Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
File: lSCTFQ9KRhAazX6jomu0OFExI7U.mft (raw, json)
Hash identifier: nj41o0ZVYb5tAbNDjPDJ4mBm4sSC/Im0izTVuuahev4=
Subject key identifier: 93:93:6A:D4:42:96:8B:76:71:54:E9:CB:EB:D4:2A:C6:97:F5:4D:7A
Authority key identifier: 95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
Certificate issuer: /CN=952093150f4a46101acd7ea3a26bb438513123b5
Certificate serial: 0198D5BBCCD931D828439110116B08C34FFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 07:01:51 +0000
Manifest this update: Sat 23 Aug 2025 07:01:51 +0000
Manifest next update: Sun 24 Aug 2025 07:01:51 +0000
Files and hashes: 1: lSCTFQ9KRhAazX6jomu0OFExI7U.crl (hash: +chU9Z13xs0qL3cBkCl8ZI5tX8UJuqG+cgmXsbjaqrQ=)
2: rK5X9NIdICE6HWbuHlM4yM6Jalc.roa (hash: YWhqfMgJTLRIqRYZxrF87FaDlWD+zYLSsh2PkoyKjDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:cc:d9:31:d8:28:43:91:10:11:6b:08:c3:4f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952093150f4a46101acd7ea3a26bb438513123b5
Validity
Not Before: Aug 23 07:01:51 2025 GMT
Not After : Aug 24 07:01:51 2025 GMT
Subject: CN=93936ad442968b767154e9cbebd42ac697f54d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:93:2d:bc:9b:af:03:22:06:00:64:5c:74:1a:
06:66:49:14:f9:af:d5:c0:9c:c7:d4:3d:a6:85:1f:
1f:e9:1b:8c:b0:95:1d:c4:d3:f3:79:0d:b6:7d:ce:
31:b0:36:32:69:f9:f1:a4:58:74:4a:04:66:83:1c:
b0:98:b3:7c:a4:f4:94:48:6a:cf:f5:3a:99:db:39:
f6:cd:1f:9a:04:c4:95:37:15:8e:04:f5:34:72:29:
a6:d8:b2:46:f3:b0:03:2c:1f:e9:91:58:d0:4a:8a:
3d:bd:c8:aa:63:97:8c:1a:3a:d2:ae:17:22:0c:d1:
14:ed:6b:29:f4:97:f8:aa:08:c2:13:33:ae:a0:c8:
8e:5d:10:b5:e7:24:02:50:bf:bb:4d:c3:da:12:9e:
0f:63:80:86:92:31:84:0c:cd:8e:a8:28:e7:8e:69:
68:46:aa:44:a6:c7:a5:af:9d:e6:36:78:69:0f:5e:
3f:11:4c:a8:94:89:9f:cc:c3:c7:47:82:06:3e:ff:
b0:27:86:f7:22:76:de:c3:d2:c8:fd:ff:e5:f4:4f:
db:7f:d3:65:c1:78:ce:93:93:0c:f2:5f:da:90:74:
1d:6a:96:a8:53:cc:33:96:27:bd:16:56:78:1e:0d:
b4:cf:f5:6c:c9:f6:56:94:65:08:8e:05:61:6a:71:
1c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:93:6A:D4:42:96:8B:76:71:54:E9:CB:EB:D4:2A:C6:97:F5:4D:7A
X509v3 Authority Key Identifier:
keyid:95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:b0:21:dc:0b:48:e9:33:46:d4:bb:02:14:94:ed:a4:7e:e2:
62:85:fa:dc:44:2d:ce:16:95:03:b3:f5:70:ac:96:37:5b:8e:
99:df:a0:02:3f:50:4f:b1:ac:80:69:25:9c:fe:34:24:1a:ba:
81:fe:11:97:c1:bb:dc:df:02:75:33:0b:65:6a:66:14:2b:ee:
fc:9e:f1:69:b9:39:ff:26:50:50:88:48:76:8b:6c:4a:48:15:
eb:eb:10:d5:be:18:ae:75:72:43:9c:f2:5d:8d:ca:05:37:69:
a1:4e:44:57:70:b1:dd:05:47:26:cc:a3:13:0d:66:e2:b6:21:
42:f8:08:9e:2c:04:e5:d4:86:6f:40:4f:33:bc:88:c3:a6:45:
5e:45:6e:be:04:3b:8c:a8:9a:98:c2:4c:51:47:c1:8e:3b:1e:
fb:5d:04:f3:c8:25:63:fe:2c:ed:bd:bb:3b:ce:c1:40:bf:fe:
e5:68:5b:84:50:35:dd:eb:05:88:28:20:3e:68:a4:08:0a:17:
1f:10:af:80:51:8e:3b:70:26:7c:86:b8:71:80:ba:77:66:db:
15:05:b9:79:c2:78:4e:fd:2a:e2:90:52:4c:ce:e6:dc:f9:38:
db:af:62:a2:6e:24:00:5a:f9:e9:dc:47:37:09:b3:5d:10:62:
47:3a:3a:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu8zZMdgoQ5EQEWsIw0//MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MjA5MzE1MGY0YTQ2MTAxYWNkN2VhM2EyNmJiNDM4NTEz
MTIzYjUwHhcNMjUwODIzMDcwMTUxWhcNMjUwODI0MDcwMTUxWjAzMTEwLwYDVQQD
Eyg5MzkzNmFkNDQyOTY4Yjc2NzE1NGU5Y2JlYmQ0MmFjNjk3ZjU0ZDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJMtvJuvAyIGAGRcdBoGZkkU+a/V
wJzH1D2mhR8f6RuMsJUdxNPzeQ22fc4xsDYyafnxpFh0SgRmgxywmLN8pPSUSGrP
9TqZ2zn2zR+aBMSVNxWOBPU0cimm2LJG87ADLB/pkVjQSoo9vciqY5eMGjrSrhci
DNEU7Wsp9Jf4qgjCEzOuoMiOXRC15yQCUL+7TcPaEp4PY4CGkjGEDM2OqCjnjmlo
RqpEpselr53mNnhpD14/EUyolImfzMPHR4IGPv+wJ4b3Inbew9LI/f/l9E/bf9Nl
wXjOk5MM8l/akHQdapaoU8wzlie9FlZ4Hg20z/VsyfZWlGUIjgVhanEcRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJOTatRClot2cVTpy+vUKsaX9U16MB8GA1UdIwQY
MBaAFJUgkxUPSkYQGs1+o6JrtDhRMSO1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFNDVEZROUtSaEFhelg2am9tdTBPRkV4STdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi85NThjYmMtYzJmNC00OGY3LWFkZGQt
ZTgwNGRjYmRkNzYyLzEvbFNDVEZROUtSaEFhelg2am9tdTBPRkV4STdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi85NThjYmMtYzJmNC00OGY3LWFkZGQtZTgwNGRjYmRkNzYy
LzEvbFNDVEZROUtSaEFhelg2am9tdTBPRkV4STdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK7Ah3AtI
6TNG1LsCFJTtpH7iYoX63EQtzhaVA7P1cKyWN1uOmd+gAj9QT7GsgGklnP40JBq6
gf4Rl8G73N8CdTMLZWpmFCvu/J7xabk5/yZQUIhIdotsSkgV6+sQ1b4YrnVyQ5zy
XY3KBTdpoU5EV3Cx3QVHJsyjEw1m4rYhQvgIniwE5dSGb0BPM7yIw6ZFXkVuvgQ7
jKiamMJMUUfBjjse+10E88glY/4s7b27O87BQL/+5WhbhFA13esFiCggPmikCAoX
HxCvgFGOO3AmfIa4cYC6d2bbFQW5ecJ4Tv0q4pBSTM7m3Pk4269iom4kAFr56dxH
NwmzXRBiRzo6SQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:42 2025 by rpki-client