Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
File: lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft (raw, json)
Hash identifier: 5LMNXMskzy3f0lGRfybSmN2pE7Gn9/uSIeVPa5dDcLs=
Subject key identifier: AC:0D:E4:E0:7E:E7:0B:EB:0F:29:84:25:A9:9C:B8:6C:59:F3:6D:11
Authority key identifier: 95:32:B4:F2:B4:7B:BE:19:34:A2:24:08:1C:C3:7F:17:0D:72:48:D2
Certificate issuer: /CN=9532b4f2b47bbe1934a224081cc37f170d7248d2
Certificate serial: 0198978075CD06C53794CBDDB77873B70720
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
Manifest number: 1628
Signing time: Mon 11 Aug 2025 05:00:34 +0000
Manifest this update: Mon 11 Aug 2025 05:00:34 +0000
Manifest next update: Tue 12 Aug 2025 05:00:34 +0000
Files and hashes: 1: GjUJtXzmRKM2Vtkil_fh95z7NdM.roa (hash: NJXWhpjg7woXcdhVu/ucxszei5ss2Dto0kjEgZT65S0=)
2: lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl (hash: UWroSRabs95ptQNiStcWCqvOvY2fhpfVUt83NwTD7xQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:80:75:cd:06:c5:37:94:cb:dd:b7:78:73:b7:07:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9532b4f2b47bbe1934a224081cc37f170d7248d2
Validity
Not Before: Aug 11 05:00:34 2025 GMT
Not After : Aug 12 05:00:34 2025 GMT
Subject: CN=ac0de4e07ee70beb0f298425a99cb86c59f36d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:fe:c8:e6:1b:a0:38:1a:0d:4b:8b:67:38:ca:
d5:67:33:48:82:26:c1:6f:d6:55:f4:c5:65:da:7f:
6a:a3:34:5c:bf:a0:a4:4f:5d:43:cd:a4:9b:8a:2f:
94:bf:d2:dd:70:82:a3:6f:92:a1:58:7c:ba:bb:8e:
cc:7f:50:e6:18:c8:55:18:e5:e5:97:a2:1b:93:2f:
23:90:af:dc:ae:fc:da:ac:db:e9:63:3b:12:01:cd:
9b:09:cc:f0:ef:f2:65:22:81:0c:18:30:4d:36:ba:
e6:18:31:e5:ec:1c:96:fd:e5:49:cc:6f:29:3b:a8:
3f:fe:44:e5:5b:9d:81:ff:27:0f:f4:f6:ee:25:72:
af:06:50:c1:1a:a3:20:e5:3b:c3:02:cf:6d:fe:61:
42:a1:01:f7:b3:25:39:3a:28:ab:87:59:9c:23:d3:
2c:1d:19:f7:43:28:8d:55:0c:a3:c4:61:11:41:b4:
b8:01:98:34:6f:bd:ce:97:54:cc:33:11:97:3c:a1:
f8:e4:d3:99:44:74:8d:3a:67:fe:9c:f7:77:f7:94:
d7:55:4c:3d:88:96:0f:a1:73:69:49:00:8d:64:ed:
0d:03:15:e9:6b:65:60:c6:d2:ae:a2:60:36:d2:d6:
92:52:6b:1f:9a:b4:00:e4:ee:31:ab:d3:4c:7a:4b:
2b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:0D:E4:E0:7E:E7:0B:EB:0F:29:84:25:A9:9C:B8:6C:59:F3:6D:11
X509v3 Authority Key Identifier:
keyid:95:32:B4:F2:B4:7B:BE:19:34:A2:24:08:1C:C3:7F:17:0D:72:48:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:f4:8d:66:07:07:82:0e:e0:2f:d6:d0:89:97:ea:63:9e:aa:
43:27:2b:ad:14:75:c1:0a:fb:5e:92:b6:bc:97:59:80:47:ff:
4c:f9:d8:57:3c:43:2b:1e:43:64:e1:76:d6:9e:41:3d:45:2e:
3f:84:91:55:6f:73:29:cc:c9:87:c2:eb:8d:4f:0e:21:66:21:
42:b9:8b:58:d4:7c:27:c2:5d:54:32:fa:39:57:29:b0:e6:04:
ff:52:7d:ec:40:0f:4b:7e:e7:f2:cf:ef:b0:d9:7d:30:20:be:
02:38:df:02:b0:bb:bc:82:57:b4:ec:11:b8:59:26:26:d0:5a:
16:28:fc:e3:aa:5c:58:af:e3:c7:69:18:c3:84:27:82:77:79:
cb:b6:eb:d4:65:82:31:ac:e7:4c:65:a3:e7:6f:53:79:4b:4b:
ac:a6:00:19:bc:f3:8b:4c:02:b8:87:41:a4:56:4c:ae:03:0e:
54:32:8b:6e:d0:e5:de:60:a4:71:96:a1:b2:6b:52:17:a9:ad:
b8:21:40:3c:e1:6e:a4:6b:9e:14:44:33:21:ee:45:c9:32:d5:
ed:0b:4e:93:4e:9f:fb:f6:af:6a:42:82:53:6e:99:da:44:b5:
22:ac:07:d9:24:95:b2:53:67:46:f7:cf:95:c8:45:9b:01:bf:
ac:c7:db:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiXgHXNBsU3lMvdt3hztwcgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MzJiNGYyYjQ3YmJlMTkzNGEyMjQwODFjYzM3ZjE3MGQ3
MjQ4ZDIwHhcNMjUwODExMDUwMDM0WhcNMjUwODEyMDUwMDM0WjAzMTEwLwYDVQQD
EyhhYzBkZTRlMDdlZTcwYmViMGYyOTg0MjVhOTljYjg2YzU5ZjM2ZDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7f7I5hugOBoNS4tnOMrVZzNIgibB
b9ZV9MVl2n9qozRcv6CkT11DzaSbii+Uv9LdcIKjb5KhWHy6u47Mf1DmGMhVGOXl
l6Ibky8jkK/crvzarNvpYzsSAc2bCczw7/JlIoEMGDBNNrrmGDHl7ByW/eVJzG8p
O6g//kTlW52B/ycP9PbuJXKvBlDBGqMg5TvDAs9t/mFCoQH3syU5Oiirh1mcI9Ms
HRn3QyiNVQyjxGERQbS4AZg0b73Ol1TMMxGXPKH45NOZRHSNOmf+nPd395TXVUw9
iJYPoXNpSQCNZO0NAxXpa2VgxtKuomA20taSUmsfmrQA5O4xq9NMeksrMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKwN5OB+5wvrDymEJamcuGxZ820RMB8GA1UdIwQY
MBaAFJUytPK0e74ZNKIkCBzDfxcNckjSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFRLMDhyUjd2aGswb2lRSUhNTl9GdzF5U05JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8xMjRkZDUtY2FiMC00NmVjLWJlNjct
NDIwNDBkZjNiNmFmLzEvbFRLMDhyUjd2aGswb2lRSUhNTl9GdzF5U05JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8xMjRkZDUtY2FiMC00NmVjLWJlNjctNDIwNDBkZjNiNmFm
LzEvbFRLMDhyUjd2aGswb2lRSUhNTl9GdzF5U05JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUvSNZgcH
gg7gL9bQiZfqY56qQycrrRR1wQr7XpK2vJdZgEf/TPnYVzxDKx5DZOF21p5BPUUu
P4SRVW9zKczJh8LrjU8OIWYhQrmLWNR8J8JdVDL6OVcpsOYE/1J97EAPS37n8s/v
sNl9MCC+AjjfArC7vIJXtOwRuFkmJtBaFij846pcWK/jx2kYw4Qngnd5y7br1GWC
MaznTGWj529TeUtLrKYAGbzzi0wCuIdBpFZMrgMOVDKLbtDl3mCkcZahsmtSF6mt
uCFAPOFupGueFEQzIe5FyTLV7QtOk06f+/avakKCU26Z2kS1IqwH2SSVslNnRvfP
lchFmwG/rMfbLA==
-----END CERTIFICATE-----
Generated at Mon Aug 11 09:52:17 2025 by rpki-client