Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft
File: lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft (raw, json)
Hash identifier: tZ0ZIzC2+EII8hR3pESNS+wWG9vImWLw5kzhK6f/CnY=
Subject key identifier: D9:2C:21:BF:C3:20:3C:F9:B7:2B:6C:71:11:13:7B:29:73:59:64:F6
Authority key identifier: 97:35:A9:4F:31:54:6D:43:7B:89:72:0E:84:4B:2F:12:A5:AB:F2:68
Certificate issuer: /CN=9735a94f31546d437b89720e844b2f12a5abf268
Certificate serial: 0198D4A7E04ADAD85DCAF8C2D653BF5649AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzWpTzFUbUN7iXIOhEsvEqWr8mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft
Manifest number: 0B7B
Signing time: Sat 23 Aug 2025 02:00:28 +0000
Manifest this update: Sat 23 Aug 2025 02:00:28 +0000
Manifest next update: Sun 24 Aug 2025 02:00:28 +0000
Files and hashes: 1: K_2uusZ-ceVYTyxoJbEaCXUaJZ8.roa (hash: ECfU3dqUiHJoycwQ/ZQhx1FlZVv9NEnP+CXvi3oehN0=)
2: lzWpTzFUbUN7iXIOhEsvEqWr8mg.crl (hash: LTVfkw8+XgkffBZ6kNv02tWQIzqvAsTiG23Pt7D8J8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lzWpTzFUbUN7iXIOhEsvEqWr8mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:e0:4a:da:d8:5d:ca:f8:c2:d6:53:bf:56:49:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9735a94f31546d437b89720e844b2f12a5abf268
Validity
Not Before: Aug 23 02:00:28 2025 GMT
Not After : Aug 24 02:00:28 2025 GMT
Subject: CN=d92c21bfc3203cf9b72b6c7111137b29735964f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:87:26:2b:90:dc:c6:79:2f:01:f6:cf:4f:e1:
42:46:3c:c7:18:d5:f4:f8:30:7b:f2:f6:54:ff:fa:
67:53:91:8d:3c:d1:9f:06:ef:0c:18:8e:c9:b9:2e:
e8:d0:4a:3e:84:2f:62:7e:32:af:fc:28:8e:d5:a5:
a4:19:5d:1f:90:c2:bd:b6:22:58:6b:3f:26:27:be:
a7:05:e2:ef:45:5f:4a:eb:7f:4a:1d:ba:b5:59:ba:
f5:81:71:cf:b1:28:ac:11:60:a9:6b:ce:66:5d:45:
22:5b:c8:fe:37:3c:4e:24:ad:42:d7:cc:7d:9f:24:
a5:58:99:fc:85:4d:af:56:d9:bc:d1:67:44:91:02:
f7:8b:37:68:bf:77:c9:0f:b9:cd:65:90:a5:0e:27:
06:79:6e:40:8f:52:52:e0:4a:72:71:06:52:49:80:
fc:74:e2:0e:cc:02:41:4a:7a:b3:d1:40:57:26:bc:
36:e4:5c:39:87:68:36:42:28:b7:74:aa:69:ec:58:
e4:3b:41:bf:fc:ec:78:c2:79:4c:ac:fb:07:20:3c:
59:d9:e4:2f:52:7f:3b:ad:71:df:c4:52:e9:e9:67:
34:84:20:59:36:cf:11:53:6b:da:d9:6d:bd:53:f3:
b6:a9:e1:56:6d:42:09:a5:f3:d6:f2:13:95:1d:c7:
62:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2C:21:BF:C3:20:3C:F9:B7:2B:6C:71:11:13:7B:29:73:59:64:F6
X509v3 Authority Key Identifier:
keyid:97:35:A9:4F:31:54:6D:43:7B:89:72:0E:84:4B:2F:12:A5:AB:F2:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzWpTzFUbUN7iXIOhEsvEqWr8mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:28:e5:9d:31:95:1e:52:b7:41:46:03:96:62:00:79:85:b5:
c5:09:37:4b:c3:c9:da:73:b7:74:57:fa:7e:c5:68:b2:ab:a5:
c6:4a:29:18:78:0b:fd:d6:96:9d:27:e6:a6:1e:df:cd:94:7a:
96:c6:a8:59:a8:f2:f5:42:c4:c2:7a:8b:e7:c5:9b:e9:24:81:
ce:bc:e5:c4:18:b3:1a:85:82:80:3a:66:9b:20:29:50:bd:59:
46:1c:9a:b7:b3:a4:e4:4a:af:a1:6d:bb:c6:20:a5:c6:c4:ca:
07:f7:42:c4:f8:b4:52:22:5b:56:e4:1a:fb:23:be:e1:9d:91:
16:2f:54:38:03:91:56:2d:dc:23:8a:99:0d:d7:cf:af:c6:cc:
64:39:05:01:6d:f9:23:eb:10:e8:a4:9b:29:bb:8d:a6:a5:5d:
a9:2e:ca:be:22:76:45:00:b7:00:2d:cc:b8:e1:b6:37:27:6f:
5b:73:3f:f0:cc:90:c8:18:d7:a1:d1:72:57:1a:a9:92:04:05:
55:13:f5:11:59:2b:c4:b8:4f:86:19:91:fa:42:01:d5:3d:86:
1c:c9:5e:d5:1b:18:88:a8:16:a3:98:76:a0:2d:1c:1a:6f:20:
d3:89:21:d0:9f:64:1d:ab:7d:65:98:a8:af:a3:f3:aa:f5:6f:
ba:19:2f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:47 2025 by rpki-client