Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
File: lBZrcEhD09l1QJXIOpG0k4KCAKI.mft (raw, json)
Hash identifier: RaP70+XIFVPWRX6yuwBkOuwLF8pzozWRJHNixh1q42o=
Subject key identifier: 2C:E5:B3:5D:D0:E9:48:F4:32:45:DA:CD:A6:00:FB:55:12:6A:40:BE
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 0198D5158F04EC7AAB6E790D5BB00BD87AD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
Manifest number: 1701
Signing time: Sat 23 Aug 2025 04:00:16 +0000
Manifest this update: Sat 23 Aug 2025 04:00:16 +0000
Manifest next update: Sun 24 Aug 2025 04:00:16 +0000
Files and hashes: 1: 7NOWSwr6Ix9WqMtFCauUoXq2B4E.roa (hash: 71eyC9fYC2VExHc19u8sJwP29ASsjLuAVH+CBPHOF2M=)
2: Ruw-x4zfVCc3GTiQCnnMayYLrMQ.roa (hash: VPqD7NaSAxVUR7gCvmAQcQt1SUni3lPjk7OqIt9I1TI=)
3: Z7uuC5XE4-fMCsGBtqQw7mSeH9U.roa (hash: W7maKhHagBpEQgNK15fnWc66E1ZuDuwRIn7gOriSZAo=)
4: h9d0ktI5MHIktnWrhY2zneTKIew.roa (hash: 9qkOa4Wd+V/Z+xQC2CIhkz1VoRa5qCsYXEwwfKMwhGQ=)
5: iLiQdmyWfTSKLtGAKTv8i9pD7b8.roa (hash: Kr8U4lUGZbLkZ8pUjbEG8aEkHuf+c7USfKgTZhieF7c=)
6: lBZrcEhD09l1QJXIOpG0k4KCAKI.crl (hash: CipKqXcugc0QkXeM7/RSE5yDPHW46veQU5uGJIXu27Q=)
7: zIA6BDrr_xrDLDlzAGpw_9P6klo.roa (hash: pfzDsna4zGoCQX7v3ji49EBWdSr9XYlq27X+4n1BNgY=)
8: zRIEfiHVhkzqHiYdm3McIGPDP2Q.roa (hash: 32bioXyHcsiw84uow4i7c6KhRJSD3457u6OM44k/3vM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:8f:04:ec:7a:ab:6e:79:0d:5b:b0:0b:d8:7a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Aug 23 04:00:16 2025 GMT
Not After : Aug 24 04:00:16 2025 GMT
Subject: CN=2ce5b35dd0e948f43245dacda600fb55126a40be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3f:db:c0:cd:61:17:01:37:93:02:82:90:f1:
cf:6e:28:59:74:d9:ba:6d:f0:5b:c4:04:02:87:4a:
4e:93:65:b5:d5:03:dc:d7:88:1c:13:b2:ae:36:66:
3e:5b:e9:73:12:e9:9f:82:8b:ed:d1:ce:ca:1b:eb:
90:ab:f9:b4:27:5f:49:3e:8d:08:2f:ed:c2:8a:f4:
c6:80:cd:19:6d:9e:7c:4f:eb:5b:33:12:55:c8:33:
53:66:78:59:03:d1:c9:7a:fa:02:8b:05:cf:d1:df:
70:5c:f1:18:11:24:cb:2d:26:75:0b:02:af:e0:b7:
bf:bf:a8:ac:3c:b1:e8:65:b5:e9:67:20:46:4e:7d:
e4:c9:1b:3b:95:9e:09:60:de:9a:da:6c:1e:d2:0a:
10:0a:97:ed:88:ab:e3:30:72:b1:f2:4e:00:95:15:
cf:a7:13:a3:bf:5b:57:ba:00:6b:07:d7:57:db:88:
0b:33:22:50:e8:11:02:a5:27:b5:8c:c4:d2:33:ea:
1e:d9:63:0c:ac:8d:5f:c0:c0:34:9e:72:c3:4f:d9:
f0:89:48:aa:cd:a3:bc:db:77:01:f1:a0:73:1d:4a:
17:1b:44:41:19:88:97:be:ff:7c:0b:a0:f7:bb:b0:
87:cb:5a:f6:08:6e:0b:69:79:6a:92:ab:a4:3c:3a:
70:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E5:B3:5D:D0:E9:48:F4:32:45:DA:CD:A6:00:FB:55:12:6A:40:BE
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:77:ed:6a:69:cf:5e:4b:72:3a:79:5b:98:19:3b:48:9e:b1:
37:bc:44:1f:d3:29:75:4e:bd:27:0a:65:f2:ff:90:f8:04:d1:
d9:a7:a8:cb:87:f1:f7:98:d3:4d:82:81:e9:78:89:9b:b7:b3:
bd:29:49:62:27:4f:a2:d4:ad:50:01:c1:d6:b0:cf:ed:c3:23:
86:61:86:50:41:6d:40:60:4a:af:70:24:3d:1e:c3:ce:36:62:
d6:01:f5:dc:26:e6:49:2b:1e:0b:d5:e2:79:26:8d:5b:f6:ec:
aa:12:d1:3e:aa:43:da:0c:f7:e5:ff:2d:cc:30:d7:c0:73:a0:
5f:8b:19:41:c9:c2:05:a3:86:01:a4:54:3c:64:bc:16:de:cd:
8a:e0:e7:6f:3f:6f:e1:72:e0:85:44:87:22:dc:bb:40:eb:e5:
59:2f:d4:e9:b2:61:ac:ed:37:f9:ac:91:c7:64:20:e8:8c:f0:
11:d2:1d:0b:3f:fe:96:e0:5b:d7:f5:2a:b5:50:4c:93:26:d3:
ff:5e:86:90:27:91:bd:c6:c2:9e:28:05:b6:2f:97:b2:e4:41:
68:87:72:45:a7:60:72:53:67:ce:78:f8:ed:0e:16:a2:36:31:
c7:d6:9c:5f:aa:e6:32:8e:5c:e3:19:7d:87:47:23:10:fc:e4:
ea:9a:2a:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFY8E7HqrbnkNW7AL2HrZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MTY2YjcwNDg0M2QzZDk3NTQwOTVjODNhOTFiNDkzODI4
MjAwYTIwHhcNMjUwODIzMDQwMDE2WhcNMjUwODI0MDQwMDE2WjAzMTEwLwYDVQQD
EygyY2U1YjM1ZGQwZTk0OGY0MzI0NWRhY2RhNjAwZmI1NTEyNmE0MGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyD/bwM1hFwE3kwKCkPHPbihZdNm6
bfBbxAQCh0pOk2W11QPc14gcE7KuNmY+W+lzEumfgovt0c7KG+uQq/m0J19JPo0I
L+3CivTGgM0ZbZ58T+tbMxJVyDNTZnhZA9HJevoCiwXP0d9wXPEYESTLLSZ1CwKv
4Le/v6isPLHoZbXpZyBGTn3kyRs7lZ4JYN6a2mwe0goQCpftiKvjMHKx8k4AlRXP
pxOjv1tXugBrB9dX24gLMyJQ6BECpSe1jMTSM+oe2WMMrI1fwMA0nnLDT9nwiUiq
zaO823cB8aBzHUoXG0RBGYiXvv98C6D3u7CHy1r2CG4LaXlqkqukPDpwbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCzls13Q6Uj0MkXazaYA+1USakC+MB8GA1UdIwQY
MBaAFJQWa3BIQ9PZdUCVyDqRtJOCggCiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYt
NGJlMThlZjEyOGI0LzEvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYtNGJlMThlZjEyOGI0
LzEvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdXftamnP
XktyOnlbmBk7SJ6xN7xEH9MpdU69Jwpl8v+Q+ATR2aeoy4fx95jTTYKB6XiJm7ez
vSlJYidPotStUAHB1rDP7cMjhmGGUEFtQGBKr3AkPR7DzjZi1gH13CbmSSseC9Xi
eSaNW/bsqhLRPqpD2gz35f8tzDDXwHOgX4sZQcnCBaOGAaRUPGS8Ft7NiuDnbz9v
4XLghUSHIty7QOvlWS/U6bJhrO03+ayRx2Qg6IzwEdIdCz/+luBb1/UqtVBMkybT
/16GkCeRvcbCnigFti+XsuRBaIdyRadgclNnznj47Q4WojYxx9acX6rmMo5c4xl9
h0cjEPzk6poqBA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:03 2025 by rpki-client