Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/be730a-27e6-4136-b2c5-cae40384c6bf/1/LZKAom-DFWYViyYXyV0Z0zjuFdM.mft
File: LZKAom-DFWYViyYXyV0Z0zjuFdM.mft (raw, json)
Hash identifier: B+mtqQlctAj3PkyX3BpPZZH0AP9/ue38wzBYnlwEIyI=
Subject key identifier: 1A:51:3A:AC:84:BB:80:80:73:A7:61:28:0B:D1:35:2D:C1:65:5A:72
Authority key identifier: 2D:92:80:A2:6F:83:15:66:15:8B:26:17:C9:5D:19:D3:38:EE:15:D3
Certificate issuer: /CN=2d9280a26f831566158b2617c95d19d338ee15d3
Certificate serial: 01987A88F061F212AA6C3742ED5D3AA44C86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LZKAom-DFWYViyYXyV0Z0zjuFdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/be730a-27e6-4136-b2c5-cae40384c6bf/1/LZKAom-DFWYViyYXyV0Z0zjuFdM.mft
Manifest number: 032F
Signing time: Tue 05 Aug 2025 14:00:51 +0000
Manifest this update: Tue 05 Aug 2025 14:00:51 +0000
Manifest next update: Wed 06 Aug 2025 14:00:51 +0000
Files and hashes: 1: LZKAom-DFWYViyYXyV0Z0zjuFdM.crl (hash: 00SCFzHROsVlLl/snzdpfMyWU2dx68ZvFrFLV8KaxqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/be730a-27e6-4136-b2c5-cae40384c6bf/1/LZKAom-DFWYViyYXyV0Z0zjuFdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/be730a-27e6-4136-b2c5-cae40384c6bf/1/LZKAom-DFWYViyYXyV0Z0zjuFdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LZKAom-DFWYViyYXyV0Z0zjuFdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:88:f0:61:f2:12:aa:6c:37:42:ed:5d:3a:a4:4c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d9280a26f831566158b2617c95d19d338ee15d3
Validity
Not Before: Aug 5 14:00:51 2025 GMT
Not After : Aug 6 14:00:51 2025 GMT
Subject: CN=1a513aac84bb808073a761280bd1352dc1655a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1b:88:47:ac:b7:a1:e1:a2:18:be:9f:04:d1:
6f:e4:f7:d2:18:88:e7:34:01:f3:2a:33:16:51:35:
7c:50:a4:24:9b:fa:b9:cd:92:6d:fb:a0:b5:5c:bb:
c6:26:9e:a7:94:3b:6e:b1:3f:03:d8:55:8d:e6:dd:
23:65:c5:97:a4:24:2a:36:16:7d:3a:83:53:d9:6e:
a2:da:17:a7:4c:01:fc:2e:bc:a1:6a:ac:f2:75:c7:
1b:1c:61:84:5a:07:03:44:ba:ae:ac:0f:80:04:f7:
88:cd:5b:e1:7a:e9:a9:e1:20:95:36:34:d1:71:4a:
0d:b4:60:58:fe:6c:ca:49:12:a9:d7:9f:a3:55:f8:
99:b9:d7:d4:60:6d:f4:b5:a0:f2:9d:60:29:e7:37:
ce:d7:1b:87:1f:93:b8:17:6d:fa:c3:bf:aa:24:a7:
99:54:b4:4f:bb:05:cc:2f:27:6e:fb:bc:f9:52:98:
0a:95:a8:eb:ad:c3:bd:07:fe:1f:32:e5:25:7c:f9:
44:47:72:e9:8a:03:4c:74:5a:26:66:d7:cd:82:e6:
a9:d5:8e:74:f8:df:c0:00:d5:f1:f7:6e:ec:ff:82:
72:32:9d:a8:76:be:df:f6:4c:3b:2d:ff:39:d3:6d:
2d:35:8d:fa:ef:0f:d0:3a:06:b2:2e:13:5c:f7:e2:
3c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:51:3A:AC:84:BB:80:80:73:A7:61:28:0B:D1:35:2D:C1:65:5A:72
X509v3 Authority Key Identifier:
keyid:2D:92:80:A2:6F:83:15:66:15:8B:26:17:C9:5D:19:D3:38:EE:15:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZKAom-DFWYViyYXyV0Z0zjuFdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/be730a-27e6-4136-b2c5-cae40384c6bf/1/LZKAom-DFWYViyYXyV0Z0zjuFdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/be730a-27e6-4136-b2c5-cae40384c6bf/1/LZKAom-DFWYViyYXyV0Z0zjuFdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:b1:d4:25:52:81:8e:6a:24:79:3d:13:67:1c:f5:33:eb:a6:
e5:7f:0b:47:0c:c6:45:bd:68:d0:2b:81:99:d2:93:65:c5:5a:
36:17:48:b7:28:ef:65:03:77:a8:cc:1b:87:16:90:78:ed:5b:
ca:c3:61:1b:43:5e:48:57:9f:22:98:b2:8a:36:0e:91:07:21:
f4:75:e7:b3:0b:a7:60:d0:59:a3:f7:60:73:29:97:f4:f9:ca:
bd:4e:6b:ae:64:0c:96:26:22:c7:4f:f2:f8:1d:7d:3b:f2:52:
97:6a:11:13:a3:7f:a6:f6:a0:bd:dc:89:ae:19:e5:50:5c:9b:
fd:ae:56:26:7e:6f:ed:2a:04:15:67:13:32:d4:21:6d:96:97:
92:cf:b2:38:43:21:a0:17:fb:aa:91:c0:f6:5d:ac:60:20:bd:
31:97:76:8a:14:e6:bc:76:fb:db:aa:21:4a:d3:a5:12:0d:96:
2b:bf:e3:46:dd:1c:84:8d:51:f2:36:a4:f6:11:45:c5:31:07:
97:ca:4d:44:6d:fd:b1:98:d1:f7:d1:d8:26:c8:87:9f:86:d5:
84:bb:e0:17:75:d4:88:e2:c3:2e:d9:f8:05:38:06:91:af:63:
a5:48:3f:c8:e7:88:e5:a4:ff:e5:fa:10:6b:a0:8b:8c:8d:f2:
20:23:11:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:16:58 2025 by rpki-client