Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft
File: LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft (raw, json)
Hash identifier: wOPaTrhEg7OgWYGjLu5dACx5ClSoNuluGG3sX4zJQms=
Subject key identifier: 16:0F:93:23:C9:FB:06:A9:51:C8:9C:B8:04:9D:04:43:9A:AC:70:73
Authority key identifier: 2D:FC:54:D5:54:3E:12:48:4B:6B:AB:2F:DC:39:9A:8F:52:95:78:7C
Certificate issuer: /CN=2dfc54d5543e12484b6bab2fdc399a8f5295787c
Certificate serial: 019879E4704D7BDCA8CE64F44EE3DC8D0469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft
Manifest number: 0391
Signing time: Tue 05 Aug 2025 11:01:10 +0000
Manifest this update: Tue 05 Aug 2025 11:01:10 +0000
Manifest next update: Wed 06 Aug 2025 11:01:10 +0000
Files and hashes: 1: LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.crl (hash: HqdWs7gvBiCdNp23/392xB0klMfG4AgzQjOC6nu2qQs=)
2: fQ0Sre67u9FqAYj17x6CK1Kn0s0.roa (hash: gbYNt5MQ+KrOgley7XtqGDbUm1YLGIimwaWi/r+Sqf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 11:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:e4:70:4d:7b:dc:a8:ce:64:f4:4e:e3:dc:8d:04:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dfc54d5543e12484b6bab2fdc399a8f5295787c
Validity
Not Before: Aug 5 11:01:10 2025 GMT
Not After : Aug 6 11:01:10 2025 GMT
Subject: CN=160f9323c9fb06a951c89cb8049d04439aac7073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:58:2e:93:3a:7a:8b:d5:49:c3:48:27:df:1b:
8f:b2:8f:30:5c:a5:3c:23:73:38:a4:bc:e4:0d:08:
57:f0:26:2f:1f:b4:1b:14:8d:13:02:77:c0:26:3e:
9d:05:aa:30:f0:ca:82:4d:92:6a:2f:d3:ca:04:4a:
a4:96:1c:c2:f4:8b:c2:02:bc:6f:03:e8:95:d4:35:
80:28:9d:02:8e:8b:b2:80:d2:be:82:4f:5e:8f:73:
9f:8b:53:99:31:1d:f3:7f:1e:d4:87:da:cb:0f:00:
ef:b5:1b:e8:fa:cd:6d:4b:c1:2d:14:7c:df:6f:52:
96:c5:c0:6a:b6:d7:4a:bd:21:42:f4:ca:a0:eb:ea:
d0:01:cd:63:bc:62:29:b3:8d:26:55:91:d2:6c:3c:
da:56:3a:e6:0b:ce:63:13:58:31:7f:b2:ec:9b:c6:
dc:2c:24:a1:2e:f9:b1:d6:ff:09:50:83:fa:37:cf:
df:40:fc:02:4a:99:35:b3:36:db:cd:f4:2e:73:46:
1f:b5:5f:25:02:a9:57:b6:21:d0:ed:48:ed:d3:ee:
20:53:0f:e0:e2:f9:e1:ff:4a:d9:0a:9f:69:aa:2f:
93:63:d9:55:2f:6c:ca:4a:91:96:ab:4b:d7:fd:15:
cb:8e:e9:57:3f:aa:ed:53:b5:f4:ba:b1:8c:23:a2:
c6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:0F:93:23:C9:FB:06:A9:51:C8:9C:B8:04:9D:04:43:9A:AC:70:73
X509v3 Authority Key Identifier:
keyid:2D:FC:54:D5:54:3E:12:48:4B:6B:AB:2F:DC:39:9A:8F:52:95:78:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b6b9c4-82df-4ea6-aefc-70644e8f3641/1/LfxU1VQ-EkhLa6sv3Dmaj1KVeHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:10:44:96:85:9e:c5:b5:97:c6:37:e4:d8:82:1b:37:73:43:
a1:d1:b9:7a:0e:9a:d2:17:25:fc:4c:b1:36:36:7f:48:7b:bc:
34:f1:93:a2:84:67:07:f1:aa:cf:34:26:fa:e9:34:a0:6f:b9:
fe:c7:66:67:c2:5f:7b:a0:fe:d6:74:6d:a2:de:35:1d:12:2e:
e4:7d:f9:38:34:88:f9:ed:1d:ca:63:a6:aa:39:67:a0:5a:e1:
c5:36:85:34:6f:e8:97:e2:3d:67:ac:89:9f:70:3a:f3:5f:f2:
9b:b8:74:c4:03:f0:14:05:4d:29:00:85:44:88:b0:06:4f:9c:
05:78:da:57:45:fb:ce:05:10:52:b3:67:61:5a:4e:c0:da:9e:
2b:7d:ab:9b:95:29:02:1b:93:65:f1:cf:55:df:64:85:0e:7c:
02:db:ae:ea:00:85:02:c1:48:ff:d7:29:cc:3b:67:34:e2:f2:
3c:d2:eb:26:52:27:1d:36:4a:53:5a:76:ec:ee:c3:14:0a:84:
6e:f9:8d:29:2c:fa:e5:69:26:e8:36:7e:7c:6e:35:d9:69:dd:
57:2c:96:de:11:35:9b:af:cd:a3:3b:f9:b8:c3:b3:a0:0e:33:
61:f7:8c:3b:52:f9:a7:e0:21:b7:97:6b:63:51:cf:cd:6d:ac:
ac:cb:05:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh55HBNe9yozmT0TuPcjQRpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkZmM1NGQ1NTQzZTEyNDg0YjZiYWIyZmRjMzk5YThmNTI5
NTc4N2MwHhcNMjUwODA1MTEwMTEwWhcNMjUwODA2MTEwMTEwWjAzMTEwLwYDVQQD
EygxNjBmOTMyM2M5ZmIwNmE5NTFjODljYjgwNDlkMDQ0MzlhYWM3MDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVgukzp6i9VJw0gn3xuPso8wXKU8
I3M4pLzkDQhX8CYvH7QbFI0TAnfAJj6dBaow8MqCTZJqL9PKBEqklhzC9IvCArxv
A+iV1DWAKJ0CjouygNK+gk9ej3Ofi1OZMR3zfx7Uh9rLDwDvtRvo+s1tS8EtFHzf
b1KWxcBqttdKvSFC9Mqg6+rQAc1jvGIps40mVZHSbDzaVjrmC85jE1gxf7Lsm8bc
LCShLvmx1v8JUIP6N8/fQPwCSpk1szbbzfQuc0YftV8lAqlXtiHQ7Ujt0+4gUw/g
4vnh/0rZCp9pqi+TY9lVL2zKSpGWq0vX/RXLjulXP6rtU7X0urGMI6LG2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBYPkyPJ+wapUcicuASdBEOarHBzMB8GA1UdIwQY
MBaAFC38VNVUPhJIS2urL9w5mo9SlXh8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGZ4VTFWUS1Fa2hMYTZzdjNEbWFqMUtWZUh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9iNmI5YzQtODJkZi00ZWE2LWFlZmMt
NzA2NDRlOGYzNjQxLzEvTGZ4VTFWUS1Fa2hMYTZzdjNEbWFqMUtWZUh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9iNmI5YzQtODJkZi00ZWE2LWFlZmMtNzA2NDRlOGYzNjQx
LzEvTGZ4VTFWUS1Fa2hMYTZzdjNEbWFqMUtWZUh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnxBEloWe
xbWXxjfk2IIbN3NDodG5eg6a0hcl/EyxNjZ/SHu8NPGTooRnB/GqzzQm+uk0oG+5
/sdmZ8Jfe6D+1nRtot41HRIu5H35ODSI+e0dymOmqjlnoFrhxTaFNG/ol+I9Z6yJ
n3A681/ym7h0xAPwFAVNKQCFRIiwBk+cBXjaV0X7zgUQUrNnYVpOwNqeK32rm5Up
AhuTZfHPVd9khQ58Atuu6gCFAsFI/9cpzDtnNOLyPNLrJlInHTZKU1p27O7DFAqE
bvmNKSz65Wkm6DZ+fG412WndVyyW3hE1m6/Nozv5uMOzoA4zYfeMO1L5p+Aht5dr
Y1HPzW2srMsFEQ==
-----END CERTIFICATE-----
Generated at Tue Aug 5 20:12:37 2025 by rpki-client