Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/ee5314-cc34-465e-ab61-664267ed6a7e/1/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.mft
File: Lxs59_Cp5iqgYEm4zKMNIvUtBDU.mft (raw, json)
Hash identifier: U2/StpldX8kUukxjNvKtVT0mlsTsHthUZ4EwY/8J6rM=
Subject key identifier: AB:7A:E6:EB:AB:2A:42:33:88:FA:2B:EA:B4:ED:27:68:F2:3B:5A:7C
Authority key identifier: 2F:1B:39:F7:F0:A9:E6:2A:A0:60:49:B8:CC:A3:0D:22:F5:2D:04:35
Certificate issuer: /CN=2f1b39f7f0a9e62aa06049b8cca30d22f52d0435
Certificate serial: 01988CFE467BDA58DF4750540C8999A56676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/ee5314-cc34-465e-ab61-664267ed6a7e/1/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.mft
Manifest number: 0A83
Signing time: Sat 09 Aug 2025 04:02:11 +0000
Manifest this update: Sat 09 Aug 2025 04:02:11 +0000
Manifest next update: Sun 10 Aug 2025 04:02:11 +0000
Files and hashes: 1: Lxs59_Cp5iqgYEm4zKMNIvUtBDU.crl (hash: gydjOkMXpXubpfInsJlYpEXpq31/zhsX93S3R6zj4+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/ee5314-cc34-465e-ab61-664267ed6a7e/1/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/ee5314-cc34-465e-ab61-664267ed6a7e/1/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fe:46:7b:da:58:df:47:50:54:0c:89:99:a5:66:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f1b39f7f0a9e62aa06049b8cca30d22f52d0435
Validity
Not Before: Aug 9 04:02:11 2025 GMT
Not After : Aug 10 04:02:11 2025 GMT
Subject: CN=ab7ae6ebab2a423388fa2beab4ed2768f23b5a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f3:1d:fc:8b:9c:4c:39:0a:ab:fa:a2:76:6c:
23:3e:84:e2:20:7f:84:28:4e:e5:93:80:c7:53:5d:
c2:4b:e9:4a:5f:ec:df:63:c7:b0:2b:98:c8:2c:a8:
48:e5:d4:a9:5b:5d:28:5e:75:bb:af:91:5d:3e:3b:
df:df:85:23:97:e6:96:f1:fa:92:da:1e:81:51:d3:
f5:f5:83:fa:8d:e9:7d:14:55:7e:80:3c:37:e2:d5:
a4:4a:99:bb:02:ba:69:18:1a:4d:49:fa:7f:5a:6c:
2c:57:74:f2:77:18:47:26:51:c9:8f:bf:84:08:87:
70:b6:94:99:1a:a1:42:fc:3b:98:b6:6f:13:07:05:
cc:7a:8f:9b:5e:0c:94:ad:e7:6e:c8:77:27:bb:45:
3c:21:f4:b7:fe:66:79:5d:f1:62:fb:f4:dd:0f:96:
9c:18:42:c4:e6:b9:89:af:87:a8:b8:f0:38:b9:fc:
3c:7d:6f:2b:d8:dc:6f:15:a1:f5:b4:ea:89:75:95:
24:4b:02:f0:a4:6a:7d:36:c3:36:8b:d9:7d:97:88:
c8:53:64:23:93:aa:4e:13:5f:a5:64:11:6c:8b:24:
36:6f:32:bb:92:b9:d5:80:48:da:55:00:13:e0:7b:
e3:c8:08:c1:92:61:94:02:90:b3:a1:6c:31:dc:77:
bc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:7A:E6:EB:AB:2A:42:33:88:FA:2B:EA:B4:ED:27:68:F2:3B:5A:7C
X509v3 Authority Key Identifier:
keyid:2F:1B:39:F7:F0:A9:E6:2A:A0:60:49:B8:CC:A3:0D:22:F5:2D:04:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ee5314-cc34-465e-ab61-664267ed6a7e/1/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ee5314-cc34-465e-ab61-664267ed6a7e/1/Lxs59_Cp5iqgYEm4zKMNIvUtBDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:1a:a8:e6:e4:9a:45:2c:c4:fc:1e:88:c0:92:e4:85:0c:13:
b3:66:b9:a6:08:b5:c9:34:db:c2:b9:41:76:2f:a4:f2:ac:55:
a3:9e:5a:1c:32:38:ec:42:37:05:19:8b:f9:e2:c8:6e:9d:7a:
e3:a8:08:06:bc:0f:63:d3:07:47:4b:e1:04:48:71:01:4b:33:
ac:b5:9c:3f:4b:1e:ba:b6:95:81:3a:71:c5:c3:f9:d3:7e:1a:
d6:14:6c:35:39:70:eb:71:57:94:9c:bb:9c:6a:4e:b1:6a:da:
4f:61:4a:7c:e0:51:b4:bb:e5:e3:34:5a:a3:6c:4b:05:94:b9:
1e:81:76:8f:7c:0f:d1:21:5a:5b:28:e1:ac:79:24:30:e6:c0:
77:fe:5d:f4:4b:43:df:2e:c4:86:54:e5:2d:14:c5:ad:eb:92:
1f:a7:93:01:a3:18:fb:df:f4:c3:cc:29:e3:af:9e:91:5c:0d:
5c:59:79:b8:c5:f5:88:44:3e:f8:4f:9e:0a:92:59:92:45:8a:
b5:90:da:38:e0:6d:c9:e8:31:39:1c:26:b7:49:bd:99:d2:76:
f2:5b:c2:10:a8:30:e5:b7:d5:ba:31:a7:c3:2b:41:80:bd:50:
6d:de:b6:3e:61:31:10:54:ea:fc:ca:c6:6e:14:bd:fd:f3:7c:
68:2f:f4:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiM/kZ72ljfR1BUDImZpWZ2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMWIzOWY3ZjBhOWU2MmFhMDYwNDliOGNjYTMwZDIyZjUy
ZDA0MzUwHhcNMjUwODA5MDQwMjExWhcNMjUwODEwMDQwMjExWjAzMTEwLwYDVQQD
EyhhYjdhZTZlYmFiMmE0MjMzODhmYTJiZWFiNGVkMjc2OGYyM2I1YTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/Md/IucTDkKq/qidmwjPoTiIH+E
KE7lk4DHU13CS+lKX+zfY8ewK5jILKhI5dSpW10oXnW7r5FdPjvf34Ujl+aW8fqS
2h6BUdP19YP6jel9FFV+gDw34tWkSpm7ArppGBpNSfp/WmwsV3TydxhHJlHJj7+E
CIdwtpSZGqFC/DuYtm8TBwXMeo+bXgyUreduyHcnu0U8IfS3/mZ5XfFi+/TdD5ac
GELE5rmJr4eouPA4ufw8fW8r2NxvFaH1tOqJdZUkSwLwpGp9NsM2i9l9l4jIU2Qj
k6pOE1+lZBFsiyQ2bzK7krnVgEjaVQAT4HvjyAjBkmGUApCzoWwx3He8XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKt65uurKkIziPor6rTtJ2jyO1p8MB8GA1UdIwQY
MBaAFC8bOffwqeYqoGBJuMyjDSL1LQQ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHhzNTlfQ3A1aXFnWUVtNHpLTU5JdlV0QkRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9lZTUzMTQtY2MzNC00NjVlLWFiNjEt
NjY0MjY3ZWQ2YTdlLzEvTHhzNTlfQ3A1aXFnWUVtNHpLTU5JdlV0QkRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9lZTUzMTQtY2MzNC00NjVlLWFiNjEtNjY0MjY3ZWQ2YTdl
LzEvTHhzNTlfQ3A1aXFnWUVtNHpLTU5JdlV0QkRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXhqo5uSa
RSzE/B6IwJLkhQwTs2a5pgi1yTTbwrlBdi+k8qxVo55aHDI47EI3BRmL+eLIbp16
46gIBrwPY9MHR0vhBEhxAUszrLWcP0seuraVgTpxxcP5034a1hRsNTlw63FXlJy7
nGpOsWraT2FKfOBRtLvl4zRao2xLBZS5HoF2j3wP0SFaWyjhrHkkMObAd/5d9EtD
3y7EhlTlLRTFreuSH6eTAaMY+9/0w8wp46+ekVwNXFl5uMX1iEQ++E+eCpJZkkWK
tZDaOOBtyegxORwmt0m9mdJ28lvCEKgw5bfVujGnwytBgL1Qbd62PmExEFTq/MrG
bhS9/fN8aC/0fQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:48:34 2025 by rpki-client