Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
File: LZrhAubK20caMKDIWTPgOQvy-co.mft (raw, json)
Hash identifier: EnW8NbqwMCxkCUedWpJZpQnnb3/uhOynY8Illym/TbM=
Subject key identifier: 03:D9:7B:FD:55:05:E2:09:95:97:05:BF:6E:82:4D:E1:C3:24:BD:AA
Authority key identifier: 2D:9A:E1:02:E6:CA:DB:47:1A:30:A0:C8:59:33:E0:39:0B:F2:F9:CA
Certificate issuer: /CN=2d9ae102e6cadb471a30a0c85933e0390bf2f9ca
Certificate serial: 0194BAF26448B61266784D48A391244EB19A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LZrhAubK20caMKDIWTPgOQvy-co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
Manifest number: 0A17
Signing time: Fri 31 Jan 2025 06:00:35 +0000
Manifest this update: Fri 31 Jan 2025 06:00:35 +0000
Manifest next update: Sat 01 Feb 2025 06:00:35 +0000
Files and hashes: 1: LZrhAubK20caMKDIWTPgOQvy-co.crl (hash: GYBU/JGbOx0bibVBQ7wVr5yya0yZDt1mxc70cGOboB4=)
2: pl2IcfdvWd1nTAPO2kcXwuCa2Cs.roa (hash: 85u+tpWuF05Mbmd2ccACruWRfJ5rpPXoHevfa/3sNY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
rsync://rpki.ripe.net/repository/DEFAULT/LZrhAubK20caMKDIWTPgOQvy-co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:64:48:b6:12:66:78:4d:48:a3:91:24:4e:b1:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d9ae102e6cadb471a30a0c85933e0390bf2f9ca
Validity
Not Before: Jan 31 06:00:35 2025 GMT
Not After : Feb 1 06:00:35 2025 GMT
Subject: CN=03d97bfd5505e209959705bf6e824de1c324bdaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ba:a7:f0:aa:41:c1:41:44:98:f6:0e:e8:5d:
3c:d8:81:c6:88:48:c1:f8:63:34:ed:51:b8:8d:63:
cf:7d:56:cd:82:da:e4:03:20:82:ee:00:b6:ff:e8:
cc:93:96:84:7f:38:f8:a9:c6:c7:58:49:41:6a:14:
61:75:06:47:5d:e1:d3:51:d7:82:a0:8e:81:4f:a5:
4a:64:e2:80:24:75:ba:d7:4d:7f:11:29:13:cb:b8:
2c:f0:c3:14:72:43:a8:26:5f:78:dc:f2:3e:d3:db:
32:08:e5:75:c1:49:2b:3c:4d:ed:6b:c6:34:5b:22:
21:e9:01:2b:3c:26:4a:e0:b7:07:22:4c:f9:46:26:
29:45:f5:d1:83:2c:be:59:25:c6:90:2a:98:4e:53:
5f:65:d1:16:d5:8c:59:5a:d7:cc:9e:4a:82:99:90:
f2:c6:9c:00:6f:e2:78:d7:11:67:6f:b1:4b:d9:23:
2d:bf:3f:10:c8:1a:70:4b:46:7f:25:4a:48:24:df:
99:73:68:1b:ee:3c:cf:dd:d1:d2:50:2b:f8:bc:0f:
76:e7:3c:a1:c7:c9:0a:d5:b9:eb:ad:c4:c8:ba:a0:
4f:7f:26:b9:a3:a0:52:7d:7b:14:79:9d:77:cc:ea:
29:d4:10:c2:f8:e0:a4:91:c9:e3:8f:7f:92:46:04:
e7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D9:7B:FD:55:05:E2:09:95:97:05:BF:6E:82:4D:E1:C3:24:BD:AA
X509v3 Authority Key Identifier:
keyid:2D:9A:E1:02:E6:CA:DB:47:1A:30:A0:C8:59:33:E0:39:0B:F2:F9:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZrhAubK20caMKDIWTPgOQvy-co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:36:7f:a2:58:40:94:7f:df:61:88:c4:04:95:7b:1c:41:bb:
18:27:f1:47:71:11:ce:8a:4a:a5:72:24:44:68:78:4c:78:95:
17:64:e5:f8:37:1d:9a:62:1a:63:5c:5e:44:86:6f:6d:a7:83:
9a:f4:bb:c0:da:f9:b6:13:39:57:65:81:39:7d:d2:5c:2f:6b:
56:1f:a4:85:bb:8e:be:0e:39:77:c0:91:18:e2:a3:90:32:79:
c8:00:94:cb:3b:05:63:8c:56:45:1f:77:0f:94:70:c4:b2:94:
ac:8d:eb:8e:2a:fa:9f:90:63:24:fd:8f:e3:94:47:86:dc:3b:
0f:93:b7:6f:d5:71:af:44:db:ce:cf:be:fa:72:64:26:24:8c:
f8:13:fb:9f:9d:33:69:7c:c8:f4:08:9d:c7:c0:f5:ae:07:f1:
e4:5f:5a:ca:64:cb:48:23:b4:3e:ed:0c:47:4e:ca:59:1f:47:
af:cb:ff:59:82:79:78:b2:9c:8d:ea:ec:08:3a:76:aa:85:2a:
82:6e:66:f1:bf:31:e2:e4:71:05:c9:75:1c:b5:7a:ce:85:45:
5d:e7:aa:22:3a:bc:fb:42:0f:51:45:42:73:ce:7a:bd:46:5a:
9d:0e:e8:57:28:89:3f:52:a2:a3:b9:9a:b1:09:6d:71:c9:1d:
b8:11:e8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:52 2025 by rpki-client on console-fra.rpki-client.org