Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
File: lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft (raw, json)
Hash identifier: 4qZgHwyAjUpeCu+Il6TIb61JTedIZsBSLJ5L7jijsmM=
Subject key identifier: 2B:7C:00:28:AF:D6:37:48:6D:59:62:4C:59:77:C1:14:DA:F5:BD:A7
Authority key identifier: 95:77:34:5D:FC:C9:34:78:C5:FF:22:1D:48:2E:E4:C9:84:83:F9:08
Certificate issuer: /CN=9577345dfcc93478c5ff221d482ee4c98483f908
Certificate serial: 01988B46108E4BE3CD429BC30E80BF490ACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
Manifest number: 0135
Signing time: Fri 08 Aug 2025 20:01:21 +0000
Manifest this update: Fri 08 Aug 2025 20:01:21 +0000
Manifest next update: Sat 09 Aug 2025 20:01:21 +0000
Files and hashes: 1: 6Uqj3qB__xu3P3uEygfv-bB5aGM.roa (hash: DA+xFEu9e7gbATHhCec3WbWJPfAhFTSBmNWKRbMDyro=)
2: lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl (hash: PH9C3RLIuhuZ+OL1SaVXVOEmvEreOlxbxvjHLojVRQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:46:10:8e:4b:e3:cd:42:9b:c3:0e:80:bf:49:0a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9577345dfcc93478c5ff221d482ee4c98483f908
Validity
Not Before: Aug 8 20:01:21 2025 GMT
Not After : Aug 9 20:01:21 2025 GMT
Subject: CN=2b7c0028afd637486d59624c5977c114daf5bda7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:58:17:46:63:92:55:24:a9:e0:ba:33:6f:50:
6c:0e:d3:e7:1a:29:2f:ef:2d:ec:26:c9:b8:f1:e5:
1f:ac:73:fb:b3:3d:93:cf:ba:54:7b:c9:98:5d:6d:
1f:53:2e:23:8a:1d:2f:9e:08:69:22:71:e8:aa:af:
10:40:b4:ed:57:60:43:c0:2d:a8:2f:26:e6:29:a3:
7b:73:2e:ec:53:ad:a0:df:0f:01:47:9a:50:b1:d2:
9a:e3:e8:a1:94:7e:c0:ba:59:98:1d:b5:d3:c9:cb:
b3:c9:6e:d9:59:9f:5b:b8:6c:ce:e1:cb:ee:c3:ba:
c7:88:28:9f:05:1c:bd:8c:15:49:3b:b9:68:06:f4:
ed:33:fb:43:d9:56:08:5f:94:6e:38:65:88:27:56:
32:de:b4:72:4e:e0:92:b9:ab:ad:2d:fd:ff:17:e1:
61:8b:50:dd:92:c3:da:26:c2:51:a6:47:d2:25:97:
8d:76:c7:cd:e9:69:71:02:fb:21:c7:21:48:19:1c:
0e:3a:46:1d:74:d3:0f:8e:34:da:af:48:b8:be:fe:
29:71:06:23:01:69:be:d7:5f:d3:c1:16:ef:85:d1:
d1:76:f5:e4:99:2a:b5:db:1c:34:05:cb:85:e1:82:
aa:9d:2b:f9:bb:da:e2:2f:59:c7:5c:71:38:cb:d5:
91:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:7C:00:28:AF:D6:37:48:6D:59:62:4C:59:77:C1:14:DA:F5:BD:A7
X509v3 Authority Key Identifier:
keyid:95:77:34:5D:FC:C9:34:78:C5:FF:22:1D:48:2E:E4:C9:84:83:F9:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:40:e2:ca:82:46:23:d8:60:0e:72:de:af:05:ea:26:ec:59:
99:2c:15:e0:be:b6:15:96:71:1d:d0:00:ad:e9:5a:d0:7e:6d:
c1:40:05:c7:b0:72:08:af:e9:07:bd:14:c5:7b:d2:dd:c3:4e:
3b:b0:50:a1:9e:26:dd:f9:97:52:f6:71:11:5a:d1:59:8b:62:
c6:27:ea:3d:a7:0a:0e:92:7d:84:cc:91:9a:da:35:4e:f1:cc:
f3:0e:2e:11:cb:17:f6:80:e7:a8:2a:42:0c:44:95:9f:af:84:
b5:6e:36:d4:23:71:e5:9b:dc:3d:16:bb:65:f0:e2:14:d6:f8:
c5:f4:31:34:75:d0:12:5f:ad:0c:a8:6f:f8:e1:60:d1:58:b8:
1c:26:25:40:09:8f:e6:f5:7f:a3:f7:2f:bd:eb:43:cf:17:3e:
d5:91:c5:fd:4e:14:4c:eb:17:82:73:21:e8:ed:09:17:9d:41:
ff:1d:40:a5:f3:19:4d:6f:4c:e5:4a:02:69:78:1e:a0:a1:f6:
34:ea:0c:5c:ed:95:1d:19:30:b7:19:fe:8d:94:5d:fa:8c:61:
33:86:6d:f2:e6:be:e3:50:f2:7d:1e:02:e2:96:e7:93:cb:85:
c5:4d:b2:0f:63:d5:8f:3b:d1:e3:79:c9:dc:42:bf:b2:00:a5:
ad:50:97:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLRhCOS+PNQpvDDoC/SQrMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NzczNDVkZmNjOTM0NzhjNWZmMjIxZDQ4MmVlNGM5ODQ4
M2Y5MDgwHhcNMjUwODA4MjAwMTIxWhcNMjUwODA5MjAwMTIxWjAzMTEwLwYDVQQD
EygyYjdjMDAyOGFmZDYzNzQ4NmQ1OTYyNGM1OTc3YzExNGRhZjViZGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFgXRmOSVSSp4Lozb1BsDtPnGikv
7y3sJsm48eUfrHP7sz2Tz7pUe8mYXW0fUy4jih0vnghpInHoqq8QQLTtV2BDwC2o
LybmKaN7cy7sU62g3w8BR5pQsdKa4+ihlH7AulmYHbXTycuzyW7ZWZ9buGzO4cvu
w7rHiCifBRy9jBVJO7loBvTtM/tD2VYIX5RuOGWIJ1Yy3rRyTuCSuautLf3/F+Fh
i1DdksPaJsJRpkfSJZeNdsfN6WlxAvshxyFIGRwOOkYddNMPjjTar0i4vv4pcQYj
AWm+11/TwRbvhdHRdvXkmSq12xw0BcuF4YKqnSv5u9riL1nHXHE4y9WREQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCt8ACiv1jdIbVliTFl3wRTa9b2nMB8GA1UdIwQY
MBaAFJV3NF38yTR4xf8iHUgu5MmEg/kIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFhjMFhmekpOSGpGX3lJZFNDN2t5WVNELVFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9iMTZmNjYtMmFmNC00NjNlLTk3ODUt
NDMzZjVmYTRmOTAxLzEvbFhjMFhmekpOSGpGX3lJZFNDN2t5WVNELVFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9iMTZmNjYtMmFmNC00NjNlLTk3ODUtNDMzZjVmYTRmOTAx
LzEvbFhjMFhmekpOSGpGX3lJZFNDN2t5WVNELVFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV0DiyoJG
I9hgDnLerwXqJuxZmSwV4L62FZZxHdAArela0H5twUAFx7ByCK/pB70UxXvS3cNO
O7BQoZ4m3fmXUvZxEVrRWYtixifqPacKDpJ9hMyRmto1TvHM8w4uEcsX9oDnqCpC
DESVn6+EtW421CNx5ZvcPRa7ZfDiFNb4xfQxNHXQEl+tDKhv+OFg0Vi4HCYlQAmP
5vV/o/cvvetDzxc+1ZHF/U4UTOsXgnMh6O0JF51B/x1ApfMZTW9M5UoCaXgeoKH2
NOoMXO2VHRkwtxn+jZRd+oxhM4Zt8ua+41DyfR4C4pbnk8uFxU2yD2PVjzvR43nJ
3EK/sgClrVCXzg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 00:59:28 2025 by rpki-client