Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
File: Lz_LZCXVmOS4ewSRez75UJ47VsA.mft (raw, json)
Hash identifier: bMaObZOZowcZosAVDz3j0x6xLBTWs2yPCilAhCjK9Oc=
Subject key identifier: B4:75:05:04:07:24:C4:12:4D:02:C5:4B:F3:39:37:2D:F1:8F:30:44
Authority key identifier: 2F:3F:CB:64:25:D5:98:E4:B8:7B:04:91:7B:3E:F9:50:9E:3B:56:C0
Certificate issuer: /CN=2f3fcb6425d598e4b87b04917b3ef9509e3b56c0
Certificate serial: 0199FEB4837BC7D48155B2CDA712C393AF4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
Manifest number: 09EC
Signing time: Sun 19 Oct 2025 23:01:06 +0000
Manifest this update: Sun 19 Oct 2025 23:01:06 +0000
Manifest next update: Mon 20 Oct 2025 23:01:06 +0000
Files and hashes: 1: 2YmJTcAs1uemHQPUBr03G1oF2-o.roa (hash: pPzIg/QViF6nnNM/CzGYm2r3D8l+qUVLVDXD+71JZMM=)
2: Lz_LZCXVmOS4ewSRez75UJ47VsA.crl (hash: hY4ZISdy0hAUoFAXJRaldxgCO4SNZmyAsWotvtUiylw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:83:7b:c7:d4:81:55:b2:cd:a7:12:c3:93:af:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f3fcb6425d598e4b87b04917b3ef9509e3b56c0
Validity
Not Before: Oct 19 23:01:06 2025 GMT
Not After : Oct 20 23:01:06 2025 GMT
Subject: CN=b47505040724c4124d02c54bf339372df18f3044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:68:6a:b3:34:95:c7:33:e7:b6:9d:e4:9d:62:
88:f7:f3:0c:80:41:ae:a4:6a:2c:12:0e:c7:ea:4c:
6f:c4:dc:40:15:dc:63:3d:89:30:d0:a7:07:ba:f4:
72:5f:61:43:29:08:dd:52:6a:0d:fe:15:7b:09:35:
5b:8d:d1:bb:27:5f:54:21:b4:a2:f2:f6:5c:5c:33:
81:ce:c1:66:1a:b6:13:24:1d:5e:ed:ed:fa:54:1f:
cd:91:b9:eb:10:55:6b:98:9a:39:1e:22:16:84:4b:
27:fe:fe:87:3e:d4:e8:e4:6b:d7:61:63:15:3c:47:
c4:f0:be:a0:96:5c:4c:cf:ae:b6:c5:b4:38:bf:f9:
6d:4b:a5:32:6c:61:71:97:d2:63:cc:b2:3f:24:22:
66:db:ee:dc:a5:9d:e8:3f:b0:88:24:07:a2:d4:d2:
3d:27:2b:f4:a5:72:08:b9:37:ea:9a:ee:f0:96:13:
d2:1e:9d:19:d0:10:50:c8:c8:35:a8:98:df:70:6c:
73:43:b8:25:1f:e3:45:d2:ad:8a:e1:2a:fa:96:48:
d8:8a:e6:6d:5a:e2:3a:be:8b:95:d8:eb:d0:eb:71:
42:fb:25:c2:3b:68:8b:60:4a:3f:05:64:02:a3:07:
c4:1b:57:48:f1:5d:6c:54:3e:aa:e8:a7:34:e5:fa:
0e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:75:05:04:07:24:C4:12:4D:02:C5:4B:F3:39:37:2D:F1:8F:30:44
X509v3 Authority Key Identifier:
keyid:2F:3F:CB:64:25:D5:98:E4:B8:7B:04:91:7B:3E:F9:50:9E:3B:56:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:56:59:c6:e2:27:2f:12:db:42:17:60:bf:6c:51:0e:07:8e:
95:29:32:8a:01:6e:04:2d:88:33:d2:05:21:23:c3:bb:d4:23:
e5:ac:11:32:f9:90:33:ed:01:43:77:6b:a4:fa:28:57:3b:13:
ef:0a:aa:65:4d:9a:36:f4:2d:1b:69:d0:0a:a5:0a:a9:d0:f7:
3e:05:e6:63:e8:ef:b3:81:93:40:7d:08:fe:32:4d:3a:50:2f:
25:54:c9:e0:41:cb:17:bf:e0:7c:e1:48:51:9c:d8:d1:66:46:
11:47:6c:32:68:78:6a:be:3a:ee:86:63:db:d9:23:af:9d:80:
64:aa:4b:d1:1c:bb:24:cf:0e:26:0f:75:e2:52:13:b7:d1:74:
5e:cd:a1:17:79:8b:53:1d:08:6b:40:21:90:33:f2:ae:54:bd:
d5:34:03:1a:56:08:a6:0e:56:a7:bc:8c:73:92:5f:dd:57:01:
61:ba:3a:b0:fa:ad:70:c9:96:e1:b5:c8:1f:5f:b6:e8:5d:ab:
3a:7f:4d:86:b6:66:e7:ef:77:22:80:f9:35:a3:b3:56:a7:48:
39:1e:73:a7:22:12:58:6b:0e:ff:7b:1d:56:e6:03:c3:93:44:
34:9b:03:b7:c9:ea:6e:e1:b1:02:ea:bb:0a:46:12:85:64:09:
2d:f4:20:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:59:07 2025 by rpki-client