Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
File: LAzrgevOhZ9Qko6O0-HwqFERUts.mft (raw, json)
Hash identifier: Pk8vN8Y2ZpT2a526XBRcbLVUiaWJ4LJso6xtSjv28CM=
Subject key identifier: F5:3A:20:93:98:69:F7:31:68:99:2D:5D:4A:07:DE:B0:0B:20:0D:40
Authority key identifier: 2C:0C:EB:81:EB:CE:85:9F:50:92:8E:8E:D3:E1:F0:A8:51:11:52:DB
Certificate issuer: /CN=2c0ceb81ebce859f50928e8ed3e1f0a8511152db
Certificate serial: 0198499BE7BEEBEC62CF3A62C45286909148
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
Manifest number: 09EA
Signing time: Sun 27 Jul 2025 02:00:10 +0000
Manifest this update: Sun 27 Jul 2025 02:00:10 +0000
Manifest next update: Mon 28 Jul 2025 02:00:10 +0000
Files and hashes: 1: LAzrgevOhZ9Qko6O0-HwqFERUts.crl (hash: YxvaO1OB4yoBsIlSWq3ICunNtt5z6ydeDEQyPHtHq1E=)
2: Nw-tf2Fdg1IBaL0ZaEM215Hb70k.roa (hash: D6voi0MuqX48csC8cycT9bMohcrVdXkjR0ufp2F3pwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9b:e7:be:eb:ec:62:cf:3a:62:c4:52:86:90:91:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c0ceb81ebce859f50928e8ed3e1f0a8511152db
Validity
Not Before: Jul 27 02:00:10 2025 GMT
Not After : Jul 28 02:00:10 2025 GMT
Subject: CN=f53a20939869f73168992d5d4a07deb00b200d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5c:8e:d3:0f:90:59:04:ac:5b:7e:0c:eb:4f:
62:b4:59:b8:72:ef:7b:79:bc:53:7d:ca:b1:2c:69:
d1:94:06:1b:2b:1c:69:2a:6d:13:5e:fb:cc:f5:84:
e3:41:6d:76:8a:cf:a9:4f:74:b2:19:d2:18:53:06:
74:a7:82:57:d8:50:7f:d4:7b:93:81:e0:cf:91:b2:
af:ee:52:5f:22:18:f2:ed:a8:01:a2:a1:2c:c5:63:
c4:24:17:d1:07:c1:52:b6:c7:fd:26:8f:ce:b5:8c:
d2:b3:32:0f:de:0f:a0:d2:8c:cc:61:0e:26:56:19:
71:80:68:ad:6b:21:80:ba:fe:fc:6e:4e:09:ae:70:
91:1a:4b:e6:3b:b0:5f:19:5e:a1:72:d7:93:b0:95:
fd:b8:02:f7:fa:3e:e5:11:a4:d7:fc:24:06:1f:82:
84:b7:1d:53:ff:8d:e2:5c:49:2a:af:bf:1c:aa:76:
f2:50:bd:a3:c9:c9:78:ad:8d:4d:a9:2b:5b:8b:cc:
c7:78:d5:b6:b7:14:f3:ea:5c:64:3c:57:c6:d3:56:
86:ab:a0:af:b8:af:47:0b:20:14:50:94:57:28:1d:
b6:de:3d:99:df:4e:6a:64:a7:fb:50:20:75:df:43:
00:6f:10:5f:5f:1b:4e:20:94:6a:f3:61:53:77:ab:
f6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3A:20:93:98:69:F7:31:68:99:2D:5D:4A:07:DE:B0:0B:20:0D:40
X509v3 Authority Key Identifier:
keyid:2C:0C:EB:81:EB:CE:85:9F:50:92:8E:8E:D3:E1:F0:A8:51:11:52:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:a1:d4:9d:67:08:92:22:6f:8e:e8:dc:91:aa:7b:c1:df:78:
03:e0:fa:6e:73:e6:7d:09:57:ae:98:ba:6f:67:21:3f:79:13:
fe:8f:41:5f:64:05:4d:35:dc:f6:0f:64:23:f1:a0:ae:86:28:
79:03:08:53:49:37:dc:63:69:a5:4b:54:3f:fe:55:a8:e7:44:
db:6f:38:ee:72:92:01:9b:53:9c:c3:98:81:09:ed:fe:6f:8b:
9c:6b:4b:65:22:7e:4b:be:6a:41:39:34:3d:74:fe:4f:72:c4:
64:a6:8f:18:e6:01:27:0e:48:9a:68:18:fb:3d:78:b9:3a:94:
1a:05:55:31:20:75:20:0a:7f:72:bb:c6:89:ad:27:e5:a2:39:
ae:06:d4:97:3d:6a:86:e9:88:60:f9:7d:27:34:d4:07:7a:55:
1c:ba:08:2b:87:bf:ca:56:a9:ef:1e:88:45:19:c3:81:b8:78:
95:8f:de:5e:9c:04:d6:0b:56:b3:f2:8b:b7:f9:64:51:fc:2c:
15:1d:fe:20:06:13:aa:07:04:3f:ed:e0:3d:65:61:6d:78:f1:
b8:47:bb:7b:68:40:91:11:dd:9e:28:43:0e:08:dc:97:99:53:
eb:d2:09:40:0e:91:a8:a8:a3:d1:b6:58:48:c0:0f:13:e1:e0:
25:1e:6e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:22:40 2025 by rpki-client