Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft
File: lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft (raw, json)
Hash identifier: oR8Aa2NmvnTMdNBBZOSpGAxPXkFx5Bic8znsFThUPTM=
Subject key identifier: 26:C6:8F:C5:14:68:A7:58:F5:5B:A9:44:53:C8:04:CC:60:A5:9F:57
Authority key identifier: 97:35:A9:4F:31:54:6D:43:7B:89:72:0E:84:4B:2F:12:A5:AB:F2:68
Certificate issuer: /CN=9735a94f31546d437b89720e844b2f12a5abf268
Certificate serial: 01974E8E1855F3D9C6F27361EA4FD6DC6536
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzWpTzFUbUN7iXIOhEsvEqWr8mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft
Manifest number: 0AB1
Signing time: Sun 08 Jun 2025 08:00:24 +0000
Manifest this update: Sun 08 Jun 2025 08:00:24 +0000
Manifest next update: Mon 09 Jun 2025 08:00:24 +0000
Files and hashes: 1: K_2uusZ-ceVYTyxoJbEaCXUaJZ8.roa (hash: ECfU3dqUiHJoycwQ/ZQhx1FlZVv9NEnP+CXvi3oehN0=)
2: lzWpTzFUbUN7iXIOhEsvEqWr8mg.crl (hash: NkZoQ6VwZWVSYkSSmpoj/c6atud1gAkNafcXicClrco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lzWpTzFUbUN7iXIOhEsvEqWr8mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:18:55:f3:d9:c6:f2:73:61:ea:4f:d6:dc:65:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9735a94f31546d437b89720e844b2f12a5abf268
Validity
Not Before: Jun 8 08:00:24 2025 GMT
Not After : Jun 9 08:00:24 2025 GMT
Subject: CN=26c68fc51468a758f55ba94453c804cc60a59f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6c:b0:58:4e:f9:bf:ab:f6:d3:59:0e:ec:bc:
8e:f6:69:86:bc:95:ac:95:d6:80:78:eb:61:e6:db:
59:f6:28:08:15:b2:90:77:e2:00:77:48:05:a1:81:
ae:89:18:d2:0a:f8:70:73:65:f2:26:53:36:b8:ea:
9d:e6:d6:25:18:3b:a1:03:0f:19:98:ab:4a:3c:5c:
50:26:be:9d:12:5a:23:ba:32:5e:98:22:d4:54:c2:
1f:7e:6e:ff:4c:fb:f9:34:8f:84:35:ae:99:bb:fb:
fb:81:71:85:de:39:24:23:f3:b2:de:ed:5d:5e:56:
a8:f4:bd:31:1e:a6:48:94:c9:b1:a1:28:c8:31:ae:
e0:67:a2:59:7c:62:a9:7f:5c:24:a4:fc:d9:8a:56:
56:2a:1f:49:e6:4a:40:cd:c0:b6:32:6a:98:63:7e:
1f:2b:90:59:55:62:4b:29:67:c6:06:4b:6b:c3:9a:
5d:72:10:7c:5c:cf:e8:c7:56:9a:7a:6b:c7:be:52:
b8:d9:df:cb:3b:b2:bc:bb:f8:98:ea:6d:68:8d:10:
3a:de:2c:cc:05:93:f1:9c:d2:a7:dd:12:48:c8:d8:
0b:3c:85:f6:8e:03:23:67:b3:61:94:57:dc:7e:c3:
c6:73:46:9f:8f:ee:b3:92:be:57:05:74:c3:34:e0:
06:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C6:8F:C5:14:68:A7:58:F5:5B:A9:44:53:C8:04:CC:60:A5:9F:57
X509v3 Authority Key Identifier:
keyid:97:35:A9:4F:31:54:6D:43:7B:89:72:0E:84:4B:2F:12:A5:AB:F2:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzWpTzFUbUN7iXIOhEsvEqWr8mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:c7:82:5b:27:37:df:29:cd:5a:ee:fa:15:c2:61:81:83:bb:
e5:26:73:e5:22:b3:a9:69:6c:01:76:d3:1b:fe:e7:cc:ab:ec:
22:0e:57:4b:28:32:e0:f6:ce:ba:d2:8f:41:23:32:31:26:f1:
cd:ab:e2:29:7f:1d:f4:f8:17:ff:7c:77:e1:77:41:39:d5:e1:
72:92:a9:3d:3e:88:36:bb:f4:29:fd:c1:d7:30:f2:7f:21:fc:
8e:4d:71:ba:f3:a7:f1:52:5d:13:c3:a5:b4:93:83:9d:37:8a:
07:db:32:9c:2d:ea:0a:91:40:31:02:7c:d1:c3:81:ed:fe:26:
5e:54:1b:0e:bf:2c:45:07:6a:64:b7:b4:04:0a:74:4b:b5:78:
d8:d9:af:b0:a5:cf:7e:cc:95:c7:fc:b0:32:58:da:2d:96:3f:
2e:ba:3c:26:fe:69:26:55:12:9f:f1:48:30:f3:40:0a:4d:0f:
c4:ff:13:58:57:ee:04:3a:8e:6c:65:86:04:cd:57:de:b8:cb:
6a:ac:78:c3:d6:1e:2d:9c:5d:64:a7:9b:9d:c3:6e:bc:48:9c:
be:53:a0:69:f6:36:1d:be:45:ce:6e:6f:d0:b9:69:19:d1:5b:
30:7a:84:62:3b:65:24:01:eb:dc:38:76:4c:56:fe:0e:e6:ea:
68:70:e1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 17:47:49 2025 by rpki-client