
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
File: lZmz54I3DcKBT1JcHW7OhNj3DzY.mft (raw, json)
Hash identifier: ude4sDu7mo7sakJShU12+32pXHKWQFRCIJKAxzL6rgQ=
Subject key identifier: EA:F8:2C:A2:4A:FB:05:50:57:CC:56:A8:7B:11:C8:47:8E:76:3A:9A
Authority key identifier: 95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36
Certificate issuer: /CN=9599b3e782370dc2814f525c1d6ece84d8f70f36
Certificate serial: 01987F0A797BBA3BA5925212EA899241A181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
Manifest number: 02BD
Signing time: Wed 06 Aug 2025 11:00:49 +0000
Manifest this update: Wed 06 Aug 2025 11:00:49 +0000
Manifest next update: Thu 07 Aug 2025 11:00:49 +0000
Files and hashes: 1: 0VA_9HQvgavGjx805ubmo2Lo5H0.roa (hash: LdNiPcj48/zXBSO9oEQ4RJjrS+zHAsqfBOtXhy9k8x4=)
2: VrF_JXAYi7cHSdA7vOtQcy0-na0.roa (hash: T3vCer2CYjMD216ESnj/Jeswzt56af8ZdG15R1wMajk=)
3: lZmz54I3DcKBT1JcHW7OhNj3DzY.crl (hash: UouhGkUluJVc1ymbirhQmAPQ5HIY4rl+4SPHEgOjzTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:0a:79:7b:ba:3b:a5:92:52:12:ea:89:92:41:a1:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9599b3e782370dc2814f525c1d6ece84d8f70f36
Validity
Not Before: Aug 6 11:00:49 2025 GMT
Not After : Aug 7 11:00:49 2025 GMT
Subject: CN=eaf82ca24afb055057cc56a87b11c8478e763a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:90:ab:d5:14:42:14:0c:f5:ab:aa:3f:ee:b2:
ae:e8:2d:02:6d:2a:80:7f:71:83:a4:91:62:ff:b3:
88:9d:0d:5d:92:e1:28:ae:3c:3b:5d:65:60:89:59:
6c:5e:ee:b7:63:6f:b4:f0:77:f3:42:3d:1b:29:1e:
b8:31:b5:16:00:dd:c6:38:3d:7b:94:4c:cb:9f:b6:
04:08:12:1d:7c:6d:b2:be:7b:38:89:f8:b2:35:be:
b6:3f:2f:94:60:39:db:31:a4:3a:0b:b8:0f:6d:48:
1f:5d:44:9e:e4:70:c7:11:03:b3:44:d7:25:3a:67:
aa:43:f7:f4:df:7d:af:e4:69:47:04:03:99:06:ed:
14:e3:ba:a7:ca:60:c8:45:a4:d3:00:27:6c:b8:d6:
4c:9a:ea:42:29:86:fb:e7:17:74:fa:a3:61:08:73:
98:7b:d4:f9:46:33:b0:50:d0:38:51:b9:9e:cf:ef:
9b:6b:01:28:86:3c:dc:bb:e2:ab:26:f0:50:4e:cd:
b8:ef:6c:e7:ef:8d:e4:51:80:17:15:63:89:a4:2d:
70:fd:22:2a:83:ca:f4:a5:bc:a8:d8:85:b9:f6:a9:
91:46:68:e3:03:de:f7:94:7d:a4:2c:af:ac:3e:90:
23:97:e0:11:a0:3f:b5:e1:0f:da:63:ea:48:7f:15:
f1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F8:2C:A2:4A:FB:05:50:57:CC:56:A8:7B:11:C8:47:8E:76:3A:9A
X509v3 Authority Key Identifier:
keyid:95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:f2:4e:39:02:22:a4:8f:f6:2f:65:36:33:41:25:23:76:77:
da:b2:02:cb:ed:75:37:50:cc:9b:7a:34:23:79:ad:e7:d0:61:
be:e5:f6:46:2b:b6:37:05:68:22:98:cf:2b:f2:e2:7a:05:e3:
c6:f8:37:d8:1c:82:28:1e:d6:48:1c:f0:de:18:ae:c1:2c:03:
f4:fe:12:fe:6a:71:ec:b3:01:e6:42:5e:34:26:bb:40:34:dc:
f0:46:7f:89:ce:fa:bf:cd:1f:6c:ba:3d:c2:b5:e4:02:cc:73:
43:3d:36:8d:18:45:6c:68:62:fb:bd:67:8d:34:23:0c:51:4f:
3c:f2:86:6d:00:74:f1:bf:c0:01:4a:5f:5b:1f:e2:03:6d:3a:
2f:35:5c:58:d0:f4:4b:03:38:f3:7f:8d:d5:ae:e2:42:22:63:
de:71:eb:c2:77:71:b9:b1:9e:76:b2:e2:9b:b8:1f:fb:ec:1a:
0a:ac:89:d5:32:c4:f3:03:9f:50:09:ea:40:d8:d1:a8:16:66:
8d:52:66:3d:a3:db:b5:72:19:90:60:c8:b2:c6:e3:01:1b:4a:
c7:8f:9b:1e:a8:58:36:9d:29:58:2f:9d:33:0c:7e:5c:48:94:
ae:a0:01:b1:16:bd:a2:b7:5b:1b:e6:55:7a:40:17:2c:24:a0:
6c:dd:3e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 19:38:04 2025 by rpki-client