Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
File: lzvsM65zjJiViBnGwTuzNe40q0w.mft (raw, json)
Hash identifier: 4qtuv85RMDyQmTdlZEgzrlju0L6O1nHZMPyblGEeh1U=
Subject key identifier: 96:2C:08:1C:BA:0D:4B:81:44:A5:80:04:F9:5B:03:B4:FF:C8:92:CA
Authority key identifier: 97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
Certificate issuer: /CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Certificate serial: 0198D4A7AAA5C31F1CFB2E44DD12D8762987
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
Manifest number: 0CF0
Signing time: Sat 23 Aug 2025 02:00:14 +0000
Manifest this update: Sat 23 Aug 2025 02:00:14 +0000
Manifest next update: Sun 24 Aug 2025 02:00:14 +0000
Files and hashes: 1: 04AAIWN8CdjN6G01O3D_l5i-Jvk.roa (hash: Mv4GpM35beFDVPlXDkHbY9A9imQnPo9JK9qNbOoM+YU=)
2: 9-T9tTEpFFagDxBNkX4Bbf2UnDM.roa (hash: G5P+io7+nluFSPyZaIxd4Qa6X2iCyWaqgj9ylJYiWn8=)
3: lzvsM65zjJiViBnGwTuzNe40q0w.crl (hash: 84G6e2/pzCMwQowRkkS7WDpRrYact9eelNZGkX2t60E=)
4: tuawZTEX7vHBTQMJyQg0WD-oypg.roa (hash: IFKGL2W7O7px/Tqsp660BBZcbUWDZWgLugycTaSmqvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:aa:a5:c3:1f:1c:fb:2e:44:dd:12:d8:76:29:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Validity
Not Before: Aug 23 02:00:14 2025 GMT
Not After : Aug 24 02:00:14 2025 GMT
Subject: CN=962c081cba0d4b8144a58004f95b03b4ffc892ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e9:94:7d:92:07:51:06:37:a8:8c:ef:8f:7a:
9b:9d:2b:59:cc:9b:a3:8f:e9:96:0d:f2:1e:42:c0:
19:ff:84:79:1b:4c:e3:f7:01:43:0e:e4:3a:a1:e4:
14:5e:f9:b9:59:32:d7:dc:44:3c:a7:97:8a:ce:2f:
e8:c0:54:5e:ca:73:23:7b:d8:6c:28:d5:21:51:d3:
cd:29:2c:4f:63:13:c4:93:8f:76:8b:dc:4c:f9:a7:
9e:8c:ce:e8:77:ce:d6:77:53:28:a5:e7:da:fb:de:
2b:0b:ac:c9:c8:bb:a3:02:ab:8d:74:18:42:e6:3b:
86:43:38:0d:ef:bf:95:d6:cb:c5:9e:3e:7d:35:aa:
5d:f7:4e:1f:85:2a:45:94:36:7a:f0:9d:7e:e0:09:
f6:f7:3f:cc:88:aa:28:da:9f:ca:8b:00:d8:15:1e:
4d:3a:30:16:ed:4f:66:72:ed:14:08:3f:1e:3f:5a:
4e:16:4e:19:e9:f3:43:33:87:20:1f:f8:08:68:8a:
d5:52:9e:4c:61:17:26:ea:13:4d:e4:36:ad:32:9a:
9d:2e:b3:08:e9:36:17:4c:7f:11:42:b9:b2:66:c1:
e9:54:3a:9e:5d:5d:ea:5e:de:97:39:ae:30:c5:e7:
52:92:e1:7b:82:57:b9:4a:93:6a:86:0a:6c:09:d9:
53:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2C:08:1C:BA:0D:4B:81:44:A5:80:04:F9:5B:03:B4:FF:C8:92:CA
X509v3 Authority Key Identifier:
keyid:97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:df:93:23:c3:20:37:db:78:31:c2:64:5b:bb:73:38:aa:3e:
af:45:06:9c:16:67:27:77:07:c8:39:5a:98:bf:a4:3e:98:58:
06:28:56:00:31:71:a0:d8:65:ed:34:29:85:61:d7:68:c2:86:
86:3b:19:ea:6d:be:45:3f:06:fe:2e:78:8e:35:d5:98:c4:bf:
cc:2f:e2:6b:93:22:d1:9f:94:ba:90:d2:5c:e9:af:93:75:fd:
41:7e:c1:22:d4:a1:0e:e3:cf:e0:58:8c:f2:0c:48:b7:c2:a0:
12:74:fa:1b:eb:40:fb:12:85:04:a6:55:5f:d2:a5:5c:6f:c1:
1e:87:89:1a:43:84:af:ab:47:e1:1f:31:dc:a7:76:89:03:96:
56:dc:ab:f4:c0:42:3d:94:9f:03:0d:3d:97:8c:b4:71:e0:25:
12:eb:c8:ea:80:1c:e7:25:c7:03:35:0c:1a:7d:12:5c:f0:95:
8c:49:5f:0a:3e:d9:1a:e2:31:d4:2b:b5:a1:ed:42:81:98:1f:
6d:ed:72:18:23:98:bd:91:97:52:9a:0a:e8:1a:11:30:53:74:
ef:9a:17:7e:fc:b0:93:71:7d:67:9d:d5:40:55:50:32:7c:a1:
75:f0:5f:99:7b:ad:eb:63:35:fb:d3:16:07:a5:8a:a4:8f:f8:
fa:ad:3b:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp6qlwx8c+y5E3RLYdimHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3M2JlYzMzYWU3MzhjOTg5NTg4MTljNmMxM2JiMzM1ZWUz
NGFiNGMwHhcNMjUwODIzMDIwMDE0WhcNMjUwODI0MDIwMDE0WjAzMTEwLwYDVQQD
Eyg5NjJjMDgxY2JhMGQ0YjgxNDRhNTgwMDRmOTViMDNiNGZmYzg5MmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOmUfZIHUQY3qIzvj3qbnStZzJuj
j+mWDfIeQsAZ/4R5G0zj9wFDDuQ6oeQUXvm5WTLX3EQ8p5eKzi/owFReynMje9hs
KNUhUdPNKSxPYxPEk492i9xM+aeejM7od87Wd1Mopefa+94rC6zJyLujAquNdBhC
5juGQzgN77+V1svFnj59Napd904fhSpFlDZ68J1+4An29z/MiKoo2p/KiwDYFR5N
OjAW7U9mcu0UCD8eP1pOFk4Z6fNDM4cgH/gIaIrVUp5MYRcm6hNN5DatMpqdLrMI
6TYXTH8RQrmyZsHpVDqeXV3qXt6XOa4wxedSkuF7gle5SpNqhgpsCdlTuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYsCBy6DUuBRKWABPlbA7T/yJLKMB8GA1UdIwQY
MBaAFJc77DOuc4yYlYgZxsE7szXuNKtMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHp2c002NXpqSmlWaUJuR3dUdXpOZTQwcTB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8yZjQ2MDUtMzU2YS00YWY2LWIxNWQt
YzQyZjlhYmYxNDc3LzEvbHp2c002NXpqSmlWaUJuR3dUdXpOZTQwcTB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8yZjQ2MDUtMzU2YS00YWY2LWIxNWQtYzQyZjlhYmYxNDc3
LzEvbHp2c002NXpqSmlWaUJuR3dUdXpOZTQwcTB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABt+TI8Mg
N9t4McJkW7tzOKo+r0UGnBZnJ3cHyDlamL+kPphYBihWADFxoNhl7TQphWHXaMKG
hjsZ6m2+RT8G/i54jjXVmMS/zC/ia5Mi0Z+UupDSXOmvk3X9QX7BItShDuPP4FiM
8gxIt8KgEnT6G+tA+xKFBKZVX9KlXG/BHoeJGkOEr6tH4R8x3Kd2iQOWVtyr9MBC
PZSfAw09l4y0ceAlEuvI6oAc5yXHAzUMGn0SXPCVjElfCj7ZGuIx1Cu1oe1CgZgf
be1yGCOYvZGXUpoK6BoRMFN075oXfvywk3F9Z53VQFVQMnyhdfBfmXut62M1+9MW
B6WKpI/4+q07tg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:05:39 2025 by rpki-client