Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
File: LZrhAubK20caMKDIWTPgOQvy-co.mft (raw, json)
Hash identifier: FxsOfxHRv7/H0zraH9bcSPEywDImXB2VKIfkrr/1CDM=
Subject key identifier: 59:0B:2B:87:EC:D8:7A:B5:68:5B:55:42:59:46:34:16:BE:3A:28:3D
Authority key identifier: 2D:9A:E1:02:E6:CA:DB:47:1A:30:A0:C8:59:33:E0:39:0B:F2:F9:CA
Certificate issuer: /CN=2d9ae102e6cadb471a30a0c85933e0390bf2f9ca
Certificate serial: 01968A6F02D3FEF782E96F77A7245575F4AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LZrhAubK20caMKDIWTPgOQvy-co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
Manifest number: 0B07
Signing time: Thu 01 May 2025 06:00:53 +0000
Manifest this update: Thu 01 May 2025 06:00:53 +0000
Manifest next update: Fri 02 May 2025 06:00:53 +0000
Files and hashes: 1: LZrhAubK20caMKDIWTPgOQvy-co.crl (hash: 41461qRCpwFpzdKHv0tkiPBHD3xgtwSmvlY6V31moWw=)
2: pl2IcfdvWd1nTAPO2kcXwuCa2Cs.roa (hash: 85u+tpWuF05Mbmd2ccACruWRfJ5rpPXoHevfa/3sNY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
rsync://rpki.ripe.net/repository/DEFAULT/LZrhAubK20caMKDIWTPgOQvy-co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:6f:02:d3:fe:f7:82:e9:6f:77:a7:24:55:75:f4:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d9ae102e6cadb471a30a0c85933e0390bf2f9ca
Validity
Not Before: May 1 06:00:53 2025 GMT
Not After : May 2 06:00:53 2025 GMT
Subject: CN=590b2b87ecd87ab5685b554259463416be3a283d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6c:af:99:f2:8c:65:a8:b5:9f:ad:11:e6:f3:
7b:d4:eb:20:c3:93:73:4e:97:71:f2:0c:27:90:3d:
d1:2f:90:d0:9e:b7:77:53:f4:f0:b5:0a:b7:9a:ac:
77:ff:3c:e8:8c:0a:19:e5:f8:84:ad:0c:39:3e:e7:
f1:7a:bd:92:0b:e5:2c:34:d8:d4:48:23:26:1b:f1:
47:d8:10:d9:fd:56:67:d4:fb:60:3c:db:03:e9:0a:
6d:ce:22:40:22:2e:d9:3a:ab:f7:87:62:46:8a:4e:
a0:c3:05:87:3d:f2:51:fc:79:c4:79:5a:f4:af:36:
67:0d:f1:47:92:46:67:fb:b3:9c:6c:9c:a3:35:54:
7f:74:3e:c2:30:3f:8f:eb:8a:09:c8:0a:ec:f4:d1:
9a:9d:d4:97:8b:50:1b:82:88:64:54:4c:76:17:6a:
2f:42:19:27:8d:a8:de:74:0d:30:8d:a4:a6:bb:59:
1b:86:a6:79:4e:ae:a0:cc:c4:a7:42:ff:59:b6:7e:
58:e1:84:06:b2:c2:86:eb:84:c7:aa:ad:23:84:a4:
36:ce:80:a4:81:33:38:52:0a:a8:70:52:9f:44:33:
59:59:34:d0:e4:51:22:46:18:53:c8:53:f0:f5:be:
71:ec:6d:b9:65:f0:01:58:9e:ed:03:44:7e:c7:17:
56:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:0B:2B:87:EC:D8:7A:B5:68:5B:55:42:59:46:34:16:BE:3A:28:3D
X509v3 Authority Key Identifier:
keyid:2D:9A:E1:02:E6:CA:DB:47:1A:30:A0:C8:59:33:E0:39:0B:F2:F9:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZrhAubK20caMKDIWTPgOQvy-co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:a9:c6:35:15:5e:00:a0:3d:5c:84:29:f5:b5:c9:78:e2:64:
11:1d:8d:7c:95:6c:c2:6f:50:64:66:73:b1:81:b6:12:98:c6:
8d:bf:1b:8f:a1:c1:6a:2a:b6:b9:0f:28:22:75:0f:45:67:39:
77:02:9c:a9:4e:82:15:dc:c7:98:b4:3b:b9:3a:93:db:75:c6:
14:c7:b0:62:c3:b1:7c:5a:ca:6c:8c:e6:0b:03:e5:ca:d7:9c:
94:ae:c5:97:de:9d:93:58:a6:9e:58:ea:df:b4:00:bc:0b:27:
65:d9:6a:f2:78:56:98:4e:ee:f6:9b:e8:4c:f9:77:a5:0c:c6:
cd:f2:a6:30:d1:dd:4e:fa:f0:f4:de:18:68:b3:0e:5d:14:c8:
41:dc:52:bd:0c:43:b9:7e:8f:04:22:eb:e2:ff:c7:0a:dc:1c:
3a:bd:fe:b0:d7:c7:e7:53:28:3a:01:18:5c:70:ae:26:16:61:
e7:d8:d4:7a:4e:1a:57:bc:31:bb:e0:94:8e:70:d3:ba:f0:74:
cb:77:55:1b:f3:5c:d3:28:a6:76:ee:ef:a8:81:47:55:06:cd:
c6:2b:d5:14:a0:92:d6:a3:2d:f6:12:3b:b7:56:3a:f8:e5:8b:
14:7f:e7:fb:b0:1a:a3:4a:44:49:f8:00:c3:86:ec:65:a4:03:
33:e3:19:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:13:17 2025 by rpki-client