Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
File: 3LZakO089K4EUlVO40uSqEdtzxA.mft (raw, json)
Hash identifier: sQu21GET4FmyrYoPUV/SXtFo4yPtouohCb8YMufS/2A=
Subject key identifier: BA:F4:BA:5E:87:8E:F5:A3:D5:A0:14:ED:B9:51:59:F9:D3:7D:48:5C
Authority key identifier: DC:B6:5A:90:ED:3C:F4:AE:04:52:55:4E:E3:4B:92:A8:47:6D:CF:10
Certificate issuer: /CN=dcb65a90ed3cf4ae0452554ee34b92a8476dcf10
Certificate serial: 01983CBBF5D7BC8AC9C6D94712DF6176C013
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
Manifest number: 160C
Signing time: Thu 24 Jul 2025 14:00:07 +0000
Manifest this update: Thu 24 Jul 2025 14:00:07 +0000
Manifest next update: Fri 25 Jul 2025 14:00:07 +0000
Files and hashes: 1: 3LZakO089K4EUlVO40uSqEdtzxA.crl (hash: Ow7QaIg1NZR/PYyH/zD+x/HaXiMRkGp/cD12aK/LP2o=)
2: 4TacCA5fNMvJzrQKHYvZp1FsTCY.roa (hash: PoM3PiM+eiQs0IrTl3gGzaDWCG/B3yTTKS+dLnu4Yd0=)
3: 5XSs95Ubgx3AmQjCtcwc9kipgqo.roa (hash: W1QuAOuGtR5IQsNm8mAqSkXh18EH2NzjwhA/lLQEsCs=)
4: 7NaNhfKzkHk-4U6P-rr5I2f5Dns.roa (hash: ho2GvZ21Aa+NkGp3FzrcTvxIRbuhiRhcV51nfQsaRvI=)
5: RMqD4QZBwk_wzHsp1loeMRU2jMk.roa (hash: nCQ5Eq/Er1do1Gz84LWpqzugPw71HtroPiJZlZhFk8k=)
6: naw_j5gKrLLjpLmDjj2VeLVHcW0.roa (hash: 9rsCrKDYxMlNCKWks8aC7H+vNumWPUdz18CO2dwuUHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3c:bb:f5:d7:bc:8a:c9:c6:d9:47:12:df:61:76:c0:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcb65a90ed3cf4ae0452554ee34b92a8476dcf10
Validity
Not Before: Jul 24 14:00:07 2025 GMT
Not After : Jul 25 14:00:07 2025 GMT
Subject: CN=baf4ba5e878ef5a3d5a014edb95159f9d37d485c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c9:58:31:81:6b:c5:51:c7:da:4a:1d:e1:ac:
c9:54:38:24:4b:64:61:68:6a:b6:70:94:1c:8f:34:
da:92:a2:82:fe:80:62:a4:4d:a8:3c:75:60:26:08:
ce:f6:44:e9:3e:87:08:cc:cf:6a:a8:35:9d:d8:02:
6a:c4:b0:5d:49:3c:bd:a4:9e:56:b3:90:2b:3c:d5:
14:c1:59:1a:4c:f1:82:6a:ec:61:11:03:c9:d0:18:
74:36:88:03:87:47:78:e8:ac:6d:3e:90:33:f1:d8:
df:0d:f0:b3:02:5d:16:c9:dc:93:60:b7:a3:68:f0:
84:45:71:a7:b9:3e:c3:6d:3a:ee:9a:49:14:f9:b0:
06:8b:dd:c6:74:62:04:9a:8f:b2:af:4d:11:95:df:
21:81:ba:d4:22:57:7f:ed:bc:f1:63:40:6d:75:5f:
8c:de:6e:78:ae:e7:41:af:cb:7c:f9:4c:49:ca:44:
34:90:3c:05:ce:0f:43:51:ed:fe:5e:6b:f1:0d:7b:
3a:3f:20:af:04:33:3e:b8:46:ab:2f:2d:72:12:47:
fb:36:9b:e8:e4:27:0b:d9:f8:60:a3:d8:f8:9b:67:
48:99:01:e9:ce:62:3e:5e:50:61:18:5e:c7:89:84:
3a:75:8c:81:f8:f1:1f:e5:03:2e:a6:8c:52:ea:bd:
67:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F4:BA:5E:87:8E:F5:A3:D5:A0:14:ED:B9:51:59:F9:D3:7D:48:5C
X509v3 Authority Key Identifier:
keyid:DC:B6:5A:90:ED:3C:F4:AE:04:52:55:4E:E3:4B:92:A8:47:6D:CF:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:69:ea:50:18:0f:97:f7:b5:23:03:9b:86:d1:ee:29:2c:01:
6b:a6:d2:c2:3e:6c:08:42:46:09:ba:03:ae:4e:9c:12:e0:94:
8b:aa:d2:88:15:28:45:f0:9a:29:87:48:c1:81:dd:f4:66:fd:
d3:92:f7:0c:c8:7d:1e:59:c8:dc:27:d4:d2:2c:43:0b:9d:a0:
45:4b:aa:56:a3:e6:00:41:c1:8a:a2:92:17:18:e2:78:89:87:
b5:1e:4d:b4:0a:1f:c6:09:39:17:2a:f0:ba:8b:55:7c:23:18:
f8:bb:35:ee:32:21:5e:58:6c:79:4c:50:54:ef:56:6e:16:31:
0b:c0:fb:bc:0d:64:94:6c:b3:b3:4c:50:e2:82:4b:d0:15:dc:
46:e7:5f:a0:47:58:23:9d:c1:2b:ec:39:60:df:98:f2:d4:ec:
23:37:a2:85:78:c0:e4:db:20:2e:18:9f:8c:1e:78:d2:66:1c:
2d:ca:c8:10:82:9e:0c:96:d5:27:d0:83:49:fe:cd:ad:65:74:
7a:a4:44:76:b2:a0:3a:3b:59:b4:95:5d:87:c8:90:5d:12:fa:
27:a3:a1:bb:ea:70:7e:8c:96:44:95:06:e3:0a:1e:91:74:72:
c1:24:ec:d8:01:07:00:7f:79:9a:1f:df:77:e1:41:9b:1b:c3:
0c:5e:ea:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:05:39 2025 by rpki-client