Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.mft
File: LcKRuNts_d9t0qHVWyJtSUkqJwU.mft (raw, json)
Hash identifier: 2qrdGDbDFEhWQjVw8yYUpgQ+x1Y+nlgmaQnxqHZxwmw=
Subject key identifier: 35:E0:72:30:93:0B:34:AA:F6:8B:98:88:78:D2:13:95:04:F0:F7:B4
Authority key identifier: 2D:C2:91:B8:DB:6C:FD:DF:6D:D2:A1:D5:5B:22:6D:49:49:2A:27:05
Certificate issuer: /CN=2dc291b8db6cfddf6dd2a1d55b226d49492a2705
Certificate serial: 0198D54E8C13F085C5ED48387339FFC4F226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LcKRuNts_d9t0qHVWyJtSUkqJwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.mft
Manifest number: 1139
Signing time: Sat 23 Aug 2025 05:02:31 +0000
Manifest this update: Sat 23 Aug 2025 05:02:31 +0000
Manifest next update: Sun 24 Aug 2025 05:02:31 +0000
Files and hashes: 1: LcKRuNts_d9t0qHVWyJtSUkqJwU.crl (hash: I6ePHwoxsvQiJDUYGK1WtXATUC4mlgcnkBSum5R1y7o=)
2: ZLmfDyi4aWqpFE0PZT7YouoFqII.roa (hash: nbnap/bdTVrLKLJNTBuHrEznwfwZ3oyER6dX2ESBqQ4=)
3: oLrn4a9qOdl-vVdDDDEfOdcaw0M.roa (hash: C5BMAgY6fq8D0n/15WajsEVkkZ7GAkrzRmDZ7QTRZfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LcKRuNts_d9t0qHVWyJtSUkqJwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:8c:13:f0:85:c5:ed:48:38:73:39:ff:c4:f2:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dc291b8db6cfddf6dd2a1d55b226d49492a2705
Validity
Not Before: Aug 23 05:02:31 2025 GMT
Not After : Aug 24 05:02:31 2025 GMT
Subject: CN=35e07230930b34aaf68b988878d2139504f0f7b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:28:19:23:51:2f:cf:a2:0c:98:68:d8:f7:e4:
f9:4d:69:8e:5f:79:62:7a:34:bd:b1:df:e2:35:e3:
5b:8a:1c:56:78:60:9e:a0:b9:08:3c:5e:ab:7d:8c:
c3:74:aa:c9:66:ad:5e:67:03:18:ff:1a:36:13:9b:
08:8c:59:30:65:c2:d5:44:1b:c5:84:b8:7a:05:26:
47:ed:27:16:d0:bd:22:e4:95:59:6f:98:41:f1:17:
bb:48:fa:d9:8e:5c:ec:6a:d4:45:89:39:0d:5f:e2:
30:63:9b:d0:45:b9:c7:44:3f:61:8e:51:b6:4b:26:
35:d9:ff:e9:a5:c6:b5:8a:e8:1c:30:d0:5f:99:38:
75:51:58:87:6b:71:8a:d0:99:a3:d3:0e:19:4f:c5:
fd:42:12:51:69:5d:7f:de:cd:03:f5:16:10:c4:3c:
03:f9:84:c8:c2:43:d1:da:ce:f3:83:f5:54:9c:96:
dc:a3:f2:2f:6b:a3:64:fb:f8:6d:7d:19:34:75:72:
78:81:19:ae:cb:52:76:9b:37:57:d5:15:4e:c5:6a:
cf:77:e7:ef:14:6d:dd:53:26:7b:75:c7:3c:fc:45:
64:3e:fe:e3:61:9e:9b:20:65:98:f7:e8:b6:61:2f:
fb:4e:3a:76:a5:30:69:df:c4:97:5d:ab:96:36:a1:
2a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E0:72:30:93:0B:34:AA:F6:8B:98:88:78:D2:13:95:04:F0:F7:B4
X509v3 Authority Key Identifier:
keyid:2D:C2:91:B8:DB:6C:FD:DF:6D:D2:A1:D5:5B:22:6D:49:49:2A:27:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcKRuNts_d9t0qHVWyJtSUkqJwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/41a843-7524-455b-be22-2b170e95c2b7/1/LcKRuNts_d9t0qHVWyJtSUkqJwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:4d:7c:0a:fc:53:b1:8d:5c:07:35:cc:77:10:c3:15:84:20:
bf:ac:2b:03:c3:09:43:2e:a2:77:b0:23:80:e2:43:55:11:0e:
3f:e4:a3:ee:88:7f:e7:b8:e7:2e:4a:54:8b:74:ec:0a:1d:41:
ac:34:3c:4b:39:e6:39:2d:1d:ec:cf:3b:cd:76:f4:4e:59:f4:
13:9a:52:74:53:74:26:cd:57:6f:f2:1f:82:d4:58:8b:fe:b8:
9b:f6:50:b2:26:25:81:4d:20:07:fa:28:a6:81:41:40:e7:34:
ed:46:98:46:2d:94:b1:f9:5b:64:10:ce:d5:21:5f:e5:6c:c3:
f7:87:dd:8f:ae:83:7a:2c:64:e7:7f:da:8e:ed:9a:bc:61:4b:
11:80:5f:b8:c4:ad:50:8a:9d:01:c8:63:7b:c8:43:76:fb:9e:
45:43:7b:e9:77:eb:81:70:98:89:f9:ce:e9:fc:10:b6:0d:82:
ff:50:c2:c8:14:43:17:fd:2a:7c:6f:5d:8a:64:2b:aa:c9:eb:
83:e3:b5:5f:01:47:8a:40:02:f8:f7:79:07:8c:43:35:f5:56:
88:c7:a6:57:1f:98:49:c2:48:0b:4e:fd:18:e3:d9:aa:eb:ad:
ec:ea:ef:09:5b:7f:01:28:8f:65:b7:d0:89:21:68:76:9b:09:
58:5c:01:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTowT8IXF7Ug4czn/xPImMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkYzI5MWI4ZGI2Y2ZkZGY2ZGQyYTFkNTViMjI2ZDQ5NDky
YTI3MDUwHhcNMjUwODIzMDUwMjMxWhcNMjUwODI0MDUwMjMxWjAzMTEwLwYDVQQD
EygzNWUwNzIzMDkzMGIzNGFhZjY4Yjk4ODg3OGQyMTM5NTA0ZjBmN2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvygZI1Evz6IMmGjY9+T5TWmOX3li
ejS9sd/iNeNbihxWeGCeoLkIPF6rfYzDdKrJZq1eZwMY/xo2E5sIjFkwZcLVRBvF
hLh6BSZH7ScW0L0i5JVZb5hB8Re7SPrZjlzsatRFiTkNX+IwY5vQRbnHRD9hjlG2
SyY12f/ppca1iugcMNBfmTh1UViHa3GK0Jmj0w4ZT8X9QhJRaV1/3s0D9RYQxDwD
+YTIwkPR2s7zg/VUnJbco/Iva6Nk+/htfRk0dXJ4gRmuy1J2mzdX1RVOxWrPd+fv
FG3dUyZ7dcc8/EVkPv7jYZ6bIGWY9+i2YS/7Tjp2pTBp38SXXauWNqEqOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDXgcjCTCzSq9ouYiHjSE5UE8Pe0MB8GA1UdIwQY
MBaAFC3CkbjbbP3fbdKh1VsibUlJKicFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGNLUnVOdHNfZDl0MHFIVld5SnRTVWtxSndVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80MWE4NDMtNzUyNC00NTViLWJlMjIt
MmIxNzBlOTVjMmI3LzEvTGNLUnVOdHNfZDl0MHFIVld5SnRTVWtxSndVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC80MWE4NDMtNzUyNC00NTViLWJlMjItMmIxNzBlOTVjMmI3
LzEvTGNLUnVOdHNfZDl0MHFIVld5SnRTVWtxSndVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFk18CvxT
sY1cBzXMdxDDFYQgv6wrA8MJQy6id7AjgOJDVREOP+Sj7oh/57jnLkpUi3TsCh1B
rDQ8SznmOS0d7M87zXb0Tln0E5pSdFN0Js1Xb/IfgtRYi/64m/ZQsiYlgU0gB/oo
poFBQOc07UaYRi2UsflbZBDO1SFf5WzD94fdj66Deixk53/aju2avGFLEYBfuMSt
UIqdAchje8hDdvueRUN76XfrgXCYifnO6fwQtg2C/1DCyBRDF/0qfG9dimQrqsnr
g+O1XwFHikAC+Pd5B4xDNfVWiMemVx+YScJIC079GOPZquut7OrvCVt/ASiPZbfQ
iSFodpsJWFwBAA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:44:51 2025 by rpki-client