Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft
File: lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft (raw, json)
Hash identifier: sYLsZoEXb78nSpNFaMy+gsckYw9egWFAwbUlzaNBeNc=
Subject key identifier: 4D:05:77:13:58:0F:E4:BC:86:7B:61:06:B3:85:DC:F0:BB:D5:47:C9
Authority key identifier: 95:CB:18:C7:EC:E6:BD:DC:95:70:F3:7F:F7:86:60:B5:8E:6C:20:44
Certificate issuer: /CN=95cb18c7ece6bddc9570f37ff78660b58e6c2044
Certificate serial: 01987ED39FBB69C9AE252EA4437A0A660C31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft
Manifest number: 0335
Signing time: Wed 06 Aug 2025 10:00:54 +0000
Manifest this update: Wed 06 Aug 2025 10:00:54 +0000
Manifest next update: Thu 07 Aug 2025 10:00:54 +0000
Files and hashes: 1: 4d05APiOYCmE2eSMktC6x0oiOVY.roa (hash: 4uLCDeXqKEU2GmyDcCV44Z6CSoTvWfkLJ1BLXOmGGm4=)
2: lcsYx-zmvdyVcPN_94ZgtY5sIEQ.crl (hash: ZA3JEeXUi99YlNEFnhoH+yJQsm+6IUApsFG5oYFq4NQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d3:9f:bb:69:c9:ae:25:2e:a4:43:7a:0a:66:0c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95cb18c7ece6bddc9570f37ff78660b58e6c2044
Validity
Not Before: Aug 6 10:00:54 2025 GMT
Not After : Aug 7 10:00:54 2025 GMT
Subject: CN=4d057713580fe4bc867b6106b385dcf0bbd547c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:74:d9:f0:c1:6a:c5:e2:92:b8:41:12:da:af:
f9:75:fb:83:ee:ea:d9:91:65:02:1a:0b:85:b5:31:
e5:52:0d:b4:75:2e:54:c5:4c:8f:77:46:a4:46:1b:
1b:83:a7:75:b1:8b:7a:b0:f5:c6:46:ca:8a:f0:39:
8c:d1:b9:7e:c1:4d:44:fb:2c:24:6e:bd:93:d3:83:
22:e0:38:57:6e:fe:42:76:f5:bd:70:88:63:7c:9a:
db:14:cf:71:07:87:b2:44:cf:07:20:b1:59:f6:42:
77:78:9f:14:63:23:ea:05:2d:4d:d0:90:28:8e:58:
3c:6a:23:38:2d:d6:fa:3d:40:d6:41:0f:78:3b:d9:
64:84:a1:49:73:61:ee:9f:b4:86:bb:ae:4d:c3:b4:
f9:66:5e:20:b1:c9:be:95:fb:40:d2:5e:97:e6:cc:
04:95:7a:56:cd:2d:f4:a0:b9:07:ba:77:44:bb:59:
37:07:91:b1:f1:50:3c:58:14:62:5c:16:06:0d:2b:
be:ff:e4:ed:75:64:5a:bb:4e:45:0b:2a:59:de:39:
36:7b:53:1d:b2:27:fe:50:78:fe:07:57:0e:cd:ae:
6a:1e:af:5c:d6:35:e7:78:23:ce:28:1c:f3:94:d3:
38:ec:79:6a:de:c1:9b:3b:d5:f1:bd:95:35:6e:90:
d6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:05:77:13:58:0F:E4:BC:86:7B:61:06:B3:85:DC:F0:BB:D5:47:C9
X509v3 Authority Key Identifier:
keyid:95:CB:18:C7:EC:E6:BD:DC:95:70:F3:7F:F7:86:60:B5:8E:6C:20:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:08:3f:d8:df:e3:cd:1b:0c:25:70:b8:5b:6d:db:39:82:5f:
8d:f6:b7:e7:5a:1c:55:ba:a3:03:31:0c:d2:01:4b:e0:26:bc:
66:0d:e9:0a:cb:3a:ef:8e:37:e0:bc:ec:27:50:9e:20:e2:b2:
b6:ec:ff:50:f6:05:53:62:1b:14:c7:26:35:2c:10:c0:2b:ef:
f2:40:5b:b7:40:84:6a:fb:1b:ab:78:95:68:6b:6f:15:5c:e6:
ef:ef:f5:80:95:a0:b1:71:fa:44:d6:26:10:24:30:aa:73:bc:
29:4c:68:eb:c9:9c:55:60:89:3a:4f:a2:9f:2e:9e:f1:dd:63:
f1:a4:2d:6e:2c:a6:8e:44:f9:55:8c:ca:bb:7d:e0:58:30:12:
bb:de:8b:7d:52:fc:41:3b:de:1b:21:8f:27:9c:ef:fd:a6:ee:
5b:05:42:40:8e:34:e0:c6:fc:7e:34:83:1e:45:93:7c:72:e1:
fb:b5:df:f0:d3:90:57:12:97:61:d0:77:b3:eb:5f:7f:a2:75:
8d:b8:0c:0b:99:61:28:51:8c:ed:5c:7f:23:cf:74:9e:9b:c2:
8f:7c:4d:60:31:2c:52:87:ea:4b:53:27:88:d9:04:5d:01:66:
ce:33:c7:22:a8:1c:a2:fe:ed:8d:ad:66:5c:9e:af:96:b1:56:
fc:57:66:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+05+7acmuJS6kQ3oKZgwxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1Y2IxOGM3ZWNlNmJkZGM5NTcwZjM3ZmY3ODY2MGI1OGU2
YzIwNDQwHhcNMjUwODA2MTAwMDU0WhcNMjUwODA3MTAwMDU0WjAzMTEwLwYDVQQD
Eyg0ZDA1NzcxMzU4MGZlNGJjODY3YjYxMDZiMzg1ZGNmMGJiZDU0N2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHTZ8MFqxeKSuEES2q/5dfuD7urZ
kWUCGguFtTHlUg20dS5UxUyPd0akRhsbg6d1sYt6sPXGRsqK8DmM0bl+wU1E+ywk
br2T04Mi4DhXbv5CdvW9cIhjfJrbFM9xB4eyRM8HILFZ9kJ3eJ8UYyPqBS1N0JAo
jlg8aiM4Ldb6PUDWQQ94O9lkhKFJc2Hun7SGu65Nw7T5Zl4gscm+lftA0l6X5swE
lXpWzS30oLkHundEu1k3B5Gx8VA8WBRiXBYGDSu+/+TtdWRau05FCypZ3jk2e1Md
sif+UHj+B1cOza5qHq9c1jXneCPOKBzzlNM47Hlq3sGbO9XxvZU1bpDW2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0FdxNYD+S8hnthBrOF3PC71UfJMB8GA1UdIwQY
MBaAFJXLGMfs5r3clXDzf/eGYLWObCBEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGNzWXgtem12ZHlWY1BOXzk0Wmd0WTVzSUVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi84ZjRhMmItNDkyYy00MzMxLTg0Zjgt
MDI2ZTBhNGNjYWFhLzEvbGNzWXgtem12ZHlWY1BOXzk0Wmd0WTVzSUVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi84ZjRhMmItNDkyYy00MzMxLTg0ZjgtMDI2ZTBhNGNjYWFh
LzEvbGNzWXgtem12ZHlWY1BOXzk0Wmd0WTVzSUVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOQg/2N/j
zRsMJXC4W23bOYJfjfa351ocVbqjAzEM0gFL4Ca8Zg3pCss674434LzsJ1CeIOKy
tuz/UPYFU2IbFMcmNSwQwCvv8kBbt0CEavsbq3iVaGtvFVzm7+/1gJWgsXH6RNYm
ECQwqnO8KUxo68mcVWCJOk+iny6e8d1j8aQtbiymjkT5VYzKu33gWDASu96LfVL8
QTveGyGPJ5zv/abuWwVCQI404Mb8fjSDHkWTfHLh+7Xf8NOQVxKXYdB3s+tff6J1
jbgMC5lhKFGM7Vx/I890npvCj3xNYDEsUofqS1MniNkEXQFmzjPHIqgcov7tja1m
XJ6vlrFW/FdmHQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 13:08:09 2025 by rpki-client