Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft
File: LzFLwAp-WuIzSeBUBik6fWBgzaE.mft (raw, json)
Hash identifier: Eflg8vOcWjmlwNSdNl3pvq+qt5KsPTafpzSiQliePnM=
Subject key identifier: FE:0B:64:4C:97:41:19:D2:FB:21:23:98:DE:6D:CA:FF:7F:BB:90:5E
Authority key identifier: 2F:31:4B:C0:0A:7E:5A:E2:33:49:E0:54:06:29:3A:7D:60:60:CD:A1
Certificate issuer: /CN=2f314bc00a7e5ae23349e05406293a7d6060cda1
Certificate serial: 0199FE7DE8EE16CB6814F5002B08F5D64F47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft
Manifest number: 13A5
Signing time: Sun 19 Oct 2025 22:01:28 +0000
Manifest this update: Sun 19 Oct 2025 22:01:28 +0000
Manifest next update: Mon 20 Oct 2025 22:01:28 +0000
Files and hashes: 1: 1-d5J5W-VmdNEPvaUUIc9QmXJa7c.roa (hash: WEje3N6tM8UQY4DTr2W4pxQIyOYapcmAGgNCDl+FllM=)
2: LzFLwAp-WuIzSeBUBik6fWBgzaE.crl (hash: dE/TrvTI7twjnTuQ1PbKKMRRjT+ce2pJKObVCg4s4xE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:e8:ee:16:cb:68:14:f5:00:2b:08:f5:d6:4f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f314bc00a7e5ae23349e05406293a7d6060cda1
Validity
Not Before: Oct 19 22:01:28 2025 GMT
Not After : Oct 20 22:01:28 2025 GMT
Subject: CN=fe0b644c974119d2fb212398de6dcaff7fbb905e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:aa:00:59:d4:b9:45:d2:08:ab:c1:97:4d:a4:
a0:3c:45:e5:8e:ec:57:a9:8a:0e:62:9c:18:95:7c:
a9:89:cd:7a:4a:17:39:75:f6:91:34:81:f2:cb:9a:
fb:8d:fc:f9:30:bd:c0:cf:c7:3f:59:f5:c1:64:5a:
de:01:47:a6:fa:11:89:c8:8b:c2:af:73:e0:6b:43:
7b:64:e0:94:0a:3d:04:ac:70:01:7a:77:0e:78:4d:
2b:78:b2:4b:ad:e0:1b:98:14:4f:bd:7a:1f:16:e4:
d5:0e:a7:88:4e:6a:1d:8a:e2:ce:51:e7:60:8c:51:
16:d4:ae:56:ed:b8:c0:d0:57:62:45:24:68:61:c6:
e7:9b:17:d0:db:1a:23:46:e2:18:91:2d:9e:db:66:
bb:50:c9:83:7c:30:1f:bc:97:a1:5b:06:47:7c:32:
71:24:d0:42:63:ef:ab:65:c9:fe:c9:27:08:c3:cd:
cb:29:df:fb:e5:66:51:bd:f0:51:44:b6:11:6f:51:
03:55:76:28:d2:f9:c7:1d:4a:5c:bd:af:d2:e7:e2:
3c:c0:b8:0f:ec:44:67:fa:af:51:5a:f8:c4:9f:7e:
f3:f9:c4:5b:98:eb:58:ec:f7:6e:c9:33:e5:76:90:
59:fb:6a:f8:9f:65:13:92:0b:23:29:84:fe:c0:20:
a6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:0B:64:4C:97:41:19:D2:FB:21:23:98:DE:6D:CA:FF:7F:BB:90:5E
X509v3 Authority Key Identifier:
keyid:2F:31:4B:C0:0A:7E:5A:E2:33:49:E0:54:06:29:3A:7D:60:60:CD:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:a2:fe:b4:8e:eb:61:dd:76:d8:ca:ae:ac:6e:a7:b2:11:14:
8a:1e:2d:9e:cc:09:fa:a7:31:5b:03:84:76:49:d6:2a:20:ac:
aa:5b:52:6f:5f:7d:bd:34:45:e2:d6:5a:7f:7e:c9:34:a2:1b:
f1:42:fb:91:ff:90:00:fc:61:34:4b:f2:e2:01:e3:4d:99:9c:
40:12:bc:47:48:93:94:f5:76:1c:6e:c8:37:18:6d:41:db:6a:
a0:e2:96:4c:26:9b:93:e3:14:d1:65:05:84:99:36:b4:20:c8:
b3:95:8b:96:2e:d0:7d:24:08:d3:0d:eb:69:45:e9:86:87:d1:
27:b7:e0:c0:fe:77:31:54:62:0b:a0:67:d0:fa:30:4f:a4:de:
e9:56:d5:5c:04:44:47:37:77:21:18:38:d3:41:8f:d3:72:a3:
12:4e:58:3c:a7:5d:2a:95:9d:3f:ef:cc:9a:9d:db:6b:f8:00:
3c:4b:1d:57:52:ac:f7:e3:9c:7f:cd:ac:f1:bb:1e:2f:7b:8f:
73:f7:78:6a:3a:c5:d2:f7:51:bd:84:5a:71:51:54:40:d9:7e:
6b:74:73:34:3e:2c:6e:37:26:51:79:cb:d4:31:39:58:3a:4e:
9f:96:40:aa:d2:e0:d2:2f:08:ca:85:ea:f1:57:a1:be:74:c7:
2e:a7:2d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:05 2025 by rpki-client