Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
File: Lz_LZCXVmOS4ewSRez75UJ47VsA.mft (raw, json)
Hash identifier: F7qcjX7L1R12ZAm7Yhdd4YqOOaqWsrdnfIP1qfQoOwY=
Subject key identifier: 0B:FD:53:8B:BA:F6:EF:52:D9:B4:52:76:1B:87:86:CB:84:3B:DC:D2
Authority key identifier: 2F:3F:CB:64:25:D5:98:E4:B8:7B:04:91:7B:3E:F9:50:9E:3B:56:C0
Certificate issuer: /CN=2f3fcb6425d598e4b87b04917b3ef9509e3b56c0
Certificate serial: 0197B77C10D26392BE7B3F488819393C45B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
Manifest number: 08BE
Signing time: Sat 28 Jun 2025 17:00:50 +0000
Manifest this update: Sat 28 Jun 2025 17:00:50 +0000
Manifest next update: Sun 29 Jun 2025 17:00:50 +0000
Files and hashes: 1: 2YmJTcAs1uemHQPUBr03G1oF2-o.roa (hash: pPzIg/QViF6nnNM/CzGYm2r3D8l+qUVLVDXD+71JZMM=)
2: Lz_LZCXVmOS4ewSRez75UJ47VsA.crl (hash: K7hxxt24UmmiFNJIeolhj/yGQQN9LSHqnVVUsvIUqKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:10:d2:63:92:be:7b:3f:48:88:19:39:3c:45:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f3fcb6425d598e4b87b04917b3ef9509e3b56c0
Validity
Not Before: Jun 28 17:00:50 2025 GMT
Not After : Jun 29 17:00:50 2025 GMT
Subject: CN=0bfd538bbaf6ef52d9b452761b8786cb843bdcd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8e:a4:82:01:6b:90:b3:83:5b:30:ba:2f:56:
85:b8:63:9c:5d:95:39:39:10:5b:5d:ec:f7:f2:fb:
f4:ad:c2:3f:b9:bf:80:2a:6b:35:5a:0f:53:70:2e:
7e:65:fb:e0:bf:11:5e:1f:fc:bd:7d:33:67:04:ed:
3d:9e:45:91:81:9b:06:fd:03:9d:58:05:ff:ff:f3:
2c:75:c8:ac:f1:2d:aa:88:0f:f8:07:97:22:88:7f:
a2:66:aa:13:fd:a6:41:db:bc:cf:f1:9c:ce:a3:42:
6e:3a:3b:b2:11:6b:b2:8d:95:68:17:26:26:31:5e:
36:dd:62:43:fe:33:c3:87:b9:22:5c:2e:30:03:c5:
ac:9c:91:e6:2d:bf:c2:59:65:8a:48:ab:22:f5:3d:
29:b4:08:e9:12:0b:87:32:5e:c4:f6:34:57:79:6a:
e6:7d:a6:dd:de:92:c0:25:0c:47:da:e0:6a:a4:34:
11:6b:c9:90:1b:27:7f:60:3a:79:33:39:ed:e3:66:
16:da:6b:16:27:30:b4:6b:44:8b:12:5b:35:cc:db:
bd:84:89:4b:f8:15:e0:98:12:11:50:30:b0:41:10:
a1:1a:18:15:35:09:d3:2d:b0:3e:64:8b:fe:91:b7:
22:d2:f8:79:07:27:75:e1:23:6f:a6:11:63:66:d3:
a2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:FD:53:8B:BA:F6:EF:52:D9:B4:52:76:1B:87:86:CB:84:3B:DC:D2
X509v3 Authority Key Identifier:
keyid:2F:3F:CB:64:25:D5:98:E4:B8:7B:04:91:7B:3E:F9:50:9E:3B:56:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:82:1d:89:05:48:93:5c:8c:f3:83:bb:32:16:95:72:e7:7b:
96:62:a5:8a:b8:d7:3a:16:6b:be:d2:ea:8a:9c:fd:ac:1e:24:
e8:da:3f:7e:ea:59:0d:c7:a6:5a:09:57:b2:ba:f5:e2:a9:42:
b4:e2:d0:9a:af:ef:94:bb:1d:2e:ab:2f:d7:2e:c5:bf:74:a5:
c0:3e:fa:0e:29:49:24:07:bd:5e:da:8d:7c:5e:30:7f:7f:8e:
cd:0e:9d:12:c7:b4:c4:a5:87:17:46:6c:66:b0:89:5b:cd:ab:
f5:66:f5:74:e2:47:26:a3:fa:2e:53:df:a0:79:72:53:af:0f:
af:36:38:7e:ca:fb:44:c5:02:db:13:bf:2f:95:fb:0a:c6:fe:
a3:d3:1a:4f:75:f5:5b:00:b8:c7:2b:ed:84:af:42:d5:f9:17:
bd:b6:87:86:66:8f:30:5e:92:18:cf:5b:28:2d:37:dc:d4:ca:
b0:5d:95:5b:c2:2c:27:97:46:52:ac:29:3c:27:43:10:80:44:
6b:d6:0c:ad:11:69:22:02:3e:a3:7c:c0:32:75:36:7b:77:c9:
5d:12:de:66:70:36:de:8f:3a:d0:c9:9a:35:1a:ed:50:15:cd:
af:e8:39:27:3b:05:c5:70:17:44:f8:63:c0:83:4d:35:97:04:
31:94:15:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:08:31 2025 by rpki-client