
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
File: lJYuKvp3SPRSZdif0VYktYTnJGY.mft (raw, json)
Hash identifier: Np9HntMzzaM05Be+enggY1LcikyIrVCmohbRC7OHIu4=
Subject key identifier: 8E:DF:EA:6C:D2:72:D0:6F:B3:C4:6B:31:A2:7F:C3:9E:79:F1:F7:E2
Authority key identifier: 94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
Certificate issuer: /CN=94962e2afa7748f45265d89fd15624b584e72466
Certificate serial: 01987DF7BCC8372392E5DAC74421A48538CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
Manifest number: 13BF
Signing time: Wed 06 Aug 2025 06:00:44 +0000
Manifest this update: Wed 06 Aug 2025 06:00:44 +0000
Manifest next update: Thu 07 Aug 2025 06:00:44 +0000
Files and hashes: 1: 1zPmCa_n4npQByWV57mbbNaogt8.roa (hash: dFtgg8FcI20vmgo3zE4v/V+3CGTP1fI2Dy6va/nig+E=)
2: Mc3-W1zeku0X5cBFpf2q2Rn4I84.roa (hash: sbJ542HmG4Uuavy4d7gZervrEM5rcRvFP/8t5YUQ2Tw=)
3: lJYuKvp3SPRSZdif0VYktYTnJGY.crl (hash: 3DuaaMNDzb1mFmfxwNgmH/5dct9+CaDT+QJv5I+nUPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f7:bc:c8:37:23:92:e5:da:c7:44:21:a4:85:38:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94962e2afa7748f45265d89fd15624b584e72466
Validity
Not Before: Aug 6 06:00:44 2025 GMT
Not After : Aug 7 06:00:44 2025 GMT
Subject: CN=8edfea6cd272d06fb3c46b31a27fc39e79f1f7e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f2:8f:e1:6e:09:6f:64:ab:6b:4c:ad:ba:9d:
f2:ff:07:0e:43:9c:23:63:12:61:b8:18:6b:b6:c5:
dc:95:15:a8:99:7e:80:f4:1d:16:73:55:10:9a:f5:
17:ea:56:14:c6:74:40:1d:ef:69:83:60:4a:00:8c:
04:2b:d0:99:62:0c:69:cf:45:29:bb:91:4c:83:2f:
f4:b1:1b:e8:f5:3c:62:0c:27:ee:0e:03:ed:3a:6a:
05:c2:d8:32:7a:b1:53:e8:68:a7:ee:6c:32:21:94:
4f:86:e4:68:e5:07:bc:fc:c7:9d:d4:49:68:22:38:
0e:c2:81:d5:43:b0:de:54:99:b7:79:8f:08:d8:64:
32:36:99:b5:84:f4:de:89:98:a8:b8:48:dd:a3:47:
15:a6:d8:3c:36:94:e5:3a:c3:4f:40:5f:9f:1b:c6:
b4:eb:11:8a:0a:f0:c3:56:e7:84:e9:f7:08:3a:04:
4f:44:5e:bd:49:36:a9:13:07:ba:01:77:cd:48:32:
e4:79:17:e6:2f:be:04:b5:5f:c2:a4:83:fa:66:82:
44:a0:42:69:f3:f7:3d:20:7f:9a:4b:3a:68:1d:44:
29:d3:b2:b9:0a:a1:5c:32:0f:91:1c:f2:df:bc:9d:
d3:ac:11:d1:3b:47:86:e2:e1:f0:a4:a1:58:ea:e8:
b9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:DF:EA:6C:D2:72:D0:6F:B3:C4:6B:31:A2:7F:C3:9E:79:F1:F7:E2
X509v3 Authority Key Identifier:
keyid:94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:0d:77:33:d2:af:cf:f4:c4:58:0d:23:7b:43:c5:e6:0f:45:
b6:04:00:6a:45:b7:25:e7:58:2d:2f:f9:b9:64:23:41:34:0b:
21:fa:aa:dc:92:c1:55:24:15:61:f8:20:49:44:83:40:cf:5d:
b8:d7:63:a4:e1:1e:87:4f:67:27:7d:1a:aa:4c:e0:b3:31:6b:
2b:a7:a0:ef:01:8e:d4:32:92:82:9d:01:08:01:12:0c:00:06:
92:c4:2f:56:e2:a2:a9:c2:ae:38:fd:a8:28:82:41:1a:69:98:
72:2f:ff:7e:2b:b0:6f:45:1b:81:93:f1:e2:8e:98:5b:fe:49:
1a:f7:21:76:b5:08:e9:98:d8:a1:f2:23:ec:36:b1:31:4e:13:
22:17:8f:90:19:00:74:fd:d9:18:e2:d4:e6:89:6b:53:32:75:
5b:fb:20:db:2b:84:df:cf:2b:74:0c:2e:2b:2e:0c:4a:bb:2c:
c3:d9:74:21:66:d0:a1:9f:e7:3f:bb:fc:0d:b7:17:0a:68:ca:
f0:a2:9a:01:d7:71:55:4f:d3:22:2e:f6:8d:a9:e1:93:cf:4a:
ff:f3:1b:e3:b1:aa:07:3a:d8:86:85:1a:2c:95:88:4b:ad:14:
ba:7b:a6:2f:fa:0a:b6:a4:b6:2f:17:40:be:ce:64:6f:03:16:
92:c3:1a:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh997zINyOS5drHRCGkhTjLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0OTYyZTJhZmE3NzQ4ZjQ1MjY1ZDg5ZmQxNTYyNGI1ODRl
NzI0NjYwHhcNMjUwODA2MDYwMDQ0WhcNMjUwODA3MDYwMDQ0WjAzMTEwLwYDVQQD
Eyg4ZWRmZWE2Y2QyNzJkMDZmYjNjNDZiMzFhMjdmYzM5ZTc5ZjFmN2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vKP4W4Jb2Sra0ytup3y/wcOQ5wj
YxJhuBhrtsXclRWomX6A9B0Wc1UQmvUX6lYUxnRAHe9pg2BKAIwEK9CZYgxpz0Up
u5FMgy/0sRvo9TxiDCfuDgPtOmoFwtgyerFT6Gin7mwyIZRPhuRo5Qe8/Med1Elo
IjgOwoHVQ7DeVJm3eY8I2GQyNpm1hPTeiZiouEjdo0cVptg8NpTlOsNPQF+fG8a0
6xGKCvDDVueE6fcIOgRPRF69STapEwe6AXfNSDLkeRfmL74EtV/CpIP6ZoJEoEJp
8/c9IH+aSzpoHUQp07K5CqFcMg+RHPLfvJ3TrBHRO0eG4uHwpKFY6ui5vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7f6mzSctBvs8RrMaJ/w5558ffiMB8GA1UdIwQY
MBaAFJSWLir6d0j0UmXYn9FWJLWE5yRmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEpZdUt2cDNTUFJTWmRpZjBWWWt0WVRuSkdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8yZGI2ODMtYzllOS00NjQ3LTgyM2It
Y2Q0MDNiZGVlNGRmLzEvbEpZdUt2cDNTUFJTWmRpZjBWWWt0WVRuSkdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8yZGI2ODMtYzllOS00NjQ3LTgyM2ItY2Q0MDNiZGVlNGRm
LzEvbEpZdUt2cDNTUFJTWmRpZjBWWWt0WVRuSkdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACQ13M9Kv
z/TEWA0je0PF5g9FtgQAakW3JedYLS/5uWQjQTQLIfqq3JLBVSQVYfggSUSDQM9d
uNdjpOEeh09nJ30aqkzgszFrK6eg7wGO1DKSgp0BCAESDAAGksQvVuKiqcKuOP2o
KIJBGmmYci//fiuwb0UbgZPx4o6YW/5JGvchdrUI6ZjYofIj7DaxMU4TIhePkBkA
dP3ZGOLU5olrUzJ1W/sg2yuE388rdAwuKy4MSrssw9l0IWbQoZ/nP7v8DbcXCmjK
8KKaAddxVU/TIi72janhk89K//Mb47GqBzrYhoUaLJWIS60UunumL/oKtqS2LxdA
vs5kbwMWksMa7A==
-----END CERTIFICATE-----
Generated at Wed Aug 6 07:47:34 2025 by rpki-client