Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft
File: LzFLwAp-WuIzSeBUBik6fWBgzaE.mft (raw, json)
Hash identifier: /s4jBCb37JJ+5ioscZNXbouBseoyt1nFlbRBAfCVG2Q=
Subject key identifier: FF:A5:37:C8:CA:8C:79:0E:92:CB:60:F9:82:1C:3B:D2:78:53:D6:A2
Authority key identifier: 2F:31:4B:C0:0A:7E:5A:E2:33:49:E0:54:06:29:3A:7D:60:60:CD:A1
Certificate issuer: /CN=2f314bc00a7e5ae23349e05406293a7d6060cda1
Certificate serial: 019A251D08EBD577C7F7995D170D51285852
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft
Manifest number: 13B9
Signing time: Mon 27 Oct 2025 10:00:51 +0000
Manifest this update: Mon 27 Oct 2025 10:00:51 +0000
Manifest next update: Tue 28 Oct 2025 10:00:51 +0000
Files and hashes: 1: 1-d5J5W-VmdNEPvaUUIc9QmXJa7c.roa (hash: WEje3N6tM8UQY4DTr2W4pxQIyOYapcmAGgNCDl+FllM=)
2: LzFLwAp-WuIzSeBUBik6fWBgzaE.crl (hash: f/CNuNSCpk+cEw2x0n6rA0nzg6CA5Ydf1/KYMKVEuSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:1d:08:eb:d5:77:c7:f7:99:5d:17:0d:51:28:58:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f314bc00a7e5ae23349e05406293a7d6060cda1
Validity
Not Before: Oct 27 10:00:51 2025 GMT
Not After : Oct 28 10:00:51 2025 GMT
Subject: CN=ffa537c8ca8c790e92cb60f9821c3bd27853d6a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d1:8a:56:cd:e8:ac:ea:7a:c3:20:61:1f:59:
42:27:37:e8:d6:09:15:49:61:a4:0b:dd:5d:11:bf:
4a:37:4a:88:76:da:67:e7:d3:32:b8:bd:ff:ff:ed:
98:39:fa:89:24:9f:bd:ad:9a:73:07:36:b1:30:f6:
da:2f:bd:74:5f:06:27:6c:01:fd:3e:55:80:28:00:
fa:c3:69:4f:37:1d:cf:08:2e:1d:57:a0:63:1e:c3:
6a:5b:74:b4:f7:5d:d6:97:bd:80:bc:48:af:26:02:
c5:c5:ae:b6:13:b8:c1:9f:89:a6:15:dd:33:15:28:
bf:30:4f:58:22:cc:86:d5:72:89:e0:00:65:da:24:
ef:d7:02:33:ed:20:76:f0:5f:3b:b3:f0:bb:99:00:
6a:2f:da:fa:0e:8a:71:df:08:69:31:93:76:00:b3:
8b:e2:40:c3:9f:b7:6b:60:1b:a5:eb:98:f7:f1:88:
a6:5d:bc:81:b4:96:91:95:e8:7e:dd:7c:7a:be:7d:
a5:61:ce:60:2e:3b:39:e8:bb:19:a8:38:f6:4f:a0:
00:c1:ca:ba:a6:eb:3b:2f:6d:45:d7:1f:ea:5b:34:
93:9c:2d:3d:eb:0e:b9:41:d6:a0:05:9b:c5:52:a6:
7e:45:31:19:5a:57:5a:ab:b3:a9:0d:25:d8:09:ee:
57:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A5:37:C8:CA:8C:79:0E:92:CB:60:F9:82:1C:3B:D2:78:53:D6:A2
X509v3 Authority Key Identifier:
keyid:2F:31:4B:C0:0A:7E:5A:E2:33:49:E0:54:06:29:3A:7D:60:60:CD:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:81:2e:e4:bf:2f:22:c2:8d:7c:50:81:ab:e1:dd:53:a2:db:
08:9d:7d:0a:aa:ff:9b:71:33:f3:70:e2:45:fc:25:ee:98:e9:
9b:37:e1:e7:ec:ce:55:7c:ce:45:73:cd:a9:ce:de:16:8a:3c:
33:0f:9f:b0:e9:70:e4:92:b9:f3:fe:96:c1:cc:14:2a:27:67:
70:49:b1:79:26:6d:17:fe:f4:3e:95:39:5b:e2:0c:fe:d8:90:
a9:e6:89:f6:35:1b:38:c3:d2:9e:31:f3:8e:7d:d6:06:7a:01:
d5:a9:a8:8b:98:7b:55:02:2b:72:33:4a:dd:5a:ce:4d:e9:62:
34:57:55:8d:2c:fb:32:f7:20:97:95:f6:0a:3b:08:31:15:8f:
6b:9b:ba:8f:0d:c7:3f:4a:28:a5:16:fb:c6:08:3d:e6:7a:de:
4c:df:4f:b7:3c:29:c0:32:d5:83:f0:b9:4d:23:94:43:e3:7f:
1c:4b:69:95:0a:2b:13:ab:a7:52:a9:2a:47:50:b7:b5:49:10:
2b:8f:90:7f:5c:62:4c:be:9a:fe:3c:f6:2b:27:59:57:a6:c5:
a4:8c:5a:68:ac:4d:53:f6:9e:a6:9d:e2:08:06:89:76:60:d9:
ad:1b:85:db:d6:1b:1c:6d:6d:54:97:18:3f:26:08:90:cf:cd:
80:61:09:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:31:09 2025 by rpki-client