Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
File: lCKVhDGvU0e_2A41UD3bSOcc9NY.mft (raw, json)
Hash identifier: VG5OrG64ErroE/4GggUOJ40xE5FebICdKZXahbf6qoA=
Subject key identifier: 5D:28:2F:E7:64:AD:AC:71:08:09:55:1C:A4:64:9B:F7:06:DD:5B:67
Authority key identifier: 94:22:95:84:31:AF:53:47:BF:D8:0E:35:50:3D:DB:48:E7:1C:F4:D6
Certificate issuer: /CN=9422958431af5347bfd80e35503ddb48e71cf4d6
Certificate serial: 0198D515C80CECB55AD0F25C93802BD9FED0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
Manifest number: 057D
Signing time: Sat 23 Aug 2025 04:00:30 +0000
Manifest this update: Sat 23 Aug 2025 04:00:30 +0000
Manifest next update: Sun 24 Aug 2025 04:00:30 +0000
Files and hashes: 1: KVI3XedSS3nRQY078sbR6ptPKy0.roa (hash: qBfhwooNDQvXG7IohPemvhH6YU7EvDDYNTu49at8Abg=)
2: lCKVhDGvU0e_2A41UD3bSOcc9NY.crl (hash: sdG0CA3U8NM5ODbN0JHY3GVBTrwxEvwcn6T4FUKlOZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:c8:0c:ec:b5:5a:d0:f2:5c:93:80:2b:d9:fe:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9422958431af5347bfd80e35503ddb48e71cf4d6
Validity
Not Before: Aug 23 04:00:30 2025 GMT
Not After : Aug 24 04:00:30 2025 GMT
Subject: CN=5d282fe764adac710809551ca4649bf706dd5b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:36:43:72:68:82:53:a5:0b:7b:5b:42:b4:a8:
e0:81:b6:27:3d:69:03:88:a4:ac:21:1a:67:30:5e:
1e:2f:ea:a6:0a:e3:64:47:84:50:47:60:1b:0f:62:
80:5d:1c:e7:8c:66:98:b6:d1:2f:cd:ff:76:e7:75:
c3:92:d8:7d:2f:af:1e:7e:fb:36:4d:b4:2e:a7:59:
d4:76:26:13:b4:d3:97:55:3b:19:7a:c9:48:34:4c:
65:85:de:a7:58:6a:4c:be:b9:84:3a:8e:39:8b:b9:
11:1c:2b:b4:57:ee:dc:ed:29:16:98:92:6b:21:11:
86:80:ac:69:72:95:77:b4:45:0f:00:87:15:19:df:
e6:ea:33:cb:97:c6:9d:9b:27:a3:45:be:a7:83:46:
8d:ff:23:b4:31:90:18:51:c1:46:21:8c:2e:21:dd:
8c:b9:49:d3:8a:3a:e7:0e:93:96:9c:3e:55:0b:19:
d8:fa:18:b0:40:5f:d7:be:ce:42:f9:81:8a:9e:89:
a8:17:2c:38:0b:aa:4f:32:6e:84:2c:64:1c:13:50:
b4:c4:f6:82:22:71:1d:50:fe:a7:3a:d1:50:11:c3:
b1:9a:d6:21:84:d5:0e:08:27:30:ad:67:99:51:53:
b3:2c:5f:c3:6f:50:b7:78:c8:2a:b1:f9:f5:a1:53:
6e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:28:2F:E7:64:AD:AC:71:08:09:55:1C:A4:64:9B:F7:06:DD:5B:67
X509v3 Authority Key Identifier:
keyid:94:22:95:84:31:AF:53:47:BF:D8:0E:35:50:3D:DB:48:E7:1C:F4:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:c5:36:07:4d:ab:90:a5:86:c9:b3:ac:f3:4c:13:e9:00:c4:
26:ac:69:fc:89:ad:62:61:0a:1f:f7:32:15:70:7a:fc:03:fa:
84:c2:4b:b7:86:5d:58:49:82:1b:9b:62:46:4d:aa:f0:5e:f2:
ad:f1:3b:dd:3f:24:ca:bf:6b:3b:27:ef:f9:a5:62:e7:b0:a7:
7f:ca:c9:22:03:87:bc:01:57:fa:56:db:c7:ea:70:47:48:a1:
a5:0a:aa:1e:39:98:bf:2f:f2:0d:6d:f9:79:6f:4f:76:a4:8a:
01:18:be:ba:18:51:b3:49:94:02:38:67:02:ab:c3:7d:47:d3:
b4:f7:04:f4:64:b5:88:12:bf:d4:12:b5:f9:ce:63:a9:4a:08:
20:85:b4:c8:20:84:1d:21:00:86:d7:48:4e:11:c8:9b:c2:08:
56:a4:47:8d:1b:be:ea:ce:73:ff:05:1b:70:36:0d:20:72:c0:
7b:7a:3e:37:be:75:52:94:a7:a2:c8:bf:f0:3b:bf:c6:c1:ab:
c4:28:4d:4e:91:51:49:49:c4:07:28:99:13:6e:33:f9:7f:b3:
e1:57:d7:35:f5:66:44:74:d1:3c:03:f6:99:6c:9f:04:ed:a4:
db:54:04:9a:86:da:8f:3a:35:8a:46:f5:63:cb:29:09:99:66:
7f:d4:0b:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFcgM7LVa0PJck4Ar2f7QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MjI5NTg0MzFhZjUzNDdiZmQ4MGUzNTUwM2RkYjQ4ZTcx
Y2Y0ZDYwHhcNMjUwODIzMDQwMDMwWhcNMjUwODI0MDQwMDMwWjAzMTEwLwYDVQQD
Eyg1ZDI4MmZlNzY0YWRhYzcxMDgwOTU1MWNhNDY0OWJmNzA2ZGQ1YjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jZDcmiCU6ULe1tCtKjggbYnPWkD
iKSsIRpnMF4eL+qmCuNkR4RQR2AbD2KAXRznjGaYttEvzf9253XDkth9L68efvs2
TbQup1nUdiYTtNOXVTsZeslINExlhd6nWGpMvrmEOo45i7kRHCu0V+7c7SkWmJJr
IRGGgKxpcpV3tEUPAIcVGd/m6jPLl8admyejRb6ng0aN/yO0MZAYUcFGIYwuId2M
uUnTijrnDpOWnD5VCxnY+hiwQF/Xvs5C+YGKnomoFyw4C6pPMm6ELGQcE1C0xPaC
InEdUP6nOtFQEcOxmtYhhNUOCCcwrWeZUVOzLF/Db1C3eMgqsfn1oVNuEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF0oL+dkraxxCAlVHKRkm/cG3VtnMB8GA1UdIwQY
MBaAFJQilYQxr1NHv9gONVA920jnHPTWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbENLVmhER3ZVMGVfMkE0MVVEM2JTT2NjOU5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi83NTU0NjgtMmFjYy00ZTliLWE1ZWEt
ZThhMDgzZjU2YWNlLzEvbENLVmhER3ZVMGVfMkE0MVVEM2JTT2NjOU5ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi83NTU0NjgtMmFjYy00ZTliLWE1ZWEtZThhMDgzZjU2YWNl
LzEvbENLVmhER3ZVMGVfMkE0MVVEM2JTT2NjOU5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS8U2B02r
kKWGybOs80wT6QDEJqxp/ImtYmEKH/cyFXB6/AP6hMJLt4ZdWEmCG5tiRk2q8F7y
rfE73T8kyr9rOyfv+aVi57Cnf8rJIgOHvAFX+lbbx+pwR0ihpQqqHjmYvy/yDW35
eW9PdqSKARi+uhhRs0mUAjhnAqvDfUfTtPcE9GS1iBK/1BK1+c5jqUoIIIW0yCCE
HSEAhtdIThHIm8IIVqRHjRu+6s5z/wUbcDYNIHLAe3o+N751UpSnosi/8Du/xsGr
xChNTpFRSUnEByiZE24z+X+z4VfXNfVmRHTRPAP2mWyfBO2k21QEmobajzo1ikb1
Y8spCZlmf9QLAA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:49 2025 by rpki-client