Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft
File: lywzrtjvsmnTdEgT0oxTYJLnzzg.mft (raw, json)
Hash identifier: G5a6lUMk+SvuychDZW+XFVXDO1GUgQemgpdtY/suUGY=
Subject key identifier: 48:8E:18:D2:89:6D:96:9C:11:F2:19:F5:B7:EC:F0:9E:02:4D:2C:2E
Authority key identifier: 97:2C:33:AE:D8:EF:B2:69:D3:74:48:13:D2:8C:53:60:92:E7:CF:38
Certificate issuer: /CN=972c33aed8efb269d3744813d28c536092e7cf38
Certificate serial: 0199FBEB3071BBD4A8D6DB8F817D860DA3A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lywzrtjvsmnTdEgT0oxTYJLnzzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft
Manifest number: 0CB3
Signing time: Sun 19 Oct 2025 10:01:58 +0000
Manifest this update: Sun 19 Oct 2025 10:01:58 +0000
Manifest next update: Mon 20 Oct 2025 10:01:58 +0000
Files and hashes: 1: ABgvtVRWI6brZz3FziMb4rv0_78.roa (hash: xcpeYC06fvzRoHxarxnxi+ZpU9v7tXYglNgTbxJJFa4=)
2: lywzrtjvsmnTdEgT0oxTYJLnzzg.crl (hash: 4Kjmer2SgKoekJn4BIovQoQAViPPaFSZMu7QCNdMOho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lywzrtjvsmnTdEgT0oxTYJLnzzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:30:71:bb:d4:a8:d6:db:8f:81:7d:86:0d:a3:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=972c33aed8efb269d3744813d28c536092e7cf38
Validity
Not Before: Oct 19 10:01:58 2025 GMT
Not After : Oct 20 10:01:58 2025 GMT
Subject: CN=488e18d2896d969c11f219f5b7ecf09e024d2c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4b:9b:2b:55:9f:22:4d:19:96:82:67:81:9c:
27:34:cf:79:8b:94:8c:06:af:b8:f5:52:e8:69:eb:
fe:88:5d:33:73:d9:6a:be:2d:2c:e4:b1:d2:00:5e:
a0:cb:8c:f3:2c:0e:a9:71:f0:15:d2:81:9f:a0:dd:
1d:15:a2:3e:7f:d2:b6:da:c7:53:9a:23:77:45:67:
0e:50:2b:4b:8d:06:ad:5c:7f:12:b6:d1:95:fb:e0:
53:1c:f5:62:33:29:21:1d:10:a2:4b:e9:a5:91:ef:
a9:4a:20:a1:10:29:0d:ed:59:2e:a4:9e:10:87:fe:
19:f8:d4:8f:bd:34:cd:bc:33:fe:1b:52:18:5d:db:
09:2c:be:de:f5:fb:01:76:df:a6:ad:fe:de:04:5a:
62:b6:d0:dd:0d:87:45:a8:bc:71:10:ce:ad:1d:29:
ee:4c:7d:ec:77:0b:dc:84:64:cc:10:c0:1b:ad:24:
01:18:8c:f4:7a:ad:a9:1c:54:48:40:59:f8:dc:d3:
b8:6a:9e:44:e6:53:94:47:6b:dd:6d:3f:fd:95:82:
3b:a9:4d:b1:ff:9d:14:f0:2a:e2:a8:69:6f:40:41:
a8:54:16:43:fc:5b:e2:b6:0d:37:d1:bd:0f:8b:e3:
f1:14:3c:fd:40:f3:6f:c4:8b:3a:0a:71:21:64:10:
86:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8E:18:D2:89:6D:96:9C:11:F2:19:F5:B7:EC:F0:9E:02:4D:2C:2E
X509v3 Authority Key Identifier:
keyid:97:2C:33:AE:D8:EF:B2:69:D3:74:48:13:D2:8C:53:60:92:E7:CF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lywzrtjvsmnTdEgT0oxTYJLnzzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:f6:8f:49:8a:9d:6e:2c:1a:d8:ea:e8:9c:1e:9d:9d:63:e6:
7c:9d:d1:0e:ab:d3:55:b4:a6:8f:33:b2:c0:64:4a:8a:71:9c:
f8:8b:4b:53:4a:45:15:5e:84:00:d2:6c:fd:e4:a9:42:c8:af:
75:db:3d:d8:b1:8d:60:61:fc:79:3c:f6:a0:d4:db:90:18:f5:
1a:47:06:e6:70:6d:52:5e:bb:7c:53:3e:6d:55:bc:85:37:21:
cc:b0:03:ca:05:22:b9:49:89:80:84:02:19:78:a4:9e:d2:51:
13:11:44:5a:b3:1d:c8:2d:53:bf:8d:8f:4d:ce:cc:8f:01:46:
80:e7:93:b2:98:f4:94:11:79:b1:3c:93:2e:05:57:03:6e:17:
fb:fe:de:e1:d7:96:ec:b4:a7:81:f8:5d:bd:56:89:f5:07:94:
45:ac:d0:48:7b:08:4f:e7:2d:ce:15:b9:a9:6a:06:1c:46:a4:
9b:fa:77:7f:a9:07:1f:c4:79:a5:ef:49:df:51:db:17:05:db:
bf:1d:4f:31:cc:7e:ad:b8:26:49:74:b4:ec:26:78:04:fb:01:
74:81:54:4d:fe:e6:89:92:df:f5:89:49:f3:51:40:18:e9:4a:
64:2d:2a:46:2e:d7:01:c6:fb:68:44:14:f4:97:27:da:de:f8:
a7:c5:1f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:08 2025 by rpki-client