Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
File: LAzrgevOhZ9Qko6O0-HwqFERUts.mft (raw, json)
Hash identifier: 3slOsEv4i/VGYJUGKIVbQeBYbfe07gVTd4KtO5qXPYo=
Subject key identifier: 43:AB:29:A4:87:10:90:2E:25:97:7A:1B:82:60:93:48:04:AE:81:C1
Authority key identifier: 2C:0C:EB:81:EB:CE:85:9F:50:92:8E:8E:D3:E1:F0:A8:51:11:52:DB
Certificate issuer: /CN=2c0ceb81ebce859f50928e8ed3e1f0a8511152db
Certificate serial: 0199FC21C1E7FEA4D52F2BEA0655EDE576A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
Manifest number: 0ACB
Signing time: Sun 19 Oct 2025 11:01:34 +0000
Manifest this update: Sun 19 Oct 2025 11:01:34 +0000
Manifest next update: Mon 20 Oct 2025 11:01:34 +0000
Files and hashes: 1: LAzrgevOhZ9Qko6O0-HwqFERUts.crl (hash: iQQv55icqgzgEyajTCTUJ29bHqLU0S5kANdb3mipvvw=)
2: Nw-tf2Fdg1IBaL0ZaEM215Hb70k.roa (hash: D6voi0MuqX48csC8cycT9bMohcrVdXkjR0ufp2F3pwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:c1:e7:fe:a4:d5:2f:2b:ea:06:55:ed:e5:76:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c0ceb81ebce859f50928e8ed3e1f0a8511152db
Validity
Not Before: Oct 19 11:01:34 2025 GMT
Not After : Oct 20 11:01:34 2025 GMT
Subject: CN=43ab29a48710902e25977a1b8260934804ae81c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8d:7b:c2:61:89:73:f6:81:00:d5:3f:f7:b6:
a3:49:8b:ce:2e:51:e2:8f:51:5b:f3:3d:c0:2f:cf:
3f:1d:b1:e3:22:03:8e:e2:44:e6:22:77:6c:df:b7:
10:4d:53:d4:0d:c5:72:5b:19:10:f7:61:4f:6b:f9:
c1:f3:67:5a:a7:f7:fe:a5:ad:de:5d:95:53:b0:51:
4a:04:da:b2:eb:da:8e:87:12:45:ff:c3:ec:81:59:
6a:b6:d9:0e:7d:5f:49:90:11:b8:f5:aa:f4:1a:d2:
66:3b:83:ac:8e:33:a9:00:d2:51:7b:b6:5b:b6:8b:
2f:60:bc:77:d9:55:6d:bc:5b:e5:f2:75:e8:40:c3:
54:c1:aa:c0:70:62:7a:8a:b2:a2:4f:5f:f4:d1:03:
9d:3d:9e:5c:5e:f2:70:eb:2f:9a:c4:d0:60:f5:6f:
71:20:7b:a4:aa:c2:dd:a0:f7:92:56:60:f7:ee:10:
8e:83:52:66:ce:84:d4:dd:af:3f:34:78:fa:8c:39:
28:09:f0:fe:af:7c:08:60:76:0d:69:35:04:f3:bc:
63:a1:4e:55:c9:cd:08:b1:d0:5b:e6:1a:e4:08:74:
c3:bb:56:2a:c4:98:e0:5b:d4:a6:e8:a1:2a:fe:9d:
f5:8f:b7:54:4a:45:44:db:1f:8a:c0:7b:9d:e4:b0:
77:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AB:29:A4:87:10:90:2E:25:97:7A:1B:82:60:93:48:04:AE:81:C1
X509v3 Authority Key Identifier:
keyid:2C:0C:EB:81:EB:CE:85:9F:50:92:8E:8E:D3:E1:F0:A8:51:11:52:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e5:df:cb:ca:8b:23:58:25:f5:c2:78:25:96:b5:11:9a:dd:
65:67:e7:d0:53:fc:49:af:6e:49:0e:2f:be:32:89:80:4f:c0:
35:8f:b8:e2:46:54:bd:9d:bc:c2:87:33:fc:f4:ab:73:7b:ab:
1a:38:82:0a:0d:bd:0b:c0:5b:d3:46:60:94:28:99:be:4d:d9:
ff:aa:86:fb:45:1d:3a:c3:6f:f1:37:51:e9:10:7f:8e:fc:a5:
9c:72:51:2a:be:95:81:58:81:7b:7a:c5:f2:df:ba:80:3f:01:
eb:db:65:7b:3c:21:2b:5a:b1:02:fc:f0:82:1f:c9:98:f7:de:
a0:ef:12:69:19:02:30:8f:e7:ef:20:df:ea:ae:61:c7:89:97:
d7:3e:1c:4a:e2:2c:62:69:83:7d:e7:f8:1a:40:eb:35:c2:dd:
f6:25:79:20:e2:32:96:1b:16:22:43:42:ec:31:9e:a9:4e:67:
e3:3b:a6:b5:02:bd:54:77:33:1f:8f:3f:0f:c0:5a:eb:44:e5:
60:a9:fb:1d:4e:dd:61:40:7f:ed:7d:bc:ff:12:9f:4d:97:93:
7a:de:20:57:4e:ab:4e:c6:99:2f:b0:9e:a7:36:b8:96:34:f5:
5d:20:b0:82:e1:89:b7:c0:76:08:14:f1:09:9d:8a:ed:21:8d:
23:2e:32:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IcHn/qTVLyvqBlXt5XapMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjMGNlYjgxZWJjZTg1OWY1MDkyOGU4ZWQzZTFmMGE4NTEx
MTUyZGIwHhcNMjUxMDE5MTEwMTM0WhcNMjUxMDIwMTEwMTM0WjAzMTEwLwYDVQQD
Eyg0M2FiMjlhNDg3MTA5MDJlMjU5NzdhMWI4MjYwOTM0ODA0YWU4MWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv417wmGJc/aBANU/97ajSYvOLlHi
j1Fb8z3AL88/HbHjIgOO4kTmInds37cQTVPUDcVyWxkQ92FPa/nB82dap/f+pa3e
XZVTsFFKBNqy69qOhxJF/8PsgVlqttkOfV9JkBG49ar0GtJmO4OsjjOpANJRe7Zb
tosvYLx32VVtvFvl8nXoQMNUwarAcGJ6irKiT1/00QOdPZ5cXvJw6y+axNBg9W9x
IHukqsLdoPeSVmD37hCOg1JmzoTU3a8/NHj6jDkoCfD+r3wIYHYNaTUE87xjoU5V
yc0IsdBb5hrkCHTDu1YqxJjgW9Sm6KEq/p31j7dUSkVE2x+KwHud5LB3BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEOrKaSHEJAuJZd6G4Jgk0gEroHBMB8GA1UdIwQY
MBaAFCwM64HrzoWfUJKOjtPh8KhREVLbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEF6cmdldk9oWjlRa282TzAtSHdxRkVSVXRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8wNDk4MmMtNWZmYy00MmE4LTk4Nzkt
NmU4YjM0ZjE5NzZiLzEvTEF6cmdldk9oWjlRa282TzAtSHdxRkVSVXRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8wNDk4MmMtNWZmYy00MmE4LTk4NzktNmU4YjM0ZjE5NzZi
LzEvTEF6cmdldk9oWjlRa282TzAtSHdxRkVSVXRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIeXfy8qL
I1gl9cJ4JZa1EZrdZWfn0FP8Sa9uSQ4vvjKJgE/ANY+44kZUvZ28wocz/PSrc3ur
GjiCCg29C8Bb00ZglCiZvk3Z/6qG+0UdOsNv8TdR6RB/jvylnHJRKr6VgViBe3rF
8t+6gD8B69tlezwhK1qxAvzwgh/JmPfeoO8SaRkCMI/n7yDf6q5hx4mX1z4cSuIs
YmmDfef4GkDrNcLd9iV5IOIylhsWIkNC7DGeqU5n4zumtQK9VHczH48/D8Ba60Tl
YKn7HU7dYUB/7X28/xKfTZeTet4gV06rTsaZL7Cepza4ljT1XSCwguGJt8B2CBTx
CZ2K7SGNIy4yRQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:40 2025 by rpki-client