
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
File: lFtz335v4RAPHROgfBjVmvIoQow.mft (raw, json)
Hash identifier: f6I1LMT+IjCHNcKZYLiHYXjR8VTUmAxwrEmf2GZdkks=
Subject key identifier: 5B:86:C8:B4:E6:DC:7E:EB:C6:CF:70:78:FD:ED:48:F7:4A:83:A7:7C
Authority key identifier: 94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C
Certificate issuer: /CN=945b73df7e6fe1100f1d13a07c18d59af228428c
Certificate serial: 01984708D4645C4B53C5C5E721F5CFEDDFB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
Manifest number: 14A6
Signing time: Sat 26 Jul 2025 14:00:17 +0000
Manifest this update: Sat 26 Jul 2025 14:00:17 +0000
Manifest next update: Sun 27 Jul 2025 14:00:17 +0000
Files and hashes: 1: 9LVEIaMlmJxNlD9z3n5kSDNE07w.roa (hash: Ts++AgaSboNBt9jLBwSwB9DRgMmL7vyooMiQkdJdfP8=)
2: lFtz335v4RAPHROgfBjVmvIoQow.crl (hash: O8Av2bmQpVVOprkjboB0e7mBMTNwHDvVB11zCsJZiQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 14:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:08:d4:64:5c:4b:53:c5:c5:e7:21:f5:cf:ed:df:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=945b73df7e6fe1100f1d13a07c18d59af228428c
Validity
Not Before: Jul 26 14:00:17 2025 GMT
Not After : Jul 27 14:00:17 2025 GMT
Subject: CN=5b86c8b4e6dc7eebc6cf7078fded48f74a83a77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bc:7b:04:e2:c1:07:eb:2b:d9:d1:b2:67:a4:
ee:83:85:cb:3b:a1:5f:2d:75:f5:a2:c9:5a:3a:22:
30:fc:6d:10:ef:c6:14:2d:a9:2d:a0:74:1f:06:20:
fc:d9:a3:42:69:f2:97:e9:c0:12:53:61:71:86:3d:
d3:61:07:da:b3:41:a2:44:9d:16:c2:ce:2d:d0:be:
6f:d4:90:29:95:71:c7:34:ba:b9:a1:36:77:02:35:
01:62:ac:88:b9:3b:61:b2:4e:66:bb:16:eb:11:f2:
b0:d5:b0:74:a0:32:0b:2b:9b:10:4d:20:31:82:ea:
5d:62:0c:3c:91:38:6f:1b:8f:37:b5:82:66:84:fa:
56:b7:fc:b3:a4:70:b8:6a:44:92:86:fe:da:db:a9:
b1:f6:35:80:03:4b:97:dc:03:d2:59:c7:43:dd:fa:
09:7f:b7:91:97:54:fd:23:65:e8:fd:ef:39:a6:8c:
99:0b:e3:79:7f:93:65:af:bf:61:fd:24:6d:22:df:
96:67:74:c0:2e:9d:e7:a9:9e:ba:7d:a3:ce:b7:a7:
13:12:2a:1e:ab:b8:9e:95:af:b8:6f:d6:a5:16:31:
0d:9f:73:57:d0:26:86:d5:3f:9d:d1:e4:16:b2:77:
ed:25:7b:00:c6:dc:ee:2b:bc:90:d9:86:b5:15:a1:
cb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:86:C8:B4:E6:DC:7E:EB:C6:CF:70:78:FD:ED:48:F7:4A:83:A7:7C
X509v3 Authority Key Identifier:
keyid:94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e0:72:cc:0f:b7:15:a2:c1:36:4c:b1:2f:f5:a1:13:47:1e:
c0:5f:78:36:34:0e:46:f1:3a:4d:d2:87:ab:cc:e1:14:a1:bc:
26:d7:d4:9d:1f:98:8b:42:7f:ad:35:be:91:f5:0b:a1:90:6e:
f8:0b:7b:de:5c:26:fc:25:f8:48:a8:18:cf:77:6a:20:00:aa:
10:58:7c:31:7d:8f:16:84:f0:7e:50:13:d9:b7:48:da:e6:32:
1a:3f:99:17:65:c3:11:ee:19:69:c8:c7:eb:45:fd:7c:de:46:
02:31:08:1e:3a:04:55:e9:59:81:e1:3e:7c:41:78:ec:eb:c8:
58:08:48:ce:1b:9c:5d:e8:01:a3:23:89:01:4f:a5:60:80:dc:
2b:c0:ae:b7:e7:c0:e9:ed:e7:93:be:77:4e:5e:91:42:00:16:
82:cd:51:c4:fb:0a:4b:0d:12:1b:93:55:d9:49:8f:b1:2a:70:
5f:76:be:7b:ac:52:9f:fb:71:c2:11:93:61:6c:21:0c:3a:e8:
54:24:06:a6:f1:d5:ef:ca:ec:f1:03:54:0f:b2:c9:2f:12:09:
27:2b:a8:2b:d9:00:e8:33:8c:ac:1a:66:f0:0e:9e:21:b1:e3:
e0:b7:4c:a8:e7:f2:76:c8:44:25:df:45:03:43:3e:f7:76:0a:
f0:64:4a:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHCNRkXEtTxcXnIfXP7d+3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NWI3M2RmN2U2ZmUxMTAwZjFkMTNhMDdjMThkNTlhZjIy
ODQyOGMwHhcNMjUwNzI2MTQwMDE3WhcNMjUwNzI3MTQwMDE3WjAzMTEwLwYDVQQD
Eyg1Yjg2YzhiNGU2ZGM3ZWViYzZjZjcwNzhmZGVkNDhmNzRhODNhNzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbx7BOLBB+sr2dGyZ6Tug4XLO6Ff
LXX1oslaOiIw/G0Q78YULaktoHQfBiD82aNCafKX6cASU2Fxhj3TYQfas0GiRJ0W
ws4t0L5v1JAplXHHNLq5oTZ3AjUBYqyIuTthsk5muxbrEfKw1bB0oDILK5sQTSAx
gupdYgw8kThvG483tYJmhPpWt/yzpHC4akSShv7a26mx9jWAA0uX3APSWcdD3foJ
f7eRl1T9I2Xo/e85poyZC+N5f5Nlr79h/SRtIt+WZ3TALp3nqZ66faPOt6cTEioe
q7iela+4b9alFjENn3NX0CaG1T+d0eQWsnftJXsAxtzuK7yQ2Ya1FaHLiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFuGyLTm3H7rxs9weP3tSPdKg6d8MB8GA1UdIwQY
MBaAFJRbc99+b+EQDx0ToHwY1ZryKEKMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEZ0ejMzNXY0UkFQSFJPZ2ZCalZtdklvUW93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9lYzYxOGYtOWY2MS00MTg1LWJhMGQt
NmU0NTI0MjVhMTkzLzEvbEZ0ejMzNXY0UkFQSFJPZ2ZCalZtdklvUW93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9lYzYxOGYtOWY2MS00MTg1LWJhMGQtNmU0NTI0MjVhMTkz
LzEvbEZ0ejMzNXY0UkFQSFJPZ2ZCalZtdklvUW93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF+ByzA+3
FaLBNkyxL/WhE0cewF94NjQORvE6TdKHq8zhFKG8JtfUnR+Yi0J/rTW+kfULoZBu
+At73lwm/CX4SKgYz3dqIACqEFh8MX2PFoTwflAT2bdI2uYyGj+ZF2XDEe4ZacjH
60X9fN5GAjEIHjoEVelZgeE+fEF47OvIWAhIzhucXegBoyOJAU+lYIDcK8Cut+fA
6e3nk753Tl6RQgAWgs1RxPsKSw0SG5NV2UmPsSpwX3a+e6xSn/txwhGTYWwhDDro
VCQGpvHV78rs8QNUD7LJLxIJJyuoK9kA6DOMrBpm8A6eIbHj4LdMqOfydshEJd9F
A0M+93YK8GRKNQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 23:44:40 2025 by rpki-client