Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft
File: lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft (raw, json)
Hash identifier: YVmMCVM0bGjRzh8zx5ByGGyUZai5n2/PagQ+vvKCBR0=
Subject key identifier: 33:B3:DB:99:F7:0E:26:32:CD:E5:3D:E5:AF:D6:B1:FE:EB:12:92:4C
Authority key identifier: 97:35:A9:4F:31:54:6D:43:7B:89:72:0E:84:4B:2F:12:A5:AB:F2:68
Certificate issuer: /CN=9735a94f31546d437b89720e844b2f12a5abf268
Certificate serial: 019892FF8C7D1A19BCFFD297652A8DEFB617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzWpTzFUbUN7iXIOhEsvEqWr8mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft
Manifest number: 0B59
Signing time: Sun 10 Aug 2025 08:01:17 +0000
Manifest this update: Sun 10 Aug 2025 08:01:17 +0000
Manifest next update: Mon 11 Aug 2025 08:01:17 +0000
Files and hashes: 1: K_2uusZ-ceVYTyxoJbEaCXUaJZ8.roa (hash: ECfU3dqUiHJoycwQ/ZQhx1FlZVv9NEnP+CXvi3oehN0=)
2: lzWpTzFUbUN7iXIOhEsvEqWr8mg.crl (hash: DkIQZAZDd6o09p4/KzO/uzkoJH7RIPHiwesIwZGSwS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lzWpTzFUbUN7iXIOhEsvEqWr8mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:ff:8c:7d:1a:19:bc:ff:d2:97:65:2a:8d:ef:b6:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9735a94f31546d437b89720e844b2f12a5abf268
Validity
Not Before: Aug 10 08:01:17 2025 GMT
Not After : Aug 11 08:01:17 2025 GMT
Subject: CN=33b3db99f70e2632cde53de5afd6b1feeb12924c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6c:16:da:39:16:f6:5a:f7:a7:5a:36:0f:be:
e5:d0:7e:26:9b:50:d1:f6:0c:b9:01:32:7a:f1:bc:
a0:ae:27:de:42:d2:c1:07:43:18:bb:6f:45:43:f0:
5f:32:2e:20:36:1f:64:d3:77:e7:6f:ef:41:81:8d:
20:e5:de:50:51:5f:57:2f:7e:c7:b9:41:64:1e:18:
63:40:11:08:2d:f2:3e:30:cf:44:59:32:c2:70:cd:
1d:0a:7b:54:7b:89:18:4c:1d:1d:a4:3e:d7:b3:a0:
af:2c:76:7a:d9:88:ad:7a:c2:58:12:b0:f2:10:3f:
99:33:e5:53:9f:dd:29:7c:82:d0:89:9d:23:1c:8d:
fe:7d:32:c9:de:23:ea:d1:82:7c:0d:55:c9:01:f8:
f1:c1:c2:0b:0c:84:47:f9:38:82:bb:7f:3a:a0:7e:
8f:e7:36:60:b7:77:49:33:e9:92:94:0e:54:77:b0:
d6:cb:66:ad:6f:5e:89:97:55:16:5e:2d:43:84:72:
f5:e5:e7:a5:ec:92:15:54:fe:fe:ef:20:1d:b4:01:
e7:0f:c5:50:f1:78:b8:06:af:cd:73:ee:49:33:a8:
b2:e1:d3:74:2f:36:f1:53:8f:d8:23:a4:8b:8b:5e:
5a:71:2a:f0:96:84:50:5d:0b:40:89:94:8f:c4:c5:
84:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B3:DB:99:F7:0E:26:32:CD:E5:3D:E5:AF:D6:B1:FE:EB:12:92:4C
X509v3 Authority Key Identifier:
keyid:97:35:A9:4F:31:54:6D:43:7B:89:72:0E:84:4B:2F:12:A5:AB:F2:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzWpTzFUbUN7iXIOhEsvEqWr8mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:e9:58:82:8f:b3:3c:cf:13:bb:1a:66:2d:85:9e:91:62:15:
03:7b:f5:ea:3a:1a:1b:39:a4:d0:ac:a0:67:3d:d4:fc:22:47:
78:4a:16:c7:9d:35:c4:7e:05:06:98:66:a8:9a:9d:19:f3:05:
8e:73:20:a3:d9:bb:ce:6c:84:62:da:d7:d8:a3:72:7b:d0:8b:
9e:7a:8d:56:0e:07:b6:58:c8:e2:5e:be:9b:b7:ab:d1:f7:58:
f9:fa:43:7f:93:91:da:9f:f5:01:13:d4:6b:96:06:15:8c:1f:
ea:2b:ed:70:a0:c6:ce:0e:db:19:a3:17:e5:cc:11:80:77:98:
ab:c8:9a:a7:76:99:cb:51:9e:cb:a3:5c:2f:26:9d:10:a0:5b:
91:e3:0b:98:fd:15:30:53:51:4e:d7:c1:28:84:ee:75:a6:b1:
09:dd:67:da:64:6a:08:dc:f1:85:cc:8c:43:e7:9a:e6:60:4b:
1f:ea:a3:d3:43:25:a7:97:29:98:79:c8:00:1d:26:e8:4c:bb:
2a:ec:eb:52:9f:9e:26:76:9b:09:3a:08:ef:15:fa:2b:67:fa:
fa:fe:21:a6:3b:7f:a9:83:32:f5:bb:36:aa:b1:ae:26:e4:8b:
50:8d:5e:04:52:e5:67:ff:64:1e:9b:48:00:a5:e0:92:fa:5d:
45:46:68:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:47:14 2025 by rpki-client