Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
File: LWmLr5_z7uvmYoSIn79onU5oPIE.mft (raw, json)
Hash identifier: 2GU+xdc+/ejuQqtDxRBaXnMN+31H51Oxg1NzlyJR0ng=
Subject key identifier: 9B:82:42:19:B2:49:F2:39:79:C3:63:B4:3C:31:9B:20:53:E7:A4:19
Authority key identifier: 2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81
Certificate issuer: /CN=2d698baf9ff3eeebe66284889fbf689d4e683c81
Certificate serial: 0198D404E1588E11555DC7F8FC8A53628BB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
Manifest number: 0ED2
Signing time: Fri 22 Aug 2025 23:02:26 +0000
Manifest this update: Fri 22 Aug 2025 23:02:26 +0000
Manifest next update: Sat 23 Aug 2025 23:02:26 +0000
Files and hashes: 1: LWmLr5_z7uvmYoSIn79onU5oPIE.crl (hash: ZL+fQx3a2GsyK62DDZyBB/G762TEtRd0qqhrL/d+SAo=)
2: k4aTxBF_DmBio83fOwNHIHkeyiA.roa (hash: IVVbmDsKyhVLGaHbxiyIMsj1K/TNy+QiBpkicXXI0O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:e1:58:8e:11:55:5d:c7:f8:fc:8a:53:62:8b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d698baf9ff3eeebe66284889fbf689d4e683c81
Validity
Not Before: Aug 22 23:02:26 2025 GMT
Not After : Aug 23 23:02:26 2025 GMT
Subject: CN=9b824219b249f23979c363b43c319b2053e7a419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a6:5e:22:f9:a6:85:12:d5:52:ad:d9:f7:29:
e8:82:a0:e4:35:9e:3a:88:05:22:1b:16:9d:fe:63:
d7:5e:e5:be:ad:0e:cb:8c:3a:02:e2:ac:6e:e4:a4:
49:98:2e:33:c5:04:09:0d:ba:31:13:ad:a4:72:b5:
11:65:b7:8e:54:59:be:84:84:35:64:e9:ae:12:a0:
58:fe:07:6a:3c:12:b7:7a:32:ec:f2:00:d7:8a:7a:
6c:65:df:c1:32:94:7a:e6:d2:0c:a4:9c:99:cc:90:
75:ed:1c:34:0f:41:7b:2a:6a:d1:28:65:fd:25:e4:
b3:7f:7f:75:a9:11:ed:e8:04:45:df:0d:86:b2:c4:
be:d6:81:e8:2f:69:fc:c2:ea:db:28:f9:e7:bd:e1:
db:f8:c9:ec:79:d7:25:ee:6b:85:9c:2c:c3:cf:6d:
e4:ab:14:c0:ea:72:a1:2a:61:9e:57:38:e6:a3:ad:
0f:53:3e:c0:f0:da:91:eb:fd:0c:95:7b:c6:14:44:
48:a7:4e:ba:61:49:86:5a:ba:b9:28:a5:1b:8c:c2:
c4:da:26:ce:1a:4f:35:a7:10:c5:f0:eb:a1:13:c6:
cb:20:53:00:5a:c6:1c:13:1a:1d:14:69:40:00:a0:
7d:89:b6:d5:4f:9b:7a:2f:97:f4:5a:b9:cd:08:32:
3e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:82:42:19:B2:49:F2:39:79:C3:63:B4:3C:31:9B:20:53:E7:A4:19
X509v3 Authority Key Identifier:
keyid:2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:5f:3f:bf:45:69:5a:47:33:ba:8f:f8:5f:79:1a:37:08:13:
0c:e7:7b:02:a9:7a:a0:9d:dc:92:74:1f:3e:11:cd:48:1f:3a:
27:c8:a2:88:0c:d9:99:8b:5e:e0:b5:43:15:3a:2b:70:6c:75:
10:2b:12:7c:af:96:32:3b:a6:9d:3d:10:16:5e:f6:ac:21:37:
c1:e5:3b:5f:61:21:31:f3:83:b6:08:27:8c:98:17:bc:af:a8:
49:a1:be:8d:87:a5:70:35:a3:d6:0d:d9:4c:53:a0:bc:83:b2:
27:30:0b:57:94:d0:bb:d6:5f:03:f9:95:c6:27:0a:80:35:21:
aa:de:ad:94:3e:06:7c:a7:45:4d:07:1a:49:17:d7:84:91:91:
16:2f:9d:28:e0:d1:03:8e:6d:e2:8e:fe:1f:63:58:b2:73:80:
b6:a0:d8:4e:41:81:36:d1:a1:59:bb:c6:55:9f:b6:10:03:53:
a0:3c:be:29:72:ca:85:19:9f:72:1e:fd:ea:b8:b0:48:c2:8f:
20:09:8f:13:c4:bc:58:63:91:5e:1b:60:48:ba:ba:25:f4:4a:
54:a8:d0:37:e4:42:65:20:c8:df:97:f9:39:4b:70:60:c5:d8:
e1:56:aa:a7:f4:e3:65:3b:9a:6f:d0:4c:70:99:19:ea:fe:34:
0f:a8:00:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUBOFYjhFVXcf4/IpTYou3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNjk4YmFmOWZmM2VlZWJlNjYyODQ4ODlmYmY2ODlkNGU2
ODNjODEwHhcNMjUwODIyMjMwMjI2WhcNMjUwODIzMjMwMjI2WjAzMTEwLwYDVQQD
Eyg5YjgyNDIxOWIyNDlmMjM5NzljMzYzYjQzYzMxOWIyMDUzZTdhNDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKZeIvmmhRLVUq3Z9ynogqDkNZ46
iAUiGxad/mPXXuW+rQ7LjDoC4qxu5KRJmC4zxQQJDboxE62kcrURZbeOVFm+hIQ1
ZOmuEqBY/gdqPBK3ejLs8gDXinpsZd/BMpR65tIMpJyZzJB17Rw0D0F7KmrRKGX9
JeSzf391qRHt6ARF3w2GssS+1oHoL2n8wurbKPnnveHb+Mnsedcl7muFnCzDz23k
qxTA6nKhKmGeVzjmo60PUz7A8NqR6/0MlXvGFERIp066YUmGWrq5KKUbjMLE2ibO
Gk81pxDF8OuhE8bLIFMAWsYcExodFGlAAKB9ibbVT5t6L5f0WrnNCDI+YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJuCQhmySfI5ecNjtDwxmyBT56QZMB8GA1UdIwQY
MBaAFC1pi6+f8+7r5mKEiJ+/aJ1OaDyBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFdtTHI1X3o3dXZtWW9TSW43OW9uVTVvUElFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS81NzJhOTgtM2JiNy00Mjc2LTlkMzkt
ZGZmNWEwOWE4MmNiLzEvTFdtTHI1X3o3dXZtWW9TSW43OW9uVTVvUElFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS81NzJhOTgtM2JiNy00Mjc2LTlkMzktZGZmNWEwOWE4MmNi
LzEvTFdtTHI1X3o3dXZtWW9TSW43OW9uVTVvUElFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlV8/v0Vp
Wkczuo/4X3kaNwgTDOd7Aql6oJ3cknQfPhHNSB86J8iiiAzZmYte4LVDFTorcGx1
ECsSfK+WMjumnT0QFl72rCE3weU7X2EhMfODtggnjJgXvK+oSaG+jYelcDWj1g3Z
TFOgvIOyJzALV5TQu9ZfA/mVxicKgDUhqt6tlD4GfKdFTQcaSRfXhJGRFi+dKODR
A45t4o7+H2NYsnOAtqDYTkGBNtGhWbvGVZ+2EANToDy+KXLKhRmfch796riwSMKP
IAmPE8S8WGORXhtgSLq6JfRKVKjQN+RCZSDI35f5OUtwYMXY4Vaqp/TjZTuab9BM
cJkZ6v40D6gAhg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:36:32 2025 by rpki-client