Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
File: LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft (raw, json)
Hash identifier: xvRWg8oPSGrIfQy29tmkBdDTr75iKpwKxlklYvZMY74=
Subject key identifier: 14:30:AB:15:48:17:A2:F4:41:66:3A:C0:6D:95:EB:69:8E:EA:E3:1A
Authority key identifier: 2D:9E:31:C9:02:9E:E4:4B:D6:81:B5:15:33:03:35:C6:A1:CF:DE:EE
Certificate issuer: /CN=2d9e31c9029ee44bd681b515330335c6a1cfdeee
Certificate serial: 019889573AC4AEBF6197D7BDA2BB43F1C689
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
Manifest number: 1626
Signing time: Fri 08 Aug 2025 11:00:51 +0000
Manifest this update: Fri 08 Aug 2025 11:00:51 +0000
Manifest next update: Sat 09 Aug 2025 11:00:51 +0000
Files and hashes: 1: 5rwnt7U3zNdamjh9hhJ_HA_VCqo.roa (hash: LxqMIG4f6G1y41E4bvnnaVLXMyv0wjoLuCjGmeNYJdQ=)
2: LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl (hash: WGoVUvsZySY2Oems13lh+TkWxGbCBaxWNmTX3umpJng=)
3: NwLeIR_NPESbC4GUi2khijtoK7k.roa (hash: Cvm1rAd7KCGPEyQkopdZwWDBR/07H5izzQrtF4lbhAA=)
4: upgE53Ne0KMFUsGR-miso-8-5TQ.roa (hash: u1TgVu5CTRcoIplPeSQE03Pq8xZKbvkqbqoHvKMUbWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:57:3a:c4:ae:bf:61:97:d7:bd:a2:bb:43:f1:c6:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d9e31c9029ee44bd681b515330335c6a1cfdeee
Validity
Not Before: Aug 8 11:00:51 2025 GMT
Not After : Aug 9 11:00:51 2025 GMT
Subject: CN=1430ab154817a2f441663ac06d95eb698eeae31a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7b:9f:68:aa:f7:c4:ba:42:70:92:c1:fe:f8:
be:c6:5a:c9:80:8f:00:46:0e:9f:39:08:6b:49:05:
35:f5:8b:46:68:aa:34:6d:f2:2c:c9:78:a8:62:a3:
69:69:bd:e3:c1:3f:4e:6b:ce:73:21:7d:6a:ad:96:
71:37:2c:73:d8:38:4d:36:06:c2:3d:4b:8f:87:bb:
f7:e8:ef:0f:00:93:4b:ec:af:dc:85:8f:d8:37:56:
8b:2f:83:3f:75:13:70:63:08:0b:a9:c3:71:38:e1:
c8:e4:12:f0:1c:40:77:e3:65:40:75:92:87:8e:7f:
03:70:28:7c:ee:a8:11:67:26:8f:d3:9a:3b:59:0d:
2c:86:0b:af:2e:db:81:38:56:57:06:3e:a8:2c:65:
b0:5c:76:3d:71:ae:50:3b:29:76:b8:c8:8e:6a:7c:
e1:0a:58:1d:86:14:bb:cd:f1:15:3a:3c:2e:45:29:
da:20:98:03:51:f9:18:fa:9d:16:af:d1:b6:d9:c3:
63:5b:17:6e:ff:39:d1:3b:7b:a7:da:c6:6e:e7:c2:
7b:61:0c:4e:65:37:4b:5b:3f:4b:b8:c5:d0:92:25:
1f:53:2f:b3:10:49:cc:ab:3f:c6:4b:5c:f1:c8:40:
04:1e:73:a2:7b:58:3a:af:18:da:7a:fd:65:cd:5c:
b6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:30:AB:15:48:17:A2:F4:41:66:3A:C0:6D:95:EB:69:8E:EA:E3:1A
X509v3 Authority Key Identifier:
keyid:2D:9E:31:C9:02:9E:E4:4B:D6:81:B5:15:33:03:35:C6:A1:CF:DE:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:b0:e6:ad:ac:7b:82:39:ff:69:b3:90:5a:19:1e:6c:f1:1d:
9b:4e:ae:07:db:34:a6:75:a2:99:30:da:72:19:af:e8:db:a9:
3c:40:14:5c:8a:da:71:ac:f2:12:f5:eb:0a:8d:c8:21:71:60:
af:99:f8:09:51:36:8b:3f:4f:4f:f9:67:e6:1a:35:00:24:d9:
7e:5c:5e:94:f7:80:52:ae:b3:d5:d1:d6:ad:91:84:69:5d:52:
37:2a:fc:d8:60:4b:9b:71:86:7b:f5:6e:92:c1:70:9e:03:20:
f2:d2:51:57:55:6c:d0:36:4d:4a:5a:37:8e:cd:f1:57:2a:30:
e5:b9:a9:24:44:14:60:f0:6a:d6:b7:3a:3e:62:d7:36:d3:27:
a5:3c:51:c4:9d:5f:97:f4:67:3a:11:68:61:9b:88:df:26:0e:
fa:52:3c:1a:3f:b4:ae:da:83:f3:9e:00:c9:70:d8:2f:71:82:
eb:7d:09:fd:88:92:07:51:ad:05:40:36:bb:f3:4d:c6:60:b2:
50:b4:33:93:a4:7d:df:5f:9b:0a:a5:a0:7a:61:c4:ea:0d:7c:
b4:ee:4c:13:1e:7d:26:ba:ca:7c:d8:ed:4a:96:fb:f1:13:05:
63:f2:ed:bf:ac:ec:08:0c:13:e9:f8:95:8d:4f:32:9c:e1:4c:
30:70:de:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:10:55 2025 by rpki-client