Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft
File: LzQYB_ILBFGcVSuzjONykUt8w0U.mft (raw, json)
Hash identifier: mEM6pNOKJpEMMo2ET9Y4+C1qSqi1rbv8wfSM0ioPdqU=
Subject key identifier: E3:20:52:15:B2:5E:CE:38:98:BC:E2:F6:F4:1B:D1:2B:C7:A2:92:E3
Authority key identifier: 2F:34:18:07:F2:0B:04:51:9C:55:2B:B3:8C:E3:72:91:4B:7C:C3:45
Certificate issuer: /CN=2f341807f20b04519c552bb38ce372914b7cc345
Certificate serial: 019921E76AECC4D887611E3D20E9B2677461
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzQYB_ILBFGcVSuzjONykUt8w0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft
Manifest number: 1601
Signing time: Sun 07 Sep 2025 02:00:38 +0000
Manifest this update: Sun 07 Sep 2025 02:00:38 +0000
Manifest next update: Mon 08 Sep 2025 02:00:38 +0000
Files and hashes: 1: LzQYB_ILBFGcVSuzjONykUt8w0U.crl (hash: Dd7MCxXV/Rc/vxh3+K6tscUp+Ia68enBQ6O1T58qZ50=)
2: m-E10aW5L1-wveMhnPgC3UzI6ig.roa (hash: 1KS/uNhBScsES7reUi1gAa2nyjHWcWgOFVT/DR6eey8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LzQYB_ILBFGcVSuzjONykUt8w0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:6a:ec:c4:d8:87:61:1e:3d:20:e9:b2:67:74:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f341807f20b04519c552bb38ce372914b7cc345
Validity
Not Before: Sep 7 02:00:38 2025 GMT
Not After : Sep 8 02:00:38 2025 GMT
Subject: CN=e3205215b25ece3898bce2f6f41bd12bc7a292e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2a:7f:6e:ee:60:a1:53:43:08:e8:71:97:12:
68:f7:83:e4:e2:e4:49:2d:20:94:d1:1d:f9:a1:a9:
95:72:5e:48:d0:55:f1:db:1f:d4:ed:3f:c9:ad:bc:
26:5f:2e:be:da:3d:68:28:23:ba:5e:23:10:7a:84:
a5:b7:22:ff:bd:19:6e:c4:31:f2:ad:e6:f3:0a:83:
6e:7e:4b:0e:c8:5d:cf:ce:bc:83:2f:fb:33:1c:a3:
78:0d:2b:e5:a6:62:c4:2f:3c:d0:a8:4e:d9:59:2f:
f6:5b:72:56:1f:31:96:e5:15:82:97:d7:e9:41:1a:
a3:85:0b:25:15:fd:7b:83:77:8b:fe:6c:b6:58:a2:
9a:c5:92:c0:3d:9a:d6:be:f0:52:ce:dc:71:1d:0d:
f0:14:aa:97:60:b8:38:ef:4e:dc:39:dc:f6:a6:52:
9a:20:74:54:18:ae:d9:a4:ff:74:d4:19:fb:41:09:
f5:46:74:12:f8:90:2d:65:d4:65:b9:1d:b7:09:90:
16:43:8d:9f:ee:a8:52:dd:7c:38:4e:23:f6:e4:ba:
a6:74:64:ff:3e:bb:b9:d9:24:58:bb:53:c7:e5:99:
86:d0:d4:9a:46:d7:04:62:b5:8e:45:3a:62:9c:20:
69:64:81:dd:ef:31:53:70:41:5b:26:58:5d:0b:b8:
c0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:20:52:15:B2:5E:CE:38:98:BC:E2:F6:F4:1B:D1:2B:C7:A2:92:E3
X509v3 Authority Key Identifier:
keyid:2F:34:18:07:F2:0B:04:51:9C:55:2B:B3:8C:E3:72:91:4B:7C:C3:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzQYB_ILBFGcVSuzjONykUt8w0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e64a2f-fe27-4e47-99de-3680aeb632da/1/LzQYB_ILBFGcVSuzjONykUt8w0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:2c:21:e3:18:cf:47:97:a6:8a:95:76:0f:d6:dd:77:60:1d:
8a:d5:0c:16:af:90:fc:fc:08:82:cd:fc:1f:63:e2:b1:6e:8b:
37:b5:53:79:76:a3:95:d5:6e:c4:68:bd:05:e8:0a:bd:12:93:
ac:49:42:fd:36:f9:04:16:fd:91:cc:17:4b:27:96:3c:b9:0a:
7f:34:d1:35:68:7b:0c:39:5d:e3:d3:d4:b9:17:46:23:9c:72:
7c:05:2e:ec:f9:a9:e5:c9:03:5a:49:22:cc:7f:3a:22:2c:02:
a4:67:41:2e:3e:4e:48:54:19:4a:ac:0d:f1:51:10:a7:41:76:
ec:e1:db:d0:ad:07:61:22:e0:e0:b7:76:ad:1a:5b:35:a8:3c:
c0:48:33:bc:72:e9:a6:f9:17:56:91:70:cc:8d:87:e9:d6:23:
5f:3e:e0:da:ed:29:b8:5b:bd:64:f1:e9:49:3a:32:74:c5:92:
a0:9f:6c:22:49:68:64:6a:51:c2:4a:1c:eb:1c:ab:38:46:b6:
52:50:1e:04:ba:30:f7:7e:e4:c5:c4:ea:3f:e8:79:13:26:76:
cc:c3:bc:6b:9d:73:07:6f:89:52:27:ff:e1:c8:44:04:45:6f:
56:b5:2d:47:1c:4e:72:60:6b:e4:2a:d8:60:55:39:77:fb:3f:
e9:02:40:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:46 2025 by rpki-client