Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft
File: LgO_8-c1I3MjiWRkff2JOyajs0k.mft (raw, json)
Hash identifier: A3GFRnXX2y4nC6+Ak/o+i+9jiFU4jY7FaPpyJ1eJR1E=
Subject key identifier: 52:04:21:52:C0:B9:D5:CA:D2:B5:35:50:A8:A6:43:15:CF:84:37:B0
Authority key identifier: 2E:03:BF:F3:E7:35:23:73:23:89:64:64:7D:FD:89:3B:26:A3:B3:49
Certificate issuer: /CN=2e03bff3e7352373238964647dfd893b26a3b349
Certificate serial: 019872D01407C22CDF9CC81C6BFFDD1BFE07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgO_8-c1I3MjiWRkff2JOyajs0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft
Manifest number: 1615
Signing time: Mon 04 Aug 2025 02:01:35 +0000
Manifest this update: Mon 04 Aug 2025 02:01:35 +0000
Manifest next update: Tue 05 Aug 2025 02:01:35 +0000
Files and hashes: 1: 4Ks29m0KEvqQ2u_x82i2_AGUJYc.roa (hash: LAlVvGEw43G7VBWh8V8Fzw/Vs6vev/GRjzgqnNcn5CU=)
2: LgO_8-c1I3MjiWRkff2JOyajs0k.crl (hash: TADPnLxXenMw6PKMC2i+eH9eYWRnx13IiEUY2M0ugpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/LgO_8-c1I3MjiWRkff2JOyajs0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:d0:14:07:c2:2c:df:9c:c8:1c:6b:ff:dd:1b:fe:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e03bff3e7352373238964647dfd893b26a3b349
Validity
Not Before: Aug 4 02:01:35 2025 GMT
Not After : Aug 5 02:01:35 2025 GMT
Subject: CN=52042152c0b9d5cad2b53550a8a64315cf8437b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8a:82:d2:3b:7f:d6:5e:7f:6a:dd:2b:22:55:
94:db:bc:4b:7d:48:f1:88:8a:70:fd:07:3a:17:17:
39:d1:2c:89:83:69:b9:71:19:a9:c3:8b:2f:9e:2d:
54:f2:a4:cb:68:f7:60:77:d5:75:f2:ce:01:10:68:
bb:58:6b:eb:b2:d9:7f:bf:f4:dc:1b:38:57:d5:fa:
a9:dc:97:71:83:be:80:dc:16:d1:12:0b:9d:73:e4:
9d:17:15:e6:09:2b:7b:65:81:91:22:1d:04:56:67:
c5:1a:bc:9b:25:5b:af:97:cf:de:ff:03:8c:10:99:
c9:5c:38:08:aa:ee:5e:40:69:1c:ac:63:8a:16:34:
05:b0:a6:a5:76:08:2b:78:ea:7d:61:2a:48:89:f2:
23:dd:e3:1c:5d:d2:0e:fe:42:6e:f6:b8:1d:3a:93:
33:87:bd:18:c3:8b:d8:59:7c:b6:a4:9b:fd:a9:a0:
8e:13:16:dd:ea:3a:c7:d0:9a:96:7a:92:83:be:37:
ec:90:ec:3e:ae:fe:a1:74:9a:17:75:10:c0:58:38:
c1:42:85:4d:cf:a8:c8:6b:a5:1e:be:0f:ae:f3:c3:
78:d1:eb:a2:8f:a3:3e:af:0a:21:8f:19:7c:aa:3a:
63:60:4b:7e:29:04:98:0d:8c:19:79:ec:5a:45:3a:
2c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:04:21:52:C0:B9:D5:CA:D2:B5:35:50:A8:A6:43:15:CF:84:37:B0
X509v3 Authority Key Identifier:
keyid:2E:03:BF:F3:E7:35:23:73:23:89:64:64:7D:FD:89:3B:26:A3:B3:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgO_8-c1I3MjiWRkff2JOyajs0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1ac795-2e93-4056-93d9-684e855d7ddc/1/LgO_8-c1I3MjiWRkff2JOyajs0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ef:fb:bb:3f:83:be:0f:3d:19:a6:f6:6f:40:55:a4:70:c7:
ff:23:06:1b:7e:4e:f5:af:ef:c4:1b:80:79:2a:9a:43:75:e7:
0d:05:57:06:60:97:0d:de:81:17:3a:88:1b:22:e1:38:c8:96:
25:21:5f:ce:56:cc:20:25:d6:d0:d5:13:3e:52:7c:db:00:f7:
6b:b2:8d:12:71:9a:23:46:c5:78:95:e1:2a:c7:63:7e:87:27:
42:5d:05:f4:3a:f4:71:4d:06:a5:17:33:92:eb:43:d7:8c:ea:
13:1f:01:97:f1:10:d3:11:6a:0d:b4:eb:83:9c:61:bb:77:d7:
8e:76:39:1f:2c:bf:02:9d:40:92:17:2a:a1:c9:fc:8b:b9:7e:
01:2f:f8:39:56:68:4f:9b:91:f8:6a:a7:59:e0:19:66:b1:f8:
40:df:53:a9:21:b3:70:a3:12:fb:3a:77:02:eb:66:b0:a1:3f:
8d:86:26:ef:eb:9d:19:e4:e0:1c:f5:ab:63:64:b2:46:a6:4b:
6a:b7:68:d8:68:13:19:c5:15:b3:7d:8a:b7:e4:19:c8:9d:b4:
97:3a:1e:2d:e4:12:31:b8:6e:bb:96:f4:d0:c7:39:0a:0e:75:
0a:5f:a6:46:4d:67:37:6a:c2:c3:2b:e4:c4:1f:6b:f7:0c:b2:
c9:7f:0f:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhy0BQHwizfnMgca//dG/4HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMDNiZmYzZTczNTIzNzMyMzg5NjQ2NDdkZmQ4OTNiMjZh
M2IzNDkwHhcNMjUwODA0MDIwMTM1WhcNMjUwODA1MDIwMTM1WjAzMTEwLwYDVQQD
Eyg1MjA0MjE1MmMwYjlkNWNhZDJiNTM1NTBhOGE2NDMxNWNmODQzN2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoqC0jt/1l5/at0rIlWU27xLfUjx
iIpw/Qc6Fxc50SyJg2m5cRmpw4svni1U8qTLaPdgd9V18s4BEGi7WGvrstl/v/Tc
GzhX1fqp3Jdxg76A3BbREgudc+SdFxXmCSt7ZYGRIh0EVmfFGrybJVuvl8/e/wOM
EJnJXDgIqu5eQGkcrGOKFjQFsKaldggreOp9YSpIifIj3eMcXdIO/kJu9rgdOpMz
h70Yw4vYWXy2pJv9qaCOExbd6jrH0JqWepKDvjfskOw+rv6hdJoXdRDAWDjBQoVN
z6jIa6Uevg+u88N40euij6M+rwohjxl8qjpjYEt+KQSYDYwZeexaRTos5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFIEIVLAudXK0rU1UKimQxXPhDewMB8GA1UdIwQY
MBaAFC4Dv/PnNSNzI4lkZH39iTsmo7NJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGdPXzgtYzFJM01qaVdSa2ZmMkpPeWFqczBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8xYWM3OTUtMmU5My00MDU2LTkzZDkt
Njg0ZTg1NWQ3ZGRjLzEvTGdPXzgtYzFJM01qaVdSa2ZmMkpPeWFqczBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8xYWM3OTUtMmU5My00MDU2LTkzZDktNjg0ZTg1NWQ3ZGRj
LzEvTGdPXzgtYzFJM01qaVdSa2ZmMkpPeWFqczBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO+/7uz+D
vg89Gab2b0BVpHDH/yMGG35O9a/vxBuAeSqaQ3XnDQVXBmCXDd6BFzqIGyLhOMiW
JSFfzlbMICXW0NUTPlJ82wD3a7KNEnGaI0bFeJXhKsdjfocnQl0F9Dr0cU0GpRcz
kutD14zqEx8Bl/EQ0xFqDbTrg5xhu3fXjnY5Hyy/Ap1Akhcqocn8i7l+AS/4OVZo
T5uR+GqnWeAZZrH4QN9TqSGzcKMS+zp3AutmsKE/jYYm7+udGeTgHPWrY2SyRqZL
ardo2GgTGcUVs32Kt+QZyJ20lzoeLeQSMbhuu5b00Mc5Cg51Cl+mRk1nN2rCwyvk
xB9r9wyyyX8P9A==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:41 2025 by rpki-client