Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
File: LAzrgevOhZ9Qko6O0-HwqFERUts.mft (raw, json)
Hash identifier: kRscpwEe+ecs8Gk+DkVEOdxEPtFV5h82Z6YBhqOjNnc=
Subject key identifier: 6E:E3:74:87:F3:67:B0:84:F1:36:15:A6:0D:51:C1:97:09:C4:5C:EA
Authority key identifier: 2C:0C:EB:81:EB:CE:85:9F:50:92:8E:8E:D3:E1:F0:A8:51:11:52:DB
Certificate issuer: /CN=2c0ceb81ebce859f50928e8ed3e1f0a8511152db
Certificate serial: 0198D4A7ED51A96AFC15DF4BBE8765D4A9CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
Manifest number: 0A32
Signing time: Sat 23 Aug 2025 02:00:31 +0000
Manifest this update: Sat 23 Aug 2025 02:00:31 +0000
Manifest next update: Sun 24 Aug 2025 02:00:31 +0000
Files and hashes: 1: LAzrgevOhZ9Qko6O0-HwqFERUts.crl (hash: cvYR4o3GtLw1Tvc7fhBITvtiEYkwfZQxKrzCll1Z2oQ=)
2: Nw-tf2Fdg1IBaL0ZaEM215Hb70k.roa (hash: D6voi0MuqX48csC8cycT9bMohcrVdXkjR0ufp2F3pwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:ed:51:a9:6a:fc:15:df:4b:be:87:65:d4:a9:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c0ceb81ebce859f50928e8ed3e1f0a8511152db
Validity
Not Before: Aug 23 02:00:31 2025 GMT
Not After : Aug 24 02:00:31 2025 GMT
Subject: CN=6ee37487f367b084f13615a60d51c19709c45cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:56:80:2a:9d:d7:68:4c:67:c9:73:e9:8f:0d:
99:21:25:c9:98:24:cc:7b:7e:c9:bd:63:cb:6a:4d:
a0:71:48:5d:9d:d1:c3:d1:bd:03:94:bd:43:14:3f:
87:5d:e7:f0:23:a1:bb:8d:4a:93:14:ef:17:6a:0b:
1b:da:e3:e1:11:5c:0c:71:1b:65:9d:4f:de:0f:f1:
3a:d4:3b:8c:32:84:c0:c5:83:f8:7d:28:3a:80:2a:
52:07:73:a0:bd:a1:a3:b8:b1:d6:1e:90:d3:6d:71:
86:33:02:03:c6:88:98:49:49:33:1c:29:58:3e:a9:
f8:04:6e:27:93:80:ff:9c:78:dc:4e:ec:94:3e:94:
7e:e7:b3:23:30:8d:c3:9b:73:a5:fb:fb:e4:4b:73:
63:be:f3:a4:cd:9a:92:6e:9c:8c:5e:b8:d3:b2:b9:
a9:e1:4e:4b:cd:47:e9:7c:d5:85:16:d9:95:40:64:
76:90:cc:2d:a6:e1:7d:aa:96:83:5c:cb:91:37:fb:
09:ee:45:6c:83:27:39:3d:6c:21:67:de:a8:49:e8:
77:a4:2d:d8:4c:08:6e:17:ca:44:87:5a:0b:95:f5:
8a:52:ff:33:54:b4:83:44:17:1f:0c:72:fa:3c:4d:
77:9f:70:e2:e6:bb:84:9d:09:ee:51:fb:36:54:58:
93:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E3:74:87:F3:67:B0:84:F1:36:15:A6:0D:51:C1:97:09:C4:5C:EA
X509v3 Authority Key Identifier:
keyid:2C:0C:EB:81:EB:CE:85:9F:50:92:8E:8E:D3:E1:F0:A8:51:11:52:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:93:3d:67:2d:78:8a:92:f3:e6:bf:4b:89:6c:17:5f:9d:79:
99:77:00:90:9c:71:50:56:5c:6a:bf:db:9a:76:8a:64:33:df:
d4:95:21:43:ce:c0:00:ba:42:18:ca:c6:da:ae:d5:8e:8a:8f:
e6:05:7e:7f:de:4f:ca:1b:66:df:70:1c:7e:82:22:dd:d8:99:
96:b7:4e:f9:24:6a:6d:12:50:32:35:c5:e1:d3:e0:ec:99:2a:
95:86:bb:e2:e8:32:a5:ca:31:4d:ae:8e:fa:32:47:a9:df:5e:
3b:b9:d3:de:b9:d4:b7:d2:16:cd:76:f5:78:c6:2e:57:5f:42:
94:1d:d9:bf:44:1e:fa:3b:2d:24:d2:2a:23:25:74:fe:d4:61:
90:8c:5d:34:ed:4c:96:f7:b2:50:ad:54:b1:db:55:36:9d:dc:
0e:58:af:6f:a3:6a:ce:fb:4d:2e:67:9b:56:0d:1f:59:00:36:
5e:3c:73:2c:17:0b:5a:da:5a:b6:f2:4f:6d:42:01:89:2f:29:
db:70:05:7f:f5:85:d7:82:7a:55:8a:ab:0f:79:0e:76:d5:73:
4d:d9:36:86:f1:c8:f2:66:1f:6b:d5:0e:71:27:32:e7:6d:21:
b7:ef:d2:71:2c:eb:73:bc:2b:be:dc:ab:a9:db:c4:4f:a7:de:
d2:7e:fa:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:54 2025 by rpki-client