Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
File: LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft (raw, json)
Hash identifier: AxwVgWcCpHWBq+Z1XhIegTtr5esi7FXe2epmATf8z28=
Subject key identifier: BD:92:A5:26:6A:AB:BE:9D:13:B0:30:AD:17:7A:E1:27:EF:4C:D3:B0
Authority key identifier: 2D:9E:31:C9:02:9E:E4:4B:D6:81:B5:15:33:03:35:C6:A1:CF:DE:EE
Certificate issuer: /CN=2d9e31c9029ee44bd681b515330335c6a1cfdeee
Certificate serial: 019851555B08563BF32FEF6BC3DDCF77C296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
Manifest number: 1609
Signing time: Mon 28 Jul 2025 14:00:04 +0000
Manifest this update: Mon 28 Jul 2025 14:00:04 +0000
Manifest next update: Tue 29 Jul 2025 14:00:04 +0000
Files and hashes: 1: 5rwnt7U3zNdamjh9hhJ_HA_VCqo.roa (hash: LxqMIG4f6G1y41E4bvnnaVLXMyv0wjoLuCjGmeNYJdQ=)
2: LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl (hash: kFUX20zQ2X1RJrvm314D4x4nu6VlN0Wb2lGfuBEDL+g=)
3: NwLeIR_NPESbC4GUi2khijtoK7k.roa (hash: Cvm1rAd7KCGPEyQkopdZwWDBR/07H5izzQrtF4lbhAA=)
4: upgE53Ne0KMFUsGR-miso-8-5TQ.roa (hash: u1TgVu5CTRcoIplPeSQE03Pq8xZKbvkqbqoHvKMUbWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:55:5b:08:56:3b:f3:2f:ef:6b:c3:dd:cf:77:c2:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d9e31c9029ee44bd681b515330335c6a1cfdeee
Validity
Not Before: Jul 28 14:00:04 2025 GMT
Not After : Jul 29 14:00:04 2025 GMT
Subject: CN=bd92a5266aabbe9d13b030ad177ae127ef4cd3b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9e:86:b1:cf:72:69:97:7c:f7:42:e5:5b:d2:
7a:60:80:5e:4b:74:af:84:1a:21:8f:a7:49:16:36:
d6:bc:57:6d:48:7c:77:9f:76:eb:9f:5b:c2:80:c3:
53:91:b8:99:59:87:61:b7:ca:cd:82:95:6f:a6:c6:
2a:a2:b8:2f:27:3e:a9:8f:66:0c:c4:b5:99:55:e2:
ec:3f:2c:71:58:90:7c:23:0c:95:11:32:23:14:41:
4a:17:57:79:0a:6d:3c:2a:d7:b8:63:24:f3:bd:34:
51:9b:9c:38:a9:e6:69:fb:12:07:18:db:ed:b2:61:
34:7f:e8:30:fb:4c:42:4d:6f:26:9d:93:f7:a5:81:
d2:8d:84:b2:6a:b5:18:35:b7:30:b5:56:65:15:d6:
7a:cc:62:ee:c7:25:84:a7:59:8c:bf:13:34:f4:d6:
86:7f:dd:47:af:f1:60:1e:35:17:c3:65:c8:8e:d4:
96:bd:e3:bb:2f:87:83:e0:5e:77:07:3b:3e:81:96:
fc:ab:b4:90:80:af:23:7a:8d:7b:2d:8e:d8:ac:9e:
1b:f1:3c:cc:a2:5f:4f:5d:51:33:7f:87:39:a8:ad:
56:a5:07:c9:f7:fc:78:9f:88:17:61:20:9b:a5:97:
09:27:95:91:e7:d6:f5:ec:9a:09:b8:80:33:9f:a3:
91:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:92:A5:26:6A:AB:BE:9D:13:B0:30:AD:17:7A:E1:27:EF:4C:D3:B0
X509v3 Authority Key Identifier:
keyid:2D:9E:31:C9:02:9E:E4:4B:D6:81:B5:15:33:03:35:C6:A1:CF:DE:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:7c:41:97:d7:69:10:63:8e:c3:a7:5b:64:5b:e9:69:54:98:
85:8e:42:03:7b:3c:be:02:71:30:74:03:89:f3:09:1d:21:ac:
ea:ba:58:01:a2:82:0e:33:1f:ed:53:c7:4e:17:61:af:2e:99:
21:a6:92:8e:83:18:47:2a:df:8e:9b:84:19:1c:3d:5f:a6:a2:
e9:77:80:e3:9a:54:5f:f0:4b:65:7d:15:af:f4:32:4d:ad:98:
78:7c:5a:c6:4a:74:fc:b2:29:e9:4e:30:1f:f2:09:9f:d1:ae:
71:73:9c:65:52:f1:72:5b:20:5a:6b:77:0c:66:b2:5e:05:e3:
ff:96:bf:4a:26:18:b0:a8:cb:ad:45:0d:ab:05:52:e8:fc:47:
60:1c:ab:6b:61:87:01:6f:3b:61:20:0c:91:3b:35:3b:0d:f2:
89:7c:b3:1e:95:19:7f:7b:75:8b:f3:66:39:57:88:8a:32:02:
50:82:79:ea:d3:03:26:13:1a:f1:5f:6a:74:39:1b:85:54:87:
57:45:4b:57:86:3a:95:f6:5e:b9:c4:58:57:77:92:d6:5c:ab:
53:5a:3b:52:66:88:51:07:7a:98:0c:32:1d:1e:96:41:c4:dc:
34:72:47:2c:a0:b0:4b:e4:21:29:5c:49:33:81:73:c0:a0:bf:
57:e4:c7:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhRVVsIVjvzL+9rw93Pd8KWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkOWUzMWM5MDI5ZWU0NGJkNjgxYjUxNTMzMDMzNWM2YTFj
ZmRlZWUwHhcNMjUwNzI4MTQwMDA0WhcNMjUwNzI5MTQwMDA0WjAzMTEwLwYDVQQD
EyhiZDkyYTUyNjZhYWJiZTlkMTNiMDMwYWQxNzdhZTEyN2VmNGNkM2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw56Gsc9yaZd890LlW9J6YIBeS3Sv
hBohj6dJFjbWvFdtSHx3n3brn1vCgMNTkbiZWYdht8rNgpVvpsYqorgvJz6pj2YM
xLWZVeLsPyxxWJB8IwyVETIjFEFKF1d5Cm08Kte4YyTzvTRRm5w4qeZp+xIHGNvt
smE0f+gw+0xCTW8mnZP3pYHSjYSyarUYNbcwtVZlFdZ6zGLuxyWEp1mMvxM09NaG
f91Hr/FgHjUXw2XIjtSWveO7L4eD4F53Bzs+gZb8q7SQgK8jeo17LY7YrJ4b8TzM
ol9PXVEzf4c5qK1WpQfJ9/x4n4gXYSCbpZcJJ5WR59b17JoJuIAzn6OR1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL2SpSZqq76dE7AwrRd64SfvTNOwMB8GA1UdIwQY
MBaAFC2eMckCnuRL1oG1FTMDNcahz97uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFo0eHlRS2U1RXZXZ2JVVk13TTF4cUhQM3U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8xNWQ4OTYtMmY2OS00Njk3LWE2ZmMt
MDhkYTY2NTJhODY3LzEvTFo0eHlRS2U1RXZXZ2JVVk13TTF4cUhQM3U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi8xNWQ4OTYtMmY2OS00Njk3LWE2ZmMtMDhkYTY2NTJhODY3
LzEvTFo0eHlRS2U1RXZXZ2JVVk13TTF4cUhQM3U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAanxBl9dp
EGOOw6dbZFvpaVSYhY5CA3s8vgJxMHQDifMJHSGs6rpYAaKCDjMf7VPHThdhry6Z
IaaSjoMYRyrfjpuEGRw9X6ai6XeA45pUX/BLZX0Vr/QyTa2YeHxaxkp0/LIp6U4w
H/IJn9GucXOcZVLxclsgWmt3DGayXgXj/5a/SiYYsKjLrUUNqwVS6PxHYByra2GH
AW87YSAMkTs1Ow3yiXyzHpUZf3t1i/NmOVeIijICUIJ56tMDJhMa8V9qdDkbhVSH
V0VLV4Y6lfZeucRYV3eS1lyrU1o7UmaIUQd6mAwyHR6WQcTcNHJHLKCwS+QhKVxJ
M4FzwKC/V+THaw==
-----END CERTIFICATE-----
Generated at Mon Jul 28 23:18:18 2025 by rpki-client