Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/4c941d-992d-4eef-88f5-f0f8008dfc4c/1/LZCTZ9vd0eSGa9ier3J1mKR7WD0.mft
File: LZCTZ9vd0eSGa9ier3J1mKR7WD0.mft (raw, json)
Hash identifier: 6VzdO4JvhX8CVCUWSuztPdv+gEvYqiLrl7qLZXVWNo4=
Subject key identifier: 03:0E:A4:72:05:8A:22:A1:EE:A7:2A:7E:81:92:EB:60:E4:72:F9:0C
Authority key identifier: 2D:90:93:67:DB:DD:D1:E4:86:6B:D8:9E:AF:72:75:98:A4:7B:58:3D
Certificate issuer: /CN=2d909367dbddd1e4866bd89eaf727598a47b583d
Certificate serial: 01976EF4D9A0FAC0A2F98B2E062BB821EAEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LZCTZ9vd0eSGa9ier3J1mKR7WD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/4c941d-992d-4eef-88f5-f0f8008dfc4c/1/LZCTZ9vd0eSGa9ier3J1mKR7WD0.mft
Manifest number: 44
Signing time: Sat 14 Jun 2025 15:00:29 +0000
Manifest this update: Sat 14 Jun 2025 15:00:29 +0000
Manifest next update: Sun 15 Jun 2025 15:00:29 +0000
Files and hashes: 1: LZCTZ9vd0eSGa9ier3J1mKR7WD0.crl (hash: EACZjM57WA6vpMwYWMNpC74yEKTP0zwfmBYEMDxSJDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/4c941d-992d-4eef-88f5-f0f8008dfc4c/1/LZCTZ9vd0eSGa9ier3J1mKR7WD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/4c941d-992d-4eef-88f5-f0f8008dfc4c/1/LZCTZ9vd0eSGa9ier3J1mKR7WD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LZCTZ9vd0eSGa9ier3J1mKR7WD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 15:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f4:d9:a0:fa:c0:a2:f9:8b:2e:06:2b:b8:21:ea:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d909367dbddd1e4866bd89eaf727598a47b583d
Validity
Not Before: Jun 14 15:00:29 2025 GMT
Not After : Jun 15 15:00:29 2025 GMT
Subject: CN=030ea472058a22a1eea72a7e8192eb60e472f90c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e9:bc:c7:09:74:c0:33:e0:2a:bb:9c:18:bf:
81:9f:6d:83:5b:18:c3:0d:59:3f:5e:48:e3:d1:cc:
e0:6b:60:06:1c:49:12:b5:26:c5:1a:47:f4:b4:b4:
44:fd:56:7c:88:e2:58:b3:07:eb:bd:f5:ca:82:83:
e1:cb:95:01:57:46:a8:43:23:6c:ac:25:d8:8b:c7:
2c:36:b5:fb:ae:07:3e:b3:2f:b8:b9:e8:07:b6:e0:
25:04:1d:a0:86:6f:82:c9:13:d4:05:04:de:65:ad:
72:c9:a6:e7:c8:10:a6:a7:4c:85:47:54:fc:87:8b:
c0:6c:2b:c0:fc:ed:c3:cf:1f:10:ab:5e:f5:04:2d:
e1:2a:82:45:4c:98:b8:13:3f:09:a2:ae:52:44:78:
82:6f:ef:cd:4c:92:38:c3:00:71:b4:4e:1c:5e:76:
5c:31:42:de:da:11:a5:5d:1e:0d:bd:25:66:fd:d4:
43:b9:32:4a:a7:e7:14:d6:d8:49:41:8a:ce:c2:40:
cb:06:f4:e9:31:33:14:7f:6d:89:66:75:4d:e5:52:
9c:db:1d:4d:b3:fe:ed:52:16:20:99:8b:c5:df:64:
6a:a1:d5:20:52:9d:03:03:d0:bb:c6:81:f2:1f:ab:
62:f3:e1:d9:0b:0a:84:6b:92:5d:f5:be:8a:76:4d:
3d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:0E:A4:72:05:8A:22:A1:EE:A7:2A:7E:81:92:EB:60:E4:72:F9:0C
X509v3 Authority Key Identifier:
keyid:2D:90:93:67:DB:DD:D1:E4:86:6B:D8:9E:AF:72:75:98:A4:7B:58:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZCTZ9vd0eSGa9ier3J1mKR7WD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4c941d-992d-4eef-88f5-f0f8008dfc4c/1/LZCTZ9vd0eSGa9ier3J1mKR7WD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4c941d-992d-4eef-88f5-f0f8008dfc4c/1/LZCTZ9vd0eSGa9ier3J1mKR7WD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:a4:96:09:7b:ea:ae:cd:dd:63:18:f6:fe:85:56:60:1f:80:
7e:9f:ca:87:f0:d6:00:5a:3c:4c:99:68:24:0d:00:9e:42:d0:
bf:20:4c:93:d4:29:9f:30:8c:e6:18:c7:86:08:f1:68:c4:43:
3a:b5:19:27:b1:71:d0:1d:5e:cb:b6:66:9f:71:49:3d:b9:f1:
e4:5f:ae:7a:f7:5f:7f:13:42:ab:00:79:18:31:58:e4:c1:20:
b8:73:96:ec:80:32:d6:d1:b2:54:51:92:80:c9:06:c9:d5:dd:
2f:b9:38:ef:95:fe:d2:dc:9c:6d:c0:31:2e:6b:9d:61:fb:05:
d1:08:37:91:57:f7:c5:e8:f7:46:d1:1c:f7:b0:bb:0f:37:d2:
20:f3:2f:b5:91:05:fd:53:57:26:ed:f3:c3:2d:f6:e1:ce:c5:
11:e7:cb:41:e3:11:1d:0b:38:c5:f7:ff:6b:5d:8f:e8:47:c9:
7b:5f:e0:e1:50:6f:e3:90:9c:00:8c:ed:b5:0b:bf:25:41:6c:
f9:19:61:20:dd:1a:d6:b4:e5:34:6e:e7:ae:3d:09:8c:fb:32:
a7:b9:be:79:da:27:21:ad:28:6e:fc:57:42:06:01:27:4f:42:
58:19:93:1b:8f:29:67:ca:07:71:92:90:e0:79:e4:aa:46:46:
79:30:74:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:48:20 2025 by rpki-client