Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.mft
File: LKzIXJmo4dt9HFImfC3b08OeGLI.mft (raw, json)
Hash identifier: d78hdT/76LQP+oVvvyxgMXqC1fqoBxEkT44/Do75PaI=
Subject key identifier: 89:5F:9E:97:BB:24:D3:98:96:0A:F3:6F:C2:7E:F0:93:73:F5:B4:5F
Authority key identifier: 2C:AC:C8:5C:99:A8:E1:DB:7D:1C:52:26:7C:2D:DB:D3:C3:9E:18:B2
Certificate issuer: /CN=2cacc85c99a8e1db7d1c52267c2ddbd3c39e18b2
Certificate serial: 019873E1C0D102E9898D999034012B9BFF59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKzIXJmo4dt9HFImfC3b08OeGLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.mft
Manifest number: 0D2E
Signing time: Mon 04 Aug 2025 07:00:31 +0000
Manifest this update: Mon 04 Aug 2025 07:00:31 +0000
Manifest next update: Tue 05 Aug 2025 07:00:31 +0000
Files and hashes: 1: LKzIXJmo4dt9HFImfC3b08OeGLI.crl (hash: OavFaXgZrWX5J2QqBWHPTdqood/ZPT4VYbWVmnUou/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKzIXJmo4dt9HFImfC3b08OeGLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:c0:d1:02:e9:89:8d:99:90:34:01:2b:9b:ff:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cacc85c99a8e1db7d1c52267c2ddbd3c39e18b2
Validity
Not Before: Aug 4 07:00:31 2025 GMT
Not After : Aug 5 07:00:31 2025 GMT
Subject: CN=895f9e97bb24d398960af36fc27ef09373f5b45f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2a:aa:8d:48:f2:95:06:3d:35:9b:50:4a:83:
4d:8c:93:50:cd:a2:6f:6d:0e:b2:b5:fd:ad:74:fd:
dd:65:bc:de:e7:7f:91:2d:56:c0:7f:49:64:d4:3d:
1f:ed:56:92:0f:9f:4f:1e:b1:2f:5c:f4:a1:d4:f8:
67:07:28:bc:c3:a6:5b:00:b5:22:2d:5f:35:cc:50:
fc:b9:40:e8:bc:91:fc:aa:51:77:44:f2:09:82:86:
0e:ef:03:8c:ea:19:fc:ff:25:37:91:5e:f3:4b:ac:
49:87:00:49:fb:2e:01:2f:bb:75:4d:07:e9:90:20:
4b:e1:5b:d0:d3:2c:ef:1e:c3:06:d4:fe:dd:ac:a2:
e3:6a:58:ea:c3:f3:1d:07:80:81:73:06:12:36:8f:
4e:24:fd:df:f8:74:4e:10:5d:ab:5e:50:3f:21:91:
d4:ab:b1:eb:7a:9b:59:98:30:b3:8c:39:c3:77:5e:
61:c4:23:96:c5:cf:ed:b1:b3:62:fe:89:fb:cd:79:
a9:ef:e7:31:55:fd:ed:a3:d4:e3:96:a4:e7:47:c4:
42:2b:4b:ad:bc:c4:dd:06:75:4d:0c:43:7b:cc:b0:
19:71:cd:2b:d8:72:ed:8f:a7:d1:b6:d9:5e:3f:18:
68:c7:d3:6f:99:0f:0b:36:b7:63:9a:07:82:0a:f1:
24:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5F:9E:97:BB:24:D3:98:96:0A:F3:6F:C2:7E:F0:93:73:F5:B4:5F
X509v3 Authority Key Identifier:
keyid:2C:AC:C8:5C:99:A8:E1:DB:7D:1C:52:26:7C:2D:DB:D3:C3:9E:18:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKzIXJmo4dt9HFImfC3b08OeGLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0add7c-a28c-4ae8-8885-01ce06d315cd/1/LKzIXJmo4dt9HFImfC3b08OeGLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:3c:0f:a4:9d:78:c4:66:32:e0:e4:f7:b2:f2:6f:87:61:e3:
73:bf:5f:c3:0d:67:3a:cf:bc:25:2e:16:aa:f2:d1:8d:1f:4b:
70:d9:04:4f:26:34:46:d9:08:7a:08:11:8b:80:e3:f0:e6:2c:
81:5d:f4:04:52:d8:a8:53:cc:d1:6d:c0:fa:84:e0:83:a1:54:
57:71:93:3f:7d:56:02:d6:1f:c4:55:79:97:74:5b:46:0f:f1:
96:94:8b:e5:74:fe:e8:c2:94:a3:ae:4f:30:01:9a:bf:69:af:
07:fd:2d:48:47:ce:5b:69:d4:78:96:00:c8:b1:4b:08:02:e1:
dd:27:be:14:d1:5e:33:11:aa:04:84:64:74:d3:78:a7:95:86:
01:9c:1a:5c:9b:27:61:08:09:b6:25:a4:f7:92:a1:63:71:40:
e4:bd:b1:ec:d8:1e:03:ba:fa:42:f8:51:5b:06:be:cd:f8:64:
a9:bf:84:8d:78:09:0d:07:90:fe:af:c1:49:55:5d:ef:30:1e:
20:ab:34:53:8a:48:a1:20:b7:d2:b7:c2:9a:a0:af:af:a4:58:
3c:eb:7d:99:72:e2:21:a7:5c:49:5b:97:c4:9d:68:2a:1e:6b:
9e:4a:8c:22:f5:c8:8d:79:4f:32:b2:47:73:5f:90:1c:5b:44:
e7:80:75:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4cDRAumJjZmQNAErm/9ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjYWNjODVjOTlhOGUxZGI3ZDFjNTIyNjdjMmRkYmQzYzM5
ZTE4YjIwHhcNMjUwODA0MDcwMDMxWhcNMjUwODA1MDcwMDMxWjAzMTEwLwYDVQQD
Eyg4OTVmOWU5N2JiMjRkMzk4OTYwYWYzNmZjMjdlZjA5MzczZjViNDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiqqjUjylQY9NZtQSoNNjJNQzaJv
bQ6ytf2tdP3dZbze53+RLVbAf0lk1D0f7VaSD59PHrEvXPSh1PhnByi8w6ZbALUi
LV81zFD8uUDovJH8qlF3RPIJgoYO7wOM6hn8/yU3kV7zS6xJhwBJ+y4BL7t1TQfp
kCBL4VvQ0yzvHsMG1P7drKLjaljqw/MdB4CBcwYSNo9OJP3f+HROEF2rXlA/IZHU
q7HreptZmDCzjDnDd15hxCOWxc/tsbNi/on7zXmp7+cxVf3to9TjlqTnR8RCK0ut
vMTdBnVNDEN7zLAZcc0r2HLtj6fRttlePxhox9NvmQ8LNrdjmgeCCvEkRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIlfnpe7JNOYlgrzb8J+8JNz9bRfMB8GA1UdIwQY
MBaAFCysyFyZqOHbfRxSJnwt29PDnhiyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEt6SVhKbW80ZHQ5SEZJbWZDM2IwOE9lR0xJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8wYWRkN2MtYTI4Yy00YWU4LTg4ODUt
MDFjZTA2ZDMxNWNkLzEvTEt6SVhKbW80ZHQ5SEZJbWZDM2IwOE9lR0xJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8wYWRkN2MtYTI4Yy00YWU4LTg4ODUtMDFjZTA2ZDMxNWNk
LzEvTEt6SVhKbW80ZHQ5SEZJbWZDM2IwOE9lR0xJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARDwPpJ14
xGYy4OT3svJvh2Hjc79fww1nOs+8JS4WqvLRjR9LcNkETyY0RtkIeggRi4Dj8OYs
gV30BFLYqFPM0W3A+oTgg6FUV3GTP31WAtYfxFV5l3RbRg/xlpSL5XT+6MKUo65P
MAGav2mvB/0tSEfOW2nUeJYAyLFLCALh3Se+FNFeMxGqBIRkdNN4p5WGAZwaXJsn
YQgJtiWk95KhY3FA5L2x7NgeA7r6QvhRWwa+zfhkqb+EjXgJDQeQ/q/BSVVd7zAe
IKs0U4pIoSC30rfCmqCvr6RYPOt9mXLiIadcSVuXxJ1oKh5rnkqMIvXIjXlPMrJH
c1+QHFtE54B1/A==
-----END CERTIFICATE-----
Generated at Mon Aug 4 13:55:45 2025 by rpki-client