Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
File: LAzrgevOhZ9Qko6O0-HwqFERUts.mft (raw, json)
Hash identifier: iJfeN7d8rQ0zc6yuZTnfPcDVgTiUte3BpjlL0JypZ0s=
Subject key identifier: AB:18:47:2D:0D:0E:FD:8B:05:5D:1D:10:D9:23:09:8B:65:DB:1F:51
Authority key identifier: 2C:0C:EB:81:EB:CE:85:9F:50:92:8E:8E:D3:E1:F0:A8:51:11:52:DB
Certificate issuer: /CN=2c0ceb81ebce859f50928e8ed3e1f0a8511152db
Certificate serial: 01987DC152BCD1356DF177AA19D598945F68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
Manifest number: 0A05
Signing time: Wed 06 Aug 2025 05:01:18 +0000
Manifest this update: Wed 06 Aug 2025 05:01:18 +0000
Manifest next update: Thu 07 Aug 2025 05:01:18 +0000
Files and hashes: 1: LAzrgevOhZ9Qko6O0-HwqFERUts.crl (hash: NETt54NWQzYQK09uoIuVLqJJX7G9Yiwr4u9UzHHHwOg=)
2: Nw-tf2Fdg1IBaL0ZaEM215Hb70k.roa (hash: D6voi0MuqX48csC8cycT9bMohcrVdXkjR0ufp2F3pwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 05:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c1:52:bc:d1:35:6d:f1:77:aa:19:d5:98:94:5f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c0ceb81ebce859f50928e8ed3e1f0a8511152db
Validity
Not Before: Aug 6 05:01:18 2025 GMT
Not After : Aug 7 05:01:18 2025 GMT
Subject: CN=ab18472d0d0efd8b055d1d10d923098b65db1f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8e:5e:cb:3d:5f:e1:53:a1:3f:f3:62:f5:b9:
e6:8f:3c:ae:78:4e:3e:78:22:e3:84:3f:55:87:01:
ad:8a:b9:75:5d:dd:05:85:27:cd:de:ec:79:55:b9:
2a:01:ff:0a:bd:15:f8:06:8a:a4:3c:a3:52:17:04:
6e:1e:c8:f1:de:97:e8:dc:1a:e2:ed:b9:2f:24:fd:
55:b3:c8:c0:b2:d0:b5:84:f1:0d:f6:27:bd:92:8e:
2b:75:a7:20:b9:99:3b:ad:24:f4:fd:5d:37:8b:ab:
af:bc:b7:be:62:cc:47:d1:07:7d:65:42:5b:76:d4:
1f:1d:56:62:e2:a3:f9:d8:c7:cc:49:39:2e:fb:cd:
36:10:6a:69:3e:1c:02:79:30:1b:19:1d:65:e3:ee:
f9:2b:09:08:2b:48:54:11:ee:3a:4f:da:4b:cf:19:
8f:95:b8:e9:d4:52:9b:87:da:16:34:12:a8:e1:6f:
0c:ec:70:00:f3:36:72:10:de:33:0e:c2:6b:4e:ac:
98:e8:b4:a9:53:36:5e:82:ca:fa:63:6e:8f:19:5d:
8e:29:90:e4:64:de:0a:b3:4c:6d:9b:93:ec:69:c9:
11:e3:e5:f8:ab:9b:a8:25:08:b1:9c:62:34:23:00:
2d:c0:d7:6e:34:0e:e1:45:72:70:6c:af:d5:bc:8c:
40:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:18:47:2D:0D:0E:FD:8B:05:5D:1D:10:D9:23:09:8B:65:DB:1F:51
X509v3 Authority Key Identifier:
keyid:2C:0C:EB:81:EB:CE:85:9F:50:92:8E:8E:D3:E1:F0:A8:51:11:52:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:41:00:8d:0a:bc:07:a0:df:8a:52:dc:68:e7:55:6e:bb:60:
63:8c:74:ef:10:34:c6:7f:d0:22:53:e8:94:9d:59:bf:4a:c3:
33:a3:e0:3c:33:b9:a3:db:32:6b:48:bd:c5:6e:b4:6a:d8:57:
4c:4c:8b:c9:f3:75:2d:4e:50:3b:48:18:ca:24:7c:74:1b:c6:
f1:86:2b:84:8a:2e:b5:ae:79:38:c7:ce:2c:6e:86:97:29:a1:
53:70:d3:bc:f8:e1:54:ed:4a:dc:67:10:49:00:d0:00:6f:20:
4b:f9:71:d2:83:bf:48:09:de:2c:e9:56:d0:ee:d5:6d:21:d3:
82:cc:d3:5e:db:14:73:43:05:9e:e6:29:0a:04:07:75:63:b7:
23:e5:1d:43:ac:29:16:dd:b6:e4:a4:8f:b1:a4:8e:07:c8:2a:
18:cc:9c:72:e1:9b:27:eb:cd:13:04:6b:9f:18:33:31:0b:c7:
d3:ab:33:59:8b:33:d5:6d:d3:01:c5:04:2d:32:44:e4:fe:2e:
6d:4b:e5:5e:3b:56:be:48:d6:fa:b3:ca:7f:13:cf:42:c0:69:
29:fa:54:e6:72:ec:15:6c:b6:d0:3b:be:6f:15:b6:98:6a:87:
97:e1:25:9a:30:f2:65:dd:bb:9e:d3:25:b2:b2:61:c2:0d:bd:
5f:5a:1a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:56:56 2025 by rpki-client