Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/02240f-e080-4be9-93c4-396fcda6490c/1/lW4xbJg4BMJQHsxavqU6KoO1cyQ.mft
File: lW4xbJg4BMJQHsxavqU6KoO1cyQ.mft (raw, json)
Hash identifier: j8Wl7gv2u9yx+PryXjylhBkYH5O3o8x7qL+lXDYFIXw=
Subject key identifier: 89:3F:67:48:A6:16:AF:ED:9B:43:B5:71:FB:D4:D7:0A:88:85:C5:53
Authority key identifier: 95:6E:31:6C:98:38:04:C2:50:1E:CC:5A:BE:A5:3A:2A:83:B5:73:24
Certificate issuer: /CN=956e316c983804c2501ecc5abea53a2a83b57324
Certificate serial: 0198A04ED75B56B91C04290BDA55451ECCBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lW4xbJg4BMJQHsxavqU6KoO1cyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/02240f-e080-4be9-93c4-396fcda6490c/1/lW4xbJg4BMJQHsxavqU6KoO1cyQ.mft
Manifest number: 15FE
Signing time: Tue 12 Aug 2025 22:02:58 +0000
Manifest this update: Tue 12 Aug 2025 22:02:58 +0000
Manifest next update: Wed 13 Aug 2025 22:02:58 +0000
Files and hashes: 1: lW4xbJg4BMJQHsxavqU6KoO1cyQ.crl (hash: R7LmU3y1fMJ0G9eFfucsStQwXwVNB0EIY0IKBOH+n/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/02240f-e080-4be9-93c4-396fcda6490c/1/lW4xbJg4BMJQHsxavqU6KoO1cyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/02240f-e080-4be9-93c4-396fcda6490c/1/lW4xbJg4BMJQHsxavqU6KoO1cyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lW4xbJg4BMJQHsxavqU6KoO1cyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:d7:5b:56:b9:1c:04:29:0b:da:55:45:1e:cc:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=956e316c983804c2501ecc5abea53a2a83b57324
Validity
Not Before: Aug 12 22:02:58 2025 GMT
Not After : Aug 13 22:02:58 2025 GMT
Subject: CN=893f6748a616afed9b43b571fbd4d70a8885c553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ec:b3:ff:f3:14:d6:ac:28:d2:cc:95:a5:57:
d0:b8:5a:80:7b:c7:07:ef:e6:a0:c4:a2:ba:f8:20:
0e:02:4a:1f:0e:0a:c6:8d:72:e6:39:3e:d3:3e:75:
64:64:82:a9:2d:d0:56:b6:ef:46:d5:fd:4c:24:de:
51:c4:50:cb:7e:8f:de:46:52:d1:3a:13:76:d2:22:
16:0f:f0:19:b6:aa:07:95:2b:ee:85:9b:35:e5:25:
46:35:4a:48:4f:f8:85:1e:a3:ea:dc:32:fa:20:81:
e9:3e:a1:0f:43:d8:e1:52:46:c7:58:2f:98:a9:87:
a3:e3:43:93:2e:28:ea:31:6f:36:21:23:7d:15:de:
f2:01:71:e9:c6:89:06:c2:d2:4d:eb:7a:b3:56:7f:
c5:c9:92:6b:ec:62:ca:6a:cd:a0:d4:f2:b7:ab:6a:
49:d9:a9:3d:5d:b5:17:76:1e:10:f8:c1:32:98:c9:
0d:c9:c4:7a:65:0e:ae:2a:5c:30:45:3d:a8:17:b1:
19:9a:8e:51:ee:26:b4:66:35:7e:23:42:5b:51:80:
95:37:3c:b3:f2:7d:77:6a:d9:30:68:71:ff:dc:ed:
77:89:5f:68:73:3c:45:02:b1:d7:5e:06:d5:29:47:
26:40:6d:39:31:cb:49:8d:79:c4:dd:3b:7d:75:b4:
cd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3F:67:48:A6:16:AF:ED:9B:43:B5:71:FB:D4:D7:0A:88:85:C5:53
X509v3 Authority Key Identifier:
keyid:95:6E:31:6C:98:38:04:C2:50:1E:CC:5A:BE:A5:3A:2A:83:B5:73:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lW4xbJg4BMJQHsxavqU6KoO1cyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/02240f-e080-4be9-93c4-396fcda6490c/1/lW4xbJg4BMJQHsxavqU6KoO1cyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/02240f-e080-4be9-93c4-396fcda6490c/1/lW4xbJg4BMJQHsxavqU6KoO1cyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:bf:b2:37:e5:bc:66:c1:40:87:1c:63:4a:cb:09:23:11:d0:
8a:96:33:b1:e3:fa:99:f1:32:74:f2:77:70:ad:09:07:0c:54:
89:24:c6:1f:da:79:e0:1b:35:83:c9:b7:54:26:66:e8:7e:0f:
ab:cb:12:d3:5b:fa:7b:ad:6c:40:35:e2:70:0e:ad:21:8e:b5:
89:22:e8:c4:5b:03:d5:17:df:10:79:a6:94:67:95:b4:ab:76:
21:a2:0e:d1:a3:57:10:34:38:55:72:ee:02:c2:c4:98:b7:39:
84:7b:da:6e:ff:ec:00:f7:99:76:e7:14:67:bf:08:b7:0c:f2:
91:6b:ca:b9:4d:98:6e:20:d5:70:e5:4b:69:40:9c:67:81:9c:
71:39:13:c5:4b:7c:3f:77:39:89:5a:e3:6b:0a:1d:a9:82:e6:
e8:4c:22:e8:f8:5f:e8:fe:78:95:37:3d:18:63:e7:88:75:76:
ca:d1:46:29:24:71:54:fd:9e:1d:d4:8a:4a:3a:c7:83:39:d9:
cc:27:61:17:0d:57:d4:21:38:0e:70:53:c6:f9:31:5e:49:68:
5d:61:30:f1:11:49:90:fe:22:39:f5:22:c4:df:ec:9f:f2:d2:
cb:6c:b7:e8:7d:90:ae:b6:15:e0:7d:b2:9d:85:b0:d4:e1:a5:
da:42:10:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZigTtdbVrkcBCkL2lVFHsy+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NmUzMTZjOTgzODA0YzI1MDFlY2M1YWJlYTUzYTJhODNi
NTczMjQwHhcNMjUwODEyMjIwMjU4WhcNMjUwODEzMjIwMjU4WjAzMTEwLwYDVQQD
Eyg4OTNmNjc0OGE2MTZhZmVkOWI0M2I1NzFmYmQ0ZDcwYTg4ODVjNTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+yz//MU1qwo0syVpVfQuFqAe8cH
7+agxKK6+CAOAkofDgrGjXLmOT7TPnVkZIKpLdBWtu9G1f1MJN5RxFDLfo/eRlLR
OhN20iIWD/AZtqoHlSvuhZs15SVGNUpIT/iFHqPq3DL6IIHpPqEPQ9jhUkbHWC+Y
qYej40OTLijqMW82ISN9Fd7yAXHpxokGwtJN63qzVn/FyZJr7GLKas2g1PK3q2pJ
2ak9XbUXdh4Q+MEymMkNycR6ZQ6uKlwwRT2oF7EZmo5R7ia0ZjV+I0JbUYCVNzyz
8n13atkwaHH/3O13iV9oczxFArHXXgbVKUcmQG05MctJjXnE3Tt9dbTNNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIk/Z0imFq/tm0O1cfvU1wqIhcVTMB8GA1UdIwQY
MBaAFJVuMWyYOATCUB7MWr6lOiqDtXMkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFc0eGJKZzRCTUpRSHN4YXZxVTZLb08xY3lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8wMjI0MGYtZTA4MC00YmU5LTkzYzQt
Mzk2ZmNkYTY0OTBjLzEvbFc0eGJKZzRCTUpRSHN4YXZxVTZLb08xY3lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi8wMjI0MGYtZTA4MC00YmU5LTkzYzQtMzk2ZmNkYTY0OTBj
LzEvbFc0eGJKZzRCTUpRSHN4YXZxVTZLb08xY3lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEb+yN+W8
ZsFAhxxjSssJIxHQipYzseP6mfEydPJ3cK0JBwxUiSTGH9p54Bs1g8m3VCZm6H4P
q8sS01v6e61sQDXicA6tIY61iSLoxFsD1RffEHmmlGeVtKt2IaIO0aNXEDQ4VXLu
AsLEmLc5hHvabv/sAPeZducUZ78ItwzykWvKuU2YbiDVcOVLaUCcZ4GccTkTxUt8
P3c5iVrjawodqYLm6Ewi6Phf6P54lTc9GGPniHV2ytFGKSRxVP2eHdSKSjrHgznZ
zCdhFw1X1CE4DnBTxvkxXkloXWEw8RFJkP4iOfUixN/sn/LSy2y36H2QrrYV4H2y
nYWw1OGl2kIQzw==
-----END CERTIFICATE-----
Generated at Wed Aug 13 04:24:00 2025 by rpki-client