Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft
File: lywzrtjvsmnTdEgT0oxTYJLnzzg.mft (raw, json)
Hash identifier: lEkUTpujFbE6/saL+6m2EZLbYSQij7c0FI/ATeAuUBQ=
Subject key identifier: B6:B2:0F:05:2D:D6:75:0D:04:5B:9F:80:F9:9D:64:3D:C3:91:00:88
Authority key identifier: 97:2C:33:AE:D8:EF:B2:69:D3:74:48:13:D2:8C:53:60:92:E7:CF:38
Certificate issuer: /CN=972c33aed8efb269d3744813d28c536092e7cf38
Certificate serial: 019A71B87B1765965AAD70A8CA9F56DDFE47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lywzrtjvsmnTdEgT0oxTYJLnzzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft
Manifest number: 0CF0
Signing time: Tue 11 Nov 2025 07:01:46 +0000
Manifest this update: Tue 11 Nov 2025 07:01:46 +0000
Manifest next update: Wed 12 Nov 2025 07:01:46 +0000
Files and hashes: 1: ABgvtVRWI6brZz3FziMb4rv0_78.roa (hash: xcpeYC06fvzRoHxarxnxi+ZpU9v7tXYglNgTbxJJFa4=)
2: lywzrtjvsmnTdEgT0oxTYJLnzzg.crl (hash: a08p4ivMq3u9tAcO2w/HaCWn2UQ6yF4z9y3xem7PWy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lywzrtjvsmnTdEgT0oxTYJLnzzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:7b:17:65:96:5a:ad:70:a8:ca:9f:56:dd:fe:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=972c33aed8efb269d3744813d28c536092e7cf38
Validity
Not Before: Nov 11 07:01:46 2025 GMT
Not After : Nov 12 07:01:46 2025 GMT
Subject: CN=b6b20f052dd6750d045b9f80f99d643dc3910088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:96:88:62:57:f2:75:b2:a0:0b:47:5d:8c:6e:
76:cd:76:19:37:e5:b7:28:99:47:fe:19:8c:4a:cb:
9e:fc:c4:5c:77:e1:91:62:43:55:37:bc:69:c3:30:
ec:bd:3a:0c:67:94:36:3a:b1:fa:d3:85:24:47:b3:
e2:a0:c3:4f:ef:af:c7:02:30:34:5f:b2:45:8f:21:
23:bb:5f:77:81:dd:b3:d4:93:9b:31:f3:41:e0:b4:
81:4b:24:02:3e:23:b9:c0:2a:26:1a:3d:25:82:01:
25:ab:cc:31:c7:f5:3b:af:23:63:6e:40:48:12:c2:
b6:fb:ab:f1:aa:ec:2e:3b:98:25:10:03:15:b6:b0:
e1:b6:38:96:a5:b6:45:cb:a3:5e:96:f9:f4:9f:22:
97:cf:79:1e:6f:b5:78:53:9a:5a:34:ce:e7:0c:14:
5e:d5:ea:32:49:9e:be:41:f2:4f:28:05:52:9a:6d:
4a:9d:42:70:06:e3:d2:f9:2c:6d:e1:a4:64:d1:94:
35:fb:e3:be:c7:c5:52:06:21:8c:f5:b5:48:a9:2f:
4d:58:0c:4e:c0:c1:76:ab:81:0c:97:ab:77:0c:d9:
ec:f1:05:e1:0c:f6:fd:a8:0c:d4:14:38:b2:de:93:
67:12:5c:26:67:06:17:4f:0a:1d:cf:94:e1:48:b3:
2b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B2:0F:05:2D:D6:75:0D:04:5B:9F:80:F9:9D:64:3D:C3:91:00:88
X509v3 Authority Key Identifier:
keyid:97:2C:33:AE:D8:EF:B2:69:D3:74:48:13:D2:8C:53:60:92:E7:CF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lywzrtjvsmnTdEgT0oxTYJLnzzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:10:6a:dd:a6:27:26:c4:c6:df:22:fe:72:0c:d0:3c:ec:2f:
b9:c9:be:25:5c:6b:eb:03:2c:e6:2f:7e:c3:c5:48:fb:8d:41:
f4:9f:d6:44:d5:ca:4a:5a:b1:05:78:b8:3c:64:19:ba:cf:fa:
47:ca:4e:f1:5a:f9:3f:cd:2a:c4:10:27:66:7f:4b:17:cb:09:
33:c2:2c:c0:f2:74:88:f4:96:64:c5:d3:57:8f:c0:7e:f2:f7:
bc:78:f0:fe:05:8f:e8:be:07:65:6c:a8:13:1c:22:61:3b:38:
7e:77:f1:0c:58:f9:08:d2:01:13:37:4b:a0:52:d8:fb:d1:a6:
10:81:ac:8c:4c:1b:69:ae:d2:0e:75:eb:5a:87:d3:17:c5:15:
74:30:78:2a:29:0f:1c:ae:0d:28:29:2d:5d:6a:15:55:75:82:
41:29:6c:5a:f8:38:2b:d2:3c:f1:b8:03:43:52:6e:ff:5e:e9:
e6:10:b3:db:32:84:88:38:79:05:fb:f2:2c:ad:5b:28:97:be:
2f:55:0b:b1:f8:ec:7a:3f:32:75:aa:9f:18:e7:a8:f4:a8:99:
02:89:7c:65:62:7e:65:79:1b:51:a4:ab:a0:da:a3:6d:90:83:
d7:d8:7b:7d:5f:12:d0:44:7c:4f:c8:bc:ef:a7:d0:3a:21:1b:
4c:6f:0a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:40 2025 by rpki-client