Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
File: LZrhAubK20caMKDIWTPgOQvy-co.mft (raw, json)
Hash identifier: TYO0VMoYCXi5opqXCxnYzPvZLqQmBLfrezsnHQrig58=
Subject key identifier: FA:CB:C9:C2:63:E0:0B:18:81:BC:74:82:8A:6F:2D:49:F0:31:62:5C
Authority key identifier: 2D:9A:E1:02:E6:CA:DB:47:1A:30:A0:C8:59:33:E0:39:0B:F2:F9:CA
Certificate issuer: /CN=2d9ae102e6cadb471a30a0c85933e0390bf2f9ca
Certificate serial: 01992E5A29D1D0633DBA2A46EAADA71CE9B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LZrhAubK20caMKDIWTPgOQvy-co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
Manifest number: 0C65
Signing time: Tue 09 Sep 2025 12:01:24 +0000
Manifest this update: Tue 09 Sep 2025 12:01:24 +0000
Manifest next update: Wed 10 Sep 2025 12:01:24 +0000
Files and hashes: 1: LZrhAubK20caMKDIWTPgOQvy-co.crl (hash: PrAnF6A/4R1vxyPBZ76X1Ev1yEsLA7zTQDuw2xnMCr0=)
2: pl2IcfdvWd1nTAPO2kcXwuCa2Cs.roa (hash: 85u+tpWuF05Mbmd2ccACruWRfJ5rpPXoHevfa/3sNY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
rsync://rpki.ripe.net/repository/DEFAULT/LZrhAubK20caMKDIWTPgOQvy-co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 12:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:5a:29:d1:d0:63:3d:ba:2a:46:ea:ad:a7:1c:e9:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d9ae102e6cadb471a30a0c85933e0390bf2f9ca
Validity
Not Before: Sep 9 12:01:24 2025 GMT
Not After : Sep 10 12:01:24 2025 GMT
Subject: CN=facbc9c263e00b1881bc74828a6f2d49f031625c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c3:5a:6e:6c:86:39:f8:a0:16:a9:b3:7c:e2:
27:58:05:68:b7:88:79:08:55:b9:c3:80:28:c6:2d:
18:fa:06:0f:90:60:8c:86:ac:5b:5a:78:d2:61:99:
56:6e:01:ad:60:6d:5d:12:cc:c2:99:d6:37:07:cd:
e0:d1:04:c1:12:96:45:bc:b6:bd:9a:94:2e:38:98:
75:24:96:10:cd:55:8e:01:dd:97:cc:f0:d3:02:66:
c3:4d:3e:c9:34:24:b9:a1:c2:f7:00:a1:5b:f7:da:
9e:4c:38:5a:00:f0:0d:65:b6:ca:08:2b:31:09:83:
d5:1b:4e:c2:10:14:e3:92:ac:68:07:53:7b:36:49:
c2:17:6c:9e:cc:88:1f:b3:f4:0c:5c:40:29:66:8a:
c2:5e:5c:12:ad:84:97:86:ec:26:6d:ea:7b:6d:db:
6a:c1:e9:e2:86:01:0a:5b:de:ab:cc:03:8d:00:2b:
a6:1d:7c:87:ec:d9:1e:5c:20:2c:4e:cc:89:26:8c:
51:8e:e2:23:aa:47:f4:9f:b0:27:c6:8f:33:27:54:
0e:b0:df:33:f0:de:17:98:9e:da:71:57:ce:51:ec:
54:96:6a:a9:68:39:04:ea:db:e4:05:a1:a5:29:2e:
98:40:53:7f:87:e2:c0:97:6e:ce:f3:06:72:67:97:
ef:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CB:C9:C2:63:E0:0B:18:81:BC:74:82:8A:6F:2D:49:F0:31:62:5C
X509v3 Authority Key Identifier:
keyid:2D:9A:E1:02:E6:CA:DB:47:1A:30:A0:C8:59:33:E0:39:0B:F2:F9:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZrhAubK20caMKDIWTPgOQvy-co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7514d6-59de-460e-8e2f-ffcee1533577/1/LZrhAubK20caMKDIWTPgOQvy-co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:b5:01:5b:b4:52:4b:98:a2:07:c1:92:d2:b7:fe:56:56:db:
3c:d4:77:5a:71:75:f2:01:99:a4:b2:0c:1c:ea:55:73:f1:12:
43:31:59:74:b1:ae:4d:7e:87:f9:ef:26:7d:7f:46:2f:be:ae:
a4:e5:7a:54:7d:05:e6:ac:d6:18:1a:53:f6:e2:99:70:d0:7b:
aa:00:0a:2b:29:0e:ab:53:32:18:24:d5:3a:eb:b4:8b:80:3a:
57:61:61:0c:c6:e0:1b:02:c8:1a:0b:b2:0b:1d:d3:4c:ad:06:
ea:97:a5:7f:df:b0:e0:b7:28:99:2c:1c:a1:3d:a5:03:26:8e:
32:83:c8:40:ed:d0:99:99:db:9a:c9:80:a8:34:76:e6:34:1d:
b2:45:1d:44:34:a1:3b:7b:de:10:32:97:c3:59:9d:9a:2b:3f:
60:49:67:cc:79:16:03:20:63:2f:12:55:2f:de:bc:da:28:af:
d7:ed:c0:e6:5b:69:ee:8c:a3:dc:1d:0a:19:75:0f:54:e2:1f:
fd:0b:13:78:97:74:45:c1:6e:29:23:0a:a8:5e:26:0c:2c:96:
6f:d7:dd:ff:f6:3a:19:55:01:1d:46:d3:3b:fb:ac:98:e4:fb:
12:df:5b:e7:a2:a7:87:73:45:ff:6d:98:69:4d:d7:fb:4b:76:
17:e8:0c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:43:16 2025 by rpki-client