Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/08e183-64eb-4999-9f78-7ce7322671eb/1/LzZ8eUn6D2zwWiECfnW4RhLcE7A.mft
File: LzZ8eUn6D2zwWiECfnW4RhLcE7A.mft (raw, json)
Hash identifier: 5qogaWMgJeU9V7kwoQ1UpyuMAsuQrVqxyLyKkwjZx24=
Subject key identifier: AC:9F:6A:F3:BF:0D:75:0C:61:55:8E:11:92:37:8A:16:54:CF:DD:E1
Authority key identifier: 2F:36:7C:79:49:FA:0F:6C:F0:5A:21:02:7E:75:B8:46:12:DC:13:B0
Certificate issuer: /CN=2f367c7949fa0f6cf05a21027e75b84612dc13b0
Certificate serial: 019684DA6CB95FBD74AF60B568277546072C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzZ8eUn6D2zwWiECfnW4RhLcE7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/08e183-64eb-4999-9f78-7ce7322671eb/1/LzZ8eUn6D2zwWiECfnW4RhLcE7A.mft
Manifest number: 151D
Signing time: Wed 30 Apr 2025 04:00:29 +0000
Manifest this update: Wed 30 Apr 2025 04:00:29 +0000
Manifest next update: Thu 01 May 2025 04:00:29 +0000
Files and hashes: 1: LzZ8eUn6D2zwWiECfnW4RhLcE7A.crl (hash: U9NGPZWjm4c88ieUm6Y6X+jthKZgNvzZFZgjO0z3A8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/08e183-64eb-4999-9f78-7ce7322671eb/1/LzZ8eUn6D2zwWiECfnW4RhLcE7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/08e183-64eb-4999-9f78-7ce7322671eb/1/LzZ8eUn6D2zwWiECfnW4RhLcE7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/LzZ8eUn6D2zwWiECfnW4RhLcE7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:da:6c:b9:5f:bd:74:af:60:b5:68:27:75:46:07:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f367c7949fa0f6cf05a21027e75b84612dc13b0
Validity
Not Before: Apr 30 04:00:29 2025 GMT
Not After : May 1 04:00:29 2025 GMT
Subject: CN=ac9f6af3bf0d750c61558e1192378a1654cfdde1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:90:bf:b8:4c:96:26:66:52:bb:d0:db:a9:3b:
36:60:00:8e:0b:b6:05:fd:a4:4e:53:9a:fe:f9:a3:
2f:20:a7:6c:e9:ab:fe:28:12:8d:eb:a3:da:52:e8:
b6:e8:77:f7:57:3a:83:19:d3:44:a0:f5:3b:d5:51:
7a:31:6d:66:af:ed:6d:48:88:52:96:c5:c5:87:aa:
8a:ef:f9:1e:65:3e:53:f0:a7:5d:ea:fb:25:1e:91:
d3:89:14:d0:9b:01:fe:bb:1c:c5:7f:13:9e:71:90:
6d:ee:c4:d9:3f:4e:2e:e0:07:10:be:90:f2:46:6a:
20:99:a0:46:04:48:b2:69:ac:fa:ca:96:bd:fd:6a:
0e:1c:c3:c5:6b:a0:47:57:44:0b:28:b3:e9:8a:6e:
eb:12:60:7a:64:38:54:71:83:84:0b:ce:9b:7c:f2:
77:cc:b5:e4:02:d5:f6:98:ba:ff:7a:fb:9a:74:17:
42:d2:d1:bc:01:a0:70:84:37:82:c7:c6:5b:0d:a1:
5f:f2:74:61:34:fb:b8:e0:bd:d2:23:dd:17:e5:24:
6c:c6:7e:42:0b:ea:25:11:bb:34:1e:3b:e9:4b:b8:
d7:e9:8b:c3:f2:35:57:07:15:4e:82:7b:b3:42:39:
4f:fc:89:a3:b1:f6:8a:0d:2b:ea:80:2d:70:0c:d4:
2b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9F:6A:F3:BF:0D:75:0C:61:55:8E:11:92:37:8A:16:54:CF:DD:E1
X509v3 Authority Key Identifier:
keyid:2F:36:7C:79:49:FA:0F:6C:F0:5A:21:02:7E:75:B8:46:12:DC:13:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzZ8eUn6D2zwWiECfnW4RhLcE7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/08e183-64eb-4999-9f78-7ce7322671eb/1/LzZ8eUn6D2zwWiECfnW4RhLcE7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/08e183-64eb-4999-9f78-7ce7322671eb/1/LzZ8eUn6D2zwWiECfnW4RhLcE7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ec:c0:7a:07:3a:79:b7:7d:4a:22:42:d7:06:33:45:43:43:
66:d8:70:b6:d9:e8:69:1c:08:1a:77:81:4d:ea:60:ba:dc:ff:
94:e1:d9:fe:d7:6e:d7:63:3b:67:d5:ca:0d:e4:43:26:5a:dc:
10:52:ac:05:d0:b7:85:0e:a5:fe:07:3e:f0:53:75:5e:d7:ce:
09:4e:a7:81:98:a4:7f:4c:53:05:46:af:9d:06:95:53:f5:fc:
57:d7:82:62:3f:e2:e2:4d:37:b3:6f:44:cc:e1:4e:30:b9:82:
8b:41:99:c2:25:aa:e8:8b:4a:76:a9:f3:0a:ff:f8:1a:f2:72:
f1:70:fa:56:56:e0:e4:4b:47:ca:7b:37:59:b3:4d:63:88:17:
fa:2f:21:96:0b:94:96:11:ae:83:ae:09:c8:dc:6f:ef:48:fb:
48:98:9c:f2:c2:ec:55:29:b2:d4:94:98:62:f3:ff:a7:4d:68:
d4:1b:30:cc:d9:52:f8:44:f5:d2:fd:49:45:b6:2a:6a:e4:c4:
31:2b:f7:54:0b:73:a7:a0:b0:32:77:bb:b7:1a:8d:05:a7:11:
c6:9a:14:7e:21:38:b1:22:6f:c1:be:0d:a5:3f:6b:a3:93:e2:
c3:e8:fd:40:3e:92:3b:a7:de:31:9d:9f:aa:e4:55:59:db:bb:
1d:e2:51:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:45:51 2025 by rpki-client