Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
File: IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft (raw, json)
Hash identifier: O5sYzAMOv4HJPa1N2F5WoGRrRDjA8kv70l4jgC7sAsQ=
Subject key identifier: 4E:5A:41:E1:C5:8A:78:9C:1B:D6:60:1A:8E:63:72:82:3E:A6:17:3F
Authority key identifier: 22:92:D9:6D:FB:66:CB:18:06:9D:8B:D1:5C:9E:90:CD:91:24:F0:03
Certificate issuer: /CN=2292d96dfb66cb18069d8bd15c9e90cd9124f003
Certificate serial: 0197B6A1AE83BA6F77A92ACE40BBDF037B3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
Manifest number: 0A4B
Signing time: Sat 28 Jun 2025 13:02:18 +0000
Manifest this update: Sat 28 Jun 2025 13:02:18 +0000
Manifest next update: Sun 29 Jun 2025 13:02:18 +0000
Files and hashes: 1: 7cHudsbhVZHbppHTF_ntQT5LGaE.roa (hash: gjOnvh/cfHW6KLD8KAndHZd6PiXGNmxJ/xbLzRraSmM=)
2: IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl (hash: t7JeGlXVJw2gjKQGwJ3C4m7tF31W64cHZuIXAGRHq3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:ae:83:ba:6f:77:a9:2a:ce:40:bb:df:03:7b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2292d96dfb66cb18069d8bd15c9e90cd9124f003
Validity
Not Before: Jun 28 13:02:18 2025 GMT
Not After : Jun 29 13:02:18 2025 GMT
Subject: CN=4e5a41e1c58a789c1bd6601a8e6372823ea6173f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f2:0f:a5:6a:a6:0e:69:cd:e5:8c:4e:03:dd:
4e:4a:16:b9:aa:a9:87:f0:b3:0e:0d:93:f4:80:8b:
65:d8:5f:17:b7:e6:fe:12:6c:35:94:36:5c:72:d0:
98:4b:be:e4:9d:d1:a0:52:61:a7:ad:78:e0:3e:3e:
a0:a6:b8:9e:a2:53:04:37:66:fe:d7:d1:49:75:ae:
b6:b0:fc:18:99:26:94:12:04:2c:86:d5:fd:54:16:
9c:84:73:42:cf:42:91:fd:9e:98:9c:1a:29:51:e4:
c6:90:d4:12:89:15:8a:39:e4:79:df:bd:cd:b9:6c:
0c:78:d3:4b:45:57:ba:ea:3e:4b:86:b3:40:ed:74:
a0:b5:f4:c4:0f:7a:02:d2:08:8e:1a:ff:84:c4:13:
b3:5e:c2:03:8b:91:93:c2:d3:73:62:e8:b2:1a:1a:
06:78:77:04:fe:9b:3c:21:f1:30:84:67:a9:8a:a0:
32:a7:fd:67:06:ef:57:7a:9b:0b:ad:6e:5e:f0:b9:
97:42:7e:f6:bb:b8:89:a4:01:20:58:b6:9a:34:e8:
0a:8c:30:18:65:8d:5a:32:c8:75:be:5e:29:cd:4e:
11:58:24:26:ab:d9:d0:30:7b:4c:3c:db:e1:11:9e:
38:02:b0:dc:f6:1d:1e:15:6b:7c:a9:c2:21:8d:1f:
64:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:5A:41:E1:C5:8A:78:9C:1B:D6:60:1A:8E:63:72:82:3E:A6:17:3F
X509v3 Authority Key Identifier:
keyid:22:92:D9:6D:FB:66:CB:18:06:9D:8B:D1:5C:9E:90:CD:91:24:F0:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:9e:d8:87:91:60:bb:71:96:ef:f5:c4:4e:d3:d7:9e:2e:fb:
44:27:d2:83:25:c6:9f:76:fa:b4:79:f2:3c:43:48:4f:4c:ce:
81:71:db:b4:67:c8:a5:22:1c:6f:a1:1f:5d:52:84:9c:72:78:
5d:ee:80:d0:79:2f:f8:cf:24:7c:12:46:31:f5:9d:24:4d:b7:
fd:f3:24:07:47:8d:44:5a:c3:02:df:6d:88:94:1e:2c:81:28:
1f:ad:4b:a0:c2:37:6c:44:54:77:2b:57:19:b1:bc:a9:cf:a1:
dc:8a:47:f4:d7:ab:c8:93:93:27:ef:21:9f:2a:24:08:0a:3d:
4f:30:df:a2:16:a8:d1:a1:c4:35:22:83:15:b9:c0:fb:b0:41:
f3:56:c9:b5:e4:fb:f1:1b:e6:f8:f4:03:c2:55:b4:78:7b:49:
19:83:a3:1a:3d:98:ce:82:1f:cf:59:19:7d:44:11:8f:d8:12:
7e:9e:c1:18:fa:4f:d8:3e:07:90:83:b9:aa:51:95:3f:51:de:
37:5c:e9:62:43:d0:dd:fa:02:e3:c0:f2:73:99:7e:b8:5b:15:
68:cf:27:ab:d9:d1:78:77:72:51:74:78:72:90:8a:15:bb:b5:
53:5b:db:fc:d9:10:b5:8b:81:62:9d:5b:a1:b5:47:97:18:42:
7d:84:e5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:34:46 2025 by rpki-client