Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
File: lzvsM65zjJiViBnGwTuzNe40q0w.mft (raw, json)
Hash identifier: I0/GEKoZEWogeKi99/g9Vy5YN90Ni7aDUkw0hraU3Es=
Subject key identifier: A7:7B:D1:57:1D:4E:E1:3C:AD:D5:2F:60:8B:04:AF:DE:B4:C0:05:54
Authority key identifier: 97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
Certificate issuer: /CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Certificate serial: 0199C60E240FA2D70F83F5F3CD0B44B388A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
Manifest number: 0D6D
Signing time: Wed 08 Oct 2025 23:00:39 +0000
Manifest this update: Wed 08 Oct 2025 23:00:39 +0000
Manifest next update: Thu 09 Oct 2025 23:00:39 +0000
Files and hashes: 1: 04AAIWN8CdjN6G01O3D_l5i-Jvk.roa (hash: Mv4GpM35beFDVPlXDkHbY9A9imQnPo9JK9qNbOoM+YU=)
2: 9-T9tTEpFFagDxBNkX4Bbf2UnDM.roa (hash: G5P+io7+nluFSPyZaIxd4Qa6X2iCyWaqgj9ylJYiWn8=)
3: lzvsM65zjJiViBnGwTuzNe40q0w.crl (hash: Za7qK4SQzla5ZrA1NUMreeZCcYk2RCAZVm20oLnSOQI=)
4: tuawZTEX7vHBTQMJyQg0WD-oypg.roa (hash: IFKGL2W7O7px/Tqsp660BBZcbUWDZWgLugycTaSmqvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c6:0e:24:0f:a2:d7:0f:83:f5:f3:cd:0b:44:b3:88:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Validity
Not Before: Oct 8 23:00:39 2025 GMT
Not After : Oct 9 23:00:39 2025 GMT
Subject: CN=a77bd1571d4ee13cadd52f608b04afdeb4c00554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:53:bd:76:c3:c2:c5:ff:ee:8b:78:45:fe:e8:
74:56:46:4c:54:d8:e3:5d:b2:08:11:cb:d7:83:4b:
bc:5a:4a:46:0e:bb:aa:2c:70:fc:a0:d1:1e:a4:04:
f1:b0:81:b6:94:af:a7:3a:8b:68:c3:9f:b1:93:47:
23:6e:68:08:e0:cf:a1:a5:9b:95:66:73:69:1d:d8:
71:07:8a:b1:ce:fb:43:70:0c:cc:0f:72:61:c3:03:
e3:8e:ee:13:1f:f9:40:03:91:59:05:02:df:c8:87:
87:72:40:c3:a7:bf:74:48:73:71:83:c9:9d:16:64:
8a:9b:c7:e1:29:e0:3c:80:c1:b5:d0:5c:85:b1:32:
7a:a4:29:d9:5e:0c:e3:9b:ac:a3:ae:17:c9:7b:93:
6c:97:13:29:46:aa:8b:d8:e3:35:1e:e2:fd:06:b1:
53:74:7d:74:c3:18:2b:78:37:13:aa:d5:77:86:5c:
a1:88:80:36:a4:86:8c:03:d8:b3:d4:9f:53:61:bd:
5b:85:b4:d4:75:e2:6c:45:03:15:bb:75:88:4c:1c:
2e:38:a1:d5:bb:51:c4:be:2c:9e:29:06:96:a7:27:
4b:3e:a7:0d:43:d9:42:1d:b2:6f:96:85:29:d8:59:
b6:18:de:a1:45:60:c4:42:d8:c3:94:c9:75:c7:90:
7b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7B:D1:57:1D:4E:E1:3C:AD:D5:2F:60:8B:04:AF:DE:B4:C0:05:54
X509v3 Authority Key Identifier:
keyid:97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:49:c9:4f:3d:34:c1:c0:12:d0:40:c2:42:98:21:69:b4:4f:
07:20:79:bf:6f:71:b4:31:cb:c7:4f:b5:76:d2:be:1d:01:b3:
19:b0:75:e2:df:f3:8c:f3:77:e0:20:74:12:b0:db:60:5b:47:
48:72:af:94:6e:60:76:99:33:e3:0c:59:a1:e0:6c:d3:4a:ba:
3e:f5:4e:6b:e9:36:23:f7:28:30:f5:6e:d1:61:4d:12:c9:27:
b5:51:d4:56:2b:0b:e0:60:36:10:d7:39:7d:fb:eb:df:ea:5c:
58:28:66:d6:70:92:b0:11:e5:d7:1e:10:05:16:d0:bc:3d:9d:
67:77:cc:e0:ef:eb:b4:a5:de:a2:a9:68:80:d7:8d:af:12:77:
34:bf:1e:72:b4:03:15:cf:43:b8:94:32:7a:ee:1f:50:af:b0:
3e:18:12:d2:22:d6:bd:2b:49:75:84:33:f4:91:62:d8:32:7f:
ab:43:94:8d:6b:ac:ec:45:d7:d9:20:5d:91:7f:89:14:50:f6:
e8:9f:73:f7:d0:e5:58:0e:e7:4b:37:79:fd:89:c7:49:54:d2:
8e:bd:4a:66:2a:c2:65:7e:df:d6:b2:53:71:af:5f:32:31:67:
3e:80:93:16:b4:dd:90:70:bb:d5:59:64:3f:b5:26:69:87:19:
be:e9:c6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 06:09:48 2025 by rpki-client