Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
File: Lz_LZCXVmOS4ewSRez75UJ47VsA.mft (raw, json)
Hash identifier: m6yWN53sCS4mujrgZ1S/xhwGR7lbZ+lLdcd56WN4h8I=
Subject key identifier: FB:2F:46:74:09:14:72:38:E8:F3:FB:15:2A:A5:F1:BD:97:AC:5A:BC
Authority key identifier: 2F:3F:CB:64:25:D5:98:E4:B8:7B:04:91:7B:3E:F9:50:9E:3B:56:C0
Certificate issuer: /CN=2f3fcb6425d598e4b87b04917b3ef9509e3b56c0
Certificate serial: 019A53AD371FA1DA52F0CF2BEF352EE105C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
Manifest number: 0A18
Signing time: Wed 05 Nov 2025 11:00:52 +0000
Manifest this update: Wed 05 Nov 2025 11:00:52 +0000
Manifest next update: Thu 06 Nov 2025 11:00:52 +0000
Files and hashes: 1: 2YmJTcAs1uemHQPUBr03G1oF2-o.roa (hash: pPzIg/QViF6nnNM/CzGYm2r3D8l+qUVLVDXD+71JZMM=)
2: Lz_LZCXVmOS4ewSRez75UJ47VsA.crl (hash: y7Z01h0Sf8rX3LsCXnQG3rxKEZsjRMenDgxrjMWFABY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ad:37:1f:a1:da:52:f0:cf:2b:ef:35:2e:e1:05:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f3fcb6425d598e4b87b04917b3ef9509e3b56c0
Validity
Not Before: Nov 5 11:00:52 2025 GMT
Not After : Nov 6 11:00:52 2025 GMT
Subject: CN=fb2f467409147238e8f3fb152aa5f1bd97ac5abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e8:cd:d4:9b:8b:b0:4a:44:f5:58:c3:97:29:
ab:1b:e2:e7:70:f9:5f:29:d7:82:7d:7a:85:d1:b1:
a3:13:18:84:c2:c0:1b:01:63:0a:19:3e:bf:97:68:
21:17:22:2a:7c:9a:44:cb:cc:78:83:06:3e:89:67:
2a:cd:78:da:e4:79:2c:5b:0c:de:27:12:6e:70:25:
d8:48:fa:75:d0:56:68:d2:0f:cb:e5:0a:cc:b0:40:
72:d5:01:78:ac:c7:81:97:d3:5f:bb:c0:1d:8c:b1:
fc:d2:07:26:15:dd:4d:49:58:0d:e0:92:d7:33:0b:
9d:5b:07:4e:a1:2b:6b:c3:3c:7b:c7:5c:76:79:75:
6d:37:e9:3c:c2:7e:aa:4c:3b:88:f6:a5:5f:93:da:
21:94:40:b5:f6:14:f1:f0:bc:0e:b4:07:51:81:f4:
37:4a:5c:5b:0e:04:98:d6:9b:2d:48:3e:a9:b3:37:
97:2c:46:7a:e0:56:3e:db:7d:88:5f:71:09:bf:dd:
a6:5a:66:07:0f:8f:e8:4a:64:28:d2:3e:2f:25:6f:
1b:7a:e6:85:1e:86:6e:c3:09:a6:d0:22:97:05:44:
92:43:e7:69:e2:2f:92:d6:3c:40:54:e4:79:ee:cb:
59:06:82:36:28:07:c2:88:40:24:20:98:4f:de:a5:
e3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:2F:46:74:09:14:72:38:E8:F3:FB:15:2A:A5:F1:BD:97:AC:5A:BC
X509v3 Authority Key Identifier:
keyid:2F:3F:CB:64:25:D5:98:E4:B8:7B:04:91:7B:3E:F9:50:9E:3B:56:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:06:20:99:2e:29:a5:af:6d:3e:56:c6:de:e3:ee:03:b7:c2:
71:d7:3d:eb:f0:c1:f4:eb:7b:5a:17:d2:15:fb:28:55:ea:b9:
3f:34:58:20:e9:13:07:71:fe:2a:0a:e7:94:a3:8f:6c:88:61:
c6:41:bc:52:1a:d5:be:66:3b:e0:28:1e:12:e5:5d:35:ae:89:
e8:7e:d4:25:23:8d:e4:69:41:ed:92:c0:79:4c:3b:c3:2f:ba:
5c:be:b6:17:d6:0d:0f:4c:15:8a:e1:27:ed:5e:26:8a:c4:ad:
fe:ba:9f:93:4f:ab:1d:3b:af:24:d1:db:d2:0f:23:80:bf:d7:
43:c3:68:d2:ad:ce:9e:fb:27:aa:59:e2:12:56:61:31:77:e1:
4e:fb:35:93:5b:73:68:39:83:18:ce:18:fb:c7:e8:d6:16:8a:
03:66:51:72:c8:e7:42:f6:da:4e:51:74:29:ec:09:ca:ca:6b:
a0:50:37:72:37:86:e9:56:a4:85:bd:03:f6:d6:f7:51:44:4d:
e6:12:6c:e8:e9:57:23:a7:3c:4a:62:5d:94:ec:e4:05:28:2f:
fd:c5:3a:8d:3a:cf:53:79:cc:51:68:6a:0e:cd:b3:34:3c:9b:
27:74:a7:26:c3:cd:02:f6:5a:d7:a8:c5:27:c1:5f:73:cf:62:
8e:38:d3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:14:24 2025 by rpki-client