Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
File: lZI0IMz-4DjNyutDkjEKBZivej4.mft (raw, json)
Hash identifier: LI4UIbjulEdiN8asRFVi/zet5fH/v9WS5cuxmJlpKYg=
Subject key identifier: 2A:C5:13:68:52:0F:8E:6D:9B:A6:D1:0C:AD:9D:D9:7F:98:A1:D3:F0
Authority key identifier: 95:92:34:20:CC:FE:E0:38:CD:CA:EB:43:92:31:0A:05:98:AF:7A:3E
Certificate issuer: /CN=95923420ccfee038cdcaeb4392310a0598af7a3e
Certificate serial: 01984664383276A96BF99F793F6E47273A33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
Manifest number: 0206
Signing time: Sat 26 Jul 2025 11:00:29 +0000
Manifest this update: Sat 26 Jul 2025 11:00:29 +0000
Manifest next update: Sun 27 Jul 2025 11:00:29 +0000
Files and hashes: 1: fATmKoPkxnFaeIEAAJJ02F6yM_M.roa (hash: 9vZ8Uz6k4By0kjf2AHSVtoIff7eSff80iL0R5CgM+Wc=)
2: lZI0IMz-4DjNyutDkjEKBZivej4.crl (hash: C5DI0LeTWY0WfZORGErup2F5AFN6vv4zlyBhmieb8HM=)
3: nxwl4psj0ZeUsfjLgqXGlryR_84.roa (hash: V1Lgl4QJ6FifoZAOxyZaoWJeRw45hAvPFwT3/eP0Ph4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:38:32:76:a9:6b:f9:9f:79:3f:6e:47:27:3a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95923420ccfee038cdcaeb4392310a0598af7a3e
Validity
Not Before: Jul 26 11:00:29 2025 GMT
Not After : Jul 27 11:00:29 2025 GMT
Subject: CN=2ac51368520f8e6d9ba6d10cad9dd97f98a1d3f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:48:66:f6:47:eb:36:f0:69:7a:60:19:f7:ca:
b6:f5:90:a1:60:51:17:98:fe:64:d5:56:b3:a4:64:
f8:d6:8a:f1:e1:d7:aa:84:e4:62:84:47:6c:47:f5:
6a:20:99:f4:6e:67:35:ef:c1:71:13:b8:3c:ef:ce:
b5:46:bd:b5:72:e5:6a:58:09:56:23:8f:7c:29:95:
1a:49:36:f0:14:9b:2e:b9:cb:3d:5a:8d:eb:f6:80:
cc:63:b3:99:85:b8:08:be:dd:bc:d2:0e:f2:ee:97:
6d:45:e3:14:70:31:9d:e3:4a:a2:bd:b5:1a:bc:82:
9b:e1:cc:9e:be:a0:78:ad:13:ea:6f:14:25:3a:80:
0c:c3:7f:78:e0:76:12:65:fd:03:f6:0f:b3:ee:44:
ff:68:ee:f2:33:e8:6c:da:3f:2a:6d:98:4e:c8:c7:
c7:70:d8:8c:ff:41:0e:99:4a:21:06:4d:b6:ac:ee:
c8:77:99:77:97:55:16:1c:0d:e5:73:01:ef:52:e3:
07:33:33:ec:75:37:e7:c1:de:97:f3:d8:ce:1b:5f:
12:81:76:15:c8:98:09:77:bc:b6:6d:72:16:e5:d4:
ab:b9:d8:4f:02:58:0d:cc:06:60:d7:39:30:05:aa:
cb:cc:ba:6e:37:ee:82:40:02:fb:89:c9:fb:de:e6:
34:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C5:13:68:52:0F:8E:6D:9B:A6:D1:0C:AD:9D:D9:7F:98:A1:D3:F0
X509v3 Authority Key Identifier:
keyid:95:92:34:20:CC:FE:E0:38:CD:CA:EB:43:92:31:0A:05:98:AF:7A:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:92:74:be:9d:ab:75:c5:77:fa:2d:f5:57:74:bf:c3:bc:08:
e7:e2:6a:4f:72:cf:00:6d:02:6d:a0:c0:dd:cb:14:94:f8:84:
af:89:02:5f:57:b2:7f:b9:6c:c1:b1:63:c6:bf:64:dc:dd:91:
31:76:37:18:f7:a5:b0:b4:b6:fe:39:5c:53:e2:16:55:37:6e:
9c:d5:94:2e:d9:1a:1b:b1:d1:bf:10:c2:2b:5d:15:a2:61:bc:
24:ea:36:c4:5a:29:e7:c4:68:77:b0:3d:88:79:b6:41:55:5e:
67:59:b4:56:46:87:1b:d4:68:87:35:89:ae:29:84:1e:a7:4e:
1e:51:db:25:40:91:c4:97:e5:1b:74:dc:c4:e0:c7:32:a8:3b:
39:27:32:01:e3:04:83:61:a5:eb:83:a5:b6:ba:d9:f7:c3:52:
ae:ec:45:5e:f1:06:16:84:c2:37:fb:1e:2e:03:a1:d2:bd:53:
cc:1f:a9:67:81:28:62:2b:e4:36:db:b3:c5:da:cd:0f:14:28:
39:0e:ef:71:04:09:8a:10:68:7a:14:c0:2c:a9:18:f9:e9:d7:
28:17:96:13:ee:bf:99:5c:c8:9c:4f:1b:bc:7e:93:18:3c:26:
8b:8c:b5:09:1c:14:a9:8b:3e:68:8f:b7:08:71:35:84:61:84:
dc:da:b4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:26:46 2025 by rpki-client