Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft
File: lIlI8N1eL7CpArl5ypxcGkT5j6E.mft (raw, json)
Hash identifier: xCDSAtsnec0Hs1qnnJenURQcZ5rZ+pJ1kVInFeyIf50=
Subject key identifier: C7:72:D3:45:5A:8F:99:BC:71:F1:E8:54:A1:B1:1A:AA:1B:97:32:47
Authority key identifier: 94:89:48:F0:DD:5E:2F:B0:A9:02:B9:79:CA:9C:5C:1A:44:F9:8F:A1
Certificate issuer: /CN=948948f0dd5e2fb0a902b979ca9c5c1a44f98fa1
Certificate serial: 0198D7E13C03B859F4BC348E6A1163942267
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIlI8N1eL7CpArl5ypxcGkT5j6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft
Manifest number: 12D9
Signing time: Sat 23 Aug 2025 17:01:59 +0000
Manifest this update: Sat 23 Aug 2025 17:01:59 +0000
Manifest next update: Sun 24 Aug 2025 17:01:59 +0000
Files and hashes: 1: PqIFggzIk_ANiqqFNJr1_Xaymmc.roa (hash: EhtNg//JemmQlKzA50IitdtWxLjPUBVE2aJwJpTUs+g=)
2: lIlI8N1eL7CpArl5ypxcGkT5j6E.crl (hash: VNDJcEk1ClXtCrbxuQZwxCMpmRRnSVaxl9BovyEr2iY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/lIlI8N1eL7CpArl5ypxcGkT5j6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:3c:03:b8:59:f4:bc:34:8e:6a:11:63:94:22:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=948948f0dd5e2fb0a902b979ca9c5c1a44f98fa1
Validity
Not Before: Aug 23 17:01:59 2025 GMT
Not After : Aug 24 17:01:59 2025 GMT
Subject: CN=c772d3455a8f99bc71f1e854a1b11aaa1b973247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:89:b5:47:f0:ed:91:79:be:ee:6e:93:45:0b:
87:16:54:76:9a:06:2d:ca:f7:64:8f:9d:d1:dd:92:
f3:fa:1c:a7:25:25:6f:b4:35:ee:53:18:b7:09:a9:
cb:a3:7e:b2:1d:ec:db:8f:de:9b:6f:be:b3:a9:73:
5a:2e:22:3c:d5:06:16:f2:8d:5d:00:89:5a:d2:47:
f1:0f:5c:c5:b0:1c:67:01:d3:44:74:71:92:00:e0:
e1:b9:87:6b:54:d7:f6:73:45:f3:03:9e:6b:d0:a2:
91:ea:cb:8b:3d:49:59:c4:c9:87:a1:a7:9c:9a:5c:
51:65:fa:47:28:80:e0:47:ba:04:a4:b9:29:51:3e:
fd:10:c1:c5:96:e4:8d:3b:54:fc:ee:dd:6e:0d:0c:
08:fb:ea:36:46:53:aa:9b:59:0a:3a:ec:3a:b4:f1:
30:3c:0f:d1:8e:23:47:ac:88:bf:e6:27:9d:1e:68:
9a:33:b1:95:66:33:c8:8a:d6:7f:78:be:f2:70:13:
e7:d6:c1:2c:08:ce:0a:d0:ac:91:ba:18:e6:dd:80:
44:bd:ad:9e:10:0b:de:1c:be:da:d3:ff:7c:7b:47:
50:e2:a6:39:08:05:e5:f8:9d:f3:d5:73:a3:77:b0:
b2:be:d4:89:8f:14:0b:a8:51:07:19:90:ca:82:84:
df:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:72:D3:45:5A:8F:99:BC:71:F1:E8:54:A1:B1:1A:AA:1B:97:32:47
X509v3 Authority Key Identifier:
keyid:94:89:48:F0:DD:5E:2F:B0:A9:02:B9:79:CA:9C:5C:1A:44:F9:8F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIlI8N1eL7CpArl5ypxcGkT5j6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:0b:10:bf:c5:fd:a5:5f:b2:67:e1:16:19:08:8c:6e:07:d7:
0c:96:70:a4:8b:7a:62:d2:47:aa:36:bd:48:e6:16:6d:66:74:
b2:dc:11:0c:23:a1:bf:c9:16:f6:14:d3:a8:11:76:3f:2c:ec:
a2:27:b2:79:0b:0f:3b:4b:12:20:6b:b7:c5:10:93:e2:da:ba:
ea:67:29:41:66:a9:6d:32:52:b0:f0:24:52:ad:76:ca:29:2e:
81:cc:d0:54:7c:2b:cc:19:6a:db:16:f2:30:6c:8d:47:32:f9:
ef:9f:13:3e:17:09:05:a6:b9:4e:0a:83:61:64:4f:36:e6:f7:
ce:33:88:5c:77:1d:cc:99:05:d8:4b:cb:47:6f:e7:28:0c:5a:
07:43:f9:c6:c4:21:8c:ee:87:11:77:f2:44:75:0d:df:b4:92:
cb:dd:0a:05:b5:2e:af:07:30:0c:4b:09:61:6d:cc:ea:c4:23:
40:d1:f2:ac:ce:41:8b:ca:7f:1a:89:73:fc:4f:68:dd:b8:18:
a8:71:74:08:7a:95:7e:c4:a6:95:8c:a3:ca:86:6a:21:94:3d:
69:47:f7:98:aa:89:3a:ff:35:1a:57:61:21:4c:ed:db:66:48:
da:ba:68:8c:e3:c4:79:0c:99:e5:68:1d:16:70:62:eb:76:67:
78:e8:17:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjX4TwDuFn0vDSOahFjlCJnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ODk0OGYwZGQ1ZTJmYjBhOTAyYjk3OWNhOWM1YzFhNDRm
OThmYTEwHhcNMjUwODIzMTcwMTU5WhcNMjUwODI0MTcwMTU5WjAzMTEwLwYDVQQD
EyhjNzcyZDM0NTVhOGY5OWJjNzFmMWU4NTRhMWIxMWFhYTFiOTczMjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlom1R/DtkXm+7m6TRQuHFlR2mgYt
yvdkj53R3ZLz+hynJSVvtDXuUxi3CanLo36yHezbj96bb76zqXNaLiI81QYW8o1d
AIla0kfxD1zFsBxnAdNEdHGSAODhuYdrVNf2c0XzA55r0KKR6suLPUlZxMmHoaec
mlxRZfpHKIDgR7oEpLkpUT79EMHFluSNO1T87t1uDQwI++o2RlOqm1kKOuw6tPEw
PA/RjiNHrIi/5iedHmiaM7GVZjPIitZ/eL7ycBPn1sEsCM4K0KyRuhjm3YBEva2e
EAveHL7a0/98e0dQ4qY5CAXl+J3z1XOjd7CyvtSJjxQLqFEHGZDKgoTfFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMdy00Vaj5m8cfHoVKGxGqoblzJHMB8GA1UdIwQY
MBaAFJSJSPDdXi+wqQK5ecqcXBpE+Y+hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbElsSThOMWVMN0NwQXJsNXlweGNHa1Q1ajZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9hYmI4ODUtYTc5NC00YmQ1LTg2MWUt
ODk2MWM3YTNiYmFiLzEvbElsSThOMWVMN0NwQXJsNXlweGNHa1Q1ajZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9hYmI4ODUtYTc5NC00YmQ1LTg2MWUtODk2MWM3YTNiYmFi
LzEvbElsSThOMWVMN0NwQXJsNXlweGNHa1Q1ajZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeQsQv8X9
pV+yZ+EWGQiMbgfXDJZwpIt6YtJHqja9SOYWbWZ0stwRDCOhv8kW9hTTqBF2Pyzs
oieyeQsPO0sSIGu3xRCT4tq66mcpQWapbTJSsPAkUq12yikugczQVHwrzBlq2xby
MGyNRzL5758TPhcJBaa5TgqDYWRPNub3zjOIXHcdzJkF2EvLR2/nKAxaB0P5xsQh
jO6HEXfyRHUN37SSy90KBbUurwcwDEsJYW3M6sQjQNHyrM5Bi8p/Golz/E9o3bgY
qHF0CHqVfsSmlYyjyoZqIZQ9aUf3mKqJOv81GldhIUzt22ZI2rpojOPEeQyZ5Wgd
FnBi63ZneOgX6A==
-----END CERTIFICATE-----
Generated at Sun Aug 24 02:25:21 2025 by rpki-client