Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
File: Lz_LZCXVmOS4ewSRez75UJ47VsA.mft (raw, json)
Hash identifier: NeSrDlQQKkuRWFatoPFvf3ifTzJqlloINnar4WDkNi4=
Subject key identifier: 25:39:7C:06:8F:86:F5:BE:86:C8:F7:DD:EA:D6:24:9A:9F:7F:A4:9A
Authority key identifier: 2F:3F:CB:64:25:D5:98:E4:B8:7B:04:91:7B:3E:F9:50:9E:3B:56:C0
Certificate issuer: /CN=2f3fcb6425d598e4b87b04917b3ef9509e3b56c0
Certificate serial: 019880545C572DE8EDC71C248721EF957EF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
Manifest number: 0926
Signing time: Wed 06 Aug 2025 17:01:08 +0000
Manifest this update: Wed 06 Aug 2025 17:01:08 +0000
Manifest next update: Thu 07 Aug 2025 17:01:08 +0000
Files and hashes: 1: 2YmJTcAs1uemHQPUBr03G1oF2-o.roa (hash: pPzIg/QViF6nnNM/CzGYm2r3D8l+qUVLVDXD+71JZMM=)
2: Lz_LZCXVmOS4ewSRez75UJ47VsA.crl (hash: 30iSQr5CMXt7mr7MC9PYW3kKGQTEXKAchmHlHZPD/LM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 17:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:54:5c:57:2d:e8:ed:c7:1c:24:87:21:ef:95:7e:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f3fcb6425d598e4b87b04917b3ef9509e3b56c0
Validity
Not Before: Aug 6 17:01:08 2025 GMT
Not After : Aug 7 17:01:08 2025 GMT
Subject: CN=25397c068f86f5be86c8f7ddead6249a9f7fa49a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:59:e6:09:9a:80:8b:9a:11:54:3b:ce:0b:d2:
e1:a8:7a:d2:9d:e2:c6:9d:30:9c:ab:76:fe:f2:0d:
08:d0:25:44:5b:87:11:2a:52:e6:b0:19:83:17:cc:
7e:94:14:fc:9b:d2:9d:41:97:9f:dd:a7:ff:be:64:
3c:d9:d6:d8:5c:61:76:d9:80:44:56:7a:c7:7e:ff:
ca:2b:cc:70:99:f0:bb:a5:f4:58:0a:8d:33:c4:ff:
51:ba:f5:04:0f:96:78:d0:5e:9b:7b:3e:ff:19:ea:
c5:0c:4f:2c:d3:12:ef:9c:49:24:07:3c:3d:34:25:
62:a8:fc:d6:24:74:05:51:54:a6:aa:54:75:3b:64:
cd:91:a9:a5:e0:48:e6:90:3a:ef:ff:8f:9d:dd:bf:
5b:2f:a8:79:80:c2:95:c5:2e:c6:1f:81:40:68:65:
53:30:d2:b6:f5:58:1e:cc:fd:a1:41:6e:29:a7:03:
3f:82:73:dd:ad:c6:f6:5f:e5:e1:99:b8:45:20:e1:
1f:c7:8e:ab:68:51:9b:e6:46:70:35:cb:be:95:77:
1c:2a:fa:03:e7:c1:39:35:87:fe:76:53:a0:c9:ce:
eb:a9:e9:57:a3:7a:c9:cf:08:e0:d5:75:dd:c2:a3:
24:0a:f6:50:98:22:36:3f:be:e7:92:71:ff:43:9f:
49:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:39:7C:06:8F:86:F5:BE:86:C8:F7:DD:EA:D6:24:9A:9F:7F:A4:9A
X509v3 Authority Key Identifier:
keyid:2F:3F:CB:64:25:D5:98:E4:B8:7B:04:91:7B:3E:F9:50:9E:3B:56:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:14:04:8f:5e:b9:5c:d2:6b:51:95:a6:96:f1:38:d3:4a:63:
e0:00:e1:52:f2:3c:36:f1:39:b5:2d:c3:e8:5d:c0:ef:11:26:
a6:54:91:01:e5:6c:27:b5:cd:48:e3:af:5f:22:8c:ce:b6:f8:
da:5f:50:2d:d3:48:31:4d:90:17:d3:53:6d:6a:f1:e3:90:a3:
e0:e4:04:15:71:83:46:2c:f1:f3:56:3b:98:37:b3:96:8b:af:
67:95:d2:32:45:bd:52:03:19:56:bb:13:ef:ee:2d:a4:ef:bb:
78:ca:aa:b0:a2:72:7c:08:7f:fc:50:25:a8:a8:81:7d:47:f1:
48:cd:c1:d6:11:84:1b:56:7f:46:26:fb:16:e9:40:e0:af:4c:
22:fb:5f:66:3b:09:ac:f2:4f:48:90:7f:d9:6a:16:05:19:a2:
0b:f0:c3:6d:b4:e5:4b:4d:03:c4:1b:a7:25:a4:b7:f0:d3:c6:
2f:f7:4f:bb:e9:b6:08:42:28:24:6e:21:47:bb:31:99:53:4a:
cc:3c:60:b5:f0:29:b5:8f:d3:42:51:d6:05:45:a8:10:f1:da:
99:cf:03:c9:13:13:44:82:36:b6:07:ed:fb:09:78:6d:75:1e:
68:30:2a:5d:c5:23:bf:5b:3b:9d:f4:e2:ad:8a:4c:da:6a:03:
d3:7e:01:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:26:41 2025 by rpki-client