Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
File: lZI0IMz-4DjNyutDkjEKBZivej4.mft (raw, json)
Hash identifier: Zp7N6mD9O6w1gF9f9KAj25NOmhxJeAU2S17pOSCGAcQ=
Subject key identifier: 05:45:53:FB:C9:E3:EE:D3:3B:A9:47:9B:87:27:01:EA:B8:F6:F5:E2
Authority key identifier: 95:92:34:20:CC:FE:E0:38:CD:CA:EB:43:92:31:0A:05:98:AF:7A:3E
Certificate issuer: /CN=95923420ccfee038cdcaeb4392310a0598af7a3e
Certificate serial: 019872CF58A8AC85E0E04F68F09A599B7F1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
Manifest number: 021D
Signing time: Mon 04 Aug 2025 02:00:47 +0000
Manifest this update: Mon 04 Aug 2025 02:00:47 +0000
Manifest next update: Tue 05 Aug 2025 02:00:47 +0000
Files and hashes: 1: fATmKoPkxnFaeIEAAJJ02F6yM_M.roa (hash: 9vZ8Uz6k4By0kjf2AHSVtoIff7eSff80iL0R5CgM+Wc=)
2: lZI0IMz-4DjNyutDkjEKBZivej4.crl (hash: 1STX+3mEHXJ2rpVF3D6UNgEsnZG9yVF/PgUdzs25t8E=)
3: nxwl4psj0ZeUsfjLgqXGlryR_84.roa (hash: V1Lgl4QJ6FifoZAOxyZaoWJeRw45hAvPFwT3/eP0Ph4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:58:a8:ac:85:e0:e0:4f:68:f0:9a:59:9b:7f:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95923420ccfee038cdcaeb4392310a0598af7a3e
Validity
Not Before: Aug 4 02:00:47 2025 GMT
Not After : Aug 5 02:00:47 2025 GMT
Subject: CN=054553fbc9e3eed33ba9479b872701eab8f6f5e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b0:30:00:ab:40:b7:56:ad:8a:9b:d6:5d:19:
9e:24:47:8c:f3:24:d9:33:de:e1:1a:cc:51:58:02:
5d:7f:16:de:b6:e2:6c:4e:53:2e:bb:8c:17:91:93:
c1:e5:0f:68:e2:45:6c:7c:6d:81:52:31:d4:ce:27:
af:30:97:df:71:ac:8c:b8:8c:68:7a:c6:22:41:c9:
dc:42:60:a7:f7:ef:a4:ab:59:ba:f3:3f:af:ba:4f:
c6:a3:22:5b:f4:af:6b:b6:2c:a0:db:ca:f8:b6:e5:
a7:76:ca:0d:71:c1:dc:7a:d4:59:e3:f0:d4:60:3d:
58:7a:27:d0:68:2f:87:96:c8:1e:85:c5:7f:1a:e6:
10:8c:85:be:c7:ea:8e:62:8e:02:b4:6c:ed:21:8f:
60:b1:ad:83:f3:e5:a8:44:24:1f:e0:82:d6:ec:10:
52:c7:49:75:82:79:8a:22:b5:d1:aa:31:08:83:db:
c1:35:26:a8:ae:e8:02:29:65:3d:0f:ae:4c:13:a9:
2c:72:89:dd:de:e4:8e:0f:9c:81:17:90:5c:f8:f0:
00:0b:fe:36:31:eb:45:f9:5f:74:ca:08:91:a4:2f:
4e:36:28:f0:12:1c:b8:7f:12:1e:8b:59:f1:a7:df:
2e:55:fe:ae:05:c6:1d:e5:a7:c0:47:b8:3e:59:c8:
f4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:45:53:FB:C9:E3:EE:D3:3B:A9:47:9B:87:27:01:EA:B8:F6:F5:E2
X509v3 Authority Key Identifier:
keyid:95:92:34:20:CC:FE:E0:38:CD:CA:EB:43:92:31:0A:05:98:AF:7A:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ec:48:35:d9:f6:14:1b:10:3b:1e:2b:e7:66:e1:7a:07:15:
0e:9a:73:ca:31:e5:d1:4a:c1:43:3b:e6:bf:b8:8d:32:ac:5b:
29:ec:70:65:78:92:89:cf:e5:03:04:ce:17:dd:80:9b:d4:9c:
c5:19:a2:c8:4f:4b:8c:98:4e:ba:2f:ec:6e:4c:0b:91:22:1c:
cd:53:64:e5:0a:06:1f:1c:a9:c3:f3:e4:a9:36:47:12:f9:5b:
4a:f9:e7:f5:45:b3:52:1b:93:e5:53:2c:6a:82:ff:fd:12:5c:
bd:24:ba:12:0d:33:5e:14:71:9c:8f:97:b5:7a:94:3a:27:2d:
e1:9e:5f:14:c0:36:ec:a5:7a:52:59:f0:63:5a:1e:ab:c1:b9:
7c:52:ae:1f:99:20:99:e6:ef:58:84:22:ea:05:bc:1f:d4:cd:
9d:7f:69:b0:98:42:bb:ca:a0:e1:59:24:ed:ea:8c:a0:56:0b:
0b:a3:07:15:66:20:ca:6a:03:3f:12:3e:51:3f:b5:40:b5:04:
29:cb:61:e0:5f:35:38:3a:3f:44:6b:aa:25:be:b9:60:67:e9:
d7:1e:3b:5f:8c:2f:50:56:cd:c9:64:a2:f8:fe:70:c4:3f:d9:
a0:a7:0d:40:a0:78:c1:41:2f:2f:ee:4d:29:75:f8:92:be:81:
df:10:3f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:33 2025 by rpki-client