Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft
File: lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft (raw, json)
Hash identifier: 8DhKT2g01Pv6HyJ7PnXX6i5J8z3MUZk4hGHWklOR6UU=
Subject key identifier: 82:88:A7:89:C1:77:68:34:93:8D:54:73:A3:12:C8:27:A8:80:91:EC
Authority key identifier: 96:0E:68:C8:38:9B:09:DC:34:54:64:A4:00:AF:27:65:68:E7:F9:6A
Certificate issuer: /CN=960e68c8389b09dc345464a400af276568e7f96a
Certificate serial: 0198D5159CBA48C3E593E80D3C7FA6FB93D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lg5oyDibCdw0VGSkAK8nZWjn-Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft
Manifest number: 0ECB
Signing time: Sat 23 Aug 2025 04:00:19 +0000
Manifest this update: Sat 23 Aug 2025 04:00:19 +0000
Manifest next update: Sun 24 Aug 2025 04:00:19 +0000
Files and hashes: 1: lg5oyDibCdw0VGSkAK8nZWjn-Wo.crl (hash: KakBpi9iOoZIOh9YuQtR5xx/PFXv/0301tgthFlMCyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lg5oyDibCdw0VGSkAK8nZWjn-Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:9c:ba:48:c3:e5:93:e8:0d:3c:7f:a6:fb:93:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=960e68c8389b09dc345464a400af276568e7f96a
Validity
Not Before: Aug 23 04:00:19 2025 GMT
Not After : Aug 24 04:00:19 2025 GMT
Subject: CN=8288a789c1776834938d5473a312c827a88091ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2c:44:be:e8:64:67:f3:14:80:74:7e:79:4b:
cd:06:6b:61:e1:21:9f:74:cb:40:2a:37:2c:ed:37:
26:0a:e9:34:a9:3f:80:10:7b:57:5f:2f:83:e0:6f:
52:d5:f3:28:1d:04:76:09:ca:34:11:f9:89:bb:13:
a2:a3:ec:32:af:8a:da:14:9f:e2:78:af:9d:97:b1:
c0:1d:0e:65:41:b0:eb:ad:81:bf:b1:34:ac:d4:f7:
85:4f:51:5c:db:fc:1d:24:b3:4f:07:1e:33:9f:9a:
99:2c:f6:94:bf:e3:6d:60:4a:93:14:e0:f1:c7:4f:
df:c2:2e:a4:61:fa:cc:44:b2:27:93:c5:bf:05:af:
da:16:f4:e6:a5:69:45:35:46:71:ad:77:2c:e7:07:
73:0f:8b:71:b2:37:16:07:6f:a8:75:30:7d:ef:c1:
1b:9a:b7:59:7b:38:8d:5b:16:e0:a1:93:0b:2b:97:
81:b0:7b:35:0a:86:0f:5f:49:36:f2:47:e0:2b:0b:
cd:c6:c0:a6:2e:3a:0d:86:60:d6:b3:2b:9e:4f:c0:
0c:ba:31:54:a6:10:c7:af:ed:a5:5e:68:df:9c:d7:
77:33:1b:9d:57:ad:38:c1:3e:84:b0:87:99:36:b5:
f3:1c:35:37:a6:da:e4:b2:6c:2e:3a:ef:65:bd:c4:
b8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:88:A7:89:C1:77:68:34:93:8D:54:73:A3:12:C8:27:A8:80:91:EC
X509v3 Authority Key Identifier:
keyid:96:0E:68:C8:38:9B:09:DC:34:54:64:A4:00:AF:27:65:68:E7:F9:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lg5oyDibCdw0VGSkAK8nZWjn-Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7bd8f3-4753-42cd-8ff3-6333186589a9/1/lg5oyDibCdw0VGSkAK8nZWjn-Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:0e:bc:93:02:08:b3:3e:e9:75:a3:bc:20:f5:ae:a0:c6:6a:
b6:d7:08:3b:ab:bb:fc:60:b4:fe:3c:29:70:2f:e6:5d:89:7a:
f0:07:4d:69:a0:02:91:d3:bd:4c:77:e2:d6:32:79:9d:dd:88:
3a:be:20:a7:29:46:ed:02:95:6a:d9:37:89:4e:00:39:25:1f:
d1:fd:04:1a:32:02:52:53:3d:19:91:81:6f:61:98:ea:cb:9b:
c8:71:8b:39:e1:a3:aa:78:fc:be:9d:42:30:ab:dd:fb:9e:ba:
29:40:cd:d1:47:0b:9f:0d:3f:bf:c2:3f:73:fd:46:c0:71:40:
d8:9f:cf:16:1e:bb:2e:4e:94:da:65:3e:65:68:9f:c7:cb:27:
b6:c8:82:a0:b3:ec:b0:47:61:0d:3c:c6:6b:4e:11:68:4a:2f:
8b:c9:4d:c8:1c:ca:51:4b:6b:6c:ce:e3:db:71:b3:d8:69:a4:
d3:73:79:5f:5a:56:9e:39:4e:61:f1:a1:a4:5d:e6:f9:9c:a6:
b5:8a:d6:1a:f7:39:d0:66:5c:30:ea:68:b2:51:50:3a:47:1b:
91:05:89:25:c5:0c:db:61:0d:9d:c6:15:75:a0:c7:fb:11:88:
1a:c4:76:ce:88:20:08:a0:70:82:c7:f5:5f:10:a5:bc:fe:74:
3c:d6:e4:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFZy6SMPlk+gNPH+m+5PQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MGU2OGM4Mzg5YjA5ZGMzNDU0NjRhNDAwYWYyNzY1Njhl
N2Y5NmEwHhcNMjUwODIzMDQwMDE5WhcNMjUwODI0MDQwMDE5WjAzMTEwLwYDVQQD
Eyg4Mjg4YTc4OWMxNzc2ODM0OTM4ZDU0NzNhMzEyYzgyN2E4ODA5MWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuixEvuhkZ/MUgHR+eUvNBmth4SGf
dMtAKjcs7TcmCuk0qT+AEHtXXy+D4G9S1fMoHQR2Cco0EfmJuxOio+wyr4raFJ/i
eK+dl7HAHQ5lQbDrrYG/sTSs1PeFT1Fc2/wdJLNPBx4zn5qZLPaUv+NtYEqTFODx
x0/fwi6kYfrMRLInk8W/Ba/aFvTmpWlFNUZxrXcs5wdzD4txsjcWB2+odTB978Eb
mrdZeziNWxbgoZMLK5eBsHs1CoYPX0k28kfgKwvNxsCmLjoNhmDWsyueT8AMujFU
phDHr+2lXmjfnNd3MxudV604wT6EsIeZNrXzHDU3ptrksmwuOu9lvcS4/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIKIp4nBd2g0k41Uc6MSyCeogJHsMB8GA1UdIwQY
MBaAFJYOaMg4mwncNFRkpACvJ2Vo5/lqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGc1b3lEaWJDZHcwVkdTa0FLOG5aV2puLVdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy83YmQ4ZjMtNDc1My00MmNkLThmZjMt
NjMzMzE4NjU4OWE5LzEvbGc1b3lEaWJDZHcwVkdTa0FLOG5aV2puLVdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy83YmQ4ZjMtNDc1My00MmNkLThmZjMtNjMzMzE4NjU4OWE5
LzEvbGc1b3lEaWJDZHcwVkdTa0FLOG5aV2puLVdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZw68kwII
sz7pdaO8IPWuoMZqttcIO6u7/GC0/jwpcC/mXYl68AdNaaACkdO9THfi1jJ5nd2I
Or4gpylG7QKVatk3iU4AOSUf0f0EGjICUlM9GZGBb2GY6subyHGLOeGjqnj8vp1C
MKvd+566KUDN0UcLnw0/v8I/c/1GwHFA2J/PFh67Lk6U2mU+ZWifx8sntsiCoLPs
sEdhDTzGa04RaEovi8lNyBzKUUtrbM7j23Gz2Gmk03N5X1pWnjlOYfGhpF3m+Zym
tYrWGvc50GZcMOposlFQOkcbkQWJJcUM22ENncYVdaDH+xGIGsR2zoggCKBwgsf1
XxClvP50PNbkuA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:42:37 2025 by rpki-client