
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
File: lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft (raw, json)
Hash identifier: AmPJrTORXQLUkEzEAZhMnUyetwufijn8ijbouXuGSdc=
Subject key identifier: FD:7E:26:E8:E5:7A:86:01:51:DA:2D:05:39:D7:09:E8:F2:DB:B1:7D
Authority key identifier: 95:2D:DC:B3:50:78:26:7F:4F:37:52:E5:B4:CC:C6:5A:66:3A:63:E7
Certificate issuer: /CN=952ddcb35078267f4f3752e5b4ccc65a663a63e7
Certificate serial: 019849654234A7B873DE083C8CE7EF704FB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
Manifest number: 02E2
Signing time: Sun 27 Jul 2025 01:00:29 +0000
Manifest this update: Sun 27 Jul 2025 01:00:29 +0000
Manifest next update: Mon 28 Jul 2025 01:00:29 +0000
Files and hashes: 1: fxlFgI3EysiECIF3mL-wg3P66gA.roa (hash: WG+Wf/XaXu5fK/R90C0HW02K/9LIUpQXBf5GmZqFRDg=)
2: lS3cs1B4Jn9PN1LltMzGWmY6Y-c.crl (hash: uj3rpfL0Jiy4UKNKQS7Y1352qqfIFJXg06+38wV5Vcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:42:34:a7:b8:73:de:08:3c:8c:e7:ef:70:4f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952ddcb35078267f4f3752e5b4ccc65a663a63e7
Validity
Not Before: Jul 27 01:00:29 2025 GMT
Not After : Jul 28 01:00:29 2025 GMT
Subject: CN=fd7e26e8e57a860151da2d0539d709e8f2dbb17d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d0:bd:0d:4a:29:b6:74:02:1a:37:a8:56:cd:
6b:fa:98:5e:df:b0:7b:d5:4f:20:8b:92:39:0f:83:
37:99:ee:24:58:44:bd:fc:a5:dc:bb:04:45:73:61:
28:b7:83:3b:72:69:13:10:9b:d1:6d:6d:d5:ea:f5:
a9:cd:e2:73:c3:0a:27:31:95:4c:1f:a3:06:9b:8b:
2b:e1:18:e2:39:60:35:e1:db:b4:aa:69:36:d0:4f:
85:2c:c4:82:4d:c5:c7:d0:2f:6c:f1:4d:ad:e4:61:
6c:65:84:41:24:59:2a:c6:27:56:75:c4:38:4d:b9:
91:c6:24:ca:5c:15:ab:c8:6b:32:b0:29:d6:cf:18:
b8:88:7a:88:24:47:fd:b2:36:24:b5:a8:40:3f:fd:
3b:d1:ad:b8:a2:ca:59:ce:fc:4c:60:79:9a:d6:1c:
62:71:a5:9d:5e:b4:43:19:7f:f7:1a:7a:f0:07:72:
39:af:a4:16:4a:78:16:3e:e3:3e:0a:7c:64:7e:4f:
97:e2:e2:1d:ec:1c:6b:6b:20:fc:5f:c3:97:c0:5b:
65:48:35:bf:fb:0a:51:c6:3f:ab:8f:2e:d4:96:34:
6e:4e:b0:67:47:6e:cd:20:c2:53:ef:59:a1:ab:6c:
52:23:07:4c:b1:48:db:12:dc:e7:d6:aa:71:eb:cc:
5c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:7E:26:E8:E5:7A:86:01:51:DA:2D:05:39:D7:09:E8:F2:DB:B1:7D
X509v3 Authority Key Identifier:
keyid:95:2D:DC:B3:50:78:26:7F:4F:37:52:E5:B4:CC:C6:5A:66:3A:63:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:97:1e:6a:22:29:36:12:9f:8f:83:b5:02:95:3d:f8:d1:a4:
a8:2b:3d:c4:f0:7e:08:1c:d0:9f:84:0a:48:a2:29:c7:d8:77:
e4:a9:b7:82:38:3e:21:9f:7f:4d:58:b4:93:01:f0:12:c8:bf:
19:e1:9d:0c:e5:d5:39:bf:f4:63:f5:df:11:4d:38:da:c8:fc:
82:6f:64:d9:95:20:1f:e0:39:da:c1:b0:b2:20:73:d8:35:6a:
56:f3:b3:1e:6d:c3:af:ab:de:31:94:46:e4:40:c5:b7:8a:30:
60:39:c4:0b:50:f5:e1:6e:6b:8d:73:8c:81:d7:76:4c:5d:4d:
68:56:76:ea:79:64:6f:cf:f7:6f:3d:db:41:f4:b9:3b:19:57:
c2:76:0a:96:77:48:6c:61:50:24:11:c8:72:63:67:3c:00:8b:
9f:ad:3d:7b:f7:f3:17:14:85:29:db:60:4f:10:a4:2c:c3:85:
ff:fd:89:1c:c2:16:bc:a9:d2:2d:23:aa:2f:40:0b:75:f2:1d:
78:17:b2:00:dc:b1:61:bf:d5:a3:1b:0d:af:ee:f9:0f:98:80:
76:8c:05:86:74:9b:7c:ec:2b:06:b2:74:5c:56:a9:f0:98:bf:
c7:85:96:84:12:1a:b5:a3:e9:5e:2a:85:c3:54:16:2c:fc:4f:
9a:18:d3:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZUI0p7hz3gg8jOfvcE+wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MmRkY2IzNTA3ODI2N2Y0ZjM3NTJlNWI0Y2NjNjVhNjYz
YTYzZTcwHhcNMjUwNzI3MDEwMDI5WhcNMjUwNzI4MDEwMDI5WjAzMTEwLwYDVQQD
EyhmZDdlMjZlOGU1N2E4NjAxNTFkYTJkMDUzOWQ3MDllOGYyZGJiMTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutC9DUoptnQCGjeoVs1r+phe37B7
1U8gi5I5D4M3me4kWES9/KXcuwRFc2Eot4M7cmkTEJvRbW3V6vWpzeJzwwonMZVM
H6MGm4sr4RjiOWA14du0qmk20E+FLMSCTcXH0C9s8U2t5GFsZYRBJFkqxidWdcQ4
TbmRxiTKXBWryGsysCnWzxi4iHqIJEf9sjYktahAP/070a24ospZzvxMYHma1hxi
caWdXrRDGX/3GnrwB3I5r6QWSngWPuM+Cnxkfk+X4uId7BxrayD8X8OXwFtlSDW/
+wpRxj+rjy7UljRuTrBnR27NIMJT71mhq2xSIwdMsUjbEtzn1qpx68xcRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP1+JujleoYBUdotBTnXCejy27F9MB8GA1UdIwQY
MBaAFJUt3LNQeCZ/TzdS5bTMxlpmOmPnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFMzY3MxQjRKbjlQTjFMbHRNekdXbVk2WS1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9jNTliNjEtOTExNS00MTVmLTgxZjIt
YTRjMWJiY2I4Yzk3LzEvbFMzY3MxQjRKbjlQTjFMbHRNekdXbVk2WS1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9jNTliNjEtOTExNS00MTVmLTgxZjItYTRjMWJiY2I4Yzk3
LzEvbFMzY3MxQjRKbjlQTjFMbHRNekdXbVk2WS1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmpceaiIp
NhKfj4O1ApU9+NGkqCs9xPB+CBzQn4QKSKIpx9h35Km3gjg+IZ9/TVi0kwHwEsi/
GeGdDOXVOb/0Y/XfEU042sj8gm9k2ZUgH+A52sGwsiBz2DVqVvOzHm3Dr6veMZRG
5EDFt4owYDnEC1D14W5rjXOMgdd2TF1NaFZ26nlkb8/3bz3bQfS5OxlXwnYKlndI
bGFQJBHIcmNnPACLn609e/fzFxSFKdtgTxCkLMOF//2JHMIWvKnSLSOqL0ALdfId
eBeyANyxYb/VoxsNr+75D5iAdowFhnSbfOwrBrJ0XFap8Ji/x4WWhBIataPpXiqF
w1QWLPxPmhjTNA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:55:44 2025 by rpki-client