Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft
File: LzQYB_ILBFGcVSuzjONykUt8w0U.mft (raw, json)
Hash identifier: f241PFsyM1eIhUHJhIc6YvaQkpySxLFDcjuGt1DUvu4=
Subject key identifier: C1:B0:B3:CF:D4:DB:CB:EB:F1:74:EB:F1:BD:30:A4:F7:7B:8A:2A:44
Authority key identifier: 2F:34:18:07:F2:0B:04:51:9C:55:2B:B3:8C:E3:72:91:4B:7C:C3:45
Certificate issuer: /CN=2f341807f20b04519c552bb38ce372914b7cc345
Certificate serial: 0199FC21A5C4F89A587E9230340314A7577F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzQYB_ILBFGcVSuzjONykUt8w0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft
Manifest number: 1672
Signing time: Sun 19 Oct 2025 11:01:27 +0000
Manifest this update: Sun 19 Oct 2025 11:01:27 +0000
Manifest next update: Mon 20 Oct 2025 11:01:27 +0000
Files and hashes: 1: LzQYB_ILBFGcVSuzjONykUt8w0U.crl (hash: 2e3fioPV2T0cTRIhPOoXzbPtUe8n8di/5CVp2tZFqcs=)
2: m-E10aW5L1-wveMhnPgC3UzI6ig.roa (hash: 1KS/uNhBScsES7reUi1gAa2nyjHWcWgOFVT/DR6eey8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LzQYB_ILBFGcVSuzjONykUt8w0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:a5:c4:f8:9a:58:7e:92:30:34:03:14:a7:57:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f341807f20b04519c552bb38ce372914b7cc345
Validity
Not Before: Oct 19 11:01:27 2025 GMT
Not After : Oct 20 11:01:27 2025 GMT
Subject: CN=c1b0b3cfd4dbcbebf174ebf1bd30a4f77b8a2a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:21:7b:bb:bc:b3:c5:ba:ab:d7:7d:a8:2c:0c:
08:06:04:63:dc:bf:5b:be:37:fc:6e:3b:3d:54:e7:
bb:12:9e:10:b0:1d:d8:a4:fa:91:11:9f:5b:1d:66:
60:0a:e7:2b:32:ec:26:92:3f:0e:72:45:f6:9d:a9:
e3:d2:65:a2:d6:96:b9:36:14:6f:25:94:05:60:23:
ce:32:a7:88:cb:27:7d:5e:1e:f2:33:a6:0b:8c:67:
8f:6f:e6:ee:80:9b:42:0f:aa:ba:35:d0:37:36:80:
45:f2:1b:ab:59:09:3a:5b:ad:e3:10:a0:c7:ef:10:
dd:de:90:2c:22:c0:95:64:25:79:29:ea:73:da:89:
b4:2a:67:40:b5:3b:20:58:f1:1a:27:f1:66:ad:11:
0c:39:25:18:75:be:6f:9b:34:5f:a9:02:05:bb:ac:
af:cd:78:96:10:25:27:d4:41:a5:f4:bd:07:d8:48:
38:39:67:87:0f:bf:05:b8:20:88:1e:aa:3d:e6:29:
d6:53:8d:41:52:0d:dd:f0:9b:7a:60:e5:06:aa:4f:
f6:00:9a:30:3d:2b:24:37:03:b5:06:1c:93:ad:b9:
5c:a3:61:01:9e:fc:24:2a:6f:8c:d7:c7:68:44:1f:
fe:57:36:c3:25:73:94:45:7e:c3:83:cc:01:1c:2f:
2c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B0:B3:CF:D4:DB:CB:EB:F1:74:EB:F1:BD:30:A4:F7:7B:8A:2A:44
X509v3 Authority Key Identifier:
keyid:2F:34:18:07:F2:0B:04:51:9C:55:2B:B3:8C:E3:72:91:4B:7C:C3:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzQYB_ILBFGcVSuzjONykUt8w0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:3a:6a:52:05:7b:86:9e:7c:b1:95:eb:ed:60:3f:64:3f:84:
80:3b:66:35:21:cb:4c:ee:3f:dd:07:5a:b0:be:db:de:84:cf:
94:3f:5b:57:d2:4c:2b:06:9a:03:4f:3d:50:1f:b2:36:13:a8:
1b:bb:aa:e0:4b:d5:10:8a:5b:72:44:52:dd:81:6a:28:ef:1b:
62:4c:7f:de:82:50:61:d8:2e:88:75:42:d6:b2:f6:f1:fc:9b:
29:ec:f9:5a:25:ee:60:28:04:89:99:a5:2a:ca:5e:e6:11:4a:
be:02:85:e2:e2:3a:5d:1d:32:b3:b1:44:89:3e:b3:20:af:2e:
4c:69:9a:32:f8:48:64:ab:9b:a0:b8:c3:f6:11:f3:c5:74:64:
87:ba:27:1f:f5:c5:22:34:17:de:30:d6:25:85:59:a4:7d:70:
f6:8a:aa:a8:17:65:28:4b:81:2c:93:02:eb:bc:9b:d6:6c:64:
8a:a6:38:83:fd:90:96:f9:34:ca:56:cb:6b:4e:f9:da:59:ba:
68:57:f2:9a:e3:35:6a:05:67:ae:55:f4:4a:b0:d7:e7:70:03:
9c:af:97:58:7e:6f:18:63:c9:08:7b:4b:23:56:8a:d1:d2:57:
bc:47:ab:1a:f4:16:be:84:9e:41:1e:79:7f:80:d2:9d:45:b6:
24:4c:fe:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:41:23 2025 by rpki-client