Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.mft
File: RzLQ_Og_tnOCzqzjdWyLE8CpXJg.mft (raw, json)
Hash identifier: +lsVLbZq5kzNjldTUzUDR9qNRvwxL6Hzm1kTFFpYLwA=
Subject key identifier: F5:D4:BA:70:BF:0D:4E:2E:F8:D9:E5:D1:9B:33:BB:B0:FA:56:27:F9
Authority key identifier: 47:32:D0:FC:E8:3F:B6:73:82:CE:AC:E3:75:6C:8B:13:C0:A9:5C:98
Certificate issuer: /CN=4732d0fce83fb67382ceace3756c8b13c0a95c98
Certificate serial: 01989411853BB92E4D0ABCBF37997EB18DAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.mft
Manifest number: 0C67
Signing time: Sun 10 Aug 2025 13:00:32 +0000
Manifest this update: Sun 10 Aug 2025 13:00:32 +0000
Manifest next update: Mon 11 Aug 2025 13:00:32 +0000
Files and hashes: 1: LX0lDVhKXnxLv0r9aLXJhJHu_E0.roa (hash: 7TRQZhECen5sQILgMQ/YVGL/75Sg6nbZxTLOGOZ3zSk=)
2: RzLQ_Og_tnOCzqzjdWyLE8CpXJg.crl (hash: jgzW9xQBKJiemTlXlu1ecjBwfPEtpu0d7kf1cKnGlj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:11:85:3b:b9:2e:4d:0a:bc:bf:37:99:7e:b1:8d:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4732d0fce83fb67382ceace3756c8b13c0a95c98
Validity
Not Before: Aug 10 13:00:32 2025 GMT
Not After : Aug 11 13:00:32 2025 GMT
Subject: CN=f5d4ba70bf0d4e2ef8d9e5d19b33bbb0fa5627f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:72:f6:6d:2c:6f:3f:dc:34:14:8c:b0:c0:b0:
62:1f:67:ec:56:a7:7c:88:9a:df:81:b6:c3:5b:d4:
f0:cb:40:6b:d7:3a:07:cc:59:c4:be:d5:28:40:9e:
30:77:72:25:b8:65:4c:be:5b:8e:74:fb:8b:9d:b6:
9a:14:fc:ea:51:97:3a:bf:93:a5:95:ee:d9:53:d7:
5d:2b:a4:9b:c2:9b:f0:40:74:19:15:34:2a:58:9e:
2d:3e:05:05:04:2f:1f:91:df:82:33:f9:5c:29:4f:
cc:f2:67:69:5f:cb:71:90:a3:15:fb:ee:ff:7b:80:
3f:a6:85:b2:2b:c3:14:56:12:71:bd:20:18:0b:4a:
0d:b0:1b:cf:49:d3:27:ee:01:8d:3e:18:36:07:83:
51:61:75:3b:80:af:bd:d1:ae:be:30:14:a5:3c:ed:
37:c7:82:f4:9e:19:47:b5:0a:09:d0:06:ce:0f:06:
aa:34:03:e3:6e:e8:1b:ad:78:62:8d:90:a5:a3:bc:
c7:be:08:c0:75:69:9a:1d:f9:47:76:19:ec:f1:a5:
36:6c:43:49:1e:4e:4a:22:4a:4d:e3:c1:09:c7:c3:
91:cc:2c:ff:18:4f:ad:d9:cf:f8:50:95:92:56:b4:
29:90:64:b4:29:71:2f:97:78:4b:91:8c:20:d1:e0:
8a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D4:BA:70:BF:0D:4E:2E:F8:D9:E5:D1:9B:33:BB:B0:FA:56:27:F9
X509v3 Authority Key Identifier:
keyid:47:32:D0:FC:E8:3F:B6:73:82:CE:AC:E3:75:6C:8B:13:C0:A9:5C:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:0e:6b:bf:4c:86:ad:12:0a:96:03:2d:ed:c4:69:7c:a9:f6:
b2:f5:76:b1:f4:f9:24:c3:12:f8:50:fb:e0:26:08:97:fe:ae:
cd:e3:12:95:48:23:20:99:54:9f:7a:9a:a2:ae:6c:ce:28:18:
73:d5:1b:77:9b:76:48:39:16:11:42:d7:d3:d3:d9:f2:5e:61:
d8:40:8d:7e:53:26:12:3f:dc:7f:02:c8:39:8e:86:52:2f:92:
61:89:84:60:b9:52:82:59:ff:5c:d8:63:81:69:6b:16:ee:92:
54:27:f9:1e:e7:f6:0e:66:62:11:49:cc:ba:75:2e:c1:dd:d2:
7e:5b:6d:58:6e:52:27:5d:8a:00:00:06:87:49:87:f4:a0:b3:
37:fe:18:80:64:2f:2d:3a:07:d2:05:34:56:f8:3a:24:61:12:
2c:f5:74:02:35:0e:a3:dc:c2:34:4e:ef:a8:ab:61:15:66:bc:
89:00:40:2d:03:9d:b1:17:c5:ec:c3:f9:58:3e:39:d5:ca:a0:
b2:f7:40:c2:29:8c:ce:5d:cd:5c:ad:6d:8f:cb:fe:ca:eb:bc:
ce:00:ed:c7:a0:cb:2c:1b:9a:8f:04:02:0d:91:00:8d:c7:ce:
65:97:be:a6:a0:81:5e:4a:ff:7a:64:91:8c:b5:5e:5c:5a:94:
3f:fd:d0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:14:12 2025 by rpki-client