Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft
File: LzQYB_ILBFGcVSuzjONykUt8w0U.mft (raw, json)
Hash identifier: J0RECLVGPpL6L+xAjEpS1eUCbnJelG+yCkODg4DTEzI=
Subject key identifier: 3A:30:DF:09:61:27:37:3C:34:C7:82:FB:37:86:75:80:FF:63:7A:CF
Authority key identifier: 2F:34:18:07:F2:0B:04:51:9C:55:2B:B3:8C:E3:72:91:4B:7C:C3:45
Certificate issuer: /CN=2f341807f20b04519c552bb38ce372914b7cc345
Certificate serial: 0198D4A7F683F530E0EFB0B831FD9BD15951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzQYB_ILBFGcVSuzjONykUt8w0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft
Manifest number: 15D9
Signing time: Sat 23 Aug 2025 02:00:34 +0000
Manifest this update: Sat 23 Aug 2025 02:00:34 +0000
Manifest next update: Sun 24 Aug 2025 02:00:34 +0000
Files and hashes: 1: LzQYB_ILBFGcVSuzjONykUt8w0U.crl (hash: FP18n9bEhrw2wCbbow3MT3gnY416qerTjjaVcUahPOI=)
2: m-E10aW5L1-wveMhnPgC3UzI6ig.roa (hash: 1KS/uNhBScsES7reUi1gAa2nyjHWcWgOFVT/DR6eey8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LzQYB_ILBFGcVSuzjONykUt8w0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:f6:83:f5:30:e0:ef:b0:b8:31:fd:9b:d1:59:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f341807f20b04519c552bb38ce372914b7cc345
Validity
Not Before: Aug 23 02:00:34 2025 GMT
Not After : Aug 24 02:00:34 2025 GMT
Subject: CN=3a30df096127373c34c782fb37867580ff637acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b8:b7:f8:89:18:b1:08:26:b6:ab:55:39:e7:
df:73:50:fd:38:92:4b:c4:e2:40:80:f4:c5:07:35:
a5:6c:bc:d8:f3:61:fc:7f:2a:5b:f1:75:4b:e9:35:
0d:7f:d0:44:48:e9:b8:20:13:49:84:bc:ca:e6:76:
64:0e:f9:7d:71:49:41:ee:8a:fe:92:84:d1:6f:a0:
fb:ef:e3:35:d7:dd:30:fc:1e:7a:23:88:9e:f3:6e:
fa:13:1a:1e:0c:95:9d:04:08:a1:59:cb:66:eb:f4:
8c:6d:a2:0a:3b:c8:09:48:5d:cd:4b:45:4f:c2:06:
29:be:03:21:1c:ac:51:76:ab:40:a2:47:f1:8f:cf:
09:fd:de:b6:89:a5:51:50:bf:72:d0:cc:82:77:cb:
18:be:80:96:23:a9:57:9b:a2:b3:e8:df:3c:17:fc:
f9:3a:43:96:59:00:8f:2c:66:83:84:a5:ae:22:a5:
b4:68:b4:92:1b:54:71:eb:ef:10:95:52:07:56:33:
8f:77:a4:1d:df:d3:e0:fe:f3:13:24:66:a7:e6:62:
6e:38:96:97:3b:a0:e8:7c:a7:39:bb:ba:c0:23:c1:
d0:86:82:9c:f7:02:1a:a6:d0:5e:5d:a3:36:16:80:
09:b3:e3:60:26:55:ea:95:06:75:02:71:52:aa:c0:
6e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:30:DF:09:61:27:37:3C:34:C7:82:FB:37:86:75:80:FF:63:7A:CF
X509v3 Authority Key Identifier:
keyid:2F:34:18:07:F2:0B:04:51:9C:55:2B:B3:8C:E3:72:91:4B:7C:C3:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzQYB_ILBFGcVSuzjONykUt8w0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:cc:d5:be:b6:7d:fb:f3:92:bb:ce:82:a9:1c:47:8e:5b:94:
74:77:6b:b5:d1:e8:23:bf:60:c2:91:49:74:b6:85:6a:7a:d5:
06:ba:2b:c0:2d:c5:d4:42:49:a4:82:ac:0b:15:08:f1:12:fd:
a8:30:4a:21:77:5a:2a:c1:b2:cc:e0:aa:80:dc:ef:77:ff:38:
53:6c:1c:55:4d:14:2a:9c:e1:bd:92:e5:56:3e:ac:89:51:98:
5d:a3:a4:35:9c:11:1c:fb:87:f9:67:ea:25:58:41:51:8e:b2:
ce:f5:d3:15:d8:30:13:d7:11:ae:91:78:bf:66:ba:ff:eb:90:
0e:a6:31:eb:21:9f:9c:2c:61:03:7a:27:44:55:71:95:d5:42:
38:49:7c:5e:dd:37:35:a1:d0:6c:95:cb:54:d9:0a:48:46:93:
61:30:b5:09:9d:4f:47:e3:bd:57:5e:56:3f:ae:69:b5:9f:ba:
07:52:28:7d:dd:bb:08:9f:b2:32:31:43:bc:e0:e4:62:37:c0:
19:a4:21:9a:60:3b:d1:f5:c4:08:87:c8:27:84:38:5f:a8:75:
7d:a2:f7:9c:1d:b2:5f:87:ee:db:8a:b5:ed:c4:99:de:7a:5c:
9e:6d:50:76:6c:41:8c:5a:42:9b:84:fa:04:e9:e2:05:8d:b9:
bf:e6:03:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:39:02 2025 by rpki-client