Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft
File: LzQYB_ILBFGcVSuzjONykUt8w0U.mft (raw, json)
Hash identifier: qvyek2H6tr3MOgI+XvHA0D3YTfqC5Fu/9Fc9rShtEC0=
Subject key identifier: 34:F2:1F:92:B7:15:3C:B8:5E:39:89:28:7E:F9:73:16:F1:5B:40:C2
Authority key identifier: 2F:34:18:07:F2:0B:04:51:9C:55:2B:B3:8C:E3:72:91:4B:7C:C3:45
Certificate issuer: /CN=2f341807f20b04519c552bb38ce372914b7cc345
Certificate serial: 01989CA7601F5FF0FBF5A9F3A2A09C2355F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzQYB_ILBFGcVSuzjONykUt8w0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft
Manifest number: 15BC
Signing time: Tue 12 Aug 2025 05:01:11 +0000
Manifest this update: Tue 12 Aug 2025 05:01:11 +0000
Manifest next update: Wed 13 Aug 2025 05:01:11 +0000
Files and hashes: 1: LzQYB_ILBFGcVSuzjONykUt8w0U.crl (hash: 7BZjmzG4N+XORXB6YcNfY3DI61zA7lCAj25ILNp+/4M=)
2: m-E10aW5L1-wveMhnPgC3UzI6ig.roa (hash: 1KS/uNhBScsES7reUi1gAa2nyjHWcWgOFVT/DR6eey8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LzQYB_ILBFGcVSuzjONykUt8w0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9c:a7:60:1f:5f:f0:fb:f5:a9:f3:a2:a0:9c:23:55:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f341807f20b04519c552bb38ce372914b7cc345
Validity
Not Before: Aug 12 05:01:11 2025 GMT
Not After : Aug 13 05:01:11 2025 GMT
Subject: CN=34f21f92b7153cb85e3989287ef97316f15b40c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:90:fd:fc:d6:86:a1:02:7e:7d:c7:f5:75:83:
e9:fa:5b:42:98:6b:6d:a7:c9:54:bd:f6:2e:89:2c:
ab:45:5b:a5:42:b0:1a:19:d6:fb:d9:28:d7:a6:11:
82:a5:66:a9:87:de:10:b5:25:ab:fd:74:0f:24:74:
74:e1:64:c1:56:94:8a:3a:59:24:33:6c:48:de:4c:
f5:51:da:66:bb:76:6e:45:9b:62:79:a2:3e:70:39:
18:de:3d:c4:d1:c3:10:94:f5:40:2b:27:13:f1:3d:
f1:2c:3e:0f:22:be:c0:13:3b:3e:22:22:78:93:2e:
b2:c2:52:10:e2:bc:10:bd:d4:a4:c8:1d:b0:26:8d:
5b:7b:3c:a0:6d:ad:25:1e:ba:f1:03:fb:b6:3b:4e:
77:77:0a:84:98:0e:8e:70:55:88:3c:8c:8c:7a:3f:
49:da:a5:37:df:81:47:25:4f:a1:c4:fa:2f:f6:fe:
75:f0:9b:7d:a1:c0:2e:a4:d2:a0:c3:72:f3:22:05:
26:07:80:dd:7b:4b:cc:70:c9:c5:63:fa:23:34:cf:
a1:93:ac:a0:3d:7c:28:d5:7d:6f:5f:51:4f:45:28:
83:31:64:ab:53:72:24:8b:7d:e0:6a:5f:6b:b1:88:
50:22:10:de:64:dd:dd:48:6c:c1:0d:42:e3:ac:5a:
eb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F2:1F:92:B7:15:3C:B8:5E:39:89:28:7E:F9:73:16:F1:5B:40:C2
X509v3 Authority Key Identifier:
keyid:2F:34:18:07:F2:0B:04:51:9C:55:2B:B3:8C:E3:72:91:4B:7C:C3:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzQYB_ILBFGcVSuzjONykUt8w0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:11:31:f9:74:82:c8:b7:fb:4d:d8:96:2f:b2:83:79:97:42:
34:8b:66:e4:4f:3b:24:aa:07:6e:d1:2d:05:aa:d5:89:a3:77:
6f:54:e7:81:a2:32:de:73:55:34:8e:d1:4d:ba:88:af:0e:22:
d5:8a:5f:cb:02:ae:e5:02:80:df:e6:46:15:b5:ec:7b:cb:e7:
41:be:cf:f6:c1:29:60:e1:87:92:8a:92:64:a7:ff:b3:c0:7b:
fd:04:43:5b:ea:5b:ac:48:47:dd:be:c8:74:90:8d:67:a4:44:
e2:60:a3:1d:75:c1:54:ff:40:c3:e5:ad:17:57:62:54:c2:3e:
d6:b0:45:89:42:85:aa:e7:f2:86:5d:f6:a3:0c:bc:f4:49:e1:
d9:85:e6:7d:ac:04:88:29:9e:9e:91:51:00:76:ae:d1:ea:68:
c4:bf:a3:4f:18:f6:e4:1c:eb:0d:24:cc:eb:f8:84:4e:a5:1a:
a4:73:b1:a4:13:72:9f:01:4e:be:6d:fb:68:4f:e9:30:98:63:
19:7e:ed:a0:f9:46:d7:f3:af:d8:63:e4:44:04:73:a5:de:1f:
e8:ea:c7:00:b4:01:28:98:4e:89:99:06:e4:07:50:7e:48:a4:
be:ee:bc:40:d8:60:1d:6c:85:fd:fd:ab:cb:5d:7c:28:dd:8e:
36:ec:7a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 13:45:46 2025 by rpki-client