Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
File: IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft (raw, json)
Hash identifier: 6LLghZmlyMktxgKqhyyXA+tEOYzP7D7nFsL6vLX3k54=
Subject key identifier: FD:08:B9:40:35:84:56:7E:4E:9B:BC:51:F7:89:11:FF:87:C1:37:95
Authority key identifier: 22:92:D9:6D:FB:66:CB:18:06:9D:8B:D1:5C:9E:90:CD:91:24:F0:03
Certificate issuer: /CN=2292d96dfb66cb18069d8bd15c9e90cd9124f003
Certificate serial: 01983615EFD9830183025BF74E3CFB63F8CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
Manifest number: 0A8D
Signing time: Wed 23 Jul 2025 07:01:03 +0000
Manifest this update: Wed 23 Jul 2025 07:01:03 +0000
Manifest next update: Thu 24 Jul 2025 07:01:03 +0000
Files and hashes: 1: 7cHudsbhVZHbppHTF_ntQT5LGaE.roa (hash: gjOnvh/cfHW6KLD8KAndHZd6PiXGNmxJ/xbLzRraSmM=)
2: IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl (hash: JbsEqn8ha6YE2FirAql8P+yTYQ5B90rcVS5T1w/nX44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:36:15:ef:d9:83:01:83:02:5b:f7:4e:3c:fb:63:f8:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2292d96dfb66cb18069d8bd15c9e90cd9124f003
Validity
Not Before: Jul 23 07:01:03 2025 GMT
Not After : Jul 24 07:01:03 2025 GMT
Subject: CN=fd08b9403584567e4e9bbc51f78911ff87c13795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7a:e5:7c:3b:df:cd:8f:d4:00:5c:40:50:2a:
23:24:93:89:7a:1f:4b:49:8a:0c:d3:8f:c7:1f:04:
d7:4a:a0:73:36:37:10:d2:22:48:25:5e:b7:75:bc:
df:dd:db:0d:58:3e:4b:8b:89:cd:42:2b:25:c3:78:
72:b0:19:14:92:04:3a:c0:bd:d4:6d:9c:3f:3c:b7:
c2:39:d4:80:95:a1:8e:bd:72:39:04:4a:c2:3a:b0:
d2:32:3c:8d:dd:46:2f:b0:1d:74:7c:6e:c6:c4:43:
07:39:5e:c6:64:1e:de:41:47:53:2f:ce:be:14:35:
d5:fa:8a:15:f6:96:66:17:a4:6a:c4:b8:3c:0c:9b:
2a:90:ce:78:9e:1c:14:7f:83:d6:79:ab:2a:0a:50:
fd:1c:91:3d:c7:cd:43:25:08:ab:c1:22:0d:e2:73:
d9:e5:92:7a:d7:43:03:2e:d7:4e:2b:41:5b:cc:4a:
97:60:fa:23:72:c0:be:1f:3c:90:e1:66:81:8b:fa:
cc:47:40:11:d9:6a:2b:93:78:ea:99:ba:1d:93:bd:
e8:8f:c2:38:ce:3d:2f:1e:7e:4a:f7:fa:61:e6:a8:
e2:13:55:14:c5:b0:32:e4:b2:a4:07:16:b9:f2:4a:
2f:58:1f:bc:b8:2b:66:83:e0:f7:b9:00:68:24:ea:
ff:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:08:B9:40:35:84:56:7E:4E:9B:BC:51:F7:89:11:FF:87:C1:37:95
X509v3 Authority Key Identifier:
keyid:22:92:D9:6D:FB:66:CB:18:06:9D:8B:D1:5C:9E:90:CD:91:24:F0:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:45:a4:77:a6:78:a9:11:23:fa:56:11:9f:58:38:a6:c1:50:
5c:e4:4c:6a:7f:77:f5:80:eb:2d:0d:8a:0f:2d:08:cb:a4:25:
a2:41:47:35:33:42:b6:5d:35:40:4b:dd:c4:05:2e:fa:24:35:
ef:d3:5f:86:87:79:64:77:98:ae:63:13:55:1f:1c:16:4e:7a:
a1:07:84:70:00:0c:bf:00:65:1e:d6:76:fe:43:b5:9f:cc:96:
2e:8f:4d:f5:20:36:62:1c:06:73:a5:b8:35:3b:51:b2:0d:03:
cf:81:fa:32:ee:c4:7d:e4:76:97:08:0b:67:9b:76:8b:56:16:
4c:72:a4:8a:97:80:ef:8a:88:a4:b7:80:17:36:cf:fb:f3:12:
f7:0c:dc:0f:87:1a:13:6e:64:1c:e2:53:27:89:b3:17:dd:2c:
16:94:34:ae:59:e9:c4:17:ac:a8:50:ec:62:f4:83:fe:33:8a:
f6:aa:a9:5e:9b:1e:cc:9f:32:64:d0:74:5e:89:6b:cd:3b:8c:
12:e9:2d:2e:a3:7d:26:99:66:15:a4:e4:87:d2:80:08:6c:10:
d6:0e:5e:13:72:e1:76:1d:9e:35:a3:5e:3a:48:9a:3e:09:6b:
cd:00:99:79:e8:50:50:32:d7:c6:bd:b3:35:a3:76:23:0a:a2:
87:68:c0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:13:48 2025 by rpki-client