Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
File: lZmz54I3DcKBT1JcHW7OhNj3DzY.mft (raw, json)
Hash identifier: HzB49ydFIR6MB9CW8po5C8onMdM3jdSKjlTgufYyNO4=
Subject key identifier: B1:F4:5F:C9:49:94:2A:E5:55:93:78:74:D2:0F:27:B6:7B:8F:84:0A
Authority key identifier: 95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36
Certificate issuer: /CN=9599b3e782370dc2814f525c1d6ece84d8f70f36
Certificate serial: 019848F724CE2E33F7F9E032AB08B503E1B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
Manifest number: 02A1
Signing time: Sat 26 Jul 2025 23:00:13 +0000
Manifest this update: Sat 26 Jul 2025 23:00:13 +0000
Manifest next update: Sun 27 Jul 2025 23:00:13 +0000
Files and hashes: 1: 0VA_9HQvgavGjx805ubmo2Lo5H0.roa (hash: LdNiPcj48/zXBSO9oEQ4RJjrS+zHAsqfBOtXhy9k8x4=)
2: VrF_JXAYi7cHSdA7vOtQcy0-na0.roa (hash: T3vCer2CYjMD216ESnj/Jeswzt56af8ZdG15R1wMajk=)
3: lZmz54I3DcKBT1JcHW7OhNj3DzY.crl (hash: P6zXu/IdyCtAxYOAdbic2hXhgsVRh5DpN1GUgXvDJLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:24:ce:2e:33:f7:f9:e0:32:ab:08:b5:03:e1:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9599b3e782370dc2814f525c1d6ece84d8f70f36
Validity
Not Before: Jul 26 23:00:13 2025 GMT
Not After : Jul 27 23:00:13 2025 GMT
Subject: CN=b1f45fc949942ae555937874d20f27b67b8f840a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:52:a9:89:03:3f:b2:98:3d:7e:a5:68:5e:91:
f1:bc:40:5c:f8:9d:14:06:3e:94:49:54:23:30:8d:
50:d9:45:5b:f9:2a:4e:57:1f:d5:43:52:6e:1d:30:
92:b3:98:2b:21:55:46:30:a9:59:2b:1a:3b:1d:e3:
91:6a:c5:00:4d:23:47:2b:0a:06:21:5b:99:1b:ea:
7d:4f:88:5f:a3:9a:82:fa:18:98:05:6f:9f:91:a4:
94:ef:f2:4b:a4:e6:51:a5:05:a8:8c:a3:03:1c:e7:
c8:90:74:fd:0c:27:1c:e5:3b:36:46:94:f4:ec:93:
d7:1c:5e:4e:06:be:05:dc:06:32:e2:31:52:7a:98:
9d:4b:5e:66:18:19:c5:a8:af:9e:e7:e8:db:8f:20:
01:12:86:7c:78:97:bf:df:48:6c:13:59:25:d2:83:
a1:c2:aa:ee:5e:45:e5:f2:83:f5:08:ad:b0:2b:d1:
a3:8e:55:87:e2:df:43:67:fe:1a:96:80:ea:f8:ab:
80:2f:2a:10:01:39:d9:5b:cd:2d:f4:ed:16:0c:b6:
f9:98:57:74:1a:70:d3:c1:66:a0:e4:10:d5:7a:f8:
32:22:e7:2a:f9:77:d2:1d:b7:d0:d2:71:09:ef:ea:
34:45:c3:ca:82:eb:9b:c6:a1:39:58:99:7f:61:d9:
de:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F4:5F:C9:49:94:2A:E5:55:93:78:74:D2:0F:27:B6:7B:8F:84:0A
X509v3 Authority Key Identifier:
keyid:95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:3e:cc:30:c6:e9:59:fa:3b:ee:74:46:83:c0:1e:6f:b5:8a:
e3:d6:74:d6:57:f9:ff:e0:2f:26:2c:69:f8:c0:d1:d8:69:95:
25:9a:0c:50:31:79:d7:36:a7:5e:47:df:52:f3:37:5a:bf:9d:
0f:f5:38:32:66:3f:dd:fb:c0:cb:a5:d1:6a:70:3c:ae:cf:a3:
3e:1f:cf:bd:76:98:14:b6:f2:ed:db:67:1e:3a:78:a9:53:e0:
b6:be:54:75:19:31:68:4f:76:e6:a8:6a:da:ed:22:e4:10:6d:
79:4f:46:1a:73:0a:36:d6:83:51:b8:2d:12:62:75:e6:b8:49:
af:9d:af:0c:8d:1b:bb:c8:9f:f9:17:15:17:50:d6:20:99:e5:
f4:61:1e:65:cf:3d:4b:6b:4b:5d:ff:72:51:ab:f3:45:cb:93:
c5:18:43:d8:78:42:db:51:a3:08:ed:34:80:ef:63:dd:4e:ca:
bd:82:62:4b:56:06:1a:00:35:8e:4b:49:c5:2d:2c:7d:62:78:
cb:4a:ec:2f:a6:05:32:c2:dc:e9:2a:92:f1:6a:38:4d:77:bd:
9b:0b:30:d1:9c:8a:b2:db:9e:41:35:fc:7f:3d:aa:5e:99:a6:
e1:66:d4:cc:0e:ae:1e:7d:8f:67:09:00:e2:70:1b:6b:7d:60:
5b:2c:8f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:33:02 2025 by rpki-client