Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
File: LkJv6Qhstq8B85H_T2nACDZNbu0.mft (raw, json)
Hash identifier: cDtZlwkTx5mrQHRtRX72yqi950TsXPxeAA0E0EqI/U0=
Subject key identifier: A5:55:1B:98:CE:8D:B3:11:2E:11:2C:1F:52:BA:67:00:89:9A:47:DE
Authority key identifier: 2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED
Certificate issuer: /CN=2e426fe9086cb6af01f391ff4f69c008364d6eed
Certificate serial: 0198D515921A30EC5E8ACD2B8715CD283CAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
Manifest number: 15DF
Signing time: Sat 23 Aug 2025 04:00:17 +0000
Manifest this update: Sat 23 Aug 2025 04:00:17 +0000
Manifest next update: Sun 24 Aug 2025 04:00:17 +0000
Files and hashes: 1: LkJv6Qhstq8B85H_T2nACDZNbu0.crl (hash: OrJfJjUS+TsGucSad/u0oEbpgxO6GywpOmPAh5vfOtE=)
2: jS_G6el4wEcgi8my5R0XT21ut5Q.roa (hash: Q5lJn0D9zs18LOmkVI8eROdi6ECwhGDbp8byuxpzAUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:92:1a:30:ec:5e:8a:cd:2b:87:15:cd:28:3c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e426fe9086cb6af01f391ff4f69c008364d6eed
Validity
Not Before: Aug 23 04:00:17 2025 GMT
Not After : Aug 24 04:00:17 2025 GMT
Subject: CN=a5551b98ce8db3112e112c1f52ba6700899a47de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6c:ef:f6:08:23:51:95:d7:bb:8b:0c:9a:87:
c7:3d:a8:02:12:34:67:8b:6d:9a:10:c7:50:64:99:
65:4a:02:80:f0:4f:84:58:0f:62:f0:df:44:53:75:
ce:bc:3c:0b:4b:88:11:be:13:a3:0b:37:e1:64:7d:
f9:ab:f3:15:6f:9f:0c:98:0b:e8:a9:ad:f8:f5:fc:
f0:32:a7:8c:b5:8a:e5:2a:ac:b2:aa:2c:fb:ae:81:
75:66:f2:26:cf:a4:56:6d:2a:ca:4c:69:05:7b:83:
73:b9:73:c1:86:91:f8:85:bb:ad:bc:bc:b1:93:7e:
f4:31:b8:c4:a2:51:cc:4e:d0:60:27:22:4a:47:5d:
75:99:90:a0:fa:ff:f3:81:30:4f:e2:8a:43:26:5c:
13:b3:95:02:ad:0f:31:ac:24:cb:e9:d0:54:f2:4c:
4c:a0:b9:35:de:49:58:ba:d7:45:92:80:a1:f7:45:
24:71:1d:aa:56:3b:5f:3e:31:f7:0b:21:f4:6d:11:
60:b7:57:42:d9:35:14:33:fe:d2:4a:a4:a7:e2:b6:
8a:6b:e6:10:84:2f:85:99:98:ae:13:59:78:a5:23:
4a:a4:f0:c3:f6:39:12:8d:f6:28:b8:80:2e:62:27:
f9:09:ae:a8:16:58:39:61:2b:75:78:7f:a2:2b:c8:
fe:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:55:1B:98:CE:8D:B3:11:2E:11:2C:1F:52:BA:67:00:89:9A:47:DE
X509v3 Authority Key Identifier:
keyid:2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:18:ad:df:0e:b2:36:62:31:60:36:bb:c5:1a:44:e5:ed:95:
88:7e:52:12:3e:b5:04:ec:74:30:3b:e5:01:95:99:6e:96:b5:
39:74:b9:60:33:53:79:7e:37:f2:75:01:6f:e0:72:29:b3:0d:
21:e4:2f:93:a7:2d:e9:22:ca:8d:c5:bc:0e:37:5c:0c:ff:4b:
97:30:ef:13:6d:66:97:11:e6:05:04:a1:89:57:e7:93:23:ba:
7f:f7:e9:ff:e0:36:f9:d8:9a:5c:dc:af:44:da:94:6f:11:5f:
de:f8:1a:61:b4:f1:ea:f7:77:33:7b:e4:0e:13:3c:e5:ea:9e:
8f:6e:c6:50:4b:92:f8:fb:b6:56:24:5c:3c:33:4f:d8:80:86:
23:67:05:1c:04:4b:7f:9f:fc:f0:a1:11:17:79:c0:2b:88:c9:
56:e9:ab:7f:11:32:72:94:ed:64:46:37:c6:84:4e:61:f5:e8:
77:e0:49:90:eb:53:e1:25:70:45:c5:52:5a:23:7a:b0:ef:d2:
d6:a0:1a:b1:3d:10:6e:1b:03:05:47:43:86:d0:3f:10:66:6d:
af:db:90:0d:ff:a8:68:ca:96:cd:13:9d:2f:df:27:6f:90:d2:
91:89:c3:e3:77:39:59:78:a3:b7:39:7b:47:f7:40:07:a0:26:
f4:7f:cf:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFZIaMOxeis0rhxXNKDyqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNDI2ZmU5MDg2Y2I2YWYwMWYzOTFmZjRmNjljMDA4MzY0
ZDZlZWQwHhcNMjUwODIzMDQwMDE3WhcNMjUwODI0MDQwMDE3WjAzMTEwLwYDVQQD
EyhhNTU1MWI5OGNlOGRiMzExMmUxMTJjMWY1MmJhNjcwMDg5OWE0N2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2zv9ggjUZXXu4sMmofHPagCEjRn
i22aEMdQZJllSgKA8E+EWA9i8N9EU3XOvDwLS4gRvhOjCzfhZH35q/MVb58MmAvo
qa349fzwMqeMtYrlKqyyqiz7roF1ZvImz6RWbSrKTGkFe4NzuXPBhpH4hbutvLyx
k370MbjEolHMTtBgJyJKR111mZCg+v/zgTBP4opDJlwTs5UCrQ8xrCTL6dBU8kxM
oLk13klYutdFkoCh90UkcR2qVjtfPjH3CyH0bRFgt1dC2TUUM/7SSqSn4raKa+YQ
hC+FmZiuE1l4pSNKpPDD9jkSjfYouIAuYif5Ca6oFlg5YSt1eH+iK8j+vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKVVG5jOjbMRLhEsH1K6ZwCJmkfeMB8GA1UdIwQY
MBaAFC5Cb+kIbLavAfOR/09pwAg2TW7tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGtKdjZRaHN0cThCODVIX1QybkFDRFpOYnUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hZTcxMDEtZTRmYS00NTBjLWEzMDEt
NjhhZDNiZGJkMzliLzEvTGtKdjZRaHN0cThCODVIX1QybkFDRFpOYnUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9hZTcxMDEtZTRmYS00NTBjLWEzMDEtNjhhZDNiZGJkMzli
LzEvTGtKdjZRaHN0cThCODVIX1QybkFDRFpOYnUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADhit3w6y
NmIxYDa7xRpE5e2ViH5SEj61BOx0MDvlAZWZbpa1OXS5YDNTeX438nUBb+ByKbMN
IeQvk6ct6SLKjcW8DjdcDP9LlzDvE21mlxHmBQShiVfnkyO6f/fp/+A2+diaXNyv
RNqUbxFf3vgaYbTx6vd3M3vkDhM85eqej27GUEuS+Pu2ViRcPDNP2ICGI2cFHARL
f5/88KERF3nAK4jJVumrfxEycpTtZEY3xoROYfXod+BJkOtT4SVwRcVSWiN6sO/S
1qAasT0QbhsDBUdDhtA/EGZtr9uQDf+oaMqWzROdL98nb5DSkYnD43c5WXijtzl7
R/dAB6Am9H/PWw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:13:33 2025 by rpki-client