Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft
File: LzQYB_ILBFGcVSuzjONykUt8w0U.mft (raw, json)
Hash identifier: lqD3cKmuSZ+HZlCg3t/ZnlumODgDqRSj9XyZMb0pGW0=
Subject key identifier: A2:E7:36:AB:CC:DD:65:3D:0A:F0:4E:9C:6E:ED:09:E1:5A:18:96:AA
Authority key identifier: 2F:34:18:07:F2:0B:04:51:9C:55:2B:B3:8C:E3:72:91:4B:7C:C3:45
Certificate issuer: /CN=2f341807f20b04519c552bb38ce372914b7cc345
Certificate serial: 019746D49FCDB13663A107BC1DD085FD9447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzQYB_ILBFGcVSuzjONykUt8w0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft
Manifest number: 150B
Signing time: Fri 06 Jun 2025 20:00:28 +0000
Manifest this update: Fri 06 Jun 2025 20:00:28 +0000
Manifest next update: Sat 07 Jun 2025 20:00:28 +0000
Files and hashes: 1: LzQYB_ILBFGcVSuzjONykUt8w0U.crl (hash: lXMEz+TNn52vi6tuTBrmBNhsodO7bk1lbadT4mCQTxQ=)
2: m-E10aW5L1-wveMhnPgC3UzI6ig.roa (hash: 1KS/uNhBScsES7reUi1gAa2nyjHWcWgOFVT/DR6eey8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LzQYB_ILBFGcVSuzjONykUt8w0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 20:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d4:9f:cd:b1:36:63:a1:07:bc:1d:d0:85:fd:94:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f341807f20b04519c552bb38ce372914b7cc345
Validity
Not Before: Jun 6 20:00:28 2025 GMT
Not After : Jun 7 20:00:28 2025 GMT
Subject: CN=a2e736abccdd653d0af04e9c6eed09e15a1896aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4e:dd:fe:40:e8:a8:e7:27:2a:02:72:45:c0:
bb:29:2d:9a:9a:c5:c2:42:09:c0:f5:28:f7:d4:46:
78:5d:f3:41:83:1c:86:8b:46:1b:ac:9f:29:60:1b:
6f:82:22:3e:85:88:ac:97:e6:ea:b1:64:9f:d4:14:
68:56:7e:27:87:4f:d9:e1:24:71:0d:2c:01:1c:37:
09:ec:fa:d9:75:27:9f:23:59:10:0f:11:f3:25:13:
74:f7:cd:f9:16:a1:b5:6b:d9:1c:b6:54:49:02:50:
ed:3e:d9:57:8c:e0:9b:33:f7:5b:4b:de:03:7d:e9:
4e:82:2f:84:51:bf:b7:6c:06:e0:55:ff:15:cd:f1:
dc:49:67:3d:79:af:56:0d:8b:bf:ae:e4:ce:f4:14:
7a:25:7f:e6:5a:ad:ab:ab:53:d7:c3:e7:e1:7a:4f:
5a:e0:0b:64:ed:d5:06:13:fe:bf:61:2e:6a:4c:d0:
5f:6e:5f:ab:9c:af:c7:e0:d1:5f:47:e1:4a:55:99:
f8:53:ef:75:ac:28:1c:26:66:e1:44:34:cb:5d:22:
f1:29:25:63:c6:40:ed:c5:80:5b:10:48:e1:d3:65:
eb:ca:f3:60:8f:1d:b3:dd:e0:0e:e8:e8:ac:a5:86:
2f:f7:45:0f:f8:1b:51:e1:26:9d:d1:47:ba:0d:e2:
d8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E7:36:AB:CC:DD:65:3D:0A:F0:4E:9C:6E:ED:09:E1:5A:18:96:AA
X509v3 Authority Key Identifier:
keyid:2F:34:18:07:F2:0B:04:51:9C:55:2B:B3:8C:E3:72:91:4B:7C:C3:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzQYB_ILBFGcVSuzjONykUt8w0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:9e:67:5d:81:4e:4e:c5:39:ba:bb:4f:ee:99:8a:e1:fc:72:
4f:dd:94:7d:b1:ff:ab:f5:be:23:0b:01:9f:6b:8a:68:1c:7b:
31:70:65:ef:f5:ee:f2:2d:64:80:48:86:b5:b8:75:f3:95:9b:
45:83:74:c2:4b:93:0b:c0:ce:3d:ca:dc:e7:e6:7e:47:56:19:
01:65:22:f3:96:4c:32:6c:23:20:a2:8f:b9:fd:75:6b:0d:d7:
fe:f0:a6:31:e7:4e:68:12:dd:14:6c:28:11:11:5c:53:96:d6:
c6:f5:19:a6:0e:f5:b1:4d:b7:99:54:67:13:f6:4d:28:ec:f4:
3c:74:7a:2f:0d:09:c8:06:93:33:08:6f:04:98:8d:6a:e2:d1:
a2:24:ef:89:d5:7b:c1:2a:cc:e8:fe:1b:81:64:c1:b5:53:a9:
9f:0a:7e:89:f7:ac:6b:b4:aa:96:ca:9e:fa:06:6f:63:ef:d4:
03:ec:51:4a:9d:31:31:40:16:1e:06:6d:36:6f:43:d7:68:58:
74:f2:44:2f:2c:d3:94:c1:bb:8c:8a:d6:3b:5d:de:75:69:b0:
4a:84:7c:8a:a6:33:b2:16:71:33:2c:c9:d4:7c:d0:54:ee:4c:
a3:cc:af:70:12:2a:b3:d7:a0:53:b8:29:b9:01:18:e2:6d:8c:
0e:04:d6:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdG1J/NsTZjoQe8HdCF/ZRHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMzQxODA3ZjIwYjA0NTE5YzU1MmJiMzhjZTM3MjkxNGI3
Y2MzNDUwHhcNMjUwNjA2MjAwMDI4WhcNMjUwNjA3MjAwMDI4WjAzMTEwLwYDVQQD
EyhhMmU3MzZhYmNjZGQ2NTNkMGFmMDRlOWM2ZWVkMDllMTVhMTg5NmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmk7d/kDoqOcnKgJyRcC7KS2amsXC
QgnA9Sj31EZ4XfNBgxyGi0YbrJ8pYBtvgiI+hYisl+bqsWSf1BRoVn4nh0/Z4SRx
DSwBHDcJ7PrZdSefI1kQDxHzJRN09835FqG1a9kctlRJAlDtPtlXjOCbM/dbS94D
felOgi+EUb+3bAbgVf8VzfHcSWc9ea9WDYu/ruTO9BR6JX/mWq2rq1PXw+fhek9a
4Atk7dUGE/6/YS5qTNBfbl+rnK/H4NFfR+FKVZn4U+91rCgcJmbhRDTLXSLxKSVj
xkDtxYBbEEjh02XryvNgjx2z3eAO6OispYYv90UP+BtR4Sad0Ue6DeLYLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKLnNqvM3WU9CvBOnG7tCeFaGJaqMB8GA1UdIwQY
MBaAFC80GAfyCwRRnFUrs4zjcpFLfMNFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHpRWUJfSUxCRkdjVlN1empPTnlrVXQ4dzBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9lNjRhMmYtZmUyNy00ZTQ3LTk5ZGUt
MzY4MGFlYjYzMmRhLzEvTHpRWUJfSUxCRkdjVlN1empPTnlrVXQ4dzBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9lNjRhMmYtZmUyNy00ZTQ3LTk5ZGUtMzY4MGFlYjYzMmRh
LzEvTHpRWUJfSUxCRkdjVlN1empPTnlrVXQ4dzBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcJ5nXYFO
TsU5urtP7pmK4fxyT92UfbH/q/W+IwsBn2uKaBx7MXBl7/Xu8i1kgEiGtbh185Wb
RYN0wkuTC8DOPcrc5+Z+R1YZAWUi85ZMMmwjIKKPuf11aw3X/vCmMedOaBLdFGwo
ERFcU5bWxvUZpg71sU23mVRnE/ZNKOz0PHR6Lw0JyAaTMwhvBJiNauLRoiTvidV7
wSrM6P4bgWTBtVOpnwp+ifesa7Sqlsqe+gZvY+/UA+xRSp0xMUAWHgZtNm9D12hY
dPJELyzTlMG7jIrWO13edWmwSoR8iqYzshZxMyzJ1HzQVO5Mo8yvcBIqs9egU7gp
uQEY4m2MDgTWMQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 03:47:27 2025 by rpki-client