Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
File: Lz_LZCXVmOS4ewSRez75UJ47VsA.mft (raw, json)
Hash identifier: R3usVy/Td1UrloYoq9pA/I03G152CylG79VaHedl9ZQ=
Subject key identifier: 47:62:A1:DE:13:A2:E2:77:52:4F:09:EE:F9:46:1E:CC:BA:47:4D:0A
Authority key identifier: 2F:3F:CB:64:25:D5:98:E4:B8:7B:04:91:7B:3E:F9:50:9E:3B:56:C0
Certificate issuer: /CN=2f3fcb6425d598e4b87b04917b3ef9509e3b56c0
Certificate serial: 019770075491C96B7A77FEE3622312BF1268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
Manifest number: 0899
Signing time: Sat 14 Jun 2025 20:00:17 +0000
Manifest this update: Sat 14 Jun 2025 20:00:17 +0000
Manifest next update: Sun 15 Jun 2025 20:00:17 +0000
Files and hashes: 1: 2YmJTcAs1uemHQPUBr03G1oF2-o.roa (hash: pPzIg/QViF6nnNM/CzGYm2r3D8l+qUVLVDXD+71JZMM=)
2: Lz_LZCXVmOS4ewSRez75UJ47VsA.crl (hash: GiAUn6SVpk7cS9BeZ38Co/ITwK9uvmlI6KlgNsZBiVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:54:91:c9:6b:7a:77:fe:e3:62:23:12:bf:12:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f3fcb6425d598e4b87b04917b3ef9509e3b56c0
Validity
Not Before: Jun 14 20:00:17 2025 GMT
Not After : Jun 15 20:00:17 2025 GMT
Subject: CN=4762a1de13a2e277524f09eef9461eccba474d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2e:c1:a4:9a:c7:f6:05:6c:b1:1b:05:55:43:
09:93:89:25:fb:29:98:36:37:ae:8d:1a:33:e2:e5:
97:64:99:a1:c9:bd:50:2d:76:0e:81:1c:af:b9:98:
e6:67:20:68:f2:19:9f:37:ed:e1:bf:5b:63:a3:87:
31:dc:a6:d2:1c:b1:fa:3d:58:1b:1e:ed:74:47:13:
6c:35:5b:92:09:64:82:b3:42:ac:97:68:7f:37:c4:
1d:31:1d:56:66:91:e1:46:e3:4a:23:cb:fa:c9:79:
c5:3c:23:e3:6e:f5:2b:a6:f7:7b:f0:e2:57:d7:56:
f3:5b:bf:0e:76:9f:e9:a3:6f:86:c9:c6:9c:cd:d6:
a6:08:78:b3:a1:2f:b1:8d:48:83:29:a8:84:2d:03:
7e:b4:c2:38:d2:9e:a2:d3:3e:4e:a5:51:83:71:c9:
f3:bc:00:aa:42:e6:6d:51:9a:b9:2b:bd:85:ca:4a:
53:e4:bf:b6:fc:95:df:75:0e:ef:08:f4:c6:6e:11:
26:47:f9:6b:ef:e4:eb:50:97:af:f2:63:e9:e2:42:
be:86:47:13:c0:4e:a6:23:ac:02:b7:6c:2e:3f:9e:
ad:af:fe:8e:d1:54:19:47:63:10:ec:7c:f5:ad:14:
00:d6:8a:ca:88:3b:bc:d8:4e:cf:cf:38:8d:77:0e:
52:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:62:A1:DE:13:A2:E2:77:52:4F:09:EE:F9:46:1E:CC:BA:47:4D:0A
X509v3 Authority Key Identifier:
keyid:2F:3F:CB:64:25:D5:98:E4:B8:7B:04:91:7B:3E:F9:50:9E:3B:56:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lz_LZCXVmOS4ewSRez75UJ47VsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4b622e-f5a1-4c2c-8c77-6f71cad16f96/1/Lz_LZCXVmOS4ewSRez75UJ47VsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:2f:bf:68:db:a7:0a:cf:52:a7:48:7e:45:12:0e:a4:3a:37:
5e:e0:a8:3d:5b:ab:fb:24:5b:ea:af:60:49:dc:b4:6e:d4:d1:
a4:8b:ba:0a:26:1c:e1:a5:9e:e3:dd:f2:65:e9:30:13:7f:e0:
c1:01:35:2d:38:cb:8d:1f:36:82:e3:b6:30:dd:76:43:b6:aa:
09:a2:4f:05:c8:66:1b:06:b1:50:a3:45:9f:cb:f7:aa:47:41:
73:96:73:57:d9:f7:7c:40:68:de:9a:26:da:a2:8a:ed:50:9c:
02:5a:79:91:8f:97:3a:9c:ba:6f:82:e0:b1:ab:f9:fa:24:a0:
0c:a4:17:ca:5e:3d:d5:ad:e3:45:f3:3b:d3:b9:5e:2d:86:86:
0f:46:53:91:1c:8a:9f:e6:95:8b:c7:e6:0f:a1:87:d5:b7:b0:
87:ac:3f:83:21:c1:e1:15:06:c8:c0:fd:ee:f1:cb:b1:81:3c:
00:27:7c:7c:fe:38:24:ae:b9:db:33:36:b1:a0:5f:84:f5:aa:
12:cb:4a:d9:ff:ab:14:d4:80:5f:88:69:d4:f3:18:67:0d:7b:
94:8a:c0:bf:a3:cb:00:f2:18:eb:5e:29:13:e4:78:b4:3c:18:
cb:b6:10:b9:16:14:0f:d0:70:0a:b1:f0:b2:10:29:3d:0e:c1:
fe:fc:73:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:45:31 2025 by rpki-client