Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
File: LZrhAubK20caMKDIWTPgOQvy-co.mft (raw, json)
Hash identifier: 2kpcKM3lthVkFC0ajEzOyH45os4eYX78bVn3tUqtRgo=
Subject key identifier: B3:92:B2:95:FC:D2:70:B9:84:CE:EC:75:49:11:9C:E5:37:85:36:F5
Authority key identifier: 2D:9A:E1:02:E6:CA:DB:47:1A:30:A0:C8:59:33:E0:39:0B:F2:F9:CA
Certificate issuer: /CN=2d9ae102e6cadb471a30a0c85933e0390bf2f9ca
Certificate serial: 019A239BEDFF440F74F454CACB490BEEB3A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LZrhAubK20caMKDIWTPgOQvy-co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
Manifest number: 0CE4
Signing time: Mon 27 Oct 2025 03:00:12 +0000
Manifest this update: Mon 27 Oct 2025 03:00:12 +0000
Manifest next update: Tue 28 Oct 2025 03:00:12 +0000
Files and hashes: 1: LZrhAubK20caMKDIWTPgOQvy-co.crl (hash: XVg2mXguqXbotH6DM/8mAUUR6OzqiBCiiL9h4S2268A=)
2: pl2IcfdvWd1nTAPO2kcXwuCa2Cs.roa (hash: 85u+tpWuF05Mbmd2ccACruWRfJ5rpPXoHevfa/3sNY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
rsync://rpki.ripe.net/repository/DEFAULT/LZrhAubK20caMKDIWTPgOQvy-co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 03:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:9b:ed:ff:44:0f:74:f4:54:ca:cb:49:0b:ee:b3:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d9ae102e6cadb471a30a0c85933e0390bf2f9ca
Validity
Not Before: Oct 27 03:00:12 2025 GMT
Not After : Oct 28 03:00:12 2025 GMT
Subject: CN=b392b295fcd270b984ceec7549119ce5378536f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ca:f5:6b:10:5f:c7:4a:6c:6d:7c:d5:a5:5f:
d8:c8:48:d2:41:dc:a4:66:ba:1a:d4:28:77:ea:fe:
fa:63:c6:e8:9b:b1:c6:08:85:71:7e:18:30:73:94:
6a:34:fc:56:3e:ab:f3:21:95:de:89:3d:a4:c5:c7:
22:04:61:86:af:f3:ce:85:bf:11:ac:c0:be:44:b7:
d2:3c:a8:dd:4b:27:4a:50:09:da:4e:ca:ff:55:2d:
dc:39:22:30:a8:86:5e:e3:f8:49:71:e4:8e:d5:ad:
29:e8:f6:89:af:7c:63:7a:e8:8b:57:a8:3f:5c:1c:
61:ef:ec:ff:d0:0b:13:1f:84:89:75:0b:b4:05:3a:
d4:03:85:21:07:91:1f:78:a9:5c:8a:8e:d8:06:4a:
6e:d8:62:72:15:b8:6d:98:40:99:0d:0f:b0:57:dc:
78:79:5a:c5:1f:e2:75:f3:0d:cd:ce:0e:bb:8a:4d:
c0:4f:42:ca:5d:f8:52:37:72:88:ba:af:9a:3c:8f:
9e:3d:2c:72:78:37:03:be:24:e8:5e:cd:07:eb:52:
7f:74:4a:54:8b:d2:41:2a:6f:37:ac:5e:89:57:42:
3d:7b:9f:76:e5:2b:91:19:c8:b4:e2:99:61:bf:e7:
39:b0:33:3d:e6:d5:63:8a:6b:83:37:31:81:34:ec:
be:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:92:B2:95:FC:D2:70:B9:84:CE:EC:75:49:11:9C:E5:37:85:36:F5
X509v3 Authority Key Identifier:
keyid:2D:9A:E1:02:E6:CA:DB:47:1A:30:A0:C8:59:33:E0:39:0B:F2:F9:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZrhAubK20caMKDIWTPgOQvy-co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:94:c4:db:85:bf:07:12:3a:34:c1:24:7e:70:75:91:c7:78:
a9:1e:6c:82:be:94:2a:f6:7e:65:79:e8:f5:f5:b5:f8:c7:14:
fb:31:76:ff:b9:55:a0:9f:30:03:ac:1e:7f:fb:fe:9c:9e:e6:
e2:ca:a7:73:27:8d:d8:67:1f:47:90:2f:1c:a2:fc:9b:c7:5d:
08:89:cd:fb:41:fc:d5:98:f7:cf:0e:5a:69:46:7f:f9:b2:c9:
4b:5d:33:b5:7d:20:c5:b2:45:40:c7:e4:43:18:a0:96:99:e1:
de:6a:66:a8:c7:fc:21:a2:f8:9c:1a:3f:fb:05:c0:da:d9:9b:
b5:4d:c2:08:f8:2a:ad:75:66:4a:b4:b8:97:72:f1:8c:4b:46:
ff:12:41:44:ba:b8:07:1b:25:42:0f:2c:7b:cd:10:df:b3:7e:
64:f2:04:7c:f3:bd:26:20:47:0c:3b:b1:df:8b:69:0c:5b:ab:
78:2e:33:24:0c:79:c3:63:dd:2f:33:b4:a4:ec:4f:e6:a9:1d:
5d:10:71:4d:49:25:ea:91:f8:3f:a1:8a:58:00:70:cb:3e:32:
b4:93:46:42:57:f5:88:cd:93:1f:dc:a0:77:80:fe:a1:de:6a:
29:68:45:8b:00:15:33:6c:d8:1a:85:4f:0b:25:82:74:b5:fa:
f4:45:5a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:09:18 2025 by rpki-client