Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft
File: LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft (raw, json)
Hash identifier: jqvYb/8nvsalxDWHFRZQ8MBTiXVFh/QAO71XmK3PbKI=
Subject key identifier: 70:5C:CC:B1:65:E7:19:D1:D2:68:60:06:58:33:A1:F3:7F:2A:95:58
Authority key identifier: 2C:6D:66:12:43:62:88:0F:5E:4C:54:85:2F:83:76:D2:B9:D1:37:F4
Certificate issuer: /CN=2c6d66124362880f5e4c54852f8376d2b9d137f4
Certificate serial: 01988DD8B73CFEA97D4539ED8E5A9AA1D5BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LG1mEkNiiA9eTFSFL4N20rnRN_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft
Manifest number: 1628
Signing time: Sat 09 Aug 2025 08:00:46 +0000
Manifest this update: Sat 09 Aug 2025 08:00:46 +0000
Manifest next update: Sun 10 Aug 2025 08:00:46 +0000
Files and hashes: 1: C33FXqC7uQt2qAUvryfzquScd9A.roa (hash: KJa1Z8kamyRIOQx92UokNml/luCMeTJPuGt2M/e0fCo=)
2: LG1mEkNiiA9eTFSFL4N20rnRN_Q.crl (hash: cp2fJo0ZpBLDH6FGPKw77bGL4h9NUHCTvLV7XyyenAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/LG1mEkNiiA9eTFSFL4N20rnRN_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:d8:b7:3c:fe:a9:7d:45:39:ed:8e:5a:9a:a1:d5:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c6d66124362880f5e4c54852f8376d2b9d137f4
Validity
Not Before: Aug 9 08:00:46 2025 GMT
Not After : Aug 10 08:00:46 2025 GMT
Subject: CN=705cccb165e719d1d26860065833a1f37f2a9558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6b:3e:58:8c:d6:57:0c:8b:a6:4f:d5:29:07:
2c:e1:59:74:bb:23:42:3f:1e:11:6c:04:42:43:26:
bf:07:e6:28:64:21:ac:ee:ec:8b:06:95:e4:02:8d:
70:52:69:b7:7b:6a:80:b1:28:5d:b9:c9:b1:b8:64:
3c:ca:80:d8:cd:c8:c1:18:be:1f:3a:10:b7:2e:6d:
24:d5:51:c5:b5:7b:84:d7:fc:31:ee:8c:b6:15:21:
50:1d:ff:43:59:35:c2:03:c5:d4:0c:74:c9:18:f8:
ba:88:30:82:76:d5:fd:d1:e9:81:8f:58:28:de:03:
ea:9b:70:0a:af:77:29:2c:35:9f:ab:89:d1:c5:8c:
2c:4c:1c:2a:26:c8:89:da:b5:bb:23:ae:b3:8f:85:
3a:fb:7d:46:9e:83:f3:5e:73:2b:c2:5b:13:d6:95:
55:93:11:2f:d9:22:f2:0d:fe:56:53:d4:74:81:72:
8d:3f:bb:f1:3d:68:2b:81:bd:02:82:c8:cf:7a:bf:
80:bf:21:12:7e:30:0e:66:1c:68:e5:87:b5:3d:23:
1b:e3:6c:a2:ca:d0:e0:a7:fb:a2:b7:bb:a9:5d:6f:
3b:7f:a0:76:03:bf:96:ae:1a:3c:39:4f:d7:86:73:
e1:fc:08:f8:29:f8:2e:7a:92:a0:e3:41:91:c6:cf:
04:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:5C:CC:B1:65:E7:19:D1:D2:68:60:06:58:33:A1:F3:7F:2A:95:58
X509v3 Authority Key Identifier:
keyid:2C:6D:66:12:43:62:88:0F:5E:4C:54:85:2F:83:76:D2:B9:D1:37:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LG1mEkNiiA9eTFSFL4N20rnRN_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:4f:f2:1b:cc:43:ac:d2:02:e8:c7:8f:4e:47:e8:f9:82:d9:
f8:17:9a:72:c4:7b:89:59:2f:b0:09:d5:e3:a3:5e:d0:0d:a1:
95:fa:33:0a:6b:54:96:6f:53:6b:84:55:a8:71:9d:4a:dc:b2:
3e:fc:47:80:d1:75:56:8d:58:dd:52:0e:a6:ab:28:2b:ad:44:
d9:35:ad:cd:05:64:fb:25:70:d5:9b:7d:22:1b:01:27:ac:d1:
ec:21:e4:0a:68:57:ae:a3:41:31:e5:b9:62:45:d9:7b:bc:f2:
65:38:6a:f7:a3:9b:00:b7:eb:79:63:fb:97:d8:69:b4:da:76:
6c:76:06:73:e8:36:44:15:66:bd:b7:5b:16:02:81:e0:80:12:
a7:51:45:13:3d:a0:d8:12:19:9d:17:06:55:55:8f:40:f2:e3:
da:61:57:4c:4a:02:fd:de:bf:4b:8c:ca:71:53:da:f9:de:9a:
2e:d8:05:94:99:d2:46:dc:6f:f3:03:c3:3b:6e:39:5b:bf:d5:
e2:9d:f4:dd:ec:fb:a6:73:3e:0c:ea:1b:96:f3:87:4b:63:69:
b8:dc:67:24:ae:26:b5:9f:9f:17:38:04:fa:33:90:51:2c:f5:
62:21:18:c5:4f:fa:f3:fc:57:26:42:d3:18:4b:f0:c1:1a:ad:
10:c2:c0:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiN2Lc8/ql9RTntjlqaodW9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjNmQ2NjEyNDM2Mjg4MGY1ZTRjNTQ4NTJmODM3NmQyYjlk
MTM3ZjQwHhcNMjUwODA5MDgwMDQ2WhcNMjUwODEwMDgwMDQ2WjAzMTEwLwYDVQQD
Eyg3MDVjY2NiMTY1ZTcxOWQxZDI2ODYwMDY1ODMzYTFmMzdmMmE5NTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjms+WIzWVwyLpk/VKQcs4Vl0uyNC
Px4RbARCQya/B+YoZCGs7uyLBpXkAo1wUmm3e2qAsShducmxuGQ8yoDYzcjBGL4f
OhC3Lm0k1VHFtXuE1/wx7oy2FSFQHf9DWTXCA8XUDHTJGPi6iDCCdtX90emBj1go
3gPqm3AKr3cpLDWfq4nRxYwsTBwqJsiJ2rW7I66zj4U6+31GnoPzXnMrwlsT1pVV
kxEv2SLyDf5WU9R0gXKNP7vxPWgrgb0CgsjPer+AvyESfjAOZhxo5Ye1PSMb42yi
ytDgp/uit7upXW87f6B2A7+Wrho8OU/XhnPh/Aj4KfguepKg40GRxs8EkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHBczLFl5xnR0mhgBlgzofN/KpVYMB8GA1UdIwQY
MBaAFCxtZhJDYogPXkxUhS+DdtK50Tf0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEcxbUVrTmlpQTllVEZTRkw0TjIwcm5STl9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS83MWZlYTEtMzkxOS00MmY3LTllMDMt
ZTQwMzBmYTFiMDRhLzEvTEcxbUVrTmlpQTllVEZTRkw0TjIwcm5STl9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS83MWZlYTEtMzkxOS00MmY3LTllMDMtZTQwMzBmYTFiMDRh
LzEvTEcxbUVrTmlpQTllVEZTRkw0TjIwcm5STl9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALk/yG8xD
rNIC6MePTkfo+YLZ+BeacsR7iVkvsAnV46Ne0A2hlfozCmtUlm9Ta4RVqHGdStyy
PvxHgNF1Vo1Y3VIOpqsoK61E2TWtzQVk+yVw1Zt9IhsBJ6zR7CHkCmhXrqNBMeW5
YkXZe7zyZThq96ObALfreWP7l9hptNp2bHYGc+g2RBVmvbdbFgKB4IASp1FFEz2g
2BIZnRcGVVWPQPLj2mFXTEoC/d6/S4zKcVPa+d6aLtgFlJnSRtxv8wPDO245W7/V
4p303ez7pnM+DOoblvOHS2NpuNxnJK4mtZ+fFzgE+jOQUSz1YiEYxU/68/xXJkLT
GEvwwRqtEMLA+A==
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:15:59 2025 by rpki-client