Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft
File: LzQYB_ILBFGcVSuzjONykUt8w0U.mft (raw, json)
Hash identifier: yQ6ehFNBpwT2CkcLuM+Fx8dXjsvABMHNDkKgfaf8YE4=
Subject key identifier: 2C:5B:48:47:DF:85:07:70:D9:61:F2:F5:30:FF:48:B7:03:CC:FD:C8
Authority key identifier: 2F:34:18:07:F2:0B:04:51:9C:55:2B:B3:8C:E3:72:91:4B:7C:C3:45
Certificate issuer: /CN=2f341807f20b04519c552bb38ce372914b7cc345
Certificate serial: 019A71EECC96E456BD712B0589692FBC7D54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzQYB_ILBFGcVSuzjONykUt8w0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft
Manifest number: 16AF
Signing time: Tue 11 Nov 2025 08:01:06 +0000
Manifest this update: Tue 11 Nov 2025 08:01:06 +0000
Manifest next update: Wed 12 Nov 2025 08:01:06 +0000
Files and hashes: 1: LzQYB_ILBFGcVSuzjONykUt8w0U.crl (hash: GMBskTDCa3VDhU7LWdTwxRBE9j/HqTuasgNaCkqM5ck=)
2: m-E10aW5L1-wveMhnPgC3UzI6ig.roa (hash: 1KS/uNhBScsES7reUi1gAa2nyjHWcWgOFVT/DR6eey8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LzQYB_ILBFGcVSuzjONykUt8w0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:cc:96:e4:56:bd:71:2b:05:89:69:2f:bc:7d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f341807f20b04519c552bb38ce372914b7cc345
Validity
Not Before: Nov 11 08:01:06 2025 GMT
Not After : Nov 12 08:01:06 2025 GMT
Subject: CN=2c5b4847df850770d961f2f530ff48b703ccfdc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1e:d3:de:57:ce:8e:55:98:83:df:fa:e8:ce:
a3:3a:ff:ac:ae:41:fd:a3:8c:c1:64:14:4d:80:71:
54:10:ef:ca:b1:8a:92:44:01:f4:c8:fe:cb:17:34:
33:1b:9d:cb:99:77:b0:97:9c:12:35:04:55:2f:a9:
4c:3e:fb:a5:a8:b5:c7:cf:70:b6:d3:a5:23:2e:6d:
cf:e3:ab:fc:8f:40:24:2f:74:91:e4:2c:b2:e9:63:
fe:b6:3a:ac:9b:70:41:0a:e6:0d:6b:9d:04:06:0b:
45:6f:db:b2:35:e1:75:36:80:cc:d1:0d:a2:17:57:
2b:b5:db:09:42:7f:5c:26:0f:ba:7e:4c:29:ac:ae:
bc:db:9b:50:d0:bd:5e:02:e0:34:56:ea:70:ee:bf:
bf:16:b1:bc:41:0d:11:27:4a:58:eb:7e:d8:8c:a1:
65:28:5d:7e:53:81:67:0a:73:69:d5:75:68:22:5c:
38:87:60:c7:ae:b2:90:d0:ac:9b:92:68:bf:37:9f:
53:fc:11:54:4a:e5:f3:0b:14:84:33:50:80:d4:24:
bf:1c:49:9c:00:b6:c6:6b:3d:29:42:50:48:ff:5a:
b2:92:96:6f:c4:2b:34:c8:21:ee:62:1b:56:35:28:
2e:1b:48:60:ff:7b:b5:90:ec:cc:11:df:e2:9a:74:
9a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:5B:48:47:DF:85:07:70:D9:61:F2:F5:30:FF:48:B7:03:CC:FD:C8
X509v3 Authority Key Identifier:
keyid:2F:34:18:07:F2:0B:04:51:9C:55:2B:B3:8C:E3:72:91:4B:7C:C3:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzQYB_ILBFGcVSuzjONykUt8w0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:4b:41:e3:3b:23:c2:25:29:15:9d:a0:8c:b8:2d:73:bc:e3:
6b:35:0e:11:c9:7e:5b:1a:4e:c8:ed:8c:f9:2c:23:48:b1:d1:
f2:28:14:a0:25:19:0c:75:af:bc:68:e9:af:85:b7:02:06:92:
4c:e0:ab:b3:0b:1e:9d:77:06:7a:7b:19:4c:b4:a9:0f:76:61:
50:f6:af:c3:02:6a:0b:89:9d:f3:9f:f9:23:08:73:3e:63:7f:
00:3a:bf:26:b0:ca:be:66:e8:5f:07:e0:9b:ab:c0:cf:28:49:
08:5b:57:34:48:7c:55:27:e0:73:9c:0b:6d:d8:e5:73:36:7c:
71:b9:9b:a1:e4:8a:9b:fd:cd:05:ce:ca:18:21:2b:00:6b:3d:
a2:32:65:1e:9d:3f:7e:d6:8e:20:c9:b3:55:8f:64:86:0a:98:
3c:c0:86:3e:c1:b0:bd:d9:18:c1:ce:ef:b2:2e:7b:2e:f6:72:
02:d9:96:38:fc:64:88:99:35:f9:8d:66:a9:65:ba:2c:66:37:
8c:ec:7c:fb:5f:47:88:70:e0:45:88:af:0a:63:f7:4c:4f:43:
8d:3c:1b:e5:d5:1c:ef:51:a3:5c:61:c7:e9:b7:4a:c0:74:0f:
c8:aa:91:33:d3:24:76:ab:19:19:f0:2a:25:4e:c4:db:f4:d9:
d1:7e:55:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:16:41 2025 by rpki-client