Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8c70c4-9060-4ffc-8ad3-6f017e1f1eed/1/PtWjaKny40iTSpFIiEVZQ2I_lus.mft
File: PtWjaKny40iTSpFIiEVZQ2I_lus.mft (raw, json)
Hash identifier: N+xNmK44AYpJDUhc0tg5iyJNJ81D+xLBsRoGH+GqCbo=
Subject key identifier: 35:59:7F:97:12:A3:6D:D8:8F:55:68:AF:13:A4:05:97:2C:B1:58:EB
Authority key identifier: 3E:D5:A3:68:A9:F2:E3:48:93:4A:91:48:88:45:59:43:62:3F:96:EB
Certificate issuer: /CN=3ed5a368a9f2e348934a914888455943623f96eb
Certificate serial: 0198D660E42F212CAC9368DC15D13F1D588C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PtWjaKny40iTSpFIiEVZQ2I_lus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8c70c4-9060-4ffc-8ad3-6f017e1f1eed/1/PtWjaKny40iTSpFIiEVZQ2I_lus.mft
Manifest number: 122D
Signing time: Sat 23 Aug 2025 10:02:10 +0000
Manifest this update: Sat 23 Aug 2025 10:02:10 +0000
Manifest next update: Sun 24 Aug 2025 10:02:10 +0000
Files and hashes: 1: PtWjaKny40iTSpFIiEVZQ2I_lus.crl (hash: 8N8udHP9WTjY/f1ARaVPEnvYLNOywovGdbtk4Pen7gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8c70c4-9060-4ffc-8ad3-6f017e1f1eed/1/PtWjaKny40iTSpFIiEVZQ2I_lus.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8c70c4-9060-4ffc-8ad3-6f017e1f1eed/1/PtWjaKny40iTSpFIiEVZQ2I_lus.mft
rsync://rpki.ripe.net/repository/DEFAULT/PtWjaKny40iTSpFIiEVZQ2I_lus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:e4:2f:21:2c:ac:93:68:dc:15:d1:3f:1d:58:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ed5a368a9f2e348934a914888455943623f96eb
Validity
Not Before: Aug 23 10:02:10 2025 GMT
Not After : Aug 24 10:02:10 2025 GMT
Subject: CN=35597f9712a36dd88f5568af13a405972cb158eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2c:fe:3a:09:2d:79:c4:ba:fe:0c:db:43:2c:
f1:63:3c:30:4b:ac:4f:10:41:ad:21:1a:a3:60:ab:
50:61:26:f4:10:02:17:ea:78:bf:2e:b4:ad:d2:eb:
0e:ad:bb:9e:c4:47:b3:15:06:7e:84:1e:b5:03:25:
03:2c:5f:e5:cb:97:3e:5a:77:ce:23:65:f4:55:3b:
77:bb:35:d3:91:35:a6:d8:5e:5e:58:8e:58:88:cb:
c0:ed:54:f7:be:f8:14:ee:9d:78:95:6b:3b:59:44:
55:69:d5:6c:7d:a3:71:93:f2:8f:e5:9d:a8:bf:d4:
91:e2:54:5f:fd:00:b5:ac:3c:41:93:87:9b:60:6b:
69:ee:48:98:ec:fc:c2:00:3a:ee:22:c5:fb:77:69:
52:8f:47:c6:71:f5:b5:f3:eb:99:0e:f9:43:2c:89:
41:86:08:11:7d:91:24:9b:63:b0:41:91:0b:af:44:
66:30:bd:6b:69:12:74:9a:05:f6:6b:4a:6c:d7:5a:
1a:9b:1b:3f:81:cf:82:f4:e0:cc:38:56:c4:b5:c0:
52:05:1b:7a:e2:63:81:3c:4a:8d:4f:5a:37:8c:6e:
79:0d:a6:ce:51:f5:34:c1:c4:68:c5:28:5a:97:70:
5c:19:bc:b4:91:65:91:94:77:32:38:12:c9:14:ea:
77:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:59:7F:97:12:A3:6D:D8:8F:55:68:AF:13:A4:05:97:2C:B1:58:EB
X509v3 Authority Key Identifier:
keyid:3E:D5:A3:68:A9:F2:E3:48:93:4A:91:48:88:45:59:43:62:3F:96:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PtWjaKny40iTSpFIiEVZQ2I_lus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8c70c4-9060-4ffc-8ad3-6f017e1f1eed/1/PtWjaKny40iTSpFIiEVZQ2I_lus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8c70c4-9060-4ffc-8ad3-6f017e1f1eed/1/PtWjaKny40iTSpFIiEVZQ2I_lus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:01:7e:d1:6d:0d:03:5d:c4:fd:80:30:b1:c9:b3:aa:c7:f4:
a0:4a:92:39:d9:16:3b:83:6a:55:dc:11:33:54:a9:a0:a3:16:
6d:6d:0b:66:72:f6:d1:e2:96:62:10:4f:5e:2c:b5:b6:c7:a4:
ba:bb:e8:97:95:57:ad:e3:83:3c:46:e9:50:e6:0d:b1:22:d9:
7c:d1:b1:51:ef:a3:c5:4c:2a:f2:ad:fd:3b:fc:2c:a4:15:16:
68:88:e1:60:aa:c9:2c:3c:32:64:61:18:58:88:90:cf:ac:2d:
52:f7:28:6e:5c:67:ba:79:71:33:94:3f:d4:f8:c1:32:3d:50:
73:e2:f6:84:18:c3:83:a4:70:4c:cf:41:db:94:6b:fc:ea:3f:
31:b2:b9:55:38:f0:2e:02:b1:49:13:15:d2:b6:70:06:04:70:
21:12:3a:7c:5f:f5:06:dd:c2:13:c0:fe:b1:27:3e:ad:de:5d:
bb:81:a7:5f:bc:12:ac:cd:e6:c7:71:1a:97:91:4b:ac:9a:79:
99:c2:d7:2a:ca:ab:4c:95:d2:17:7b:a6:ba:58:c7:6e:c2:be:
7d:7f:8d:d1:e3:b2:ca:94:5d:18:16:06:ec:25:a6:14:98:0c:
23:36:0b:54:fb:2f:d8:54:d7:00:c7:23:09:48:d7:27:a7:da:
7a:bd:d2:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYOQvISysk2jcFdE/HViMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlZDVhMzY4YTlmMmUzNDg5MzRhOTE0ODg4NDU1OTQzNjIz
Zjk2ZWIwHhcNMjUwODIzMTAwMjEwWhcNMjUwODI0MTAwMjEwWjAzMTEwLwYDVQQD
EygzNTU5N2Y5NzEyYTM2ZGQ4OGY1NTY4YWYxM2E0MDU5NzJjYjE1OGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziz+OgktecS6/gzbQyzxYzwwS6xP
EEGtIRqjYKtQYSb0EAIX6ni/LrSt0usOrbuexEezFQZ+hB61AyUDLF/ly5c+WnfO
I2X0VTt3uzXTkTWm2F5eWI5YiMvA7VT3vvgU7p14lWs7WURVadVsfaNxk/KP5Z2o
v9SR4lRf/QC1rDxBk4ebYGtp7kiY7PzCADruIsX7d2lSj0fGcfW18+uZDvlDLIlB
hggRfZEkm2OwQZELr0RmML1raRJ0mgX2a0ps11oamxs/gc+C9ODMOFbEtcBSBRt6
4mOBPEqNT1o3jG55DabOUfU0wcRoxShal3BcGby0kWWRlHcyOBLJFOp36QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDVZf5cSo23Yj1VorxOkBZcssVjrMB8GA1UdIwQY
MBaAFD7Vo2ip8uNIk0qRSIhFWUNiP5brMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHRXamFLbnk0MGlUU3BGSWlFVlpRMklfbHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84YzcwYzQtOTA2MC00ZmZjLThhZDMt
NmYwMTdlMWYxZWVkLzEvUHRXamFLbnk0MGlUU3BGSWlFVlpRMklfbHVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi84YzcwYzQtOTA2MC00ZmZjLThhZDMtNmYwMTdlMWYxZWVk
LzEvUHRXamFLbnk0MGlUU3BGSWlFVlpRMklfbHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcQF+0W0N
A13E/YAwscmzqsf0oEqSOdkWO4NqVdwRM1SpoKMWbW0LZnL20eKWYhBPXiy1tsek
urvol5VXreODPEbpUOYNsSLZfNGxUe+jxUwq8q39O/wspBUWaIjhYKrJLDwyZGEY
WIiQz6wtUvcoblxnunlxM5Q/1PjBMj1Qc+L2hBjDg6RwTM9B25Rr/Oo/MbK5VTjw
LgKxSRMV0rZwBgRwIRI6fF/1Bt3CE8D+sSc+rd5du4GnX7wSrM3mx3Eal5FLrJp5
mcLXKsqrTJXSF3umuljHbsK+fX+N0eOyypRdGBYG7CWmFJgMIzYLVPsv2FTXAMcj
CUjXJ6faer3SlA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:46:01 2025 by rpki-client