Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
File: lakErGCT4eIpoHTFBQb_7NoBDM8.mft (raw, json)
Hash identifier: LldeVPvHIhf9kanxFcVo6/USdHrACna0HK2zmQzgfAo=
Subject key identifier: 92:63:D1:E1:0F:08:D5:4F:29:61:D9:B5:B6:95:F4:CA:5E:5B:FA:72
Authority key identifier: 95:A9:04:AC:60:93:E1:E2:29:A0:74:C5:05:06:FF:EC:DA:01:0C:CF
Certificate issuer: /CN=95a904ac6093e1e229a074c50506ffecda010ccf
Certificate serial: 0198530D1BDE4D5A87438B5509A8D92A5DCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
Manifest number: 0B7D
Signing time: Mon 28 Jul 2025 22:00:24 +0000
Manifest this update: Mon 28 Jul 2025 22:00:24 +0000
Manifest next update: Tue 29 Jul 2025 22:00:24 +0000
Files and hashes: 1: EYwLNQ0R_Ied-v-mXvUH_vf6GVA.roa (hash: TajJUilMmDGZNmoTd4v8tDuWl6eHYmByCynqf999DBU=)
2: lakErGCT4eIpoHTFBQb_7NoBDM8.crl (hash: qupkTOJk6jF/0PXkpiqzzDteaA+tIE4kuKLZQzFXIzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0d:1b:de:4d:5a:87:43:8b:55:09:a8:d9:2a:5d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a904ac6093e1e229a074c50506ffecda010ccf
Validity
Not Before: Jul 28 22:00:24 2025 GMT
Not After : Jul 29 22:00:24 2025 GMT
Subject: CN=9263d1e10f08d54f2961d9b5b695f4ca5e5bfa72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cb:b9:80:ef:bb:2e:48:90:eb:05:fd:f1:e2:
76:50:b2:37:7b:43:ce:fd:b5:60:c6:05:29:0a:08:
4c:e9:bf:8c:dd:43:6a:cc:ba:41:ca:f1:71:08:5d:
22:d3:2a:e5:d7:92:4d:21:e4:b5:64:2a:27:88:4a:
e4:8b:f8:67:37:80:e4:b3:75:79:73:ce:b2:46:45:
54:f3:77:55:bf:61:21:b9:19:a1:3e:7b:b5:57:07:
ac:7a:43:bf:3a:88:a9:ba:af:dc:85:6d:2f:99:e9:
a1:c3:05:c5:54:23:72:cd:2c:c2:e1:21:10:9a:90:
c4:ae:23:33:fe:90:eb:10:1a:12:1d:ab:ff:79:3a:
aa:05:9c:f1:d4:de:8e:d1:a8:74:4a:19:98:6f:b8:
3b:74:57:e8:fb:a0:3f:44:a7:9a:ed:0f:8c:ad:e7:
fc:d4:06:b1:84:1e:3f:6f:a5:c9:d9:84:9f:52:4a:
80:58:7b:d1:8d:91:e6:9b:31:77:2c:60:87:79:91:
d1:83:69:c6:2a:3c:83:6f:96:81:72:eb:e0:a8:ae:
28:ed:54:03:b9:ce:37:7a:cf:22:64:65:d7:d4:35:
dd:ac:54:58:0d:8d:a0:84:4b:b9:e6:e5:a4:43:e4:
04:3c:f6:fd:10:db:2d:19:d9:a5:a8:b0:c1:28:58:
54:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:63:D1:E1:0F:08:D5:4F:29:61:D9:B5:B6:95:F4:CA:5E:5B:FA:72
X509v3 Authority Key Identifier:
keyid:95:A9:04:AC:60:93:E1:E2:29:A0:74:C5:05:06:FF:EC:DA:01:0C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lakErGCT4eIpoHTFBQb_7NoBDM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/48f99e-1a10-45c3-aa34-4cd15cbc501b/1/lakErGCT4eIpoHTFBQb_7NoBDM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:ba:a8:f5:1a:6e:35:d4:52:c9:f9:22:d6:fd:54:e7:21:3b:
95:09:de:88:61:5c:a5:94:5c:ee:7e:14:57:00:da:30:32:db:
90:b8:18:03:ff:49:a8:71:fa:ee:16:d1:cc:30:53:3b:55:a1:
3f:ba:ee:ea:a5:f0:8b:ad:29:a9:54:aa:5b:b1:b6:ad:5f:ff:
d1:60:01:81:5d:21:0d:c7:4b:de:0e:cc:3e:da:63:83:b6:27:
d2:0c:d9:73:35:c0:2b:a1:dd:4c:1e:32:33:b5:e0:d7:7c:cc:
b8:02:6b:11:70:cf:db:69:e1:7f:4d:a4:10:3e:ed:42:32:c7:
d1:b3:30:30:25:0c:e1:0d:4d:83:03:58:ea:83:b0:3a:a9:85:
c9:62:03:54:18:fe:48:74:4c:d8:ff:b3:f5:d5:01:93:c7:8c:
fe:ca:7a:a1:e1:5a:cb:e0:67:1b:53:6e:c7:c7:5f:bd:eb:8c:
9d:e9:74:26:a2:37:80:08:10:06:8f:ca:ea:cc:65:76:7f:b4:
e2:8d:7f:3b:1c:96:89:19:95:1d:6c:eb:4f:f8:1d:55:96:af:
52:02:46:f0:6c:bc:49:42:d2:17:d1:4d:32:95:6e:4b:dc:f4:
1c:05:0f:67:bf:20:4f:c9:72:af:19:cf:ca:68:2f:d9:91:2e:
c9:80:1a:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTDRveTVqHQ4tVCajZKl3PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1YTkwNGFjNjA5M2UxZTIyOWEwNzRjNTA1MDZmZmVjZGEw
MTBjY2YwHhcNMjUwNzI4MjIwMDI0WhcNMjUwNzI5MjIwMDI0WjAzMTEwLwYDVQQD
Eyg5MjYzZDFlMTBmMDhkNTRmMjk2MWQ5YjViNjk1ZjRjYTVlNWJmYTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMu5gO+7LkiQ6wX98eJ2ULI3e0PO
/bVgxgUpCghM6b+M3UNqzLpByvFxCF0i0yrl15JNIeS1ZConiErki/hnN4Dks3V5
c86yRkVU83dVv2EhuRmhPnu1VwesekO/Ooipuq/chW0vmemhwwXFVCNyzSzC4SEQ
mpDEriMz/pDrEBoSHav/eTqqBZzx1N6O0ah0ShmYb7g7dFfo+6A/RKea7Q+Mref8
1AaxhB4/b6XJ2YSfUkqAWHvRjZHmmzF3LGCHeZHRg2nGKjyDb5aBcuvgqK4o7VQD
uc43es8iZGXX1DXdrFRYDY2ghEu55uWkQ+QEPPb9ENstGdmlqLDBKFhU9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJJj0eEPCNVPKWHZtbaV9MpeW/pyMB8GA1UdIwQY
MBaAFJWpBKxgk+HiKaB0xQUG/+zaAQzPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGFrRXJHQ1Q0ZUlwb0hURkJRYl83Tm9CRE04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80OGY5OWUtMWExMC00NWMzLWFhMzQt
NGNkMTVjYmM1MDFiLzEvbGFrRXJHQ1Q0ZUlwb0hURkJRYl83Tm9CRE04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80OGY5OWUtMWExMC00NWMzLWFhMzQtNGNkMTVjYmM1MDFi
LzEvbGFrRXJHQ1Q0ZUlwb0hURkJRYl83Tm9CRE04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARrqo9Rpu
NdRSyfki1v1U5yE7lQneiGFcpZRc7n4UVwDaMDLbkLgYA/9JqHH67hbRzDBTO1Wh
P7ru6qXwi60pqVSqW7G2rV//0WABgV0hDcdL3g7MPtpjg7Yn0gzZczXAK6HdTB4y
M7Xg13zMuAJrEXDP22nhf02kED7tQjLH0bMwMCUM4Q1NgwNY6oOwOqmFyWIDVBj+
SHRM2P+z9dUBk8eM/sp6oeFay+BnG1Nux8dfveuMnel0JqI3gAgQBo/K6sxldn+0
4o1/OxyWiRmVHWzrT/gdVZavUgJG8Gy8SULSF9FNMpVuS9z0HAUPZ78gT8lyrxnP
ymgv2ZEuyYAayQ==
-----END CERTIFICATE-----
Generated at Tue Jul 29 07:08:33 2025 by rpki-client