6f:
a7:3e:b3:2e:c5:e8:ee:4e:ae:eb:e1:42:02:4f:33:a5:b6:67:
02:27:4f:c0:bf:22:90:1e:fb:ab:77:25:14:de:d6:16:74:a1:
24:a8:e4:f3:74:86:7b:42:1e:72:5e:09:52:44:e9:c1:a7:25:
f0:42:78:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:47:32 2025 by rpki-client