Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft
File: lvbqdo68ndwGj1aX39dcrt164Qg.mft (raw, json)
Hash identifier: VFF3cP47wwrGsvBasT7u9MwZ5jhfNNoWI8xbtg2ZQRM=
Subject key identifier: A5:14:4C:CD:71:20:F9:7D:57:C8:69:47:4F:26:97:8C:42:49:28:C1
Authority key identifier: 96:F6:EA:76:8E:BC:9D:DC:06:8F:56:97:DF:D7:5C:AE:DD:7A:E1:08
Certificate issuer: /CN=96f6ea768ebc9ddc068f5697dfd75caedd7ae108
Certificate serial: 0198402BC332AF3AABB85A50F2482849EBBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvbqdo68ndwGj1aX39dcrt164Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft
Manifest number: 0F63
Signing time: Fri 25 Jul 2025 06:01:06 +0000
Manifest this update: Fri 25 Jul 2025 06:01:06 +0000
Manifest next update: Sat 26 Jul 2025 06:01:06 +0000
Files and hashes: 1: hpkYZsr4ehkRhZoX0PY5vhGw4f0.roa (hash: yIy93XAXh8xhvhofZiP5cDUdE2rbmmhviH4jDOGAZ/g=)
2: lvbqdo68ndwGj1aX39dcrt164Qg.crl (hash: Dpgx6hKcViXCmaPzlnWr0svF1g8B26Cp1Fibk1CzYWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvbqdo68ndwGj1aX39dcrt164Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:2b:c3:32:af:3a:ab:b8:5a:50:f2:48:28:49:eb:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f6ea768ebc9ddc068f5697dfd75caedd7ae108
Validity
Not Before: Jul 25 06:01:06 2025 GMT
Not After : Jul 26 06:01:06 2025 GMT
Subject: CN=a5144ccd7120f97d57c869474f26978c424928c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:73:80:e6:a0:0d:e2:2c:09:0f:af:b5:8f:87:
9b:e4:05:d3:49:5a:56:88:52:70:da:cf:69:16:dd:
44:f9:cb:30:3b:22:01:e6:10:bd:02:03:d1:3b:fa:
d1:24:28:2d:1c:13:6e:2c:e6:39:20:82:32:a7:92:
1d:12:b8:1b:46:79:f9:4f:96:38:9a:b4:5c:fa:b8:
ad:3f:50:07:b9:32:67:f3:75:39:a1:bc:e8:8b:dc:
2e:f5:0f:b2:c6:7a:5a:82:6b:45:73:82:ce:8b:f6:
74:3a:05:63:c3:07:1b:c7:be:5a:88:4f:f7:e9:39:
87:89:13:81:83:fb:70:3b:0d:79:4d:42:46:0b:7c:
8e:12:ad:6a:ed:9f:44:1f:dd:36:72:97:bb:c7:7f:
64:30:34:62:69:4f:ba:80:a4:d9:26:81:6d:f3:78:
d9:eb:6b:51:7e:ce:e0:42:34:db:da:da:26:9b:84:
c2:84:f7:b0:94:35:8e:c3:e6:75:99:ba:25:ba:41:
61:57:b9:1b:39:54:32:20:48:e9:90:72:da:8d:bd:
3a:d9:dd:c3:ee:80:59:51:b4:c6:9e:3b:0f:bc:9c:
d4:ed:90:47:0d:7e:76:f3:2e:13:84:92:7d:f3:87:
31:02:fb:f2:d2:f8:5a:a2:b1:47:52:4a:ff:80:23:
4c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:14:4C:CD:71:20:F9:7D:57:C8:69:47:4F:26:97:8C:42:49:28:C1
X509v3 Authority Key Identifier:
keyid:96:F6:EA:76:8E:BC:9D:DC:06:8F:56:97:DF:D7:5C:AE:DD:7A:E1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvbqdo68ndwGj1aX39dcrt164Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:39:8e:0b:8c:49:2f:f8:e4:72:ee:46:e7:68:20:a8:aa:e6:
72:e2:20:aa:41:25:81:aa:22:ec:54:ab:0d:b1:c2:8e:2f:b8:
a0:3d:f5:a9:4e:39:2f:86:d8:8f:31:61:f4:87:4a:b3:f2:ed:
4c:a7:fc:e5:c6:ec:e4:fc:7e:7e:ba:be:22:5c:00:94:a8:d0:
f0:17:72:67:da:84:c2:08:b0:b8:fe:1d:d6:eb:97:44:d0:c8:
04:69:a3:cd:60:58:a5:b3:89:16:4e:0d:d8:be:64:6b:f7:e4:
1b:29:19:28:6a:f6:1e:23:63:94:56:4e:7b:3f:da:eb:67:da:
1d:08:ac:af:b0:dd:b3:c2:cd:97:1e:e3:fe:45:38:53:69:87:
00:52:2c:1c:eb:8a:e7:bf:41:1a:46:f8:06:4d:fa:c9:49:10:
c0:f9:81:ad:ac:66:fa:4e:04:5e:92:c6:b2:94:68:45:d8:39:
ed:78:75:a5:ca:bf:d6:7b:9c:91:fc:44:36:d3:d6:0d:a7:eb:
16:46:72:31:16:73:80:6d:a8:81:b5:99:ca:d5:40:d7:c3:31:
af:90:18:10:8d:a2:01:60:83:51:94:13:8c:01:40:2a:51:9a:
65:dc:e2:33:cb:7a:56:b0:3c:21:fd:75:25:ad:10:2a:95:ed:
e3:fc:c2:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhAK8MyrzqruFpQ8kgoSeu6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZjZlYTc2OGViYzlkZGMwNjhmNTY5N2RmZDc1Y2FlZGQ3
YWUxMDgwHhcNMjUwNzI1MDYwMTA2WhcNMjUwNzI2MDYwMTA2WjAzMTEwLwYDVQQD
EyhhNTE0NGNjZDcxMjBmOTdkNTdjODY5NDc0ZjI2OTc4YzQyNDkyOGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7nOA5qAN4iwJD6+1j4eb5AXTSVpW
iFJw2s9pFt1E+cswOyIB5hC9AgPRO/rRJCgtHBNuLOY5IIIyp5IdErgbRnn5T5Y4
mrRc+ritP1AHuTJn83U5obzoi9wu9Q+yxnpagmtFc4LOi/Z0OgVjwwcbx75aiE/3
6TmHiROBg/twOw15TUJGC3yOEq1q7Z9EH902cpe7x39kMDRiaU+6gKTZJoFt83jZ
62tRfs7gQjTb2tomm4TChPewlDWOw+Z1mbolukFhV7kbOVQyIEjpkHLajb062d3D
7oBZUbTGnjsPvJzU7ZBHDX528y4ThJJ984cxAvvy0vhaorFHUkr/gCNMRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKUUTM1xIPl9V8hpR08ml4xCSSjBMB8GA1UdIwQY
MBaAFJb26naOvJ3cBo9Wl9/XXK7deuEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHZicWRvNjhuZHdHajFhWDM5ZGNydDE2NFFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83YmFhMWMtOGRhMS00ZjgwLWJhYmIt
YjRiZmMyOWU3MWEzLzEvbHZicWRvNjhuZHdHajFhWDM5ZGNydDE2NFFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS83YmFhMWMtOGRhMS00ZjgwLWJhYmItYjRiZmMyOWU3MWEz
LzEvbHZicWRvNjhuZHdHajFhWDM5ZGNydDE2NFFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdjmOC4xJ
L/jkcu5G52ggqKrmcuIgqkElgaoi7FSrDbHCji+4oD31qU45L4bYjzFh9IdKs/Lt
TKf85cbs5Px+frq+IlwAlKjQ8BdyZ9qEwgiwuP4d1uuXRNDIBGmjzWBYpbOJFk4N
2L5ka/fkGykZKGr2HiNjlFZOez/a62faHQisr7Dds8LNlx7j/kU4U2mHAFIsHOuK
579BGkb4Bk36yUkQwPmBraxm+k4EXpLGspRoRdg57Xh1pcq/1nuckfxENtPWDafr
FkZyMRZzgG2ogbWZytVA18Mxr5AYEI2iAWCDUZQTjAFAKlGaZdziM8t6VrA8If11
Ja0QKpXt4/zC/A==
-----END CERTIFICATE-----
Generated at Fri Jul 25 13:02:42 2025 by rpki-client