Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
File: lTgJNefooh7DK2Wn_E7X1GgnhSE.mft (raw, json)
Hash identifier: 04L35psL8mgb+b/ksTzMP/CKh+ZKfnzVaQyafbCx1So=
Subject key identifier: 16:17:CE:A9:CB:4C:33:D2:BA:0A:3D:2C:68:BA:87:3A:B8:22:E4:F9
Authority key identifier: 95:38:09:35:E7:E8:A2:1E:C3:2B:65:A7:FC:4E:D7:D4:68:27:85:21
Certificate issuer: /CN=95380935e7e8a21ec32b65a7fc4ed7d468278521
Certificate serial: 01987DF868D1CADA0A29C3C0428D286CFEF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
Manifest number: 15BD
Signing time: Wed 06 Aug 2025 06:01:28 +0000
Manifest this update: Wed 06 Aug 2025 06:01:28 +0000
Manifest next update: Thu 07 Aug 2025 06:01:28 +0000
Files and hashes: 1: lTgJNefooh7DK2Wn_E7X1GgnhSE.crl (hash: HQzEVtXmVCCugXucvUX+GPsBHw6pxwzkAEqQCKQpzDo=)
2: pWYU_3rSNo7EOhyAYaHN6usNBI0.roa (hash: KeYaihRxFR7GfUW9GuvXnSgoYdgkOnmiGNfHnpBGPBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f8:68:d1:ca:da:0a:29:c3:c0:42:8d:28:6c:fe:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95380935e7e8a21ec32b65a7fc4ed7d468278521
Validity
Not Before: Aug 6 06:01:28 2025 GMT
Not After : Aug 7 06:01:28 2025 GMT
Subject: CN=1617cea9cb4c33d2ba0a3d2c68ba873ab822e4f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a6:8e:eb:21:b3:d7:f2:62:83:69:88:d1:ee:
95:eb:f8:08:33:53:50:16:14:9d:a4:bd:ea:3b:a6:
e1:29:5d:ef:b8:ea:15:ff:42:20:50:07:f1:96:d9:
5b:ff:d2:7b:b8:26:80:c4:dc:e9:30:7d:56:a0:fe:
e0:2a:20:a1:be:d4:f9:e9:72:11:35:61:d9:cb:45:
16:4b:c5:b5:53:5d:80:4e:78:d9:d5:22:61:96:e5:
c8:ca:bb:39:8e:f7:bf:0b:f5:91:96:14:b4:ee:cd:
be:2a:da:78:1d:23:44:e4:b7:98:56:f0:42:0b:a8:
86:8b:c8:c2:5c:bc:4e:b6:15:c4:a6:7c:09:8a:c7:
62:f8:d7:62:35:d6:ea:91:c4:79:2c:06:ba:ce:54:
e1:d8:bd:bb:aa:17:d8:e4:e9:18:4f:94:17:3f:8b:
10:1f:0a:52:c9:dd:53:be:1a:03:a2:28:9d:2e:cf:
a9:7a:24:ba:bc:69:3d:fa:cd:b5:9b:ee:68:70:f7:
7c:18:e3:6f:6f:16:26:02:cc:a9:b2:11:bd:e6:a5:
cf:b0:28:06:77:36:1c:b0:aa:a3:44:2e:cc:29:17:
84:3c:f8:ea:c8:d2:dd:61:df:d5:17:d6:7f:87:6a:
18:a7:7a:56:b4:b3:50:3b:63:56:7b:43:fd:72:b5:
69:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:17:CE:A9:CB:4C:33:D2:BA:0A:3D:2C:68:BA:87:3A:B8:22:E4:F9
X509v3 Authority Key Identifier:
keyid:95:38:09:35:E7:E8:A2:1E:C3:2B:65:A7:FC:4E:D7:D4:68:27:85:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:be:67:51:0a:c5:08:0f:d0:33:d7:5e:36:2a:d4:72:21:7b:
30:09:b1:99:45:bc:ae:a3:3c:9a:9b:fe:48:7b:a3:1c:d5:82:
1d:e7:02:87:71:c9:dd:b3:a2:b8:ad:2a:c0:ab:ff:59:65:7c:
6f:06:f8:e6:ed:52:49:c3:00:f7:09:53:d0:77:d6:85:63:94:
1a:08:38:50:90:93:9c:89:c8:a6:49:85:1f:5c:89:90:7c:ac:
9a:f3:36:bc:00:97:e5:a2:95:ba:7f:cb:bd:40:09:9a:b3:ab:
d9:24:8a:1e:07:b1:53:a2:98:e3:4b:90:ca:12:25:b0:02:ba:
32:16:83:18:0e:c0:aa:30:d3:b5:eb:7b:4a:9f:78:1a:24:e2:
fd:28:1a:8c:fa:d4:f6:de:44:ce:d1:34:ab:c2:41:9e:54:a9:
f7:78:61:fd:73:d8:9f:fa:a4:a9:49:0a:cc:71:5c:c5:c4:33:
9e:73:1d:37:f9:d3:4d:7f:3c:4c:19:25:ba:c7:ca:13:db:5f:
9c:7c:25:60:75:1f:34:64:a1:31:71:0a:60:4e:b8:6e:2a:bc:
69:1f:4f:fb:ec:0a:e1:b4:8e:b7:e2:3f:46:dd:5e:20:12:71:
8e:92:ca:86:4d:d1:c5:39:12:52:a0:fd:90:cd:53:04:d0:da:
e4:c3:01:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9+GjRytoKKcPAQo0obP71MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MzgwOTM1ZTdlOGEyMWVjMzJiNjVhN2ZjNGVkN2Q0Njgy
Nzg1MjEwHhcNMjUwODA2MDYwMTI4WhcNMjUwODA3MDYwMTI4WjAzMTEwLwYDVQQD
EygxNjE3Y2VhOWNiNGMzM2QyYmEwYTNkMmM2OGJhODczYWI4MjJlNGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaaO6yGz1/Jig2mI0e6V6/gIM1NQ
FhSdpL3qO6bhKV3vuOoV/0IgUAfxltlb/9J7uCaAxNzpMH1WoP7gKiChvtT56XIR
NWHZy0UWS8W1U12ATnjZ1SJhluXIyrs5jve/C/WRlhS07s2+Ktp4HSNE5LeYVvBC
C6iGi8jCXLxOthXEpnwJisdi+NdiNdbqkcR5LAa6zlTh2L27qhfY5OkYT5QXP4sQ
HwpSyd1TvhoDoiidLs+peiS6vGk9+s21m+5ocPd8GONvbxYmAsypshG95qXPsCgG
dzYcsKqjRC7MKReEPPjqyNLdYd/VF9Z/h2oYp3pWtLNQO2NWe0P9crVp8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBYXzqnLTDPSugo9LGi6hzq4IuT5MB8GA1UdIwQY
MBaAFJU4CTXn6KIewytlp/xO19RoJ4UhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFRnSk5lZm9vaDdESzJXbl9FN1gxR2duaFNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC82MjYzMWItZmRmMy00MTNmLThmMjIt
ZWNlMDg4ZjAxODI3LzEvbFRnSk5lZm9vaDdESzJXbl9FN1gxR2duaFNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC82MjYzMWItZmRmMy00MTNmLThmMjItZWNlMDg4ZjAxODI3
LzEvbFRnSk5lZm9vaDdESzJXbl9FN1gxR2duaFNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAML5nUQrF
CA/QM9deNirUciF7MAmxmUW8rqM8mpv+SHujHNWCHecCh3HJ3bOiuK0qwKv/WWV8
bwb45u1SScMA9wlT0HfWhWOUGgg4UJCTnInIpkmFH1yJkHysmvM2vACX5aKVun/L
vUAJmrOr2SSKHgexU6KY40uQyhIlsAK6MhaDGA7AqjDTtet7Sp94GiTi/SgajPrU
9t5EztE0q8JBnlSp93hh/XPYn/qkqUkKzHFcxcQznnMdN/nTTX88TBklusfKE9tf
nHwlYHUfNGShMXEKYE64biq8aR9P++wK4bSOt+I/Rt1eIBJxjpLKhk3RxTkSUqD9
kM1TBNDa5MMB0g==
-----END CERTIFICATE-----
Generated at Wed Aug 6 12:43:32 2025 by rpki-client