Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
File: lPNHF_8y_ix2RK610O6iMBYX8SQ.mft (raw, json)
Hash identifier: EFINxp+tGbwTZRzxmfiPMQi6/YOH5CqrHv8f8NPPbNI=
Subject key identifier: EC:56:9E:4A:A7:78:47:F5:FF:51:20:36:8D:01:FE:D2:90:12:10:DD
Authority key identifier: 94:F3:47:17:FF:32:FE:2C:76:44:AE:B5:D0:EE:A2:30:16:17:F1:24
Certificate issuer: /CN=94f34717ff32fe2c7644aeb5d0eea2301617f124
Certificate serial: 0198D583D2694AC169A8719C0B45B3FEBBAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
Manifest number: 05CB
Signing time: Sat 23 Aug 2025 06:00:42 +0000
Manifest this update: Sat 23 Aug 2025 06:00:42 +0000
Manifest next update: Sun 24 Aug 2025 06:00:42 +0000
Files and hashes: 1: lPNHF_8y_ix2RK610O6iMBYX8SQ.crl (hash: Aq9g5B20f3/IA5O4HHm2JidqH4emY30pgpt2TJPzbSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:d2:69:4a:c1:69:a8:71:9c:0b:45:b3:fe:bb:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f34717ff32fe2c7644aeb5d0eea2301617f124
Validity
Not Before: Aug 23 06:00:42 2025 GMT
Not After : Aug 24 06:00:42 2025 GMT
Subject: CN=ec569e4aa77847f5ff5120368d01fed2901210dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f7:ea:58:70:32:4d:d2:eb:af:63:d8:c6:ec:
e1:93:6f:ea:f4:07:9e:6a:24:58:d3:97:8b:65:55:
6c:e6:57:ef:e8:06:b7:e8:76:60:a4:24:29:fc:da:
ea:98:60:eb:48:c7:2a:36:c5:38:f6:f6:cc:a6:22:
16:7f:4c:c4:c6:1f:64:5c:a2:02:d1:87:9a:ea:cc:
26:80:da:6a:5d:1b:0d:4f:dc:68:06:17:5c:94:b9:
ae:3d:9e:47:c5:74:c5:4f:b8:d7:1b:53:0d:24:19:
ef:af:e0:32:91:f7:61:b6:e6:e1:88:79:f1:8e:ec:
3e:a4:98:e5:a7:de:38:d1:70:5f:fa:44:65:58:a6:
3d:2c:a7:4c:aa:73:c1:a5:c6:8b:a4:43:e2:ae:3e:
a4:3c:35:e6:b8:c1:bd:b1:9d:4c:60:4f:ad:5c:ce:
15:69:38:89:ca:13:03:3f:e6:65:fd:ef:0a:5c:ef:
dc:22:2a:6f:94:0c:fd:48:bf:2f:c8:a5:8f:41:d4:
20:18:77:60:e1:59:17:7f:c4:bb:58:6f:db:38:68:
ea:8a:78:e0:a2:90:61:cb:7d:db:a2:95:0d:3a:f0:
f7:5f:42:7e:bd:ee:79:b1:c6:01:bf:16:15:56:b9:
ec:d8:da:1d:ed:6d:0a:84:3b:6a:76:29:92:b3:29:
1f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:56:9E:4A:A7:78:47:F5:FF:51:20:36:8D:01:FE:D2:90:12:10:DD
X509v3 Authority Key Identifier:
keyid:94:F3:47:17:FF:32:FE:2C:76:44:AE:B5:D0:EE:A2:30:16:17:F1:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:99:cc:ad:08:16:3f:7d:0e:5a:62:1e:ce:31:a9:6c:f2:b7:
d7:60:cc:2b:a5:c7:a0:21:e4:50:ba:2e:43:90:1d:27:37:1b:
d2:86:a1:74:f5:6b:97:8d:40:97:b6:be:e4:0b:ec:d1:84:11:
e2:20:3f:3d:6c:6f:6c:92:a3:d4:26:ba:fd:4a:5e:72:92:4e:
64:14:8d:54:40:9a:ab:4b:8d:84:1d:ce:71:87:5f:50:a9:15:
05:a5:84:63:bd:c3:f6:c4:66:bb:09:74:96:75:40:69:bd:db:
8a:22:a2:30:31:ff:cd:17:86:38:5c:4c:8e:11:2d:17:dd:f2:
8a:f9:78:83:ec:a7:28:4b:94:47:7c:b1:52:22:7f:22:d6:96:
e4:49:21:e3:97:5b:1a:8b:a7:22:50:b6:ad:7e:90:7a:5d:9c:
50:bd:ff:85:de:19:de:81:3d:bc:47:33:db:4b:59:c4:7a:35:
13:17:c5:b7:48:43:7d:fd:80:2e:f7:62:f8:47:62:3a:f6:f1:
ec:6a:d1:9b:86:bc:05:88:e8:95:d4:cf:6d:72:ba:9b:bc:67:
85:91:80:cb:b8:76:04:de:d8:e3:29:d7:33:1c:14:e9:ae:6e:
3d:95:54:51:e4:62:d1:a7:77:60:95:25:26:e5:f4:7f:57:1c:
e6:95:86:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg9JpSsFpqHGcC0Wz/ruqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ZjM0NzE3ZmYzMmZlMmM3NjQ0YWViNWQwZWVhMjMwMTYx
N2YxMjQwHhcNMjUwODIzMDYwMDQyWhcNMjUwODI0MDYwMDQyWjAzMTEwLwYDVQQD
EyhlYzU2OWU0YWE3Nzg0N2Y1ZmY1MTIwMzY4ZDAxZmVkMjkwMTIxMGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7PfqWHAyTdLrr2PYxuzhk2/q9Aee
aiRY05eLZVVs5lfv6Aa36HZgpCQp/NrqmGDrSMcqNsU49vbMpiIWf0zExh9kXKIC
0Yea6swmgNpqXRsNT9xoBhdclLmuPZ5HxXTFT7jXG1MNJBnvr+AykfdhtubhiHnx
juw+pJjlp9440XBf+kRlWKY9LKdMqnPBpcaLpEPirj6kPDXmuMG9sZ1MYE+tXM4V
aTiJyhMDP+Zl/e8KXO/cIipvlAz9SL8vyKWPQdQgGHdg4VkXf8S7WG/bOGjqinjg
opBhy33bopUNOvD3X0J+ve55scYBvxYVVrns2Nod7W0KhDtqdimSsykfMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOxWnkqneEf1/1EgNo0B/tKQEhDdMB8GA1UdIwQY
MBaAFJTzRxf/Mv4sdkSutdDuojAWF/EkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFBOSEZfOHlfaXgyUks2MTBPNmlNQllYOFNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jYWIxOTgtM2U4NC00YjAxLWJmYmEt
ODJiOWU1ZmU5YjA2LzEvbFBOSEZfOHlfaXgyUks2MTBPNmlNQllYOFNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9jYWIxOTgtM2U4NC00YjAxLWJmYmEtODJiOWU1ZmU5YjA2
LzEvbFBOSEZfOHlfaXgyUks2MTBPNmlNQllYOFNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALpnMrQgW
P30OWmIezjGpbPK312DMK6XHoCHkULouQ5AdJzcb0oahdPVrl41Al7a+5Avs0YQR
4iA/PWxvbJKj1Ca6/UpecpJOZBSNVECaq0uNhB3OcYdfUKkVBaWEY73D9sRmuwl0
lnVAab3biiKiMDH/zReGOFxMjhEtF93yivl4g+ynKEuUR3yxUiJ/ItaW5Ekh45db
GounIlC2rX6Qel2cUL3/hd4Z3oE9vEcz20tZxHo1ExfFt0hDff2ALvdi+EdiOvbx
7GrRm4a8BYjoldTPbXK6m7xnhZGAy7h2BN7Y4ynXMxwU6a5uPZVUUeRi0ad3YJUl
JuX0f1cc5pWGXQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:38:36 2025 by rpki-client