
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
File: lHS1JBtjw6-9s0LMR2NMVasv-EY.mft (raw, json)
Hash identifier: WR9mn3noGhIfxtw8Iqbacl5X+gvtIqIWlbodKbmdPeM=
Subject key identifier: 53:FD:DA:54:C1:13:CA:BE:E1:5C:9C:6B:BD:D9:9A:39:58:3E:BB:0E
Authority key identifier: 94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46
Certificate issuer: /CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
Certificate serial: 01988054E66317F578F5A449F7614C47EE05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
Manifest number: 012D
Signing time: Wed 06 Aug 2025 17:01:44 +0000
Manifest this update: Wed 06 Aug 2025 17:01:44 +0000
Manifest next update: Thu 07 Aug 2025 17:01:44 +0000
Files and hashes: 1: _esauh0bwxU4lPvXm-nLiVYT1MY.roa (hash: dg/Xh0ZCbSrkvMtC9w3xbJVNO3y7y3uRRsJgcH21rXg=)
2: lHS1JBtjw6-9s0LMR2NMVasv-EY.crl (hash: DAuXmoAPhS5pQ0obcjl0wfNpJYiNomuPBUADNcMpZ+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 17:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:54:e6:63:17:f5:78:f5:a4:49:f7:61:4c:47:ee:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
Validity
Not Before: Aug 6 17:01:44 2025 GMT
Not After : Aug 7 17:01:44 2025 GMT
Subject: CN=53fdda54c113cabee15c9c6bbdd99a39583ebb0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ce:0a:41:ce:c9:2d:78:8f:7b:01:27:25:14:
4a:73:69:b8:20:a4:9f:15:d2:99:fc:a6:09:b9:a2:
ec:2b:f9:13:37:c1:56:02:1c:41:63:d4:7a:e2:f3:
7e:92:01:a1:68:62:49:67:1e:74:ab:dc:92:a3:c1:
dc:e8:9f:8b:f5:23:64:b0:85:09:1c:fa:59:cf:6e:
d9:fe:47:57:45:5c:9a:09:ca:6d:b4:ad:fb:79:ef:
d5:9c:6a:0b:94:91:d2:4b:db:3f:0e:43:28:37:04:
35:f1:ba:37:23:4b:df:10:84:45:4b:f0:6c:ac:0a:
20:b6:d3:3d:2e:ae:09:e1:96:c0:97:a1:7a:e9:40:
ca:7d:3b:a1:83:60:5a:0f:69:40:c8:02:fc:bd:93:
db:f3:9d:a7:2c:d0:fe:77:c1:7e:a1:f4:be:db:09:
18:fe:2e:21:03:22:14:17:a5:7e:05:32:20:0f:f7:
25:6a:14:ca:63:cb:bf:fb:f3:ba:99:6f:be:08:42:
ba:38:96:32:26:42:04:49:e8:64:2b:0a:7b:2a:52:
62:77:cc:d4:65:37:a0:fd:cd:c7:3d:1b:dd:59:13:
73:d4:bf:43:5a:77:89:56:4b:a7:92:6a:7c:15:58:
c1:8a:ef:d6:42:68:59:77:af:af:04:95:23:00:7c:
7d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FD:DA:54:C1:13:CA:BE:E1:5C:9C:6B:BD:D9:9A:39:58:3E:BB:0E
X509v3 Authority Key Identifier:
keyid:94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:f5:db:4e:61:e6:f1:f1:d6:d6:34:2e:b2:60:00:a6:eb:15:
f3:91:89:0a:c1:1b:e4:b5:21:21:53:ef:a6:d3:49:81:c3:ec:
fa:e9:a5:df:e1:02:18:45:02:61:97:42:21:e6:1e:2f:27:21:
9e:62:d0:a4:f4:dd:85:a7:6d:43:df:1f:12:61:4b:c0:d4:06:
66:f8:8b:62:58:fb:42:54:14:8e:b6:52:8c:86:16:d8:cd:62:
1f:46:92:34:0d:da:27:ad:d4:75:ae:df:d3:3d:c7:dc:22:3f:
a0:da:53:73:96:59:67:a8:87:91:01:76:c9:ad:34:cb:f2:ae:
60:da:05:48:e9:f6:d3:2b:78:9d:62:3a:c6:01:28:a6:db:cf:
2e:d7:14:0d:be:0a:0f:b2:56:a9:30:e5:d7:f7:79:e4:03:43:
d0:1b:dd:64:2c:40:b5:da:b0:19:49:88:be:cc:50:4d:a1:23:
35:6d:d6:61:85:bb:2c:d7:a8:11:6e:3e:18:97:c9:c3:b0:17:
b7:31:11:c8:5a:81:15:01:c2:53:6d:77:b6:dd:36:ba:3e:d5:
88:53:7f:6b:0b:20:a6:62:88:d4:92:dd:67:9b:d1:f5:28:17:
e8:6d:89:81:08:19:e3:f7:8a:08:56:db:a4:0e:ec:33:e9:72:
03:87:a0:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiAVOZjF/V49aRJ92FMR+4FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NzRiNTI0MWI2M2MzYWZiZGIzNDJjYzQ3NjM0YzU1YWIy
ZmY4NDYwHhcNMjUwODA2MTcwMTQ0WhcNMjUwODA3MTcwMTQ0WjAzMTEwLwYDVQQD
Eyg1M2ZkZGE1NGMxMTNjYWJlZTE1YzljNmJiZGQ5OWEzOTU4M2ViYjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAps4KQc7JLXiPewEnJRRKc2m4IKSf
FdKZ/KYJuaLsK/kTN8FWAhxBY9R64vN+kgGhaGJJZx50q9ySo8Hc6J+L9SNksIUJ
HPpZz27Z/kdXRVyaCcpttK37ee/VnGoLlJHSS9s/DkMoNwQ18bo3I0vfEIRFS/Bs
rAogttM9Lq4J4ZbAl6F66UDKfTuhg2BaD2lAyAL8vZPb852nLND+d8F+ofS+2wkY
/i4hAyIUF6V+BTIgD/clahTKY8u/+/O6mW++CEK6OJYyJkIESehkKwp7KlJid8zU
ZTeg/c3HPRvdWRNz1L9DWneJVkunkmp8FVjBiu/WQmhZd6+vBJUjAHx9twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFP92lTBE8q+4Vyca73ZmjlYPrsOMB8GA1UdIwQY
MBaAFJR0tSQbY8OvvbNCzEdjTFWrL/hGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEhTMUpCdGp3Ni05czBMTVIyTk1WYXN2LUVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83ZjAyYjAtZDlhZC00ZjVkLTliNjkt
NDhmNjIxYWNiOWI3LzEvbEhTMUpCdGp3Ni05czBMTVIyTk1WYXN2LUVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC83ZjAyYjAtZDlhZC00ZjVkLTliNjktNDhmNjIxYWNiOWI3
LzEvbEhTMUpCdGp3Ni05czBMTVIyTk1WYXN2LUVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmvXbTmHm
8fHW1jQusmAApusV85GJCsEb5LUhIVPvptNJgcPs+uml3+ECGEUCYZdCIeYeLych
nmLQpPTdhadtQ98fEmFLwNQGZviLYlj7QlQUjrZSjIYW2M1iH0aSNA3aJ63Uda7f
0z3H3CI/oNpTc5ZZZ6iHkQF2ya00y/KuYNoFSOn20yt4nWI6xgEoptvPLtcUDb4K
D7JWqTDl1/d55AND0BvdZCxAtdqwGUmIvsxQTaEjNW3WYYW7LNeoEW4+GJfJw7AX
tzERyFqBFQHCU213tt02uj7ViFN/awsgpmKI1JLdZ5vR9SgX6G2JgQgZ4/eKCFbb
pA7sM+lyA4egxA==
-----END CERTIFICATE-----
Generated at Thu Aug 7 01:05:16 2025 by rpki-client