Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft
File: lSC_jHciaj-ojr4RzI8RacxWCnk.mft (raw, json)
Hash identifier: JaWmsIFm0ykxG4CR+oV6hF6SUWxe6NSOdAlisok6oX8=
Subject key identifier: 11:6A:FF:3B:59:65:C2:8A:6B:4B:BA:14:3E:3A:13:D1:C5:CB:74:F6
Authority key identifier: 95:20:BF:8C:77:22:6A:3F:A8:8E:BE:11:CC:8F:11:69:CC:56:0A:79
Certificate issuer: /CN=9520bf8c77226a3fa88ebe11cc8f1169cc560a79
Certificate serial: 0198D4A83351B2B6E17106A40560DAFA8D52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSC_jHciaj-ojr4RzI8RacxWCnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft
Manifest number: 0D63
Signing time: Sat 23 Aug 2025 02:00:49 +0000
Manifest this update: Sat 23 Aug 2025 02:00:49 +0000
Manifest next update: Sun 24 Aug 2025 02:00:49 +0000
Files and hashes: 1: 5_9mocxdNZ9MQ0g3lwcXXvM4yBI.roa (hash: QFa9yzo72h2sHM5VVVFbluHjiQ4dadLFT4v/+o9O32g=)
2: lSC_jHciaj-ojr4RzI8RacxWCnk.crl (hash: s79dRHlkmu4uaCNx8bcuhFg4ikhdB+m4BaRpNNwtaJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSC_jHciaj-ojr4RzI8RacxWCnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:33:51:b2:b6:e1:71:06:a4:05:60:da:fa:8d:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9520bf8c77226a3fa88ebe11cc8f1169cc560a79
Validity
Not Before: Aug 23 02:00:49 2025 GMT
Not After : Aug 24 02:00:49 2025 GMT
Subject: CN=116aff3b5965c28a6b4bba143e3a13d1c5cb74f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:00:de:1b:8c:e8:fd:b0:d3:85:1b:13:46:d2:
6f:aa:6c:d7:18:1e:4c:79:cd:6d:ad:3c:e2:59:ec:
42:e5:95:f7:f2:f7:0d:b0:61:db:10:db:bb:4c:37:
13:c4:ee:6e:95:7a:59:00:de:32:8d:19:61:b8:6c:
63:c6:28:33:21:5d:f2:7e:34:12:f1:12:d1:22:3f:
b5:f4:1a:0b:c8:30:f4:f6:dc:49:7f:fe:fe:b4:40:
fa:82:35:45:6a:83:49:9c:70:60:ab:60:4c:91:79:
98:aa:4c:74:2d:3e:f7:a7:e0:30:d0:c6:9a:61:9d:
21:0d:91:02:cb:01:de:f4:8f:33:7c:a2:4c:cd:8e:
03:a1:56:72:87:cd:3a:3b:96:71:21:72:28:da:b5:
ae:4d:8d:75:f5:9b:e4:42:d9:08:6e:16:77:91:cd:
2f:9b:e7:91:25:ba:b9:16:6d:e0:33:8f:a0:0d:a8:
a4:2f:89:0f:8a:c5:5a:41:40:db:80:99:02:e0:ab:
d8:e5:a1:ec:ff:d0:99:d8:39:b7:8d:2e:c4:8a:97:
66:3a:9f:ab:6c:ed:d7:a6:00:9e:2f:ae:f3:b0:0c:
7e:f9:2b:78:c7:b3:ef:b7:d4:57:17:5f:eb:e6:b9:
51:80:31:b4:a2:50:0e:a0:77:f2:93:d1:9d:7b:34:
70:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:6A:FF:3B:59:65:C2:8A:6B:4B:BA:14:3E:3A:13:D1:C5:CB:74:F6
X509v3 Authority Key Identifier:
keyid:95:20:BF:8C:77:22:6A:3F:A8:8E:BE:11:CC:8F:11:69:CC:56:0A:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSC_jHciaj-ojr4RzI8RacxWCnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:5b:27:aa:1b:a0:f7:17:33:67:01:6e:f3:e8:75:0f:75:6d:
e3:11:c8:38:0b:7b:72:91:b7:23:89:98:9f:60:2e:0f:11:44:
c4:97:fb:c4:b9:9e:a7:13:06:d0:35:d8:da:46:6e:f4:1f:d0:
cf:d6:11:19:6b:08:cb:60:68:0d:66:25:0b:09:be:f5:bd:c5:
41:4b:bd:83:cd:87:70:3a:07:cd:35:65:a5:5e:06:25:be:31:
a7:26:aa:b2:dd:6c:c1:8e:f1:03:ee:54:32:e5:6c:29:a8:e7:
16:b4:3a:70:94:19:f7:cf:ed:54:d0:99:d1:85:11:1f:f9:dd:
a0:45:8b:fb:c3:d6:ee:1b:92:32:9c:63:7a:2a:5c:d1:e2:1c:
88:1d:f9:c6:de:6d:26:b9:3e:78:a5:6c:bc:5d:78:6e:9d:47:
48:00:a6:7a:0c:ba:c4:76:1f:d0:e1:50:d4:bc:b4:c4:c4:62:
23:f8:1a:55:c6:2b:8c:be:61:67:32:70:68:57:a7:e4:cf:53:
7c:92:07:2b:fc:d9:33:03:c0:d9:02:05:8a:c4:62:c2:bd:09:
6d:a8:db:5d:8e:d4:55:af:f9:b4:e9:ec:06:91:da:a6:4c:06:
af:5e:e4:da:32:13:51:eb:b4:92:b7:8d:5e:f3:d8:0d:09:d0:
3b:9c:52:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUqDNRsrbhcQakBWDa+o1SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MjBiZjhjNzcyMjZhM2ZhODhlYmUxMWNjOGYxMTY5Y2M1
NjBhNzkwHhcNMjUwODIzMDIwMDQ5WhcNMjUwODI0MDIwMDQ5WjAzMTEwLwYDVQQD
EygxMTZhZmYzYjU5NjVjMjhhNmI0YmJhMTQzZTNhMTNkMWM1Y2I3NGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuADeG4zo/bDThRsTRtJvqmzXGB5M
ec1trTziWexC5ZX38vcNsGHbENu7TDcTxO5ulXpZAN4yjRlhuGxjxigzIV3yfjQS
8RLRIj+19BoLyDD09txJf/7+tED6gjVFaoNJnHBgq2BMkXmYqkx0LT73p+Aw0Maa
YZ0hDZECywHe9I8zfKJMzY4DoVZyh806O5ZxIXIo2rWuTY119ZvkQtkIbhZ3kc0v
m+eRJbq5Fm3gM4+gDaikL4kPisVaQUDbgJkC4KvY5aHs/9CZ2Dm3jS7EipdmOp+r
bO3XpgCeL67zsAx++St4x7Pvt9RXF1/r5rlRgDG0olAOoHfyk9GdezRwuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBFq/ztZZcKKa0u6FD46E9HFy3T2MB8GA1UdIwQY
MBaAFJUgv4x3Imo/qI6+EcyPEWnMVgp5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFNDX2pIY2lhai1vanI0UnpJOFJhY3hXQ25rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9mMDlhN2YtNTc2MS00NWE3LTljY2It
MWYzZWQ2ZDg4MWI4LzEvbFNDX2pIY2lhai1vanI0UnpJOFJhY3hXQ25rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9mMDlhN2YtNTc2MS00NWE3LTljY2ItMWYzZWQ2ZDg4MWI4
LzEvbFNDX2pIY2lhai1vanI0UnpJOFJhY3hXQ25rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQFsnqhug
9xczZwFu8+h1D3Vt4xHIOAt7cpG3I4mYn2AuDxFExJf7xLmepxMG0DXY2kZu9B/Q
z9YRGWsIy2BoDWYlCwm+9b3FQUu9g82HcDoHzTVlpV4GJb4xpyaqst1swY7xA+5U
MuVsKajnFrQ6cJQZ98/tVNCZ0YURH/ndoEWL+8PW7huSMpxjeipc0eIciB35xt5t
Jrk+eKVsvF14bp1HSACmegy6xHYf0OFQ1Ly0xMRiI/gaVcYrjL5hZzJwaFen5M9T
fJIHK/zZMwPA2QIFisRiwr0JbajbXY7UVa/5tOnsBpHapkwGr17k2jITUeu0kreN
XvPYDQnQO5xSPA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:09:54 2025 by rpki-client