Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
File: LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft (raw, json)
Hash identifier: fK6p60yUZ0oZ5DyI58yjHav8TDuAWmevUN3utpbFj+w=
Subject key identifier: 96:4F:A1:24:F6:BC:51:F1:96:2B:B7:FB:EA:52:81:24:60:D0:04:B2
Authority key identifier: 2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC
Certificate issuer: /CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc
Certificate serial: 01984852B95898CFE38D6D578EE7E78DE149
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
Manifest number: 15FA
Signing time: Sat 26 Jul 2025 20:00:37 +0000
Manifest this update: Sat 26 Jul 2025 20:00:37 +0000
Manifest next update: Sun 27 Jul 2025 20:00:37 +0000
Files and hashes: 1: LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl (hash: nncK9KELc9+LsWosRvPGKEBaDIcqje/sQ0/LjJ9N7FU=)
2: k9ESiOC05FAL5OZXSx8n68sQwKU.roa (hash: x3z9I2/sycjs0uOQJeLYl+8lQLkZ9uNIg5/ImA60dEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:b9:58:98:cf:e3:8d:6d:57:8e:e7:e7:8d:e1:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd41bcc3cd73e0dc7f7e95b5d0dca6d6857bedc
Validity
Not Before: Jul 26 20:00:37 2025 GMT
Not After : Jul 27 20:00:37 2025 GMT
Subject: CN=964fa124f6bc51f1962bb7fbea52812460d004b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4e:d4:3a:73:c5:f7:51:c0:e0:52:29:2c:c9:
8c:75:1b:f0:04:b3:71:7b:b5:40:8d:d7:9e:f2:e0:
8c:29:a6:81:e7:2b:e2:c2:67:3a:c2:c2:15:24:5f:
05:82:ec:19:f1:9e:74:fc:d1:34:81:e7:92:6c:f0:
3c:ca:83:7c:b8:70:49:09:09:a7:2b:17:e8:6e:57:
80:0c:00:bc:3b:d3:f3:09:2f:6a:bd:06:80:c3:0c:
90:e5:db:e3:a6:0d:bf:5e:cb:6c:b3:7a:85:44:1b:
28:41:e6:a0:53:79:d8:0f:7a:56:04:0c:72:18:6c:
0c:d7:72:f2:76:76:3a:23:81:26:06:70:fe:dc:dd:
46:ea:9d:09:9a:47:aa:88:8f:fd:4f:f2:3c:78:0f:
0a:6c:f3:d5:b3:d2:fc:3f:a4:b7:b9:d5:a4:57:c8:
f6:62:25:cc:9a:09:a9:6f:68:c0:5c:c8:dc:6b:41:
46:9e:96:bf:f1:a1:f1:d1:96:26:66:af:f5:e2:03:
da:c7:94:1c:60:dc:ce:21:d5:50:36:63:8c:2b:75:
2c:07:92:0f:02:0e:26:32:a7:a7:cf:c4:98:79:d7:
3d:27:ee:e2:05:4c:c4:c6:b8:e2:fa:21:2b:83:cd:
88:c4:2a:f6:44:ee:76:73:65:b2:e4:eb:6e:b8:2f:
5a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4F:A1:24:F6:BC:51:F1:96:2B:B7:FB:EA:52:81:24:60:D0:04:B2
X509v3 Authority Key Identifier:
keyid:2C:D4:1B:CC:3C:D7:3E:0D:C7:F7:E9:5B:5D:0D:CA:6D:68:57:BE:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1ad9bf-0322-4534-b009-e6e91bf052fe/1/LNQbzDzXPg3H9-lbXQ3KbWhXvtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:85:ce:14:d5:67:42:53:94:37:e7:b6:f9:38:ab:f8:95:10:
36:c3:da:64:bd:98:4f:5f:9d:ca:ac:f7:bd:49:b7:5e:5d:8d:
db:a8:c6:9e:5a:4c:f6:17:4a:8f:e4:61:b5:b9:4a:4c:74:da:
4d:22:6b:c2:8c:a6:a9:0b:4e:87:16:6a:02:f3:5e:ba:c5:13:
95:eb:49:19:e0:3e:3f:bb:e1:d6:c9:55:42:40:5a:6b:d0:01:
0f:05:6e:90:e2:19:a5:05:52:a0:0a:99:17:4e:a1:f3:de:7b:
10:e2:a4:0c:3a:a2:b9:3b:6a:76:80:79:a2:21:6c:16:df:cb:
af:4e:79:23:0e:2f:b9:aa:e2:9d:ec:ad:c8:48:6b:90:5d:6e:
58:17:d0:a6:cd:15:5a:8a:a2:cf:4b:b4:a5:95:d2:be:f9:22:
b5:01:84:a2:d8:11:72:90:8b:f9:ed:ff:ec:fc:07:cc:b2:52:
76:65:a9:02:11:e4:c6:30:46:b2:96:bd:bc:21:0f:ae:4e:c5:
1b:8f:cf:c6:ee:0d:4b:b7:a8:62:11:1b:e1:ab:f2:89:95:2f:
39:ec:5c:4c:16:32:7d:55:a7:05:c2:a6:ee:81:2d:ad:ba:d5:
96:52:3c:f0:a3:73:f3:5c:a4:04:7c:b9:57:51:a1:6c:1c:74:
ab:3e:0f:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIUrlYmM/jjW1XjufnjeFJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjZDQxYmNjM2NkNzNlMGRjN2Y3ZTk1YjVkMGRjYTZkNjg1
N2JlZGMwHhcNMjUwNzI2MjAwMDM3WhcNMjUwNzI3MjAwMDM3WjAzMTEwLwYDVQQD
Eyg5NjRmYTEyNGY2YmM1MWYxOTYyYmI3ZmJlYTUyODEyNDYwZDAwNGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo07UOnPF91HA4FIpLMmMdRvwBLNx
e7VAjdee8uCMKaaB5yviwmc6wsIVJF8FguwZ8Z50/NE0geeSbPA8yoN8uHBJCQmn
KxfobleADAC8O9PzCS9qvQaAwwyQ5dvjpg2/Xstss3qFRBsoQeagU3nYD3pWBAxy
GGwM13LydnY6I4EmBnD+3N1G6p0JmkeqiI/9T/I8eA8KbPPVs9L8P6S3udWkV8j2
YiXMmgmpb2jAXMjca0FGnpa/8aHx0ZYmZq/14gPax5QcYNzOIdVQNmOMK3UsB5IP
Ag4mMqenz8SYedc9J+7iBUzExrji+iErg82IxCr2RO52c2Wy5OtuuC9axQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZPoST2vFHxliu3++pSgSRg0ASyMB8GA1UdIwQY
MBaAFCzUG8w81z4Nx/fpW10Nym1oV77cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTE5RYnpEelhQZzNIOS1sYlhRM0tiV2hYdnR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8xYWQ5YmYtMDMyMi00NTM0LWIwMDkt
ZTZlOTFiZjA1MmZlLzEvTE5RYnpEelhQZzNIOS1sYlhRM0tiV2hYdnR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8xYWQ5YmYtMDMyMi00NTM0LWIwMDktZTZlOTFiZjA1MmZl
LzEvTE5RYnpEelhQZzNIOS1sYlhRM0tiV2hYdnR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyYXOFNVn
QlOUN+e2+Tir+JUQNsPaZL2YT1+dyqz3vUm3Xl2N26jGnlpM9hdKj+RhtblKTHTa
TSJrwoymqQtOhxZqAvNeusUTletJGeA+P7vh1slVQkBaa9ABDwVukOIZpQVSoAqZ
F06h8957EOKkDDqiuTtqdoB5oiFsFt/Lr055Iw4vuarineytyEhrkF1uWBfQps0V
Woqiz0u0pZXSvvkitQGEotgRcpCL+e3/7PwHzLJSdmWpAhHkxjBGspa9vCEPrk7F
G4/Pxu4NS7eoYhEb4avyiZUvOexcTBYyfVWnBcKm7oEtrbrVllI88KNz81ykBHy5
V1GhbBx0qz4PUg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 02:05:12 2025 by rpki-client