
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft
File: lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft (raw, json)
Hash identifier: mGIM4SOaTxCgef9QHW9U/R743NN8V+IrjxZAiLcUyzk=
Subject key identifier: 3D:DF:E2:8A:B9:8B:34:E0:7F:D9:81:16:6D:EB:03:26:02:8C:58:51
Authority key identifier: 94:69:D3:50:6B:77:C1:AE:F5:B1:37:0D:AA:2B:B4:BC:E3:80:6C:94
Certificate issuer: /CN=9469d3506b77c1aef5b1370daa2bb4bce3806c94
Certificate serial: 0198849F1D397155E3D0A5DF1E87356DFC77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGnTUGt3wa71sTcNqiu0vOOAbJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft
Manifest number: 08DF
Signing time: Thu 07 Aug 2025 13:01:16 +0000
Manifest this update: Thu 07 Aug 2025 13:01:16 +0000
Manifest next update: Fri 08 Aug 2025 13:01:16 +0000
Files and hashes: 1: lGnTUGt3wa71sTcNqiu0vOOAbJQ.crl (hash: YFwWMguMpJl1pwLfwJ6kk9yHbYrLh6sVzVaYa9oZljQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lGnTUGt3wa71sTcNqiu0vOOAbJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 13:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:9f:1d:39:71:55:e3:d0:a5:df:1e:87:35:6d:fc:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9469d3506b77c1aef5b1370daa2bb4bce3806c94
Validity
Not Before: Aug 7 13:01:16 2025 GMT
Not After : Aug 8 13:01:16 2025 GMT
Subject: CN=3ddfe28ab98b34e07fd981166deb0326028c5851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:74:aa:8b:9c:64:a4:d1:37:bf:5e:45:08:4e:
2b:b9:d9:fb:7d:2e:fd:d3:9f:59:f7:8e:18:b4:6d:
cc:71:67:3b:e0:b1:fa:ab:b3:be:52:80:be:ea:7c:
40:d7:75:25:79:2c:05:a4:41:0a:aa:81:c5:1f:5b:
36:71:05:10:fc:4a:b8:a8:40:a8:58:cc:10:be:f1:
42:ee:c7:6e:4e:4b:9d:03:4c:e8:22:cb:39:bd:2c:
f9:46:3b:6a:cc:27:df:d8:03:71:24:64:c8:a7:df:
a0:aa:ed:34:bb:80:86:05:7a:97:c3:d4:56:98:2d:
b5:7d:98:e5:42:ae:80:8f:f6:73:ad:c3:bd:b5:c2:
fe:39:f6:32:da:e4:3f:fd:22:e1:04:89:4b:25:cb:
9d:c2:8c:0a:4f:7f:c1:7f:a0:8e:78:62:52:8f:46:
9f:5b:b9:1f:04:73:ce:7e:5b:64:4c:b5:cb:87:3c:
5d:b4:1d:ab:04:04:b8:c3:f2:c2:db:11:4d:94:80:
6b:9f:45:ec:fe:da:80:b2:d5:b4:b1:d3:e9:bd:4b:
ef:97:d1:a3:6d:bc:87:f7:71:e1:02:48:24:94:da:
e7:a1:24:82:09:d7:40:65:0e:23:ce:cd:c1:cd:34:
30:61:59:5f:d3:82:77:dc:b7:ee:3b:95:16:fc:0b:
5c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:DF:E2:8A:B9:8B:34:E0:7F:D9:81:16:6D:EB:03:26:02:8C:58:51
X509v3 Authority Key Identifier:
keyid:94:69:D3:50:6B:77:C1:AE:F5:B1:37:0D:AA:2B:B4:BC:E3:80:6C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGnTUGt3wa71sTcNqiu0vOOAbJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/db48a4-942b-44d1-b1ba-7116a30da945/1/lGnTUGt3wa71sTcNqiu0vOOAbJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:76:ac:ec:43:7c:62:0f:53:ed:80:6e:04:5d:0f:14:43:34:
99:8c:e9:48:81:a2:3c:78:f3:61:b7:78:36:34:e2:8f:bf:ec:
3e:ff:c5:79:80:e1:fe:f1:0f:64:22:9c:6d:5e:95:64:15:4e:
8f:b5:12:07:86:29:a6:fc:54:3d:3d:d3:2f:79:af:c9:96:f3:
26:b8:64:7f:d9:a1:5d:36:f2:14:df:7c:3b:25:c4:65:58:ef:
22:3a:1b:ee:d0:6d:26:33:88:1f:91:ed:8a:4b:75:4a:35:34:
eb:c2:71:5b:30:d8:9d:b6:6c:8a:ac:31:92:12:58:9b:38:8f:
11:bd:a3:33:db:7c:06:ce:fc:d1:1c:0e:26:42:2f:a9:57:9f:
dc:cf:6c:24:44:5c:4e:8f:4e:a2:56:a7:96:dc:e8:71:7c:99:
b1:76:af:72:4d:34:85:f5:d7:09:c1:20:75:e1:4a:71:53:0d:
75:83:0c:cc:04:d2:cb:b2:f3:3e:62:83:62:00:bd:4b:65:2e:
bd:14:7b:91:fd:d3:2a:a4:d0:2b:7c:c8:eb:01:c8:5c:fd:0b:
4d:15:31:8f:67:64:e3:9f:a3:59:9c:b7:3a:53:bd:f8:a3:4a:
94:f5:e4:5b:cc:aa:61:eb:d7:ac:62:33:ad:fc:69:6e:ff:21:
07:83:dd:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiEnx05cVXj0KXfHoc1bfx3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NjlkMzUwNmI3N2MxYWVmNWIxMzcwZGFhMmJiNGJjZTM4
MDZjOTQwHhcNMjUwODA3MTMwMTE2WhcNMjUwODA4MTMwMTE2WjAzMTEwLwYDVQQD
EygzZGRmZTI4YWI5OGIzNGUwN2ZkOTgxMTY2ZGViMDMyNjAyOGM1ODUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnSqi5xkpNE3v15FCE4rudn7fS79
059Z944YtG3McWc74LH6q7O+UoC+6nxA13UleSwFpEEKqoHFH1s2cQUQ/Eq4qECo
WMwQvvFC7sduTkudA0zoIss5vSz5RjtqzCff2ANxJGTIp9+gqu00u4CGBXqXw9RW
mC21fZjlQq6Aj/ZzrcO9tcL+OfYy2uQ//SLhBIlLJcudwowKT3/Bf6COeGJSj0af
W7kfBHPOfltkTLXLhzxdtB2rBAS4w/LC2xFNlIBrn0Xs/tqAstW0sdPpvUvvl9Gj
bbyH93HhAkgklNrnoSSCCddAZQ4jzs3BzTQwYVlf04J33LfuO5UW/AtcyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD3f4oq5izTgf9mBFm3rAyYCjFhRMB8GA1UdIwQY
MBaAFJRp01Brd8Gu9bE3DaortLzjgGyUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEduVFVHdDN3YTcxc1RjTnFpdTB2T09BYkpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9kYjQ4YTQtOTQyYi00NGQxLWIxYmEt
NzExNmEzMGRhOTQ1LzEvbEduVFVHdDN3YTcxc1RjTnFpdTB2T09BYkpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9kYjQ4YTQtOTQyYi00NGQxLWIxYmEtNzExNmEzMGRhOTQ1
LzEvbEduVFVHdDN3YTcxc1RjTnFpdTB2T09BYkpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE3as7EN8
Yg9T7YBuBF0PFEM0mYzpSIGiPHjzYbd4NjTij7/sPv/FeYDh/vEPZCKcbV6VZBVO
j7USB4YppvxUPT3TL3mvyZbzJrhkf9mhXTbyFN98OyXEZVjvIjob7tBtJjOIH5Ht
ikt1SjU068JxWzDYnbZsiqwxkhJYmziPEb2jM9t8Bs780RwOJkIvqVef3M9sJERc
To9OolanltzocXyZsXavck00hfXXCcEgdeFKcVMNdYMMzATSy7LzPmKDYgC9S2Uu
vRR7kf3TKqTQK3zI6wHIXP0LTRUxj2dk45+jWZy3OlO9+KNKlPXkW8yqYevXrGIz
rfxpbv8hB4PdEg==
-----END CERTIFICATE-----
Generated at Thu Aug 7 20:15:45 2025 by rpki-client