
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.mft
File: LrlwnvMbddaOIgiqvyosPD2Hb8E.mft (raw, json)
Hash identifier: Rf/s2BVZ+SCYmLU/i6ApYq9YYDjCIBW1oDD6OpN9o24=
Subject key identifier: E7:50:47:1D:CA:9E:CB:1A:10:B3:BC:09:B0:03:3B:83:BA:3D:98:E1
Authority key identifier: 2E:B9:70:9E:F3:1B:75:D6:8E:22:08:AA:BF:2A:2C:3C:3D:87:6F:C1
Certificate issuer: /CN=2eb9709ef31b75d68e2208aabf2a2c3c3d876fc1
Certificate serial: 0198D515BEDD2532BC25378C1022695880FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrlwnvMbddaOIgiqvyosPD2Hb8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 04:00:28 +0000
Manifest this update: Sat 23 Aug 2025 04:00:28 +0000
Manifest next update: Sun 24 Aug 2025 04:00:28 +0000
Files and hashes: 1: LrlwnvMbddaOIgiqvyosPD2Hb8E.crl (hash: 63/J9zq6p67z180gGGuiOYntMFO7AhG39t/XaBzk2DQ=)
2: pb4QZ95Peoa-v89w9IfVF9OInYI.roa (hash: mVmSldgY3RuIKYBpTP9fbMVJ33NM7M6bAyGk/0LxYwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/LrlwnvMbddaOIgiqvyosPD2Hb8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:be:dd:25:32:bc:25:37:8c:10:22:69:58:80:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eb9709ef31b75d68e2208aabf2a2c3c3d876fc1
Validity
Not Before: Aug 23 04:00:28 2025 GMT
Not After : Aug 24 04:00:28 2025 GMT
Subject: CN=e750471dca9ecb1a10b3bc09b0033b83ba3d98e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:80:d6:54:e7:e1:22:36:3a:1c:1c:d7:1b:c0:
e3:d7:74:78:b6:e3:55:4f:88:06:50:bf:ee:a6:12:
11:7b:5a:fc:83:b4:72:67:22:9c:17:6c:95:1d:fb:
4d:64:70:80:cc:38:e7:5d:e7:25:be:46:47:c1:83:
40:49:49:df:07:12:b6:ed:d9:2f:aa:4b:cd:d9:88:
2e:76:ff:ad:76:90:3f:37:7c:fa:8b:c0:cc:e0:a3:
34:4f:da:1d:c0:4f:d1:80:11:52:a4:55:ab:df:28:
df:22:e9:ee:e7:18:cc:6f:cf:ce:31:cb:29:ee:b2:
30:79:ed:10:bb:20:87:8e:5b:52:0d:d0:75:07:75:
65:12:f2:f2:3f:63:84:07:ff:0e:ed:dd:82:64:5f:
f5:28:82:04:68:87:eb:03:99:62:9d:39:58:94:5f:
68:81:46:95:09:dd:5c:27:23:de:59:4e:0a:36:d3:
1d:52:8d:ec:5d:7b:dc:de:5b:ee:c1:a9:54:a4:5f:
3f:ac:94:b1:5f:ea:f3:fe:1b:c1:38:c0:32:f9:81:
4a:a9:e9:a2:0c:1f:d5:80:58:4b:28:a2:3e:ff:1a:
bd:26:19:7f:97:eb:fd:47:ca:88:29:af:8e:f3:16:
4a:44:d2:3a:63:46:8c:7f:a7:3d:2e:aa:10:52:67:
7d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:50:47:1D:CA:9E:CB:1A:10:B3:BC:09:B0:03:3B:83:BA:3D:98:E1
X509v3 Authority Key Identifier:
keyid:2E:B9:70:9E:F3:1B:75:D6:8E:22:08:AA:BF:2A:2C:3C:3D:87:6F:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrlwnvMbddaOIgiqvyosPD2Hb8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:d3:18:c9:a3:56:f8:29:7a:e2:f6:6a:72:9b:b3:24:a1:c5:
1e:bd:46:dc:c8:be:74:61:f6:60:ae:0e:79:4c:b8:f6:6a:6e:
aa:3c:00:b6:e3:91:0e:71:a7:97:a6:17:19:38:5a:22:4e:d1:
69:e1:d7:1c:51:f0:ae:9e:19:65:09:a8:10:5c:70:04:60:f3:
62:99:5f:81:15:4b:81:26:22:8b:53:50:06:27:4f:fd:7d:23:
cf:8d:18:5f:89:fb:00:12:bc:65:92:d1:ec:d1:b3:a5:1b:72:
fe:6d:4f:6c:fb:18:26:d2:56:ad:8e:5e:6b:ce:c5:a0:bb:48:
74:af:66:ba:99:7d:c9:5e:d6:d7:54:f5:bb:a7:00:5d:61:80:
d2:b5:af:40:53:95:5f:93:26:9b:af:fd:da:05:b3:46:2d:b1:
cf:ab:2d:91:df:e1:b0:b2:9e:e0:79:ec:e4:0b:e5:28:f0:e3:
69:e6:a9:78:2f:ca:71:f0:62:1c:a6:e8:fe:aa:01:e0:94:52:
18:ea:10:28:22:d4:79:28:3c:d7:bd:2d:92:68:4e:79:4e:73:
69:83:8e:dc:f1:72:dc:75:d6:ae:b1:6d:51:18:85:08:77:bf:
c4:89:a1:fa:94:91:9c:57:36:34:c5:9c:b1:0f:9d:71:46:2d:
2f:64:7b:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFb7dJTK8JTeMECJpWID/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlYjk3MDllZjMxYjc1ZDY4ZTIyMDhhYWJmMmEyYzNjM2Q4
NzZmYzEwHhcNMjUwODIzMDQwMDI4WhcNMjUwODI0MDQwMDI4WjAzMTEwLwYDVQQD
EyhlNzUwNDcxZGNhOWVjYjFhMTBiM2JjMDliMDAzM2I4M2JhM2Q5OGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4DWVOfhIjY6HBzXG8Dj13R4tuNV
T4gGUL/uphIRe1r8g7RyZyKcF2yVHftNZHCAzDjnXeclvkZHwYNASUnfBxK27dkv
qkvN2Ygudv+tdpA/N3z6i8DM4KM0T9odwE/RgBFSpFWr3yjfIunu5xjMb8/OMcsp
7rIwee0QuyCHjltSDdB1B3VlEvLyP2OEB/8O7d2CZF/1KIIEaIfrA5linTlYlF9o
gUaVCd1cJyPeWU4KNtMdUo3sXXvc3lvuwalUpF8/rJSxX+rz/hvBOMAy+YFKqemi
DB/VgFhLKKI+/xq9Jhl/l+v9R8qIKa+O8xZKRNI6Y0aMf6c9LqoQUmd9YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOdQRx3KnssaELO8CbADO4O6PZjhMB8GA1UdIwQY
MBaAFC65cJ7zG3XWjiIIqr8qLDw9h2/BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHJsd252TWJkZGFPSWdpcXZ5b3NQRDJIYjhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84ZDNjM2ItNjA2OS00Y2QxLTg5YjEt
Y2VjMzVjNDUzYzVlLzEvTHJsd252TWJkZGFPSWdpcXZ5b3NQRDJIYjhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi84ZDNjM2ItNjA2OS00Y2QxLTg5YjEtY2VjMzVjNDUzYzVl
LzEvTHJsd252TWJkZGFPSWdpcXZ5b3NQRDJIYjhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj9MYyaNW
+Cl64vZqcpuzJKHFHr1G3Mi+dGH2YK4OeUy49mpuqjwAtuORDnGnl6YXGThaIk7R
aeHXHFHwrp4ZZQmoEFxwBGDzYplfgRVLgSYii1NQBidP/X0jz40YX4n7ABK8ZZLR
7NGzpRty/m1PbPsYJtJWrY5ea87FoLtIdK9mupl9yV7W11T1u6cAXWGA0rWvQFOV
X5Mmm6/92gWzRi2xz6stkd/hsLKe4Hns5AvlKPDjaeapeC/KcfBiHKbo/qoB4JRS
GOoQKCLUeSg8170tkmhOeU5zaYOO3PFy3HXWrrFtURiFCHe/xImh+pSRnFc2NMWc
sQ+dcUYtL2R7ow==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:41 2025 by rpki-client