
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/4c941d-992d-4eef-88f5-f0f8008dfc4c/1/LZCTZ9vd0eSGa9ier3J1mKR7WD0.mft
File: LZCTZ9vd0eSGa9ier3J1mKR7WD0.mft (raw, json)
Hash identifier: qcvD+TgcfPR/lXQkqPmb5jlPteD10/KLuCuzbls7VQo=
Subject key identifier: 93:B1:6F:A5:C8:3C:A0:64:13:C5:29:44:CB:83:B5:1F:E3:25:6D:4B
Authority key identifier: 2D:90:93:67:DB:DD:D1:E4:86:6B:D8:9E:AF:72:75:98:A4:7B:58:3D
Certificate issuer: /CN=2d909367dbddd1e4866bd89eaf727598a47b583d
Certificate serial: 019873E25C0FDE2E83BDAC2CA2C8BD2DD5AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LZCTZ9vd0eSGa9ier3J1mKR7WD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/4c941d-992d-4eef-88f5-f0f8008dfc4c/1/LZCTZ9vd0eSGa9ier3J1mKR7WD0.mft
Manifest number: CB
Signing time: Mon 04 Aug 2025 07:01:11 +0000
Manifest this update: Mon 04 Aug 2025 07:01:11 +0000
Manifest next update: Tue 05 Aug 2025 07:01:11 +0000
Files and hashes: 1: LZCTZ9vd0eSGa9ier3J1mKR7WD0.crl (hash: 3KS3ybp1MLRA31M8KzBVkn+eolPU3xyzNDiU9MlB2Bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/4c941d-992d-4eef-88f5-f0f8008dfc4c/1/LZCTZ9vd0eSGa9ier3J1mKR7WD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/4c941d-992d-4eef-88f5-f0f8008dfc4c/1/LZCTZ9vd0eSGa9ier3J1mKR7WD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LZCTZ9vd0eSGa9ier3J1mKR7WD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:5c:0f:de:2e:83:bd:ac:2c:a2:c8:bd:2d:d5:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d909367dbddd1e4866bd89eaf727598a47b583d
Validity
Not Before: Aug 4 07:01:11 2025 GMT
Not After : Aug 5 07:01:11 2025 GMT
Subject: CN=93b16fa5c83ca06413c52944cb83b51fe3256d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c8:da:47:60:ac:27:43:0e:cf:c9:52:f1:e9:
10:03:80:10:92:49:fc:9f:63:aa:51:7a:c5:9d:bf:
4a:aa:92:c5:b6:8d:27:44:23:5f:cb:1f:9d:33:6a:
52:d3:12:ff:20:aa:a2:35:fa:95:04:29:f6:cd:3c:
de:ed:51:63:91:55:18:a0:d3:8a:2c:12:de:92:9b:
1e:aa:37:06:20:56:a4:a0:f9:e0:68:6f:35:11:7f:
0b:ef:ab:e2:25:f5:c8:84:cc:40:a8:ae:10:0f:68:
d4:8f:3e:66:92:d7:69:11:ec:99:e7:56:22:d9:1a:
bd:f3:96:72:76:0c:1d:9c:b4:6c:8d:62:81:00:0a:
95:b1:6e:ab:4e:39:ab:b4:3f:a4:79:8d:27:4d:ab:
d6:29:a1:88:a6:b0:3b:6c:48:fd:68:50:af:34:c9:
0a:62:ad:61:b1:02:d8:2e:80:9f:5a:f3:61:12:57:
6e:a5:62:ce:57:fb:a4:91:0f:a9:9c:1b:df:dd:fe:
e1:3b:c2:e1:ac:43:ad:b5:29:3e:31:d6:99:9f:a9:
18:38:ed:78:39:17:2e:09:ca:0c:30:05:34:73:80:
48:b8:b6:b6:66:9a:8b:fa:70:71:fc:23:f0:ae:6b:
96:96:14:dd:6d:0b:2d:3d:8d:0e:11:78:5f:1c:5d:
a5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B1:6F:A5:C8:3C:A0:64:13:C5:29:44:CB:83:B5:1F:E3:25:6D:4B
X509v3 Authority Key Identifier:
keyid:2D:90:93:67:DB:DD:D1:E4:86:6B:D8:9E:AF:72:75:98:A4:7B:58:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZCTZ9vd0eSGa9ier3J1mKR7WD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4c941d-992d-4eef-88f5-f0f8008dfc4c/1/LZCTZ9vd0eSGa9ier3J1mKR7WD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4c941d-992d-4eef-88f5-f0f8008dfc4c/1/LZCTZ9vd0eSGa9ier3J1mKR7WD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ff:54:d8:78:b8:89:43:3e:15:48:fe:02:b4:5d:9a:57:22:
90:83:c0:d6:b7:aa:e0:f0:04:c2:95:8c:fb:44:28:b5:e8:f0:
12:15:41:41:94:e4:3c:5a:d5:3a:18:a6:22:00:db:64:26:ad:
04:8f:5c:4c:91:6c:e6:e8:89:2a:ed:ac:5a:7c:7c:75:0b:7a:
b3:11:c9:70:9a:68:43:73:bf:26:87:4d:92:c5:7e:7f:6c:a8:
50:33:c5:40:ea:ab:9a:19:35:a2:db:4f:27:25:8e:68:f9:7c:
55:5c:6f:ab:bf:5a:d4:c1:7f:67:d9:0d:2c:af:03:d0:15:45:
b7:66:00:ca:ba:21:d3:b3:20:76:30:ca:bd:7b:13:d9:5e:1d:
80:40:bd:50:6d:11:62:30:3c:a5:be:3e:28:aa:4e:00:68:38:
03:bb:73:3c:e4:eb:e5:c9:bd:14:b1:05:b3:fa:f0:6a:62:df:
73:e6:88:c1:80:45:a3:37:35:24:61:ff:5b:8f:ae:11:ad:99:
16:ef:3b:a6:4d:d2:d1:1f:c7:18:6d:5a:38:52:f5:e6:f9:b9:
51:53:dc:20:5b:8d:9b:25:36:51:fa:e6:82:5b:65:e9:93:a2:
57:85:aa:1f:96:74:40:19:40:99:22:00:69:0c:fb:78:7d:58:
14:0a:f2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:26 2025 by rpki-client