Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
File: lzvsM65zjJiViBnGwTuzNe40q0w.mft (raw, json)
Hash identifier: oEARUUUU8WjJNWA2Kxtd3W5JWJU7q9z4QbGMptZ1pm0=
Subject key identifier: 28:F8:7F:C7:22:D4:B4:5E:E8:2B:AB:68:A6:8F:98:95:10:EB:8B:47
Authority key identifier: 97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
Certificate issuer: /CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Certificate serial: 0197B6D76DE1B8AD6625768756E977B8CBE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
Manifest number: 0C5C
Signing time: Sat 28 Jun 2025 14:01:01 +0000
Manifest this update: Sat 28 Jun 2025 14:01:01 +0000
Manifest next update: Sun 29 Jun 2025 14:01:01 +0000
Files and hashes: 1: 04AAIWN8CdjN6G01O3D_l5i-Jvk.roa (hash: Mv4GpM35beFDVPlXDkHbY9A9imQnPo9JK9qNbOoM+YU=)
2: 9-T9tTEpFFagDxBNkX4Bbf2UnDM.roa (hash: G5P+io7+nluFSPyZaIxd4Qa6X2iCyWaqgj9ylJYiWn8=)
3: lzvsM65zjJiViBnGwTuzNe40q0w.crl (hash: 7bwMz4HVyBy6s8ewNVp9Sxgr1wU0nlweHeqrHaREVKY=)
4: tuawZTEX7vHBTQMJyQg0WD-oypg.roa (hash: IFKGL2W7O7px/Tqsp660BBZcbUWDZWgLugycTaSmqvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:6d:e1:b8:ad:66:25:76:87:56:e9:77:b8:cb:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Validity
Not Before: Jun 28 14:01:01 2025 GMT
Not After : Jun 29 14:01:01 2025 GMT
Subject: CN=28f87fc722d4b45ee82bab68a68f989510eb8b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d1:08:ae:71:9b:2d:8d:32:67:86:f2:8b:03:
a5:0d:10:5f:80:3a:a5:af:89:d6:64:20:41:c3:23:
c3:87:a7:4d:fe:65:c9:28:0d:14:96:90:4e:ec:be:
b0:92:dd:f8:62:83:41:cc:45:be:5b:da:ca:46:4f:
4b:fd:04:ac:20:e3:40:43:32:bc:47:f2:1a:1c:a7:
bb:5f:a2:d7:52:08:49:15:05:56:fe:5f:d0:67:a3:
80:b5:b9:90:6d:13:d8:94:40:1e:15:3e:6e:1b:2f:
7f:89:ec:f6:a8:20:e3:26:ad:09:5e:05:5f:b2:86:
ec:c9:1b:a4:0c:e4:a0:c8:26:fd:b6:33:e6:00:a8:
7e:2e:cf:67:b9:3f:a0:43:95:06:bd:cb:f0:99:be:
2f:2f:8e:8b:f0:31:72:6c:f9:6e:59:a5:e9:ec:0f:
93:59:3a:d3:9e:86:9a:ea:37:9c:46:f9:b1:92:db:
d3:43:e2:e4:31:3f:56:b3:82:35:db:54:05:12:a8:
6c:e3:1d:22:57:5d:5b:2c:0c:55:2d:67:85:44:d5:
dc:e3:4b:c2:e6:18:81:7a:fc:9b:30:75:bd:2a:6e:
c5:74:2b:a4:ed:b4:fb:7f:d3:a6:4b:ac:2e:c0:2c:
0a:a0:ff:d6:45:ea:5e:8f:89:20:e5:77:34:69:a4:
07:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F8:7F:C7:22:D4:B4:5E:E8:2B:AB:68:A6:8F:98:95:10:EB:8B:47
X509v3 Authority Key Identifier:
keyid:97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:f5:5b:67:a1:8a:9b:0f:ea:37:d4:fa:e9:b7:0c:88:13:9f:
de:f2:fd:92:68:38:d6:f1:fe:02:18:cf:ad:ba:cd:72:c7:c7:
6a:d8:de:49:39:e6:35:d2:51:e6:33:39:c7:48:6b:1b:47:7c:
e6:e3:50:10:36:40:12:8a:f9:5a:9c:25:18:a2:cd:17:97:a4:
e9:67:62:42:62:99:2c:be:f9:b8:f6:d2:82:39:de:7a:68:29:
a4:37:33:be:78:a4:9f:9e:96:80:cd:3e:37:ec:26:95:a6:78:
eb:d9:d8:bd:be:8a:b7:6c:11:81:6f:3d:4e:05:24:5e:b4:53:
6d:e3:60:4d:da:5e:74:35:60:d5:72:4e:c7:20:7d:f8:b6:13:
72:85:e5:5b:f5:e9:af:c9:71:4e:7d:cd:34:c6:9f:9e:d7:f6:
8a:60:34:60:c3:28:58:14:f5:ab:bb:00:6b:aa:99:f0:bc:ce:
b2:9b:e8:72:da:4e:f7:f1:77:9f:e6:a6:46:ea:ad:a6:34:1f:
e7:42:91:bc:1f:cc:cc:11:97:a8:82:4a:e5:15:d2:27:ef:92:
53:c2:8b:ae:0a:5a:ef:f7:f7:22:8f:1c:5d:ce:aa:89:43:08:
1f:c5:b6:32:7d:08:b6:56:5c:57:06:2b:f6:c5:1d:d8:db:8e:
11:93:a6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:43:00 2025 by rpki-client