Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
File: LkJv6Qhstq8B85H_T2nACDZNbu0.mft (raw, json)
Hash identifier: nHi4zHoFrdVxTQ6hKd8mDACGFQTZqDgKNwe8XdKxga4=
Subject key identifier: A9:59:EB:6A:C1:D0:C0:66:BD:DC:7D:00:5F:EE:36:DC:19:F7:98:DF
Authority key identifier: 2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED
Certificate issuer: /CN=2e426fe9086cb6af01f391ff4f69c008364d6eed
Certificate serial: 01987486EF28579886BC9006FF40592D8F86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
Manifest number: 15AD
Signing time: Mon 04 Aug 2025 10:00:56 +0000
Manifest this update: Mon 04 Aug 2025 10:00:56 +0000
Manifest next update: Tue 05 Aug 2025 10:00:56 +0000
Files and hashes: 1: LkJv6Qhstq8B85H_T2nACDZNbu0.crl (hash: t4cLD/8vZSF3ORTjNmZFe9WgFITrN9crxzFwxgG2Xp8=)
2: jS_G6el4wEcgi8my5R0XT21ut5Q.roa (hash: Q5lJn0D9zs18LOmkVI8eROdi6ECwhGDbp8byuxpzAUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:86:ef:28:57:98:86:bc:90:06:ff:40:59:2d:8f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e426fe9086cb6af01f391ff4f69c008364d6eed
Validity
Not Before: Aug 4 10:00:56 2025 GMT
Not After : Aug 5 10:00:56 2025 GMT
Subject: CN=a959eb6ac1d0c066bddc7d005fee36dc19f798df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b9:8d:9e:3e:0d:3d:dd:33:94:6d:3f:0a:43:
9b:11:92:c4:5d:9b:2f:8b:d9:a7:84:9b:fa:7d:2a:
7b:64:5a:2b:03:9b:6a:c5:7f:b6:0a:2c:cc:8c:71:
f2:ff:96:bf:aa:3a:65:78:cc:51:cf:38:81:01:23:
df:23:bc:a6:78:25:4a:68:72:9a:fe:5d:e5:0b:ef:
5a:7e:b1:78:ea:f6:ce:3e:67:91:37:71:3b:fa:16:
85:63:18:22:eb:7a:86:c4:96:28:62:78:b3:bc:ee:
53:16:fd:8d:f7:63:c7:8e:95:6d:f8:cb:9b:2e:b7:
fe:13:66:8e:73:86:13:e9:c1:93:5a:e5:7a:48:40:
d9:51:32:31:47:e1:0f:e8:3c:e0:a1:9a:0d:3d:97:
4a:89:3d:50:6b:87:a2:11:df:48:ff:e5:cc:cc:c4:
60:d2:9f:50:27:00:34:0c:5e:dd:98:16:cd:e8:93:
30:6d:39:a9:aa:99:71:c5:fd:6b:1a:50:c0:d1:7a:
81:63:37:fd:ae:c6:bd:b4:67:f0:33:a7:88:87:ba:
cb:da:11:30:2b:a1:f6:9d:4b:9c:eb:be:85:7f:65:
86:af:6f:0b:ec:c5:64:c7:92:8b:fd:73:b4:f6:eb:
5d:d9:e7:a2:c1:a0:0a:4b:45:d3:31:15:94:1e:fc:
da:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:59:EB:6A:C1:D0:C0:66:BD:DC:7D:00:5F:EE:36:DC:19:F7:98:DF
X509v3 Authority Key Identifier:
keyid:2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:5d:8d:a1:06:4f:d1:6a:15:f5:81:06:95:c1:35:6a:bd:ef:
76:6d:93:37:c2:73:cf:8e:07:6b:c5:49:05:5b:e7:ac:91:44:
aa:16:b5:2f:98:fb:fb:44:e3:bf:cf:20:71:ef:4c:88:df:7f:
d1:fe:24:f3:dc:8e:2f:58:bd:e3:c9:e8:f8:2f:82:71:93:62:
a3:81:97:2d:0d:ba:40:e2:0b:73:c6:35:e8:cf:0f:d9:96:a1:
3b:30:f2:ff:1c:33:79:49:94:93:15:f5:b1:91:f8:db:22:aa:
07:7a:b1:7e:da:1e:93:2a:44:28:24:bd:98:7b:39:00:5d:23:
2d:f5:b2:65:65:2a:55:57:a2:6f:8b:1c:c9:b7:2b:dc:83:41:
24:8f:cd:1d:46:25:c0:69:83:c4:2f:f9:41:c0:78:29:08:c7:
7f:eb:58:14:fb:83:97:79:8c:83:92:11:11:72:e7:4b:13:61:
ef:b5:55:0b:bf:93:3d:ce:53:20:b2:7f:37:13:5e:e9:15:34:
7b:1c:fe:77:0e:96:44:2a:e2:eb:b6:14:f5:4d:71:3e:2a:40:
ef:3d:c7:5f:d6:99:7e:26:73:07:58:7c:0d:15:26:fb:ee:da:
86:8e:b2:fb:28:0c:f2:08:8c:3c:68:38:14:74:c9:b6:50:27:
5d:55:f6:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0hu8oV5iGvJAG/0BZLY+GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNDI2ZmU5MDg2Y2I2YWYwMWYzOTFmZjRmNjljMDA4MzY0
ZDZlZWQwHhcNMjUwODA0MTAwMDU2WhcNMjUwODA1MTAwMDU2WjAzMTEwLwYDVQQD
EyhhOTU5ZWI2YWMxZDBjMDY2YmRkYzdkMDA1ZmVlMzZkYzE5Zjc5OGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7mNnj4NPd0zlG0/CkObEZLEXZsv
i9mnhJv6fSp7ZForA5tqxX+2CizMjHHy/5a/qjpleMxRzziBASPfI7ymeCVKaHKa
/l3lC+9afrF46vbOPmeRN3E7+haFYxgi63qGxJYoYnizvO5TFv2N92PHjpVt+Mub
Lrf+E2aOc4YT6cGTWuV6SEDZUTIxR+EP6DzgoZoNPZdKiT1Qa4eiEd9I/+XMzMRg
0p9QJwA0DF7dmBbN6JMwbTmpqplxxf1rGlDA0XqBYzf9rsa9tGfwM6eIh7rL2hEw
K6H2nUuc676Ff2WGr28L7MVkx5KL/XO09utd2eeiwaAKS0XTMRWUHvza+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKlZ62rB0MBmvdx9AF/uNtwZ95jfMB8GA1UdIwQY
MBaAFC5Cb+kIbLavAfOR/09pwAg2TW7tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGtKdjZRaHN0cThCODVIX1QybkFDRFpOYnUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hZTcxMDEtZTRmYS00NTBjLWEzMDEt
NjhhZDNiZGJkMzliLzEvTGtKdjZRaHN0cThCODVIX1QybkFDRFpOYnUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9hZTcxMDEtZTRmYS00NTBjLWEzMDEtNjhhZDNiZGJkMzli
LzEvTGtKdjZRaHN0cThCODVIX1QybkFDRFpOYnUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY12NoQZP
0WoV9YEGlcE1ar3vdm2TN8Jzz44Ha8VJBVvnrJFEqha1L5j7+0Tjv88gce9MiN9/
0f4k89yOL1i948no+C+CcZNio4GXLQ26QOILc8Y16M8P2ZahOzDy/xwzeUmUkxX1
sZH42yKqB3qxftoekypEKCS9mHs5AF0jLfWyZWUqVVeib4scybcr3INBJI/NHUYl
wGmDxC/5QcB4KQjHf+tYFPuDl3mMg5IREXLnSxNh77VVC7+TPc5TILJ/NxNe6RU0
exz+dw6WRCri67YU9U1xPipA7z3HX9aZfiZzB1h8DRUm++7aho6y+ygM8giMPGg4
FHTJtlAnXVX2rw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:34:39 2025 by rpki-client