Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft
File: LzFLwAp-WuIzSeBUBik6fWBgzaE.mft (raw, json)
Hash identifier: kvg1H4OIK942YjLotqJ/1+9YMzpOuvTLUaVTRVMk5vU=
Subject key identifier: 35:04:6E:F4:E8:36:CB:61:03:8D:50:9D:3F:9C:DB:75:92:BE:60:F2
Authority key identifier: 2F:31:4B:C0:0A:7E:5A:E2:33:49:E0:54:06:29:3A:7D:60:60:CD:A1
Certificate issuer: /CN=2f314bc00a7e5ae23349e05406293a7d6060cda1
Certificate serial: 0198D516033B5F9C1D8FDA4E55267C7735AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft
Manifest number: 130B
Signing time: Sat 23 Aug 2025 04:00:46 +0000
Manifest this update: Sat 23 Aug 2025 04:00:46 +0000
Manifest next update: Sun 24 Aug 2025 04:00:46 +0000
Files and hashes: 1: 1-d5J5W-VmdNEPvaUUIc9QmXJa7c.roa (hash: WEje3N6tM8UQY4DTr2W4pxQIyOYapcmAGgNCDl+FllM=)
2: LzFLwAp-WuIzSeBUBik6fWBgzaE.crl (hash: PhcD+NhAL6RKSb5qmq0z86UStawa4SAK5U/8W8LfTQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:03:3b:5f:9c:1d:8f:da:4e:55:26:7c:77:35:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f314bc00a7e5ae23349e05406293a7d6060cda1
Validity
Not Before: Aug 23 04:00:46 2025 GMT
Not After : Aug 24 04:00:46 2025 GMT
Subject: CN=35046ef4e836cb61038d509d3f9cdb7592be60f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:93:2c:92:c7:12:c8:51:8b:00:79:c3:cd:8d:
66:56:d3:69:e9:e8:4a:51:88:5b:02:a9:14:b9:35:
7d:81:fa:e1:0a:f2:f6:eb:fe:cd:19:e2:8f:fb:88:
d7:eb:f2:18:e5:2e:32:76:bc:d6:bb:4f:b6:ed:1a:
e9:aa:bb:61:40:06:47:a0:af:c2:c5:8d:a3:1f:d6:
b8:0f:82:fb:19:d8:7f:b5:4b:a9:a4:bf:70:d3:19:
69:1d:c4:47:99:10:64:9f:3d:bc:43:7b:30:6c:12:
91:4b:c2:db:6d:38:1a:03:14:24:89:c9:b4:1a:2d:
9c:7a:d1:6b:a9:d2:c0:27:68:1e:c4:40:10:f2:19:
8c:ef:4d:16:12:a5:d3:a0:3c:2e:20:df:35:9d:0d:
15:f6:27:b3:d9:d7:98:9c:36:28:f5:e2:c0:ca:8f:
32:59:f1:31:f1:58:b1:96:ee:f0:11:bc:0a:e4:c2:
21:09:a1:ec:99:c5:5a:20:1e:74:72:24:a4:2c:4e:
30:07:e2:e2:5e:7a:fe:12:68:32:03:8f:c4:3a:47:
a4:f4:86:70:16:f7:e4:d4:c2:cb:90:30:9a:3b:61:
32:86:a7:5e:17:46:a8:8f:56:91:98:e4:27:df:78:
46:e8:73:44:50:96:23:0a:49:b6:f6:1d:62:3d:63:
e7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:04:6E:F4:E8:36:CB:61:03:8D:50:9D:3F:9C:DB:75:92:BE:60:F2
X509v3 Authority Key Identifier:
keyid:2F:31:4B:C0:0A:7E:5A:E2:33:49:E0:54:06:29:3A:7D:60:60:CD:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:97:72:d2:ba:97:64:bb:11:98:dc:0e:6e:5a:77:bc:0f:28:
96:8a:a0:4c:e8:c5:d5:59:10:d4:d2:80:fb:03:3b:dd:96:3f:
0d:87:57:a8:69:cd:b2:21:68:30:55:2c:82:8e:6f:62:7d:23:
67:44:f4:00:33:11:74:24:40:00:1b:7b:b0:76:76:b2:d5:73:
18:11:9e:fa:8b:59:f5:13:89:e3:34:45:40:11:cc:16:99:49:
75:aa:82:f0:ba:28:50:12:23:19:81:17:9d:de:d5:17:c1:15:
cd:3e:96:ad:af:69:f5:bb:d9:c1:e9:ec:9d:78:8c:47:03:11:
70:55:52:3a:04:12:10:9f:8c:5b:4a:64:84:07:77:d6:0e:88:
6c:56:df:18:b8:0b:6f:9d:6d:fc:09:9b:5b:2b:75:c7:ca:63:
b4:98:e6:1d:7e:ea:ac:18:67:8c:d2:49:cc:6a:7a:96:28:f4:
f4:c3:cf:ae:17:40:a2:0d:69:74:7f:b6:a7:2c:5d:8d:11:78:
0f:c3:cc:eb:43:d3:a2:71:a6:d2:21:c4:4c:ee:2c:2c:06:53:
ce:38:3a:18:95:a4:92:75:c2:f1:cd:15:f9:e5:7d:a3:67:17:
af:43:24:81:b4:e1:a7:e9:b2:17:e0:72:97:aa:94:59:ef:7c:
4c:88:4d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:19:33 2025 by rpki-client