Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
File: lzvsM65zjJiViBnGwTuzNe40q0w.mft (raw, json)
Hash identifier: qLxIMFGv9DnUeHgjQYvhAXmgUzdLQG7U0i4xqY0hVV4=
Subject key identifier: 48:E3:47:5F:20:53:32:A9:D3:06:6F:8D:2B:00:44:5B:F8:E5:4A:DB
Authority key identifier: 97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
Certificate issuer: /CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Certificate serial: 0198364C8280F4E7D51393901DC27F9C9B0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
Manifest number: 0C9E
Signing time: Wed 23 Jul 2025 08:00:40 +0000
Manifest this update: Wed 23 Jul 2025 08:00:40 +0000
Manifest next update: Thu 24 Jul 2025 08:00:40 +0000
Files and hashes: 1: 04AAIWN8CdjN6G01O3D_l5i-Jvk.roa (hash: Mv4GpM35beFDVPlXDkHbY9A9imQnPo9JK9qNbOoM+YU=)
2: 9-T9tTEpFFagDxBNkX4Bbf2UnDM.roa (hash: G5P+io7+nluFSPyZaIxd4Qa6X2iCyWaqgj9ylJYiWn8=)
3: lzvsM65zjJiViBnGwTuzNe40q0w.crl (hash: WO7EE5L/sYcnZgnjCkTTIEWgQRbsdL+I3/3pFrqoi1w=)
4: tuawZTEX7vHBTQMJyQg0WD-oypg.roa (hash: IFKGL2W7O7px/Tqsp660BBZcbUWDZWgLugycTaSmqvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:36:4c:82:80:f4:e7:d5:13:93:90:1d:c2:7f:9c:9b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Validity
Not Before: Jul 23 08:00:40 2025 GMT
Not After : Jul 24 08:00:40 2025 GMT
Subject: CN=48e3475f205332a9d3066f8d2b00445bf8e54adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:31:1b:ce:45:4a:d7:24:1e:f7:1b:38:17:b6:
8e:b7:ce:90:cb:99:77:c9:c5:97:0f:08:29:be:a9:
54:c4:28:83:c8:bc:70:5d:2e:b9:ce:a9:89:75:7f:
b9:f9:d6:0e:cd:7f:c6:df:a2:9e:55:7d:43:10:8e:
45:16:15:5a:fd:70:0f:3b:43:d9:f3:66:d8:56:b2:
14:3a:5a:b0:10:13:e7:79:5d:a4:a4:ff:ce:91:11:
af:04:60:e6:c1:89:0a:4c:61:f3:af:d5:86:c8:41:
ab:46:ae:d9:ae:60:d7:fb:53:74:01:a9:8a:0e:8a:
f9:3a:3d:ae:91:0e:bd:ef:c3:40:a0:50:4e:42:79:
82:4a:fc:d5:2b:c4:f0:d1:4f:37:b4:7d:66:e7:7f:
84:0d:54:f7:63:72:16:23:44:86:a7:67:7a:c8:95:
e4:46:61:25:08:8b:a4:be:3e:24:ce:06:32:8f:d5:
a9:a9:a2:61:c9:84:22:c6:cb:62:ca:b5:5d:30:60:
f3:3e:2f:ba:92:f7:2b:ab:26:99:31:86:2f:7c:0a:
d4:10:b3:7f:03:a9:0d:a4:d3:c6:d5:4d:b4:64:a5:
eb:f9:af:e2:68:d4:bf:7b:08:3c:d5:a5:ee:a6:10:
b1:2c:2f:fb:f9:47:e3:22:e2:b4:f4:57:53:50:69:
0e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E3:47:5F:20:53:32:A9:D3:06:6F:8D:2B:00:44:5B:F8:E5:4A:DB
X509v3 Authority Key Identifier:
keyid:97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:d4:59:60:68:19:c5:12:89:12:d3:55:bd:47:bb:54:5c:02:
34:a9:87:c9:a5:8c:4a:8e:0d:7e:6e:e7:c2:ac:b3:67:2c:0d:
7e:60:cb:72:16:53:da:d7:ba:fa:85:00:6b:ad:f4:62:fe:11:
f4:4d:19:11:7b:94:2c:d6:0f:2c:3f:1e:6a:12:f5:e8:22:96:
49:59:8b:4f:41:20:d1:87:2b:f8:b3:4a:57:29:df:34:9c:12:
5b:46:08:d3:0f:9d:9c:7a:8c:71:95:6c:cf:29:9c:8c:2a:2f:
4c:98:45:55:51:b7:db:11:a9:e7:df:07:d9:3e:2d:8c:f9:b1:
a2:de:b0:75:6a:b0:ac:f7:ed:92:18:c4:6f:a8:3c:65:c7:0e:
47:5e:22:7e:39:31:43:99:56:33:c9:7c:dd:60:bd:a4:a4:2d:
ba:a0:88:65:1d:7e:5c:22:44:33:75:d8:c7:b8:78:12:c0:4c:
65:76:db:b8:8d:19:27:aa:12:4d:ac:48:f4:e0:fe:33:20:6b:
56:8d:20:6e:18:da:8c:a6:27:0b:c0:2a:9c:91:fa:37:a9:76:
f0:71:97:4f:12:83:c1:d0:bb:87:bb:80:5a:06:6e:44:a2:fb:
c2:8a:03:e6:d2:6f:cc:6c:72:db:b9:49:79:d0:86:8a:73:a7:
ba:65:59:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:24:02 2025 by rpki-client