Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft
File: lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft (raw, json)
Hash identifier: XGGHBjjogDffabqE1CBnx9LSXYG0ZybgLU6Y4HgYLK8=
Subject key identifier: FB:23:19:74:66:D3:15:EA:58:F5:E7:E2:E0:26:17:44:38:B6:7C:DB
Authority key identifier: 97:35:A9:4F:31:54:6D:43:7B:89:72:0E:84:4B:2F:12:A5:AB:F2:68
Certificate issuer: /CN=9735a94f31546d437b89720e844b2f12a5abf268
Certificate serial: 019780C43BC82557C85FA03EF1CE583753D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzWpTzFUbUN7iXIOhEsvEqWr8mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft
Manifest number: 0ACB
Signing time: Wed 18 Jun 2025 02:00:33 +0000
Manifest this update: Wed 18 Jun 2025 02:00:33 +0000
Manifest next update: Thu 19 Jun 2025 02:00:33 +0000
Files and hashes: 1: K_2uusZ-ceVYTyxoJbEaCXUaJZ8.roa (hash: ECfU3dqUiHJoycwQ/ZQhx1FlZVv9NEnP+CXvi3oehN0=)
2: lzWpTzFUbUN7iXIOhEsvEqWr8mg.crl (hash: Pcckm1LI6ky9CNVJ4XN03E01VOTY+xjk3rlCslrq5fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lzWpTzFUbUN7iXIOhEsvEqWr8mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 02:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:80:c4:3b:c8:25:57:c8:5f:a0:3e:f1:ce:58:37:53:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9735a94f31546d437b89720e844b2f12a5abf268
Validity
Not Before: Jun 18 02:00:33 2025 GMT
Not After : Jun 19 02:00:33 2025 GMT
Subject: CN=fb23197466d315ea58f5e7e2e026174438b67cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:24:69:2b:1c:2f:6c:1c:d2:70:85:f7:68:29:
36:44:0d:bc:74:0a:6f:fc:47:8d:37:19:75:da:72:
8f:de:04:c3:b1:60:1f:9f:55:6e:be:99:75:38:67:
9f:1c:bb:b3:be:dd:9e:0f:8f:bb:12:83:22:4f:8d:
1f:2a:34:06:00:f6:6d:18:0d:92:b6:10:e6:2f:78:
f6:5a:63:3b:21:94:d6:92:16:39:d2:d6:76:bb:93:
5f:fa:c6:d2:a7:75:a7:fd:59:e5:87:76:2d:a8:59:
4a:03:21:8a:2e:d0:0c:ae:18:7b:22:51:ca:87:f5:
c9:61:b9:42:92:a0:53:c2:6d:e1:77:ec:c2:29:3a:
62:b3:ff:35:3f:73:a3:15:8d:22:77:ff:07:f2:7b:
e9:1f:9d:ca:7b:54:d9:69:b0:90:4c:c1:cc:d2:c3:
29:81:2a:78:03:73:21:63:5d:8d:20:0c:12:1d:12:
43:65:af:dc:db:e4:ae:36:8e:ec:e2:8c:c9:03:8b:
ff:94:71:6e:ef:14:85:2a:e2:50:52:85:76:29:86:
de:48:e8:8d:94:07:12:6b:0d:a0:1c:80:6a:88:28:
1a:8b:cd:41:73:8c:90:5d:a6:c8:7b:c2:ba:f8:65:
39:94:e2:91:b3:36:18:ba:90:4b:f6:80:5b:27:3a:
d0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:23:19:74:66:D3:15:EA:58:F5:E7:E2:E0:26:17:44:38:B6:7C:DB
X509v3 Authority Key Identifier:
keyid:97:35:A9:4F:31:54:6D:43:7B:89:72:0E:84:4B:2F:12:A5:AB:F2:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzWpTzFUbUN7iXIOhEsvEqWr8mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:50:73:d3:74:cc:c8:d3:dc:a4:9b:0f:07:2f:d0:74:88:6f:
d8:e4:96:67:cf:dc:40:94:4c:b6:bf:da:60:af:e6:0e:2f:b4:
50:d8:0f:a2:37:f3:26:eb:a8:b3:42:dd:4d:9d:42:72:7c:71:
df:d7:e3:d4:c2:d6:3a:02:67:18:b6:7e:55:91:9c:6f:93:a7:
d5:2a:f4:51:d2:e1:dd:14:a9:32:55:43:5a:67:30:98:85:57:
e5:95:fc:a6:2b:33:e6:20:9d:00:35:82:5d:7d:03:ad:3c:10:
5d:84:4c:0a:ca:81:32:63:dc:ec:4b:38:f7:0c:1b:ba:16:e3:
e1:73:6f:47:dd:67:d4:2b:c9:ae:80:70:8d:12:7c:d8:e6:90:
2e:58:9d:74:70:38:90:20:4e:82:e5:b1:77:a0:e4:d1:b3:f9:
da:55:b0:7a:a7:a4:59:24:46:7a:a2:18:c6:f3:17:76:66:e6:
1d:04:ea:43:f5:b9:8d:cb:2c:5f:7f:68:e3:03:37:42:9f:14:
de:12:fb:59:7f:11:77:45:83:e0:47:a7:ec:fb:bd:d3:b5:5c:
e0:7d:b0:7b:ed:16:1e:67:ea:6e:4b:6f:5a:1f:e1:e9:59:2f:
a5:78:01:d0:62:be:67:52:6c:53:97:e0:ba:c2:ea:d0:a1:91:
ad:41:04:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 13:18:47 2025 by rpki-client