Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
File: lzvsM65zjJiViBnGwTuzNe40q0w.mft (raw, json)
Hash identifier: ttRijWOUkxw8xdrS8GYSOl/2Ot66MBf4NrEb3N/PX74=
Subject key identifier: 8C:14:35:13:93:29:0E:E8:E7:FF:12:02:D4:1C:2A:FB:8B:CC:54:99
Authority key identifier: 97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
Certificate issuer: /CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Certificate serial: 019746D490A2755FAF959597ED1332F10C7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
Manifest number: 0C22
Signing time: Fri 06 Jun 2025 20:00:25 +0000
Manifest this update: Fri 06 Jun 2025 20:00:25 +0000
Manifest next update: Sat 07 Jun 2025 20:00:25 +0000
Files and hashes: 1: 04AAIWN8CdjN6G01O3D_l5i-Jvk.roa (hash: Mv4GpM35beFDVPlXDkHbY9A9imQnPo9JK9qNbOoM+YU=)
2: 9-T9tTEpFFagDxBNkX4Bbf2UnDM.roa (hash: G5P+io7+nluFSPyZaIxd4Qa6X2iCyWaqgj9ylJYiWn8=)
3: lzvsM65zjJiViBnGwTuzNe40q0w.crl (hash: xuEPXWNHlu3R7CiEUvXC92hJeNnAQrbWiN5orO4zJSo=)
4: tuawZTEX7vHBTQMJyQg0WD-oypg.roa (hash: IFKGL2W7O7px/Tqsp660BBZcbUWDZWgLugycTaSmqvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d4:90:a2:75:5f:af:95:95:97:ed:13:32:f1:0c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Validity
Not Before: Jun 6 20:00:25 2025 GMT
Not After : Jun 7 20:00:25 2025 GMT
Subject: CN=8c14351393290ee8e7ff1202d41c2afb8bcc5499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b4:0f:33:92:0a:5d:84:89:70:3b:5c:04:c4:
28:c6:4d:92:96:d6:b7:b8:a0:e0:ee:c9:37:95:4c:
6d:50:c3:ef:d0:bc:d8:7a:f7:6c:cc:dd:bb:3c:b6:
19:4a:3f:b2:64:23:0c:d6:6f:79:33:e5:2f:b2:78:
d1:8a:e1:dd:68:b3:63:25:f9:2a:31:18:ae:94:cd:
af:f1:a2:7f:3a:50:9f:62:a9:c8:6b:2f:13:f7:15:
25:51:12:24:34:32:e5:40:da:e8:05:02:c1:ce:b8:
91:e9:30:4e:05:65:03:9a:a7:5c:73:ee:4a:5e:b3:
6d:01:5c:2e:f2:c5:61:aa:d8:12:2e:c3:aa:97:f3:
4b:0e:a3:8c:92:ca:f9:9e:d3:da:16:f6:58:f0:96:
30:7c:a4:d1:16:4b:9b:61:9d:8a:ae:01:1e:95:b5:
3a:d7:d3:4e:1f:10:93:3b:66:83:9c:39:62:87:de:
f0:e3:01:ec:a9:17:b9:55:ce:79:c9:cb:ae:d3:95:
92:c7:74:17:fe:08:d2:d8:b5:50:74:fb:2b:30:4d:
63:c0:db:8b:71:5e:db:d2:95:27:ab:d8:a2:1b:91:
51:ca:c9:7e:00:1b:94:30:d4:44:c6:77:1e:03:a0:
cf:c8:27:6e:06:4a:8c:cb:33:a4:3d:65:52:bd:91:
00:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:14:35:13:93:29:0E:E8:E7:FF:12:02:D4:1C:2A:FB:8B:CC:54:99
X509v3 Authority Key Identifier:
keyid:97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:f2:fc:0d:23:52:a1:a0:a0:aa:db:1e:15:7b:3c:ca:0e:7c:
3e:53:59:e4:23:0c:66:82:25:9a:62:10:4a:f7:11:63:af:3e:
c9:0c:12:5e:ee:bf:0e:dd:3d:7d:90:30:9b:df:57:a3:7b:da:
59:09:00:e4:9a:2c:0b:ed:76:7e:02:7d:2a:92:1c:c8:22:e6:
ea:cc:bd:42:f8:ec:6e:9d:b7:03:ff:18:4a:ff:13:e3:11:ae:
78:b1:84:bd:c2:ae:92:71:b2:78:3d:a4:d1:ed:e1:6a:7e:67:
73:b5:27:34:9f:0a:d5:46:65:e1:79:d2:5d:87:56:8e:c2:bf:
cb:5b:6d:a7:7d:80:47:9c:66:52:16:d9:7b:52:42:7f:c6:49:
53:da:e6:4a:37:07:b7:d7:cb:a5:aa:bb:6b:f7:57:a1:9c:33:
24:6e:a1:7c:2d:de:a4:f0:d4:c1:2c:17:53:6a:29:75:9b:06:
a4:47:f8:ee:13:7b:d1:34:ec:05:ca:bc:c8:d7:db:9e:2e:8c:
1d:58:ae:61:89:35:5a:cd:4b:b2:4d:46:fe:01:a1:f6:0c:ad:
71:3f:a0:72:de:3f:4b:ba:50:17:22:19:24:14:a3:09:26:2c:
ed:30:30:10:f1:36:4a:8e:d0:2b:23:43:6d:f2:a0:82:31:ac:
fc:43:10:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:29:40 2025 by rpki-client