Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
File: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft (raw, json)
Hash identifier: SQeCL7RKQ4a6LoJ7IM+Jq3m5gtI1KE3scfIy7ByhG3g=
Subject key identifier: EF:8A:2C:51:6B:66:B7:D4:28:FF:A5:1A:F6:05:CD:CB:BA:6C:4E:3F
Authority key identifier: 2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
Certificate issuer: /CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Certificate serial: 0198D66079DD0A56C99CFEA2608107C8C0BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 10:01:43 +0000
Manifest this update: Sat 23 Aug 2025 10:01:43 +0000
Manifest next update: Sun 24 Aug 2025 10:01:43 +0000
Files and hashes: 1: Fkh2hiOOX1_9ZIsh1QOkg1uOFC8.roa (hash: 4wHVTXOU9z+SM/PpUwslG9Qh7bHf21AbIIUgGIPuA60=)
2: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl (hash: k2JHYsrj/2WvSVtD1T9jbybo6c+o4K7njumMmvVD9z4=)
3: sbB_qhcZ5C6QsaRQey8d6Z2fiqQ.roa (hash: UF7xshn/lezkLw7gZiOHSmc0ml+xgRop+HTs7XfValk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:79:dd:0a:56:c9:9c:fe:a2:60:81:07:c8:c0:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Validity
Not Before: Aug 23 10:01:43 2025 GMT
Not After : Aug 24 10:01:43 2025 GMT
Subject: CN=ef8a2c516b66b7d428ffa51af605cdcbba6c4e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e7:84:59:3b:2b:04:2d:cf:6e:99:15:08:d6:
91:0d:57:c8:32:f0:c1:41:52:78:01:80:14:7c:c0:
97:3b:62:f7:5e:9b:d1:4f:e3:b0:32:ab:d6:16:4a:
cf:27:60:5e:3f:60:7e:a1:e9:4b:c2:ff:99:6b:73:
6e:8c:eb:1a:4d:ad:ff:2d:fa:2b:2a:89:c9:b6:61:
c3:cf:ed:43:ac:4d:43:00:68:6e:98:b1:84:38:f9:
3d:70:8d:96:c1:d0:16:94:e1:24:8f:e9:df:2c:1a:
06:6b:2f:b0:e3:5f:46:c9:2a:bc:e1:19:9a:1e:20:
14:8a:76:19:b3:08:e9:4c:33:5e:58:38:49:fa:97:
1a:de:93:ef:89:a6:4c:71:f8:d7:f2:37:e1:a9:35:
a9:64:e4:11:83:cf:03:37:ed:03:8f:57:0c:f6:9a:
6e:68:84:6a:d2:0e:b7:ad:4c:fc:8c:f8:d9:b2:4c:
09:dd:e1:81:50:45:35:94:93:d1:bd:08:64:16:9d:
fd:86:bd:c9:cb:14:66:95:bf:42:40:a4:d8:63:10:
ab:2b:33:02:63:b2:a2:4a:3f:f4:ed:87:48:dd:cc:
5d:84:48:9a:15:0d:9a:de:0c:ff:66:3d:9d:31:c5:
e2:e0:68:9b:50:be:01:4c:73:97:27:ba:e8:64:af:
a7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:8A:2C:51:6B:66:B7:D4:28:FF:A5:1A:F6:05:CD:CB:BA:6C:4E:3F
X509v3 Authority Key Identifier:
keyid:2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:d0:4e:73:9b:d4:e6:f2:d9:e7:0b:2f:35:3c:a7:2b:b3:8d:
ba:c3:81:bd:97:89:ad:94:9d:4c:08:2e:fe:43:b0:d0:5a:6b:
04:df:72:41:84:f3:2d:5d:60:ee:59:3f:2e:3f:08:7e:88:17:
30:54:20:ca:5d:1c:70:54:31:2c:f8:71:54:6f:9c:30:ed:78:
b6:ee:94:e5:64:35:2d:eb:6b:e7:9c:af:5f:dc:05:78:53:b5:
96:a1:1d:92:81:66:6b:bf:76:39:78:4f:52:6f:85:ca:db:70:
e6:cc:9a:93:a2:f8:e4:01:bf:5b:89:8c:52:0d:4e:a5:46:70:
2c:31:ad:77:31:48:ae:8f:21:18:af:e2:b6:a7:2c:a5:8c:41:
8a:2d:4e:fc:88:e1:c5:59:b4:e2:90:62:c4:f5:45:ed:93:89:
95:e7:2f:4c:71:3d:c0:70:22:6b:8d:b3:ac:9c:e0:e4:2e:50:
38:f6:33:6f:69:5f:2a:ec:f9:be:fc:a7:0d:f1:ba:40:ac:ae:
5f:cf:1a:11:94:05:e7:4e:79:1e:eb:76:46:52:25:ab:64:39:
d5:2f:1c:df:3e:3f:c9:ef:c0:b1:79:a6:5e:b3:84:2d:6a:3b:
bd:81:d5:13:82:4e:4c:9a:c5:53:67:39:bf:f7:68:90:41:a2:
e2:12:72:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYHndClbJnP6iYIEHyMC8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlYmIzNjI0YjgyZjBlMWU1MzhiMDA5MTlmNDQyZDIwMGM3
ZTNjZDIwHhcNMjUwODIzMTAwMTQzWhcNMjUwODI0MTAwMTQzWjAzMTEwLwYDVQQD
EyhlZjhhMmM1MTZiNjZiN2Q0MjhmZmE1MWFmNjA1Y2RjYmJhNmM0ZTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+eEWTsrBC3PbpkVCNaRDVfIMvDB
QVJ4AYAUfMCXO2L3XpvRT+OwMqvWFkrPJ2BeP2B+oelLwv+Za3NujOsaTa3/Lfor
KonJtmHDz+1DrE1DAGhumLGEOPk9cI2WwdAWlOEkj+nfLBoGay+w419GySq84Rma
HiAUinYZswjpTDNeWDhJ+pca3pPviaZMcfjX8jfhqTWpZOQRg88DN+0Dj1cM9ppu
aIRq0g63rUz8jPjZskwJ3eGBUEU1lJPRvQhkFp39hr3JyxRmlb9CQKTYYxCrKzMC
Y7KiSj/07YdI3cxdhEiaFQ2a3gz/Zj2dMcXi4GibUL4BTHOXJ7roZK+n5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO+KLFFrZrfUKP+lGvYFzcu6bE4/MB8GA1UdIwQY
MBaAFC67NiS4Lw4eU4sAkZ9ELSAMfjzSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHJzMkpMZ3ZEaDVUaXdDUm4wUXRJQXgtUE5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC80OWJlZjEtNDAxYS00OGQyLTg3NDYt
MjY3Mjc1ZTkyNTcwLzEvTHJzMkpMZ3ZEaDVUaXdDUm4wUXRJQXgtUE5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC80OWJlZjEtNDAxYS00OGQyLTg3NDYtMjY3Mjc1ZTkyNTcw
LzEvTHJzMkpMZ3ZEaDVUaXdDUm4wUXRJQXgtUE5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj9BOc5vU
5vLZ5wsvNTynK7ONusOBvZeJrZSdTAgu/kOw0FprBN9yQYTzLV1g7lk/Lj8IfogX
MFQgyl0ccFQxLPhxVG+cMO14tu6U5WQ1Letr55yvX9wFeFO1lqEdkoFma792OXhP
Um+Fyttw5syak6L45AG/W4mMUg1OpUZwLDGtdzFIro8hGK/itqcspYxBii1O/Ijh
xVm04pBixPVF7ZOJlecvTHE9wHAia42zrJzg5C5QOPYzb2lfKuz5vvynDfG6QKyu
X88aEZQF5055Hut2RlIlq2Q51S8c3z4/ye/AsXmmXrOELWo7vYHVE4JOTJrFU2c5
v/dokEGi4hJyJA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:23:31 2025 by rpki-client