Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.mft
File: LSzBOTIZUdsnbz_6KTrAoPP6i_c.mft (raw, json)
Hash identifier: 4qwtxaqLbHQ63NNZT746PkQR5OLRRPJ7vsWUnSvYC+E=
Subject key identifier: 34:EF:FF:35:60:9B:50:5C:00:63:A1:40:26:2D:52:36:93:62:03:0C
Authority key identifier: 2D:2C:C1:39:32:19:51:DB:27:6F:3F:FA:29:3A:C0:A0:F3:FA:8B:F7
Certificate issuer: /CN=2d2cc139321951db276f3ffa293ac0a0f3fa8bf7
Certificate serial: 019A507503915603DFE961B6B495F8BE7065
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSzBOTIZUdsnbz_6KTrAoPP6i_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.mft
Manifest number: 01B1
Signing time: Tue 04 Nov 2025 20:00:37 +0000
Manifest this update: Tue 04 Nov 2025 20:00:37 +0000
Manifest next update: Wed 05 Nov 2025 20:00:37 +0000
Files and hashes: 1: 6Y-dz23_E1vFq4knErbs01-uZMw.roa (hash: rAKus0aYY6lzOdl0PAY4O4iIsDrPWnm0ZrrdK7p/52I=)
2: LSzBOTIZUdsnbz_6KTrAoPP6i_c.crl (hash: sW8gn+mjYM7ggE2zd0nOOY3TlTZrnCYWFMfuMAH+TBA=)
3: OMjXgufGu7qz8nFaTx0akX2s_bA.roa (hash: BFAAWnjI4vlasJk/UdPdP2Sw5YmLCiP6pm/D70iwFGw=)
4: haci0wHWv3PDyudz0_g5F_r8gmQ.roa (hash: xpWgQhWnTLkyOHdJXW4G6WZ622/WFwOg5U25NN+USho=)
5: jWARhOvQnhRQXkxxUF1RCZ8Xr5g.roa (hash: 4x96g8YlVB8qqXIZOypAO1dDSyWsSe2A0i/2gmJhRDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/LSzBOTIZUdsnbz_6KTrAoPP6i_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:75:03:91:56:03:df:e9:61:b6:b4:95:f8:be:70:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2cc139321951db276f3ffa293ac0a0f3fa8bf7
Validity
Not Before: Nov 4 20:00:37 2025 GMT
Not After : Nov 5 20:00:37 2025 GMT
Subject: CN=34efff35609b505c0063a140262d52369362030c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:68:90:94:7f:21:ca:24:d4:7f:44:06:50:24:
c5:d8:d1:35:b0:de:e0:b5:b8:d7:b6:2f:31:bd:05:
d6:81:ac:b2:a3:e8:4a:b3:06:ab:ea:da:18:b7:b0:
b7:10:ed:31:b4:ec:a0:0f:db:59:e9:32:10:54:d7:
6d:69:35:49:c5:a0:5b:3f:f5:81:25:59:65:e1:f4:
b6:09:67:54:c9:ed:f2:18:8f:91:7a:ac:d8:68:58:
0a:f5:5e:66:25:59:fe:16:9c:e5:ba:6f:00:04:cb:
dd:e5:f8:ce:13:5a:76:52:a0:80:04:77:87:92:29:
30:b5:61:36:37:a0:b4:d1:5b:11:56:93:a8:ac:54:
03:c1:27:cc:6b:f9:f5:cb:e6:9b:bc:e4:d0:37:c3:
60:21:14:ae:d0:0d:09:ea:7c:2d:9e:1a:dd:a2:dd:
f8:55:2c:4b:40:07:d3:0b:ad:0d:ea:1d:f5:7a:4d:
54:20:2f:55:01:32:28:c3:eb:de:0d:05:e3:ff:d2:
ce:52:f6:48:e1:71:51:07:5a:94:44:d2:07:05:8d:
23:b1:47:92:ce:a2:1e:b9:19:1b:fd:89:9c:46:20:
cb:38:0d:2c:f7:3e:9d:fa:b3:c7:03:52:b9:8a:8c:
68:49:1d:d4:b0:48:4d:92:b4:00:50:01:25:0b:c6:
c3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:EF:FF:35:60:9B:50:5C:00:63:A1:40:26:2D:52:36:93:62:03:0C
X509v3 Authority Key Identifier:
keyid:2D:2C:C1:39:32:19:51:DB:27:6F:3F:FA:29:3A:C0:A0:F3:FA:8B:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSzBOTIZUdsnbz_6KTrAoPP6i_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/228b42-49fb-42cd-8b1b-2164d9995198/1/LSzBOTIZUdsnbz_6KTrAoPP6i_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:77:de:20:eb:4f:17:af:11:e1:39:24:00:9e:3e:d8:df:36:
6e:41:fd:61:5a:44:0f:7d:2c:e7:0f:8c:b7:59:c7:f0:36:cb:
e4:74:47:39:fa:42:52:02:e7:ae:0d:1b:ed:53:66:86:d7:51:
01:db:6e:be:7f:cb:ff:c4:0a:7e:fc:07:91:77:14:1f:60:ba:
6f:6d:41:a6:12:7a:fd:37:87:e9:1f:93:df:09:28:b1:a2:e5:
73:33:ba:34:fc:b0:1b:a0:c9:7c:fc:10:e8:66:10:e9:32:91:
6f:a6:6c:3c:de:97:4a:48:e8:2a:87:de:5a:73:b5:36:08:08:
0e:ce:e9:10:77:eb:04:61:af:74:2f:5b:bf:b5:af:06:00:81:
d7:b3:f8:f2:e9:6c:90:67:08:03:d7:c0:8e:8c:03:93:f1:45:
76:52:97:a6:79:52:01:6e:bf:5f:5b:c4:c2:86:f2:a0:a1:27:
77:d2:54:2e:cf:e5:31:36:e8:0f:b5:55:e3:4c:1a:a8:ee:82:
08:4c:60:f6:a2:a1:66:9c:9b:16:e3:61:42:71:fe:0a:05:ad:
d7:75:5a:25:2d:7c:46:e9:45:f5:97:06:83:b0:fb:7b:2f:bc:
42:d6:9f:8f:f8:c3:e1:78:dc:54:6a:48:ed:de:24:66:a2:47:
5c:0f:97:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQdQORVgPf6WG2tJX4vnBlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMmNjMTM5MzIxOTUxZGIyNzZmM2ZmYTI5M2FjMGEwZjNm
YThiZjcwHhcNMjUxMTA0MjAwMDM3WhcNMjUxMTA1MjAwMDM3WjAzMTEwLwYDVQQD
EygzNGVmZmYzNTYwOWI1MDVjMDA2M2ExNDAyNjJkNTIzNjkzNjIwMzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWiQlH8hyiTUf0QGUCTF2NE1sN7g
tbjXti8xvQXWgayyo+hKswar6toYt7C3EO0xtOygD9tZ6TIQVNdtaTVJxaBbP/WB
JVll4fS2CWdUye3yGI+ReqzYaFgK9V5mJVn+Fpzlum8ABMvd5fjOE1p2UqCABHeH
kikwtWE2N6C00VsRVpOorFQDwSfMa/n1y+abvOTQN8NgIRSu0A0J6nwtnhrdot34
VSxLQAfTC60N6h31ek1UIC9VATIow+veDQXj/9LOUvZI4XFRB1qURNIHBY0jsUeS
zqIeuRkb/YmcRiDLOA0s9z6d+rPHA1K5ioxoSR3UsEhNkrQAUAElC8bDnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDTv/zVgm1BcAGOhQCYtUjaTYgMMMB8GA1UdIwQY
MBaAFC0swTkyGVHbJ28/+ik6wKDz+ov3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFN6Qk9USVpVZHNuYnpfNktUckFvUFA2aV9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yMjhiNDItNDlmYi00MmNkLThiMWIt
MjE2NGQ5OTk1MTk4LzEvTFN6Qk9USVpVZHNuYnpfNktUckFvUFA2aV9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8yMjhiNDItNDlmYi00MmNkLThiMWItMjE2NGQ5OTk1MTk4
LzEvTFN6Qk9USVpVZHNuYnpfNktUckFvUFA2aV9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVHfeIOtP
F68R4TkkAJ4+2N82bkH9YVpED30s5w+Mt1nH8DbL5HRHOfpCUgLnrg0b7VNmhtdR
Adtuvn/L/8QKfvwHkXcUH2C6b21BphJ6/TeH6R+T3wkosaLlczO6NPywG6DJfPwQ
6GYQ6TKRb6ZsPN6XSkjoKofeWnO1NggIDs7pEHfrBGGvdC9bv7WvBgCB17P48uls
kGcIA9fAjowDk/FFdlKXpnlSAW6/X1vEwobyoKEnd9JULs/lMTboD7VV40waqO6C
CExg9qKhZpybFuNhQnH+CgWt13VaJS18RulF9ZcGg7D7ey+8Qtafj/jD4XjcVGpI
7d4kZqJHXA+XKA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:12:16 2025 by rpki-client