Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft
File: l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft (raw, json)
Hash identifier: QbMdi89A9jw9N3DJvEHjwhdu5Od0cOJts63OUQ12VD8=
Subject key identifier: 28:3D:8B:B9:8C:48:9E:EB:DD:76:FD:2C:FF:E2:3D:25:F2:C3:45:0C
Authority key identifier: 97:48:82:8D:7B:99:B0:A9:70:17:EC:26:BC:BE:FE:96:FD:BE:95:79
Certificate issuer: /CN=9748828d7b99b0a97017ec26bcbefe96fdbe9579
Certificate serial: 0198D5BBD055B16892AEB72534748051A2DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0iCjXuZsKlwF-wmvL7-lv2-lXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft
Manifest number: 1440
Signing time: Sat 23 Aug 2025 07:01:52 +0000
Manifest this update: Sat 23 Aug 2025 07:01:52 +0000
Manifest next update: Sun 24 Aug 2025 07:01:52 +0000
Files and hashes: 1: GYwl8BFvRYxoWPkgG0LFX5Kh3wY.roa (hash: po/DPr4lC/jP6El38brtzMkXAB3zwNPviTVID9wQBCU=)
2: l0iCjXuZsKlwF-wmvL7-lv2-lXk.crl (hash: M9i67FvCDSDF84SoX7oe4j9acA1e76j2JJ+ZEERqcIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0iCjXuZsKlwF-wmvL7-lv2-lXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:d0:55:b1:68:92:ae:b7:25:34:74:80:51:a2:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9748828d7b99b0a97017ec26bcbefe96fdbe9579
Validity
Not Before: Aug 23 07:01:52 2025 GMT
Not After : Aug 24 07:01:52 2025 GMT
Subject: CN=283d8bb98c489eebdd76fd2cffe23d25f2c3450c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:01:1f:b2:aa:ba:9c:0f:51:0f:71:56:0b:f5:
0e:7c:8e:b2:aa:57:7b:ea:cb:f5:99:63:af:02:98:
79:39:47:ad:54:28:92:e4:89:2f:d4:8a:e9:b1:68:
53:40:cd:b0:d8:27:54:6b:d7:b3:5d:41:57:c9:28:
e7:6d:9b:40:3f:38:4e:b4:7b:51:21:66:0c:12:da:
6c:93:b2:97:0e:8e:77:0c:d3:ea:32:36:6b:7b:86:
f6:a3:b6:70:96:8e:6c:2d:8a:07:a2:90:37:2e:35:
ee:83:69:25:e5:67:1c:d8:da:1e:e5:47:e8:be:ba:
90:7f:80:3d:f8:da:76:b2:2e:64:b9:fd:a1:d8:b8:
cb:70:12:ec:c6:59:2c:be:51:77:fb:b4:ae:cb:ed:
c4:04:a4:7b:d7:06:e4:92:a8:b1:33:c8:78:cd:d3:
f0:73:cc:78:44:00:20:bc:f8:15:34:0f:24:ca:f0:
ab:a9:da:34:86:8e:13:84:2d:e2:9f:c7:de:f9:b4:
1a:22:1d:9f:30:03:31:b8:66:17:1a:24:62:34:8a:
b4:a6:dd:fe:f5:a3:37:25:70:e4:24:32:24:4f:6b:
26:c4:36:ad:17:d9:9d:aa:a1:c2:5a:c3:bf:86:54:
de:5e:75:c3:00:b4:24:da:50:ad:12:e4:33:3a:37:
44:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:3D:8B:B9:8C:48:9E:EB:DD:76:FD:2C:FF:E2:3D:25:F2:C3:45:0C
X509v3 Authority Key Identifier:
keyid:97:48:82:8D:7B:99:B0:A9:70:17:EC:26:BC:BE:FE:96:FD:BE:95:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0iCjXuZsKlwF-wmvL7-lv2-lXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:a2:d3:c5:7c:13:02:b2:b2:0d:93:44:d5:1f:59:84:26:48:
ec:2f:5b:2b:fa:6b:06:21:ae:42:5d:b1:cf:37:87:c4:e5:af:
8b:9b:58:c4:12:16:c9:30:fc:8d:80:5d:eb:16:46:23:50:17:
4b:1a:23:ae:06:7a:81:21:92:eb:a0:57:9a:3c:ae:db:ee:da:
cb:3b:9d:b4:3f:f3:ad:e4:2a:ec:e3:f8:96:b6:38:b6:b8:6c:
d3:c5:f7:ca:48:27:12:5e:d2:25:0a:9e:97:ef:d3:44:de:43:
70:14:37:92:7b:71:e6:57:c9:83:bd:e8:1a:a2:65:04:4a:02:
9d:2a:34:7b:09:08:63:c6:3e:69:73:37:41:29:69:fd:0b:9e:
e8:4c:38:05:dd:fb:c0:3d:30:0b:0c:6f:1a:77:b7:56:65:c0:
9b:44:db:c2:47:e8:3a:f8:71:68:db:e3:d0:c6:4e:3d:6d:32:
a9:e4:5e:94:41:3a:0a:66:c3:6e:16:34:fe:2e:69:15:a5:73:
d0:ed:85:af:fa:5e:ab:eb:d4:1f:b6:48:b0:33:9e:23:56:d1:
95:fc:da:11:0d:e4:42:5f:ef:2d:dd:b1:49:e5:a6:34:ac:92:
37:f9:47:bf:51:90:22:bf:73:3e:d0:29:fe:b8:0d:30:ee:23:
cf:dd:0c:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu9BVsWiSrrclNHSAUaLaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NDg4MjhkN2I5OWIwYTk3MDE3ZWMyNmJjYmVmZTk2ZmRi
ZTk1NzkwHhcNMjUwODIzMDcwMTUyWhcNMjUwODI0MDcwMTUyWjAzMTEwLwYDVQQD
EygyODNkOGJiOThjNDg5ZWViZGQ3NmZkMmNmZmUyM2QyNWYyYzM0NTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8AEfsqq6nA9RD3FWC/UOfI6yqld7
6sv1mWOvAph5OUetVCiS5Ikv1IrpsWhTQM2w2CdUa9ezXUFXySjnbZtAPzhOtHtR
IWYMEtpsk7KXDo53DNPqMjZre4b2o7Zwlo5sLYoHopA3LjXug2kl5Wcc2Noe5Ufo
vrqQf4A9+Np2si5kuf2h2LjLcBLsxlksvlF3+7Suy+3EBKR71wbkkqixM8h4zdPw
c8x4RAAgvPgVNA8kyvCrqdo0ho4ThC3in8fe+bQaIh2fMAMxuGYXGiRiNIq0pt3+
9aM3JXDkJDIkT2smxDatF9mdqqHCWsO/hlTeXnXDALQk2lCtEuQzOjdEhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCg9i7mMSJ7r3Xb9LP/iPSXyw0UMMB8GA1UdIwQY
MBaAFJdIgo17mbCpcBfsJry+/pb9vpV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDBpQ2pYdVpzS2x3Ri13bXZMNy1sdjItbFhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8xZTFlYmYtYzNhYy00OWExLWI2YTgt
YTRhMDc1Mzk4YjBlLzEvbDBpQ2pYdVpzS2x3Ri13bXZMNy1sdjItbFhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy8xZTFlYmYtYzNhYy00OWExLWI2YTgtYTRhMDc1Mzk4YjBl
LzEvbDBpQ2pYdVpzS2x3Ri13bXZMNy1sdjItbFhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd6LTxXwT
ArKyDZNE1R9ZhCZI7C9bK/prBiGuQl2xzzeHxOWvi5tYxBIWyTD8jYBd6xZGI1AX
SxojrgZ6gSGS66BXmjyu2+7ayzudtD/zreQq7OP4lrY4trhs08X3ykgnEl7SJQqe
l+/TRN5DcBQ3kntx5lfJg73oGqJlBEoCnSo0ewkIY8Y+aXM3QSlp/Que6Ew4Bd37
wD0wCwxvGne3VmXAm0TbwkfoOvhxaNvj0MZOPW0yqeRelEE6CmbDbhY0/i5pFaVz
0O2Fr/peq+vUH7ZIsDOeI1bRlfzaEQ3kQl/vLd2xSeWmNKySN/lHv1GQIr9zPtAp
/rgNMO4jz90Mpg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:19:53 2025 by rpki-client