Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
File: Lg1AUXqHO33CrrKNDtai-ZOj100.mft (raw, json)
Hash identifier: l+yA5/xh14CqFcDOC8PNfO3kKSfs+Yz9PxRQytR4FAQ=
Subject key identifier: F4:E2:72:9C:9E:6D:67:25:8D:98:17:1A:A3:08:51:19:21:A7:2D:60
Authority key identifier: 2E:0D:40:51:7A:87:3B:7D:C2:AE:B2:8D:0E:D6:A2:F9:93:A3:D7:4D
Certificate issuer: /CN=2e0d40517a873b7dc2aeb28d0ed6a2f993a3d74d
Certificate serial: 0198D698403C5FB48400443546CC2C3C0458
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
Manifest number: 1330
Signing time: Sat 23 Aug 2025 11:02:38 +0000
Manifest this update: Sat 23 Aug 2025 11:02:38 +0000
Manifest next update: Sun 24 Aug 2025 11:02:38 +0000
Files and hashes: 1: Lg1AUXqHO33CrrKNDtai-ZOj100.crl (hash: HvMA5nZC950V4vWcD5J/jAZH08VrzTMo41lYMRJUN+Y=)
2: g5xnqTmVEZ7ZlTEWt6r937lOqAI.roa (hash: W28IbFUf6cfPKtxTT1Bs+8ajjdC7s7Nv39N6DzwHNwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:40:3c:5f:b4:84:00:44:35:46:cc:2c:3c:04:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0d40517a873b7dc2aeb28d0ed6a2f993a3d74d
Validity
Not Before: Aug 23 11:02:38 2025 GMT
Not After : Aug 24 11:02:38 2025 GMT
Subject: CN=f4e2729c9e6d67258d98171aa308511921a72d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:71:e0:6b:46:a5:c0:47:e1:e8:33:de:c2:b8:
17:d7:94:a4:4c:9c:f8:27:8c:29:6d:f2:1b:cb:69:
74:94:8c:e4:c9:3b:c3:c7:4f:16:b0:dc:b4:c6:50:
8b:62:57:d1:c8:17:e7:68:66:74:37:80:f3:89:34:
b1:dc:f2:e2:f4:c4:03:1f:66:17:a2:a4:9d:e8:e2:
a9:d7:ef:87:6e:34:97:c1:9f:f5:09:20:ee:e8:d4:
0c:22:93:82:04:cc:18:d0:0d:86:73:38:ac:53:2e:
1d:73:e0:20:f1:eb:bc:12:b1:bc:0a:ef:57:e8:82:
d3:1b:3e:92:d8:2e:42:d1:a5:df:c5:1d:eb:51:59:
b1:28:38:6a:2c:9f:79:88:29:08:8c:3f:61:89:b9:
bc:51:0c:b0:ae:b2:47:eb:fd:9b:19:65:11:38:fc:
81:3a:25:00:4e:d5:64:76:06:2b:98:48:04:a3:22:
d6:f8:2b:1b:9d:72:91:92:eb:22:b2:37:a3:11:14:
0d:4b:f9:69:7b:dd:95:e0:50:48:0b:c1:ab:8d:92:
0d:ee:28:c8:e8:df:af:4d:97:cc:c1:eb:9e:67:46:
5a:09:cf:b5:bb:a3:1f:ca:ab:74:54:60:05:fa:93:
02:28:c2:42:61:d9:09:4b:30:e6:b2:7b:af:80:e1:
34:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E2:72:9C:9E:6D:67:25:8D:98:17:1A:A3:08:51:19:21:A7:2D:60
X509v3 Authority Key Identifier:
keyid:2E:0D:40:51:7A:87:3B:7D:C2:AE:B2:8D:0E:D6:A2:F9:93:A3:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lg1AUXqHO33CrrKNDtai-ZOj100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/14e920-14a7-41cf-bdd7-57786951b78f/1/Lg1AUXqHO33CrrKNDtai-ZOj100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:f9:70:06:fd:22:59:c6:85:00:8d:c1:53:8b:62:f9:a1:32:
f2:81:fb:e8:56:de:da:9e:63:b4:b2:a6:72:ca:6f:ac:6a:86:
91:b4:0a:0a:27:8a:ae:d6:ea:a1:33:7b:2f:23:f8:ee:e1:6c:
67:16:46:e3:03:97:f4:4f:db:63:4f:26:6a:35:e4:f9:9e:8e:
8d:87:fa:87:89:0f:fa:fb:a1:10:82:73:8e:54:32:78:50:86:
08:f1:62:c6:12:1d:64:f7:e7:cb:dc:b4:84:f8:71:4a:c4:6b:
9f:43:eb:c9:f7:e1:bb:e2:c4:21:ce:6d:02:1a:b9:18:6d:29:
d5:e7:dd:3c:81:2d:68:73:bb:68:62:91:f4:e5:b6:ba:d6:b2:
77:9e:0b:bf:f4:d1:16:71:3e:91:bd:c0:91:0a:72:bd:f2:b9:
3f:1c:79:eb:b9:d4:d5:83:b4:01:a4:d0:b1:9a:9a:59:62:d9:
8a:b7:7f:ea:2a:a8:22:40:b9:c2:43:b7:8c:f4:db:68:86:0e:
df:9f:42:35:49:af:83:3c:4c:43:5b:9f:26:e3:6e:b5:23:5e:
db:dd:05:64:7c:0a:27:e2:ef:34:7a:ed:ac:bf:e5:63:fe:37:
47:24:81:fb:89:f8:bb:3d:bc:a0:64:93:39:ad:25:7a:39:bd:
3c:67:4a:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmEA8X7SEAEQ1RswsPARYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMGQ0MDUxN2E4NzNiN2RjMmFlYjI4ZDBlZDZhMmY5OTNh
M2Q3NGQwHhcNMjUwODIzMTEwMjM4WhcNMjUwODI0MTEwMjM4WjAzMTEwLwYDVQQD
EyhmNGUyNzI5YzllNmQ2NzI1OGQ5ODE3MWFhMzA4NTExOTIxYTcyZDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHHga0alwEfh6DPewrgX15SkTJz4
J4wpbfIby2l0lIzkyTvDx08WsNy0xlCLYlfRyBfnaGZ0N4DziTSx3PLi9MQDH2YX
oqSd6OKp1++HbjSXwZ/1CSDu6NQMIpOCBMwY0A2GczisUy4dc+Ag8eu8ErG8Cu9X
6ILTGz6S2C5C0aXfxR3rUVmxKDhqLJ95iCkIjD9hibm8UQywrrJH6/2bGWUROPyB
OiUATtVkdgYrmEgEoyLW+CsbnXKRkusisjejERQNS/lpe92V4FBIC8GrjZIN7ijI
6N+vTZfMweueZ0ZaCc+1u6Mfyqt0VGAF+pMCKMJCYdkJSzDmsnuvgOE0DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPTicpyebWcljZgXGqMIURkhpy1gMB8GA1UdIwQY
MBaAFC4NQFF6hzt9wq6yjQ7WovmTo9dNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGcxQVVYcUhPMzNDcnJLTkR0YWktWk9qMTAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8xNGU5MjAtMTRhNy00MWNmLWJkZDct
NTc3ODY5NTFiNzhmLzEvTGcxQVVYcUhPMzNDcnJLTkR0YWktWk9qMTAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8xNGU5MjAtMTRhNy00MWNmLWJkZDctNTc3ODY5NTFiNzhm
LzEvTGcxQVVYcUhPMzNDcnJLTkR0YWktWk9qMTAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP/lwBv0i
WcaFAI3BU4ti+aEy8oH76Fbe2p5jtLKmcspvrGqGkbQKCieKrtbqoTN7LyP47uFs
ZxZG4wOX9E/bY08majXk+Z6OjYf6h4kP+vuhEIJzjlQyeFCGCPFixhIdZPfny9y0
hPhxSsRrn0Pryffhu+LEIc5tAhq5GG0p1efdPIEtaHO7aGKR9OW2utayd54Lv/TR
FnE+kb3AkQpyvfK5Pxx567nU1YO0AaTQsZqaWWLZird/6iqoIkC5wkO3jPTbaIYO
359CNUmvgzxMQ1ufJuNutSNe290FZHwKJ+LvNHrtrL/lY/43RySB+4n4uz28oGST
Oa0lejm9PGdKEg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:30:48 2025 by rpki-client