Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
File: LkX41ix0LqB9y_jFfVjM9dKOPrk.mft (raw, json)
Hash identifier: uj4M33pPa8s0MYT9ol8X/bDUo5h092yV3Ym0alHymtU=
Subject key identifier: 29:CF:C0:6F:8C:4A:28:19:C3:87:A9:26:A9:ED:EF:C4:30:D5:B9:66
Authority key identifier: 2E:45:F8:D6:2C:74:2E:A0:7D:CB:F8:C5:7D:58:CC:F5:D2:8E:3E:B9
Certificate issuer: /CN=2e45f8d62c742ea07dcbf8c57d58ccf5d28e3eb9
Certificate serial: 019880F924050E6AF726E02A47008433FC02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
Manifest number: 15AF
Signing time: Wed 06 Aug 2025 20:01:08 +0000
Manifest this update: Wed 06 Aug 2025 20:01:08 +0000
Manifest next update: Thu 07 Aug 2025 20:01:08 +0000
Files and hashes: 1: LkX41ix0LqB9y_jFfVjM9dKOPrk.crl (hash: E9hy6P1CcesFUcDLIUlkJAGjhLN3bDhw9mQ6d879Xsg=)
2: g57J2wTboU7Sc-wb_fSQn-nhvgM.roa (hash: gpxpAfVwTKloyzHbHsjEDT6k1QWLxENbpf0N5D9dxr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:f9:24:05:0e:6a:f7:26:e0:2a:47:00:84:33:fc:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e45f8d62c742ea07dcbf8c57d58ccf5d28e3eb9
Validity
Not Before: Aug 6 20:01:08 2025 GMT
Not After : Aug 7 20:01:08 2025 GMT
Subject: CN=29cfc06f8c4a2819c387a926a9edefc430d5b966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:91:c7:90:0a:1c:41:ad:fc:7d:21:83:1e:0f:
12:98:d9:fa:e6:f2:a8:ba:61:4a:fb:28:6d:2c:32:
29:6d:16:6d:9c:c6:99:c8:99:6e:d8:cc:a2:46:00:
85:7e:f9:40:46:08:97:12:bf:e9:36:7e:10:3d:f6:
06:eb:0b:ed:62:77:44:c6:29:fb:8a:64:68:6d:c9:
68:67:06:d0:45:99:46:f3:3a:e3:2b:1a:81:f2:20:
6f:47:aa:8e:45:e8:0d:ad:34:8b:ad:c9:d6:77:69:
d0:6d:e4:e6:38:46:f2:e6:a7:c5:93:f0:fc:26:1f:
05:a4:59:b1:f1:8d:d3:65:b0:a7:33:32:14:c8:3c:
ba:f1:6b:ea:a0:ec:68:31:96:fc:29:cf:2d:f4:82:
f7:68:2e:b1:20:9d:53:4a:5f:5e:73:f8:8a:ce:a4:
6b:85:9f:80:e7:a9:77:64:62:ee:ff:da:78:c5:15:
39:71:0f:27:6f:21:60:81:ac:ef:ed:d2:21:a3:9c:
72:62:1b:ec:40:8b:3f:6c:ec:8f:44:e7:42:d5:5f:
82:52:a9:a4:a7:1d:5b:31:cb:5a:12:4e:7e:18:38:
e9:09:84:7e:fc:f7:bc:f0:11:49:26:fa:bc:ee:b8:
ef:ea:88:2e:3c:d9:d1:30:32:4b:e9:8e:50:98:32:
0d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:CF:C0:6F:8C:4A:28:19:C3:87:A9:26:A9:ED:EF:C4:30:D5:B9:66
X509v3 Authority Key Identifier:
keyid:2E:45:F8:D6:2C:74:2E:A0:7D:CB:F8:C5:7D:58:CC:F5:D2:8E:3E:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:04:45:a3:76:75:f7:d8:47:4d:cb:a3:de:bc:70:ef:ff:3b:
bb:9d:35:77:5c:3e:4f:54:23:79:d2:b1:5d:73:a8:37:31:24:
11:09:db:51:d7:11:a6:48:fa:c3:0b:66:00:59:30:4f:db:20:
be:d6:39:c6:8e:63:da:1e:f2:2d:5f:96:e7:ec:eb:fc:cd:b7:
e7:f9:f4:b2:cf:57:13:5c:2b:09:9f:5b:6f:74:87:a4:a8:73:
5c:48:3c:bc:a1:ac:7c:3f:3c:41:41:d1:6e:99:4c:64:f5:ba:
98:b0:7b:72:79:70:1c:ae:84:60:d1:d5:79:5e:97:72:be:e6:
88:2f:7d:48:13:93:9e:28:76:de:cf:58:dc:4d:b7:7b:4a:93:
8f:99:b0:20:7b:b7:c9:66:dc:65:ce:27:d2:89:90:91:16:d6:
43:c5:16:03:cf:57:f8:8d:aa:6c:b6:27:ca:84:1b:d1:c1:db:
6d:24:75:d9:dc:85:9d:ba:77:e5:d0:8d:6d:9d:6a:f7:f1:10:
28:b5:66:d7:2f:d6:31:d8:43:3d:f1:bc:c5:8d:81:f7:f3:3d:
bc:d2:67:48:fc:13:38:f6:5e:ec:01:5c:85:63:b7:71:91:1c:
6e:de:90:60:6d:cc:3a:1b:15:5a:e1:03:e7:d1:ac:5b:a4:5a:
91:58:13:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiA+SQFDmr3JuAqRwCEM/wCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNDVmOGQ2MmM3NDJlYTA3ZGNiZjhjNTdkNThjY2Y1ZDI4
ZTNlYjkwHhcNMjUwODA2MjAwMTA4WhcNMjUwODA3MjAwMTA4WjAzMTEwLwYDVQQD
EygyOWNmYzA2ZjhjNGEyODE5YzM4N2E5MjZhOWVkZWZjNDMwZDViOTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZHHkAocQa38fSGDHg8SmNn65vKo
umFK+yhtLDIpbRZtnMaZyJlu2MyiRgCFfvlARgiXEr/pNn4QPfYG6wvtYndExin7
imRobcloZwbQRZlG8zrjKxqB8iBvR6qORegNrTSLrcnWd2nQbeTmOEby5qfFk/D8
Jh8FpFmx8Y3TZbCnMzIUyDy68WvqoOxoMZb8Kc8t9IL3aC6xIJ1TSl9ec/iKzqRr
hZ+A56l3ZGLu/9p4xRU5cQ8nbyFggazv7dIho5xyYhvsQIs/bOyPROdC1V+CUqmk
px1bMctaEk5+GDjpCYR+/Pe88BFJJvq87rjv6oguPNnRMDJL6Y5QmDIN8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCnPwG+MSigZw4epJqnt78Qw1blmMB8GA1UdIwQY
MBaAFC5F+NYsdC6gfcv4xX1YzPXSjj65MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGtYNDFpeDBMcUI5eV9qRmZWak05ZEtPUHJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8zMjc3NDItODE1Ni00ZmE0LTliZDUt
MjEyMGZkMDU3NWZmLzEvTGtYNDFpeDBMcUI5eV9qRmZWak05ZEtPUHJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8zMjc3NDItODE1Ni00ZmE0LTliZDUtMjEyMGZkMDU3NWZm
LzEvTGtYNDFpeDBMcUI5eV9qRmZWak05ZEtPUHJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMwRFo3Z1
99hHTcuj3rxw7/87u501d1w+T1QjedKxXXOoNzEkEQnbUdcRpkj6wwtmAFkwT9sg
vtY5xo5j2h7yLV+W5+zr/M235/n0ss9XE1wrCZ9bb3SHpKhzXEg8vKGsfD88QUHR
bplMZPW6mLB7cnlwHK6EYNHVeV6Xcr7miC99SBOTnih23s9Y3E23e0qTj5mwIHu3
yWbcZc4n0omQkRbWQ8UWA89X+I2qbLYnyoQb0cHbbSR12dyFnbp35dCNbZ1q9/EQ
KLVm1y/WMdhDPfG8xY2B9/M9vNJnSPwTOPZe7AFchWO3cZEcbt6QYG3MOhsVWuED
59GsW6RakVgTEQ==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:04:10 2025 by rpki-client