Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
File: LAzrgevOhZ9Qko6O0-HwqFERUts.mft (raw, json)
Hash identifier: zoITQuDy/GvltUQOHrT8ReXqR/dVZzTPp/x8JW8Gt8Y=
Subject key identifier: B8:CB:CB:24:8C:C9:4E:A3:14:C4:87:27:EE:E9:45:09:F2:24:E8:9C
Authority key identifier: 2C:0C:EB:81:EB:CE:85:9F:50:92:8E:8E:D3:E1:F0:A8:51:11:52:DB
Certificate issuer: /CN=2c0ceb81ebce859f50928e8ed3e1f0a8511152db
Certificate serial: 01993349A705FCAFDD972FB3B2372B2993B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
Manifest number: 0A63
Signing time: Wed 10 Sep 2025 11:01:28 +0000
Manifest this update: Wed 10 Sep 2025 11:01:28 +0000
Manifest next update: Thu 11 Sep 2025 11:01:28 +0000
Files and hashes: 1: LAzrgevOhZ9Qko6O0-HwqFERUts.crl (hash: PpQTaRqh/lzy56WvLH8hMv+A255uru6LtHHMcJ5+AyQ=)
2: Nw-tf2Fdg1IBaL0ZaEM215Hb70k.roa (hash: D6voi0MuqX48csC8cycT9bMohcrVdXkjR0ufp2F3pwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:49:a7:05:fc:af:dd:97:2f:b3:b2:37:2b:29:93:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c0ceb81ebce859f50928e8ed3e1f0a8511152db
Validity
Not Before: Sep 10 11:01:28 2025 GMT
Not After : Sep 11 11:01:28 2025 GMT
Subject: CN=b8cbcb248cc94ea314c48727eee94509f224e89c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:13:59:91:39:1e:ef:b5:43:24:38:51:ca:6e:
8f:cf:67:bb:c0:cc:18:54:b6:4a:97:dc:09:b9:9a:
93:df:1b:12:d0:06:85:f5:6a:30:72:f5:e7:35:bc:
8c:10:0b:9c:a7:8e:79:bd:25:62:25:0f:31:cd:1d:
22:53:e3:51:62:85:72:15:04:2d:d4:cd:b1:b0:d8:
dd:13:e5:9d:e3:84:1a:4a:0c:42:1d:bc:70:da:71:
0f:91:45:73:18:b7:f5:b4:89:ea:03:33:dc:3b:47:
4f:0b:bf:5e:85:e2:7a:dd:67:fa:8b:66:c6:70:b3:
31:e5:86:33:23:dc:61:68:ff:f1:4f:1f:0e:ee:72:
e5:f5:b7:28:ac:30:17:8b:c6:51:7b:cd:ad:05:3c:
68:15:3b:d6:6b:f2:69:c8:28:53:79:ed:5b:63:0d:
78:5d:6c:57:8b:09:52:f8:8f:f1:cb:ad:b8:90:c4:
07:ce:e4:a1:74:a3:f9:20:90:f8:0b:2e:8e:eb:16:
65:9a:26:96:20:5a:87:2d:b0:fd:65:77:33:1a:47:
7f:7c:23:13:2a:a0:d4:5c:fd:75:b0:6a:d8:ab:aa:
16:0a:c0:af:a2:b0:dd:1b:cf:4b:e1:91:49:cf:9c:
6e:93:81:09:b1:52:03:c9:78:9d:bb:30:e2:b0:f3:
13:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CB:CB:24:8C:C9:4E:A3:14:C4:87:27:EE:E9:45:09:F2:24:E8:9C
X509v3 Authority Key Identifier:
keyid:2C:0C:EB:81:EB:CE:85:9F:50:92:8E:8E:D3:E1:F0:A8:51:11:52:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:c8:aa:32:c8:15:e1:d5:cb:4a:3a:8f:ad:9b:e9:a6:38:30:
a0:c7:13:dc:0d:e9:bc:4f:dd:a8:98:ef:38:1f:19:2d:33:98:
d1:7d:e4:d2:c1:da:13:36:b3:68:c7:ad:e1:7f:eb:c6:b6:98:
7e:85:68:66:59:87:6a:f6:5e:30:ff:81:17:53:76:74:33:5a:
05:a7:1e:6e:69:79:68:3a:bb:44:d7:ab:6f:5a:65:ce:f3:74:
a1:9d:c8:ad:82:a0:50:5f:c9:f7:bb:e6:85:1b:1c:83:e0:e5:
30:e7:56:a9:a4:e7:d8:94:39:41:20:f7:3f:81:0e:bf:6b:19:
13:31:f5:93:66:5b:21:4e:13:15:9c:99:eb:72:5b:56:0d:b6:
76:46:09:c5:ca:b3:9e:8f:8a:f3:29:10:bc:30:52:05:63:22:
0b:e6:dc:3b:d9:e6:c9:2f:7c:5e:9d:fb:fb:31:69:6f:6f:31:
1d:88:6a:89:b6:72:77:c0:9a:74:b4:88:6c:f3:6a:a8:a2:8c:
79:eb:d0:90:e2:f2:b1:4f:7f:a0:50:dc:c0:d6:e4:e5:f8:3d:
7a:a9:8b:15:ed:17:a6:0b:bb:cd:64:16:92:b4:b8:71:64:83:
63:4a:64:00:4b:ba:74:c5:06:23:68:b4:37:08:88:95:b2:98:
20:4d:a6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 12:58:39 2025 by rpki-client