Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
File: lzvsM65zjJiViBnGwTuzNe40q0w.mft (raw, json)
Hash identifier: 3IiioOV8DyTWJnXClXDKjBs2z3FvM7jUnSYCMe5du+Q=
Subject key identifier: 4D:42:99:E2:FE:D6:3F:F9:1C:89:E6:AB:5C:43:EE:88:68:B6:4C:F3
Authority key identifier: 97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
Certificate issuer: /CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Certificate serial: 01987418F2CCD12F08408E0C7E033C3F688A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
Manifest number: 0CBE
Signing time: Mon 04 Aug 2025 08:00:48 +0000
Manifest this update: Mon 04 Aug 2025 08:00:48 +0000
Manifest next update: Tue 05 Aug 2025 08:00:48 +0000
Files and hashes: 1: 04AAIWN8CdjN6G01O3D_l5i-Jvk.roa (hash: Mv4GpM35beFDVPlXDkHbY9A9imQnPo9JK9qNbOoM+YU=)
2: 9-T9tTEpFFagDxBNkX4Bbf2UnDM.roa (hash: G5P+io7+nluFSPyZaIxd4Qa6X2iCyWaqgj9ylJYiWn8=)
3: lzvsM65zjJiViBnGwTuzNe40q0w.crl (hash: KmlBe5Uj/SipXJePU7FZGcdkUNqb4rO37S2emh+vQo8=)
4: tuawZTEX7vHBTQMJyQg0WD-oypg.roa (hash: IFKGL2W7O7px/Tqsp660BBZcbUWDZWgLugycTaSmqvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:f2:cc:d1:2f:08:40:8e:0c:7e:03:3c:3f:68:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Validity
Not Before: Aug 4 08:00:48 2025 GMT
Not After : Aug 5 08:00:48 2025 GMT
Subject: CN=4d4299e2fed63ff91c89e6ab5c43ee8868b64cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a0:de:77:6e:7c:cd:d8:23:65:14:52:8d:4a:
8c:02:da:ee:db:f7:b1:41:a6:e9:1b:3d:8e:2d:6a:
65:33:58:b2:e8:2b:b5:f6:5e:55:df:3d:81:a6:9f:
2e:cb:97:1b:64:d9:04:3d:da:95:2a:d1:58:6d:4a:
02:55:d5:0e:80:c1:0b:78:27:57:ed:b0:a5:0b:a3:
fe:d5:20:df:64:41:40:94:e2:9e:6a:30:24:24:56:
19:67:2e:1b:e3:4a:3a:9b:93:89:43:df:d2:95:be:
24:43:b6:92:e5:06:90:56:18:26:61:09:b4:92:b1:
07:90:93:fc:08:64:1b:b1:ea:f8:5c:8a:a6:b9:26:
66:27:a4:96:01:f3:57:2e:be:b0:5b:ea:03:1d:2f:
67:c0:b2:58:4b:39:2a:f8:9a:ed:24:b1:ba:7c:d6:
01:56:77:ff:76:9e:5c:a1:bf:c5:64:2f:d3:3c:5f:
e7:b2:d1:b5:c7:99:58:5e:fa:24:36:d2:11:a7:b7:
e1:08:ca:15:8a:f2:b0:8b:df:51:cd:53:d9:ba:e1:
88:02:32:bd:b3:29:b4:47:96:9d:86:ad:bd:5b:e3:
e1:6d:a6:8d:57:ba:27:24:17:6f:bf:cc:10:44:b3:
d0:23:91:c7:24:46:e4:09:f9:d4:44:d5:fa:57:13:
4c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:42:99:E2:FE:D6:3F:F9:1C:89:E6:AB:5C:43:EE:88:68:B6:4C:F3
X509v3 Authority Key Identifier:
keyid:97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b5:a8:1c:f9:5d:f5:a4:4d:de:6e:fd:26:5c:f2:da:ca:dc:
b8:c7:9e:91:e3:97:ad:a2:ba:c5:ac:fd:f5:47:90:b4:07:e2:
e9:fc:64:11:c1:97:d4:4e:25:2f:af:93:02:eb:f6:0c:9f:fc:
44:34:cd:9e:63:4c:d9:d3:92:58:1b:db:5d:70:9e:f0:6b:88:
63:08:7e:13:34:a9:95:8e:18:3e:fe:8b:ff:38:3e:02:96:26:
e4:9b:17:8a:0a:d2:c9:d3:c0:47:2c:ba:73:bf:aa:c6:8a:3e:
e1:a4:99:80:d3:d2:9b:ef:bf:eb:d9:0a:20:de:a6:56:6f:2c:
f7:63:7d:7f:12:72:69:12:62:30:fa:02:c1:89:c6:8a:c0:e5:
6b:f4:86:5a:9a:20:08:d7:34:dc:41:27:6d:77:6b:cf:53:27:
c3:c9:10:dc:32:ad:a4:81:f5:6e:32:fe:46:f7:f3:fd:50:51:
42:3f:53:53:c1:e1:a2:fc:50:9c:d7:e5:57:09:3d:d1:37:be:
96:88:9b:4d:de:d4:dd:74:cb:9a:ee:1a:b2:43:44:04:f0:89:
6b:70:f2:6d:60:61:15:5a:c5:44:b2:a4:ae:9f:ae:8c:4e:2d:
07:e2:5a:64:52:5f:0a:56:87:af:c9:4c:e3:3b:67:75:26:3b:
38:f8:b1:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0GPLM0S8IQI4MfgM8P2iKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3M2JlYzMzYWU3MzhjOTg5NTg4MTljNmMxM2JiMzM1ZWUz
NGFiNGMwHhcNMjUwODA0MDgwMDQ4WhcNMjUwODA1MDgwMDQ4WjAzMTEwLwYDVQQD
Eyg0ZDQyOTllMmZlZDYzZmY5MWM4OWU2YWI1YzQzZWU4ODY4YjY0Y2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKDed258zdgjZRRSjUqMAtru2/ex
QabpGz2OLWplM1iy6Cu19l5V3z2Bpp8uy5cbZNkEPdqVKtFYbUoCVdUOgMELeCdX
7bClC6P+1SDfZEFAlOKeajAkJFYZZy4b40o6m5OJQ9/Slb4kQ7aS5QaQVhgmYQm0
krEHkJP8CGQbser4XIqmuSZmJ6SWAfNXLr6wW+oDHS9nwLJYSzkq+JrtJLG6fNYB
Vnf/dp5cob/FZC/TPF/nstG1x5lYXvokNtIRp7fhCMoVivKwi99RzVPZuuGIAjK9
sym0R5adhq29W+PhbaaNV7onJBdvv8wQRLPQI5HHJEbkCfnURNX6VxNMeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE1CmeL+1j/5HInmq1xD7ohotkzzMB8GA1UdIwQY
MBaAFJc77DOuc4yYlYgZxsE7szXuNKtMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHp2c002NXpqSmlWaUJuR3dUdXpOZTQwcTB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8yZjQ2MDUtMzU2YS00YWY2LWIxNWQt
YzQyZjlhYmYxNDc3LzEvbHp2c002NXpqSmlWaUJuR3dUdXpOZTQwcTB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8yZjQ2MDUtMzU2YS00YWY2LWIxNWQtYzQyZjlhYmYxNDc3
LzEvbHp2c002NXpqSmlWaUJuR3dUdXpOZTQwcTB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ7WoHPld
9aRN3m79Jlzy2srcuMeekeOXraK6xaz99UeQtAfi6fxkEcGX1E4lL6+TAuv2DJ/8
RDTNnmNM2dOSWBvbXXCe8GuIYwh+EzSplY4YPv6L/zg+ApYm5JsXigrSydPARyy6
c7+qxoo+4aSZgNPSm++/69kKIN6mVm8s92N9fxJyaRJiMPoCwYnGisDla/SGWpog
CNc03EEnbXdrz1Mnw8kQ3DKtpIH1bjL+Rvfz/VBRQj9TU8HhovxQnNflVwk90Te+
loibTd7U3XTLmu4askNEBPCJa3DybWBhFVrFRLKkrp+ujE4tB+JaZFJfClaHr8lM
4ztndSY7OPixXw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:02 2025 by rpki-client