
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/39294c-ebd1-4ef4-915e-f0dd879ae53a/1/lQPIUJD5zC4inTj96rrmJlCL3rg.mft
File: lQPIUJD5zC4inTj96rrmJlCL3rg.mft (raw, json)
Hash identifier: Wftvjx36dX0GNIO9drTWt8cIHsBHRjiiLVqNY6yq+N0=
Subject key identifier: FE:4A:85:26:75:4D:FE:EC:3E:3C:03:63:A8:62:38:D1:33:83:65:45
Authority key identifier: 95:03:C8:50:90:F9:CC:2E:22:9D:38:FD:EA:BA:E6:26:50:8B:DE:B8
Certificate issuer: /CN=9503c85090f9cc2e229d38fdeabae626508bdeb8
Certificate serial: 0198756261798919044F049635173F6884F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQPIUJD5zC4inTj96rrmJlCL3rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/39294c-ebd1-4ef4-915e-f0dd879ae53a/1/lQPIUJD5zC4inTj96rrmJlCL3rg.mft
Manifest number: 0339
Signing time: Mon 04 Aug 2025 14:00:38 +0000
Manifest this update: Mon 04 Aug 2025 14:00:38 +0000
Manifest next update: Tue 05 Aug 2025 14:00:38 +0000
Files and hashes: 1: lQPIUJD5zC4inTj96rrmJlCL3rg.crl (hash: ynqn7e5hGAccLw6w0GpHf12UTM8zFQBY33n/e2kbyr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/39294c-ebd1-4ef4-915e-f0dd879ae53a/1/lQPIUJD5zC4inTj96rrmJlCL3rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/39294c-ebd1-4ef4-915e-f0dd879ae53a/1/lQPIUJD5zC4inTj96rrmJlCL3rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQPIUJD5zC4inTj96rrmJlCL3rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:62:61:79:89:19:04:4f:04:96:35:17:3f:68:84:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9503c85090f9cc2e229d38fdeabae626508bdeb8
Validity
Not Before: Aug 4 14:00:38 2025 GMT
Not After : Aug 5 14:00:38 2025 GMT
Subject: CN=fe4a8526754dfeec3e3c0363a86238d133836545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8f:49:f1:40:64:d7:05:3c:32:e0:c1:16:98:
3f:65:e5:b3:7b:9c:f5:87:d6:96:38:fe:0a:b0:55:
2d:ac:b8:fa:b7:ff:b9:da:f1:13:93:93:90:a7:a1:
fe:fc:2e:af:f7:24:ba:68:a4:2f:ab:f0:90:5d:fc:
f5:cd:09:7c:e0:bf:d6:1e:7a:a1:14:c2:c4:c2:07:
81:88:22:5d:4d:76:2e:ba:5f:4a:20:2a:f6:cd:4f:
ba:37:55:f9:77:1c:ea:5d:fc:56:58:2b:84:c1:37:
84:16:ac:e7:3a:b3:fd:5f:58:03:73:14:66:02:b0:
8f:65:26:52:97:d0:91:56:68:fd:be:f8:14:ac:42:
5d:1e:06:18:d5:db:7d:8c:af:54:ca:fb:3e:a7:0d:
34:9d:2a:48:e1:0f:b0:26:6c:ec:7e:ff:be:a5:56:
e4:e2:a0:57:75:bd:a6:01:b8:a4:70:79:64:6a:3b:
49:5c:66:db:ed:0f:c6:f1:50:a8:45:9d:b9:10:6d:
ca:bf:26:d9:c4:b9:f8:68:25:35:af:7c:54:7b:9a:
4c:db:04:80:d2:ff:b3:80:40:fa:60:38:08:70:ca:
56:16:50:91:31:b0:e8:f1:b2:30:b9:79:b4:4e:64:
ed:a6:c0:79:1a:ca:d7:09:dc:39:de:f7:e9:4f:15:
c8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4A:85:26:75:4D:FE:EC:3E:3C:03:63:A8:62:38:D1:33:83:65:45
X509v3 Authority Key Identifier:
keyid:95:03:C8:50:90:F9:CC:2E:22:9D:38:FD:EA:BA:E6:26:50:8B:DE:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQPIUJD5zC4inTj96rrmJlCL3rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/39294c-ebd1-4ef4-915e-f0dd879ae53a/1/lQPIUJD5zC4inTj96rrmJlCL3rg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/39294c-ebd1-4ef4-915e-f0dd879ae53a/1/lQPIUJD5zC4inTj96rrmJlCL3rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:74:99:da:66:f1:4c:72:3e:b6:51:f8:b0:28:f7:28:92:5e:
97:cc:ff:6a:cc:e5:d4:c5:e3:df:fa:78:b7:68:09:89:42:ce:
9b:f8:fc:06:bb:69:b8:3f:32:dc:82:b5:86:7d:c5:27:7d:c6:
5c:f5:63:1d:d5:00:df:91:61:fe:db:41:3a:5b:8e:80:e5:4e:
4e:49:6d:55:aa:94:8d:47:8f:61:8d:3f:2e:95:cc:a5:20:a2:
82:f4:4a:6d:39:a9:60:cf:12:ee:25:70:18:d9:0e:b2:2e:b2:
bd:05:da:d2:65:1e:7c:e6:f7:3c:dd:55:ea:6c:9e:4a:c7:53:
30:a4:d5:d3:e6:0c:70:b6:2a:c4:25:4e:2c:ce:b1:90:4e:aa:
3c:75:39:b1:71:01:4a:6e:39:22:b5:d3:c6:11:51:cb:b5:e5:
4d:ea:4f:32:f9:a2:b8:fe:3c:2d:7a:f1:dc:ad:ee:42:c1:74:
f6:b2:36:a6:a2:61:b0:7a:90:7e:e1:55:c6:55:46:71:53:c2:
f4:a5:65:3c:26:90:a3:4a:4d:33:d5:45:65:3b:65:75:3b:e0:
4b:f1:2b:e9:dd:4c:47:d7:9e:62:08:24:59:c3:b5:76:ea:e5:
37:cf:28:5a:65:a3:37:d4:35:e8:e9:24:19:45:d5:b7:c0:98:
58:4f:cd:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh1YmF5iRkETwSWNRc/aIT0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MDNjODUwOTBmOWNjMmUyMjlkMzhmZGVhYmFlNjI2NTA4
YmRlYjgwHhcNMjUwODA0MTQwMDM4WhcNMjUwODA1MTQwMDM4WjAzMTEwLwYDVQQD
EyhmZTRhODUyNjc1NGRmZWVjM2UzYzAzNjNhODYyMzhkMTMzODM2NTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2o9J8UBk1wU8MuDBFpg/ZeWze5z1
h9aWOP4KsFUtrLj6t/+52vETk5OQp6H+/C6v9yS6aKQvq/CQXfz1zQl84L/WHnqh
FMLEwgeBiCJdTXYuul9KICr2zU+6N1X5dxzqXfxWWCuEwTeEFqznOrP9X1gDcxRm
ArCPZSZSl9CRVmj9vvgUrEJdHgYY1dt9jK9Uyvs+pw00nSpI4Q+wJmzsfv++pVbk
4qBXdb2mAbikcHlkajtJXGbb7Q/G8VCoRZ25EG3KvybZxLn4aCU1r3xUe5pM2wSA
0v+zgED6YDgIcMpWFlCRMbDo8bIwuXm0TmTtpsB5GsrXCdw53vfpTxXI/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP5KhSZ1Tf7sPjwDY6hiONEzg2VFMB8GA1UdIwQY
MBaAFJUDyFCQ+cwuIp04/eq65iZQi964MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFFQSVVKRDV6QzRpblRqOTZycm1KbENMM3JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8zOTI5NGMtZWJkMS00ZWY0LTkxNWUt
ZjBkZDg3OWFlNTNhLzEvbFFQSVVKRDV6QzRpblRqOTZycm1KbENMM3JnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy8zOTI5NGMtZWJkMS00ZWY0LTkxNWUtZjBkZDg3OWFlNTNh
LzEvbFFQSVVKRDV6QzRpblRqOTZycm1KbENMM3JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZXSZ2mbx
THI+tlH4sCj3KJJel8z/aszl1MXj3/p4t2gJiULOm/j8BrtpuD8y3IK1hn3FJ33G
XPVjHdUA35Fh/ttBOluOgOVOTkltVaqUjUePYY0/LpXMpSCigvRKbTmpYM8S7iVw
GNkOsi6yvQXa0mUefOb3PN1V6myeSsdTMKTV0+YMcLYqxCVOLM6xkE6qPHU5sXEB
Sm45IrXTxhFRy7XlTepPMvmiuP48LXrx3K3uQsF09rI2pqJhsHqQfuFVxlVGcVPC
9KVlPCaQo0pNM9VFZTtldTvgS/Er6d1MR9eeYggkWcO1durlN88oWmWjN9Q16Okk
GUXVt8CYWE/NgA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:11:21 2025 by rpki-client