Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
File: lZmz54I3DcKBT1JcHW7OhNj3DzY.mft (raw, json)
Hash identifier: Hv/sDWcJ9EDwzj35TXMbdotB0REDNHu5zb3CstOGLwc=
Subject key identifier: 80:D3:17:D9:B6:B9:63:0F:25:42:C5:2F:6E:7E:7A:78:44:4F:7D:9B
Authority key identifier: 95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36
Certificate issuer: /CN=9599b3e782370dc2814f525c1d6ece84d8f70f36
Certificate serial: 0198D5F120BE2B1D6FE2DC32304E662AD5FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
Manifest number: 02EA
Signing time: Sat 23 Aug 2025 08:00:06 +0000
Manifest this update: Sat 23 Aug 2025 08:00:06 +0000
Manifest next update: Sun 24 Aug 2025 08:00:06 +0000
Files and hashes: 1: 0VA_9HQvgavGjx805ubmo2Lo5H0.roa (hash: LdNiPcj48/zXBSO9oEQ4RJjrS+zHAsqfBOtXhy9k8x4=)
2: VrF_JXAYi7cHSdA7vOtQcy0-na0.roa (hash: T3vCer2CYjMD216ESnj/Jeswzt56af8ZdG15R1wMajk=)
3: lZmz54I3DcKBT1JcHW7OhNj3DzY.crl (hash: +fSzJEza3qYT3MdDeKgSYOM0afcXqXKj47bcE6Ifh4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:20:be:2b:1d:6f:e2:dc:32:30:4e:66:2a:d5:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9599b3e782370dc2814f525c1d6ece84d8f70f36
Validity
Not Before: Aug 23 08:00:06 2025 GMT
Not After : Aug 24 08:00:06 2025 GMT
Subject: CN=80d317d9b6b9630f2542c52f6e7e7a78444f7d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:83:34:80:ae:13:b6:25:5c:13:7a:ae:7e:e7:
3f:67:24:54:24:67:66:c7:34:a6:98:7a:e7:e2:5b:
11:85:e2:c5:e7:65:10:73:82:dd:8e:fa:48:db:cb:
85:8b:3f:ac:ec:b0:3e:c0:59:f2:8f:b8:26:be:e6:
a4:2a:ba:72:3e:b8:2f:2f:18:1e:b4:44:06:44:d7:
6e:ba:1f:40:8a:98:15:c1:44:6f:8d:01:95:f2:39:
f9:bc:ad:82:b9:bc:da:fd:dc:85:59:30:0b:88:0e:
8e:50:7f:ab:92:9f:07:c7:08:67:0e:81:0c:7c:78:
ae:10:01:3c:d9:8e:3e:e7:b5:1b:3f:b2:3b:b1:f9:
be:f5:bc:7d:6e:0a:89:28:64:2f:d2:bc:74:49:30:
7c:39:6e:62:72:7d:45:38:c1:9d:e3:43:df:e3:ff:
bd:2f:12:01:23:15:88:d6:38:f5:b9:0e:06:89:f2:
a0:ec:fc:9a:0a:1d:6e:24:65:cd:46:41:9f:39:a3:
3b:6b:79:ce:71:03:7a:8e:68:3b:2d:d6:2f:7e:84:
30:4f:3a:26:1c:bd:1e:20:af:b2:96:0b:64:5e:53:
4a:55:d2:74:61:7b:57:c4:2e:03:95:36:2c:61:08:
68:40:17:f5:76:ea:7f:fd:a8:49:de:5d:65:f6:f7:
f0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D3:17:D9:B6:B9:63:0F:25:42:C5:2F:6E:7E:7A:78:44:4F:7D:9B
X509v3 Authority Key Identifier:
keyid:95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:cd:2e:9a:d8:8d:60:0d:d5:a3:8a:ed:86:a2:ab:2e:bb:16:
0b:df:a4:b5:52:1c:c6:93:7f:1e:59:b4:cb:dd:c4:7e:7b:6c:
4d:9d:1a:ac:45:1a:c0:2e:a8:e8:05:e7:41:24:ff:3a:53:8c:
4e:7b:a7:ad:76:82:75:84:28:25:fb:ee:da:e5:5c:87:b4:c5:
e3:20:ae:5b:98:b8:33:7a:4a:c6:76:a6:dd:10:f8:cb:d1:62:
34:68:96:ea:5e:bf:33:5e:29:3a:52:d5:a6:93:36:86:12:db:
8d:78:fc:6c:ed:ed:10:d9:d2:a4:fd:b3:8c:d5:05:85:9c:7a:
45:b7:c7:c3:74:ba:02:43:ab:b1:4c:cb:08:e3:63:2f:10:23:
32:6e:53:ea:da:d1:04:5c:8c:63:70:eb:c1:bb:00:88:99:eb:
72:1b:83:f6:c8:f6:df:c3:b7:8c:7d:42:fb:e3:a5:f0:4d:74:
31:38:54:e2:46:cb:6c:0b:3c:fc:02:e9:4a:38:b7:f8:73:fe:
57:80:83:9a:ec:06:5f:8b:8e:af:c8:d7:c0:5a:a2:89:f7:71:
09:47:86:7f:f4:9d:bd:f7:a8:93:6d:88:67:af:b6:34:0d:fb:
45:6f:85:27:b9:6a:29:2b:4d:71:44:b0:3f:a9:ad:d3:b3:e6:
ab:6d:90:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:56 2025 by rpki-client