Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
File: LrqqxROYKzwk02DG1GXPgkIFaok.mft (raw, json)
Hash identifier: i2tQBZP81Kl5dA3hCU0vNbJQhP7E/CJ4s1Sifu8Qkdg=
Subject key identifier: DE:C9:B1:23:CD:E8:46:81:15:5C:F0:DF:61:E1:A8:9F:91:38:C1:DB
Authority key identifier: 2E:BA:AA:C5:13:98:2B:3C:24:D3:60:C6:D4:65:CF:82:42:05:6A:89
Certificate issuer: /CN=2ebaaac513982b3c24d360c6d465cf8242056a89
Certificate serial: 0198D884851260DFF9FA36843B61179599EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 20:00:20 +0000
Manifest this update: Sat 23 Aug 2025 20:00:20 +0000
Manifest next update: Sun 24 Aug 2025 20:00:20 +0000
Files and hashes: 1: GY1X78tUCHALN-6VezXTntkS1S0.roa (hash: B4/LrjmuUdItXDnKDdePMAJjiq+F77UrPT1SZV8fodQ=)
2: LrqqxROYKzwk02DG1GXPgkIFaok.crl (hash: fkaFBp2uq2pfXox3NXd1p3e2iYxjg8Y3U1Oci4IbyU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 20:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:84:85:12:60:df:f9:fa:36:84:3b:61:17:95:99:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebaaac513982b3c24d360c6d465cf8242056a89
Validity
Not Before: Aug 23 20:00:20 2025 GMT
Not After : Aug 24 20:00:20 2025 GMT
Subject: CN=dec9b123cde84681155cf0df61e1a89f9138c1db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:34:a8:e4:2a:84:3f:84:0d:7e:c6:00:e6:91:
31:63:65:10:02:36:43:7d:7d:46:e4:5f:05:e6:60:
9c:6e:dc:6c:df:66:48:bd:ec:05:5d:c4:e6:27:ac:
9a:81:d1:49:3b:68:aa:e5:02:5c:01:e3:c5:24:e2:
68:7e:5e:ec:19:71:5c:5b:ab:1f:1f:f4:d9:5b:98:
84:6d:41:8f:1c:f2:02:97:4a:c8:a5:30:67:95:6d:
20:50:79:23:4b:41:c0:b9:c8:18:43:a8:4b:70:04:
7b:10:89:d9:5c:d2:2b:c9:0d:60:3b:02:60:4f:eb:
85:ac:f2:3b:cf:b9:57:81:f7:5a:29:36:87:88:6e:
2f:28:9d:28:c8:fc:9b:74:d7:85:61:24:20:b2:49:
f3:9f:c5:61:89:f3:9d:8f:f5:d5:25:5c:d6:6c:41:
8c:e4:1e:82:26:58:2c:f4:b5:8a:94:7f:b9:c1:65:
9d:5a:80:06:74:b9:f4:3d:2e:64:ea:dc:9f:ab:d5:
da:41:a8:a6:56:df:b2:1c:0c:37:ef:65:9d:05:68:
5a:27:fe:b8:f2:24:4b:05:15:5c:fa:fc:f7:a4:76:
c6:1f:93:37:f0:1b:82:24:94:92:a0:81:c4:8d:93:
f7:31:d6:a5:b0:4d:fe:5a:57:e4:cd:04:c7:9f:c9:
5d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C9:B1:23:CD:E8:46:81:15:5C:F0:DF:61:E1:A8:9F:91:38:C1:DB
X509v3 Authority Key Identifier:
keyid:2E:BA:AA:C5:13:98:2B:3C:24:D3:60:C6:D4:65:CF:82:42:05:6A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:b7:64:76:d0:61:13:ff:d6:89:43:ab:44:57:17:26:8a:d4:
c7:8f:eb:e5:83:23:e1:ed:53:9d:0b:ed:a7:04:ed:dd:f5:83:
e1:dc:89:9e:70:db:e7:40:24:d2:24:a4:a6:0d:b4:3d:c5:c0:
f0:d0:31:e5:92:f9:20:8a:3d:fd:71:fa:f9:e6:b9:fc:bf:7a:
9d:5e:29:76:e4:65:d8:08:70:79:3d:f7:ca:a5:17:ad:9b:4e:
cb:2c:1f:70:9d:9d:ae:d1:6e:5f:41:53:a4:bc:70:1c:f2:4a:
8e:38:15:51:5a:9a:78:1a:81:e4:6a:8d:69:3e:f6:a7:ef:09:
71:1b:1b:ad:12:d9:b3:2c:6b:5b:3e:e9:6e:bd:b0:36:bf:ea:
aa:e1:41:eb:1e:f2:dd:34:45:46:7f:b4:3e:ba:c9:95:bd:21:
4c:ad:c6:d0:88:a7:78:e7:ab:00:af:34:5f:ba:14:66:fc:e5:
8a:27:e1:b4:67:84:f0:cc:30:66:5c:a2:85:b4:b6:73:db:4e:
f5:0f:bc:52:f6:dd:83:ba:f5:1a:52:db:ab:56:c8:a1:bf:d7:
9e:0d:b7:68:a5:f3:14:af:3b:e5:b4:a6:53:e3:a0:f0:58:8b:
a2:97:5c:38:71:7c:f1:8c:67:7e:15:0d:51:88:2d:27:ee:bc:
28:73:3a:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYhIUSYN/5+jaEO2EXlZnvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlYmFhYWM1MTM5ODJiM2MyNGQzNjBjNmQ0NjVjZjgyNDIw
NTZhODkwHhcNMjUwODIzMjAwMDIwWhcNMjUwODI0MjAwMDIwWjAzMTEwLwYDVQQD
EyhkZWM5YjEyM2NkZTg0NjgxMTU1Y2YwZGY2MWUxYTg5ZjkxMzhjMWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TSo5CqEP4QNfsYA5pExY2UQAjZD
fX1G5F8F5mCcbtxs32ZIvewFXcTmJ6yagdFJO2iq5QJcAePFJOJofl7sGXFcW6sf
H/TZW5iEbUGPHPICl0rIpTBnlW0gUHkjS0HAucgYQ6hLcAR7EInZXNIryQ1gOwJg
T+uFrPI7z7lXgfdaKTaHiG4vKJ0oyPybdNeFYSQgsknzn8VhifOdj/XVJVzWbEGM
5B6CJlgs9LWKlH+5wWWdWoAGdLn0PS5k6tyfq9XaQaimVt+yHAw372WdBWhaJ/64
8iRLBRVc+vz3pHbGH5M38BuCJJSSoIHEjZP3MdalsE3+WlfkzQTHn8ld3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7JsSPN6EaBFVzw32HhqJ+ROMHbMB8GA1UdIwQY
MBaAFC66qsUTmCs8JNNgxtRlz4JCBWqJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHJxcXhST1lLendrMDJERzFHWFBna0lGYW9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC80MmFkMDItZDQ4YS00MWFjLWE4MGIt
MjEwMmQ5NmVlMzU1LzEvTHJxcXhST1lLendrMDJERzFHWFBna0lGYW9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC80MmFkMDItZDQ4YS00MWFjLWE4MGItMjEwMmQ5NmVlMzU1
LzEvTHJxcXhST1lLendrMDJERzFHWFBna0lGYW9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF7dkdtBh
E//WiUOrRFcXJorUx4/r5YMj4e1TnQvtpwTt3fWD4dyJnnDb50Ak0iSkpg20PcXA
8NAx5ZL5IIo9/XH6+ea5/L96nV4pduRl2AhweT33yqUXrZtOyywfcJ2drtFuX0FT
pLxwHPJKjjgVUVqaeBqB5GqNaT72p+8JcRsbrRLZsyxrWz7pbr2wNr/qquFB6x7y
3TRFRn+0PrrJlb0hTK3G0IineOerAK80X7oUZvzliifhtGeE8MwwZlyihbS2c9tO
9Q+8Uvbdg7r1GlLbq1bIob/Xng23aKXzFK875bSmU+Og8FiLopdcOHF88YxnfhUN
UYgtJ+68KHM6cg==
-----END CERTIFICATE-----
Generated at Sun Aug 24 04:24:24 2025 by rpki-client