Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft
File: lywzrtjvsmnTdEgT0oxTYJLnzzg.mft (raw, json)
Hash identifier: Y5iE8JpPHVgOM8SMP+K4AS8BiTQMtF1rhTv1AVxj6bQ=
Subject key identifier: DC:E9:77:A2:82:C8:69:41:BE:7F:0C:C0:81:0E:5D:02:C6:FF:5D:10
Authority key identifier: 97:2C:33:AE:D8:EF:B2:69:D3:74:48:13:D2:8C:53:60:92:E7:CF:38
Certificate issuer: /CN=972c33aed8efb269d3744813d28c536092e7cf38
Certificate serial: 019923A0E7EDE1C937E81B5FF18E54278E75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lywzrtjvsmnTdEgT0oxTYJLnzzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft
Manifest number: 0C43
Signing time: Sun 07 Sep 2025 10:02:51 +0000
Manifest this update: Sun 07 Sep 2025 10:02:51 +0000
Manifest next update: Mon 08 Sep 2025 10:02:51 +0000
Files and hashes: 1: ABgvtVRWI6brZz3FziMb4rv0_78.roa (hash: xcpeYC06fvzRoHxarxnxi+ZpU9v7tXYglNgTbxJJFa4=)
2: lywzrtjvsmnTdEgT0oxTYJLnzzg.crl (hash: AVpsGS5uzemkX/+CWc0+cst9iam/x1HXwnyrbSM5cz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lywzrtjvsmnTdEgT0oxTYJLnzzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:e7:ed:e1:c9:37:e8:1b:5f:f1:8e:54:27:8e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=972c33aed8efb269d3744813d28c536092e7cf38
Validity
Not Before: Sep 7 10:02:51 2025 GMT
Not After : Sep 8 10:02:51 2025 GMT
Subject: CN=dce977a282c86941be7f0cc0810e5d02c6ff5d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:83:e1:96:03:87:4a:44:07:ef:3b:69:14:07:
4b:ae:90:1d:5d:ea:a3:04:a1:03:e1:4b:64:57:ea:
6c:4e:21:52:85:17:c2:18:b4:8d:7a:b3:d0:0d:6c:
22:44:0a:4c:6d:6b:45:6e:7c:21:87:35:48:1f:bf:
29:f8:a1:06:c8:6c:1e:7d:a6:34:1c:2d:8e:04:87:
28:bf:ef:4e:57:7b:88:7e:72:a3:70:4c:f2:02:ad:
94:4d:71:a4:92:d7:e4:d2:76:d4:4b:2e:7c:f3:e4:
72:43:9c:f3:32:db:06:ed:32:c1:38:b7:f2:db:82:
5d:09:45:2b:45:bd:79:12:f5:ee:ac:e2:d7:b6:6a:
94:a1:74:c5:cf:a7:dc:16:3b:35:7b:4b:86:26:b1:
14:ee:fa:ee:fb:f1:0f:6e:f9:f9:ca:c2:8c:dc:a8:
8f:25:b3:c9:27:f0:83:2f:c2:3e:cd:f3:d5:90:aa:
f4:1c:9b:69:c5:4a:b4:d5:19:3b:54:70:82:1c:12:
44:5f:38:03:cf:37:27:2e:48:f3:f2:de:cc:c1:a0:
3e:fe:fd:88:1f:3a:32:e2:41:db:24:9d:54:e4:f7:
b1:31:23:24:40:5d:2e:46:cc:be:f3:f2:88:26:d3:
eb:9f:e8:3a:b2:dc:db:f0:84:35:28:03:5e:01:a5:
44:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E9:77:A2:82:C8:69:41:BE:7F:0C:C0:81:0E:5D:02:C6:FF:5D:10
X509v3 Authority Key Identifier:
keyid:97:2C:33:AE:D8:EF:B2:69:D3:74:48:13:D2:8C:53:60:92:E7:CF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lywzrtjvsmnTdEgT0oxTYJLnzzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:2c:9c:74:65:60:f0:a6:39:d2:06:9e:78:e4:db:74:47:61:
50:d3:e8:a5:e6:40:93:49:33:8a:fd:a1:ef:52:7d:40:e6:9b:
09:ab:d0:2f:ad:ae:55:3d:4f:89:fb:55:63:28:b4:aa:95:f0:
a1:db:03:62:ec:e6:90:fa:75:c1:31:05:c7:9a:86:ad:2d:f7:
6b:e0:26:93:c8:fa:cf:1d:c4:7b:5c:56:7b:a5:94:c0:af:a2:
6e:d6:0c:7b:65:23:8d:cb:e4:6a:7b:f1:b0:ae:e3:01:1c:45:
3e:1d:f5:98:99:6f:af:9b:6c:5f:16:74:75:c5:69:42:22:ce:
51:b2:af:0d:72:79:18:08:18:9c:1a:ae:7f:1a:3b:c8:cc:5e:
67:7b:04:9f:1d:0e:1f:e9:fb:36:bc:79:7c:05:34:df:38:e5:
90:b5:e7:65:ab:dc:2a:79:5d:f0:96:bd:c4:0e:0a:83:2f:f6:
81:59:39:d4:7a:5b:83:c9:bb:2c:86:9a:f9:7f:48:6c:8d:35:
2b:9c:ba:2c:e9:78:7a:8d:13:e7:7a:e8:1e:9f:a7:f7:06:83:
62:32:6d:7b:96:b1:9b:1d:d8:da:73:49:b9:8d:1b:3f:bc:02:
d1:fd:5e:49:44:5e:cd:06:c9:08:f1:f4:fb:18:64:83:e9:ff:
bb:98:79:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:53:41 2025 by rpki-client