Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft
File: lywzrtjvsmnTdEgT0oxTYJLnzzg.mft (raw, json)
Hash identifier: aVWOcXRC7gPHJKBZ1C3oejqgPOnkAy8luIsi09LnF+w=
Subject key identifier: FB:8A:00:4C:BC:ED:5A:0D:67:D0:5F:D4:01:39:AD:5A:75:38:66:41
Authority key identifier: 97:2C:33:AE:D8:EF:B2:69:D3:74:48:13:D2:8C:53:60:92:E7:CF:38
Certificate issuer: /CN=972c33aed8efb269d3744813d28c536092e7cf38
Certificate serial: 0198D472A821CC81045C1D1B9A808A167D14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lywzrtjvsmnTdEgT0oxTYJLnzzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft
Manifest number: 0C1A
Signing time: Sat 23 Aug 2025 01:02:20 +0000
Manifest this update: Sat 23 Aug 2025 01:02:20 +0000
Manifest next update: Sun 24 Aug 2025 01:02:20 +0000
Files and hashes: 1: ABgvtVRWI6brZz3FziMb4rv0_78.roa (hash: xcpeYC06fvzRoHxarxnxi+ZpU9v7tXYglNgTbxJJFa4=)
2: lywzrtjvsmnTdEgT0oxTYJLnzzg.crl (hash: WGT/jtRwRJVxRSeEEtbVlyB4tfxmKA9S58jxsHO79Vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lywzrtjvsmnTdEgT0oxTYJLnzzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:a8:21:cc:81:04:5c:1d:1b:9a:80:8a:16:7d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=972c33aed8efb269d3744813d28c536092e7cf38
Validity
Not Before: Aug 23 01:02:20 2025 GMT
Not After : Aug 24 01:02:20 2025 GMT
Subject: CN=fb8a004cbced5a0d67d05fd40139ad5a75386641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ec:b0:dc:5f:0c:ba:0f:f8:ce:2e:32:8b:a6:
96:70:34:ac:51:d8:bb:60:c3:63:2c:3b:a1:d7:95:
ed:bc:7a:b2:da:d8:e1:c6:6c:ab:79:0a:59:a2:f4:
ae:ac:13:70:0e:eb:10:c5:ac:df:a0:e4:64:ff:8c:
ef:9d:3a:a6:90:68:c0:f4:6d:20:63:82:b1:45:8b:
c2:47:f7:fc:84:16:16:f2:70:85:7e:71:ad:85:dd:
42:ee:71:c4:89:52:62:93:43:65:9a:90:98:51:0b:
0f:9f:48:9e:eb:35:ba:d6:b0:58:a4:83:a7:67:39:
7e:dd:2d:3a:b1:e0:60:ba:f0:17:95:f3:1b:c1:57:
d1:59:4d:10:94:df:7e:3f:a8:43:d8:57:37:db:93:
43:e5:9b:8f:5b:3c:25:6f:a0:cd:a8:bb:78:37:ad:
a6:c0:51:05:3d:95:1b:19:bf:fd:de:82:e3:92:52:
40:e0:f2:51:6f:c9:4e:35:fa:29:58:3b:7d:f8:4a:
c9:09:89:50:62:e0:ae:a6:46:82:40:61:ec:1f:50:
85:cc:dc:fd:af:86:15:91:e8:b5:48:11:94:af:92:
07:13:19:21:70:cc:f3:12:d1:89:14:f4:b9:73:1b:
28:87:38:f0:b7:ae:fb:0a:55:2a:71:44:04:61:07:
99:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:8A:00:4C:BC:ED:5A:0D:67:D0:5F:D4:01:39:AD:5A:75:38:66:41
X509v3 Authority Key Identifier:
keyid:97:2C:33:AE:D8:EF:B2:69:D3:74:48:13:D2:8C:53:60:92:E7:CF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lywzrtjvsmnTdEgT0oxTYJLnzzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:a5:6e:4e:43:97:0e:ee:32:62:85:b5:51:a9:c0:dc:fc:38:
a8:45:72:1d:d5:49:d8:41:39:93:72:3a:b8:fc:ad:a5:e8:62:
51:7b:3a:9f:80:8f:79:65:ca:b2:42:27:70:91:ee:b9:85:0a:
10:09:f9:7a:3b:c6:07:2d:d9:ba:82:0d:87:32:95:7d:e5:f6:
a3:da:c7:f3:f6:bf:8a:c6:49:d6:cc:9f:3c:0a:ff:ef:47:b6:
02:24:10:3b:e6:96:be:a3:a7:f3:c7:e1:69:11:0b:b1:7b:ef:
5e:02:b4:95:df:85:ac:cf:24:27:c7:57:fc:87:b9:f7:15:4f:
b2:3d:68:fe:3f:d8:10:da:29:0f:dc:49:0b:6b:ad:43:ce:97:
db:08:4e:36:23:f0:6f:a8:b1:fc:f6:56:07:31:ef:a2:9b:df:
c8:d8:5f:d6:82:7c:63:ef:76:68:c5:42:78:9c:08:34:df:85:
a1:7a:e0:46:9a:a6:95:fe:4d:f3:75:1b:fd:b0:ba:cf:7c:fe:
63:89:37:a8:b4:ad:40:45:a6:15:8d:d2:bc:80:e3:bd:63:c3:
2b:4b:cd:6a:ec:c4:14:ac:fa:17:19:04:03:25:1b:0d:59:23:
89:4d:e0:a6:e3:49:90:59:d0:7d:bf:d5:b1:59:83:40:be:7f:
86:f0:91:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:38 2025 by rpki-client