Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.mft
File: lwhyRZO0dTF1shSBLPaJGmRfhMU.mft (raw, json)
Hash identifier: PtnbIhxBMKLclY7oG7/Indz/GtCiLVWDmg6pHkeTJgM=
Subject key identifier: F3:F7:D8:96:55:E0:76:E8:69:28:89:06:A1:F9:C5:B0:14:F0:ED:80
Authority key identifier: 97:08:72:45:93:B4:75:31:75:B2:14:81:2C:F6:89:1A:64:5F:84:C5
Certificate issuer: /CN=9708724593b4753175b214812cf6891a645f84c5
Certificate serial: 0198D54E35F5C46D2E003A883A01495AF868
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwhyRZO0dTF1shSBLPaJGmRfhMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.mft
Manifest number: 016F
Signing time: Sat 23 Aug 2025 05:02:09 +0000
Manifest this update: Sat 23 Aug 2025 05:02:09 +0000
Manifest next update: Sun 24 Aug 2025 05:02:09 +0000
Files and hashes: 1: lwhyRZO0dTF1shSBLPaJGmRfhMU.crl (hash: 3x50WvkraFspNORjuwkLfN+vhqobXbJVVuGpgQrouoM=)
2: tTnQsLwHNO3gLW3S0MP8mMKmk64.roa (hash: DzDj3u7iBFvq9rklayzZVdsYdkT8c0vWssYs/0kky9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lwhyRZO0dTF1shSBLPaJGmRfhMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:35:f5:c4:6d:2e:00:3a:88:3a:01:49:5a:f8:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9708724593b4753175b214812cf6891a645f84c5
Validity
Not Before: Aug 23 05:02:09 2025 GMT
Not After : Aug 24 05:02:09 2025 GMT
Subject: CN=f3f7d89655e076e869288906a1f9c5b014f0ed80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f8:9d:09:6d:31:b3:f8:98:09:5d:4b:18:19:
be:d4:07:ed:cc:1b:19:f1:b8:c9:76:d2:44:11:92:
d0:f0:2b:85:ad:e7:ec:85:9e:00:9d:1b:39:46:2a:
ad:5f:f0:13:8d:40:52:19:ac:2b:67:9b:25:cc:8f:
78:ce:70:6d:6d:21:e5:e9:67:9b:40:d1:cb:71:d0:
23:af:8a:c6:0c:01:bf:77:89:20:f3:2e:65:4b:c2:
88:4c:54:d4:b9:40:f1:ce:2e:65:18:d9:f6:5e:6b:
f6:0b:b3:d5:51:f8:db:5e:63:f6:5e:03:43:92:13:
6c:d5:91:b2:f7:58:ae:25:78:8e:ca:8f:c9:2c:47:
68:d3:f2:7f:7b:52:1b:eb:22:4a:bb:10:2d:db:b4:
f9:8b:b9:26:d7:4b:c5:3e:ff:de:8c:94:99:00:d7:
fe:bb:63:aa:e1:61:5a:1c:cc:26:4f:ca:5a:08:c8:
2e:ed:f2:34:c3:39:f2:fb:d5:c0:df:2e:da:d0:db:
7e:52:56:10:b3:4b:24:8f:8b:cf:6f:58:db:d8:5f:
b1:9d:ef:e7:66:eb:dc:6d:e0:38:7a:01:99:60:6b:
1c:b9:66:2d:ff:49:4c:a8:29:46:a4:80:22:ef:13:
aa:e9:83:43:e6:75:29:61:03:82:28:3e:d8:ea:18:
61:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F7:D8:96:55:E0:76:E8:69:28:89:06:A1:F9:C5:B0:14:F0:ED:80
X509v3 Authority Key Identifier:
keyid:97:08:72:45:93:B4:75:31:75:B2:14:81:2C:F6:89:1A:64:5F:84:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwhyRZO0dTF1shSBLPaJGmRfhMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:72:77:1f:40:1d:80:da:b9:ed:86:92:55:51:bd:94:e7:f8:
7b:bb:89:aa:2e:ac:98:63:33:1e:e1:22:c0:9d:e1:ef:c0:70:
1d:83:d7:c3:c4:0f:4b:a6:06:82:4f:77:71:b7:67:1d:de:10:
5d:5c:2f:7a:00:a8:89:8a:20:b4:42:6d:78:a2:f8:64:e7:4f:
ad:70:16:6e:50:da:2e:7c:5b:c7:11:1c:bc:b3:7e:09:a0:12:
6f:6d:29:5d:23:f2:76:1f:93:3d:4e:f5:41:c6:b0:01:97:52:
d7:d5:c0:a5:a5:6d:a8:f0:3b:d8:01:b4:af:4c:04:17:71:23:
eb:a8:ed:0a:08:40:c3:16:d3:fd:9b:25:c3:8d:17:ea:dc:87:
db:68:de:3c:59:ba:0e:1c:14:f9:31:97:77:52:7a:d1:e1:06:
92:c5:9d:2f:c1:38:0f:b3:ea:63:f4:f0:94:3a:87:98:64:a5:
44:67:d5:2f:ab:99:0e:09:67:9c:ce:49:58:c3:ea:d9:07:8a:
07:97:7b:a5:9a:ef:0e:84:24:d1:39:45:b8:6e:fa:17:9d:6c:
c1:6d:14:9c:90:f7:9d:c1:f6:f0:b1:ce:b2:34:2b:ca:4c:e8:
0c:67:b4:4f:dd:3f:46:80:6b:05:b9:bc:7d:08:e4:d2:69:01:
fd:59:94:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTjX1xG0uADqIOgFJWvhoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MDg3MjQ1OTNiNDc1MzE3NWIyMTQ4MTJjZjY4OTFhNjQ1
Zjg0YzUwHhcNMjUwODIzMDUwMjA5WhcNMjUwODI0MDUwMjA5WjAzMTEwLwYDVQQD
EyhmM2Y3ZDg5NjU1ZTA3NmU4NjkyODg5MDZhMWY5YzViMDE0ZjBlZDgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/idCW0xs/iYCV1LGBm+1AftzBsZ
8bjJdtJEEZLQ8CuFrefshZ4AnRs5RiqtX/ATjUBSGawrZ5slzI94znBtbSHl6Web
QNHLcdAjr4rGDAG/d4kg8y5lS8KITFTUuUDxzi5lGNn2Xmv2C7PVUfjbXmP2XgND
khNs1ZGy91iuJXiOyo/JLEdo0/J/e1Ib6yJKuxAt27T5i7km10vFPv/ejJSZANf+
u2Oq4WFaHMwmT8paCMgu7fI0wzny+9XA3y7a0Nt+UlYQs0skj4vPb1jb2F+xne/n
ZuvcbeA4egGZYGscuWYt/0lMqClGpIAi7xOq6YND5nUpYQOCKD7Y6hhhPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPP32JZV4HboaSiJBqH5xbAU8O2AMB8GA1UdIwQY
MBaAFJcIckWTtHUxdbIUgSz2iRpkX4TFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHdoeVJaTzBkVEYxc2hTQkxQYUpHbVJmaE1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9hZThjMzUtZjlkNy00MzdiLTg5OTYt
MzJhNDI3OGU1YmM1LzEvbHdoeVJaTzBkVEYxc2hTQkxQYUpHbVJmaE1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9hZThjMzUtZjlkNy00MzdiLTg5OTYtMzJhNDI3OGU1YmM1
LzEvbHdoeVJaTzBkVEYxc2hTQkxQYUpHbVJmaE1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ3J3H0Ad
gNq57YaSVVG9lOf4e7uJqi6smGMzHuEiwJ3h78BwHYPXw8QPS6YGgk93cbdnHd4Q
XVwvegCoiYogtEJteKL4ZOdPrXAWblDaLnxbxxEcvLN+CaASb20pXSPydh+TPU71
QcawAZdS19XApaVtqPA72AG0r0wEF3Ej66jtCghAwxbT/Zslw40X6tyH22jePFm6
DhwU+TGXd1J60eEGksWdL8E4D7PqY/TwlDqHmGSlRGfVL6uZDglnnM5JWMPq2QeK
B5d7pZrvDoQk0TlFuG76F51swW0UnJD3ncH28LHOsjQrykzoDGe0T90/RoBrBbm8
fQjk0mkB/VmUTA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:06:36 2025 by rpki-client