Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft
File: lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft (raw, json)
Hash identifier: hJ+89yhQ59nljbId0EZdgvw9thUhLUHWyiqSOXEvIIw=
Subject key identifier: A8:D4:AA:59:9D:4E:7E:58:C4:B9:9C:EB:54:69:F5:36:5E:D3:AB:8F
Authority key identifier: 95:CB:18:C7:EC:E6:BD:DC:95:70:F3:7F:F7:86:60:B5:8E:6C:20:44
Certificate issuer: /CN=95cb18c7ece6bddc9570f37ff78660b58e6c2044
Certificate serial: 01984AAEF4017B742ED4A738C3DD17C071D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft
Manifest number: 031A
Signing time: Sun 27 Jul 2025 07:00:36 +0000
Manifest this update: Sun 27 Jul 2025 07:00:36 +0000
Manifest next update: Mon 28 Jul 2025 07:00:36 +0000
Files and hashes: 1: 4d05APiOYCmE2eSMktC6x0oiOVY.roa (hash: 4uLCDeXqKEU2GmyDcCV44Z6CSoTvWfkLJ1BLXOmGGm4=)
2: lcsYx-zmvdyVcPN_94ZgtY5sIEQ.crl (hash: yGkjbsTUsgp1XZveXA6pjyM0TG5a0zSptBVoFczGl2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:f4:01:7b:74:2e:d4:a7:38:c3:dd:17:c0:71:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95cb18c7ece6bddc9570f37ff78660b58e6c2044
Validity
Not Before: Jul 27 07:00:36 2025 GMT
Not After : Jul 28 07:00:36 2025 GMT
Subject: CN=a8d4aa599d4e7e58c4b99ceb5469f5365ed3ab8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:51:da:f3:3c:57:8f:6c:fc:37:ee:a4:1e:d9:
15:02:f0:20:af:a3:62:96:fc:92:ce:59:b0:7b:84:
7f:33:45:dc:9b:e3:5b:fc:d5:4b:c9:93:bc:04:91:
35:7d:92:43:c1:73:b1:30:68:b7:fb:ba:5f:2d:2b:
d3:df:7c:a1:88:fb:40:af:f1:b3:c1:e0:80:f5:fa:
09:cd:f4:7c:aa:79:37:9b:2c:75:ac:05:fb:cc:5a:
f1:62:a6:bb:b9:eb:ec:0c:aa:d2:5d:08:e9:09:78:
83:e8:34:f3:e9:44:ee:0f:78:e4:46:cb:19:09:5c:
40:0c:be:74:02:88:75:65:72:7f:28:27:61:c3:e0:
75:f8:da:c2:e8:24:06:1c:94:a1:b3:d8:f7:83:ed:
72:52:fe:4f:e0:7a:3a:60:9e:86:4a:07:9e:53:67:
9a:b3:e9:fe:f2:9a:37:b7:3f:a7:11:36:81:11:48:
d5:2c:61:d6:5e:1c:29:e1:85:07:90:05:2e:3f:b8:
29:ef:22:7e:50:65:a1:a8:9b:84:5e:3a:73:6d:71:
65:ee:4d:c1:eb:0e:f3:e6:44:1d:c0:c5:14:2f:7f:
a6:ac:37:64:0e:2a:98:b7:06:c0:f5:4f:09:07:c2:
d1:b4:ac:48:25:a5:a3:ba:a3:43:b9:79:4b:cd:73:
5c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D4:AA:59:9D:4E:7E:58:C4:B9:9C:EB:54:69:F5:36:5E:D3:AB:8F
X509v3 Authority Key Identifier:
keyid:95:CB:18:C7:EC:E6:BD:DC:95:70:F3:7F:F7:86:60:B5:8E:6C:20:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8f4a2b-492c-4331-84f8-026e0a4ccaaa/1/lcsYx-zmvdyVcPN_94ZgtY5sIEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:32:34:6b:fb:5e:ea:b3:84:e6:03:40:20:b1:14:2f:87:12:
04:e3:0f:4e:d0:26:30:3c:95:50:13:8d:e9:5f:0d:d2:42:99:
3b:c6:2f:5c:63:73:25:f5:95:59:19:51:cd:6a:c4:62:21:02:
fa:e9:bd:56:ed:10:f3:74:04:c0:83:f9:da:24:5e:36:73:f2:
b3:8e:a7:06:6b:42:db:19:92:d9:71:50:0f:3a:6a:25:37:6b:
86:48:a0:b0:4a:b8:d9:43:ed:3d:69:8d:38:0b:b9:07:18:08:
a0:fe:6d:13:13:73:8f:28:18:49:fe:a9:a1:66:c0:8d:9a:dc:
54:90:ed:94:09:10:35:05:aa:f4:ae:77:52:34:1f:19:0d:17:
ed:33:cc:1d:4d:29:d5:f1:32:e7:df:d9:0d:e0:51:e1:0c:c3:
db:ed:ea:25:91:3f:7b:fd:7a:11:65:7c:1b:df:3f:39:a7:ff:
82:fe:9e:5e:8b:20:13:ea:6d:ef:13:3a:cf:42:fe:f5:19:d3:
a8:4a:68:24:b3:20:f3:8e:6e:cd:b8:14:59:1c:c8:68:3b:a9:
fd:d3:8c:36:5e:63:98:bb:68:59:d4:80:d8:53:77:f1:fc:94:
f5:74:0f:3a:03:0e:d4:bd:69:e5:65:fa:b0:52:58:5c:b4:3e:
26:e9:e1:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKrvQBe3Qu1Kc4w90XwHHSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1Y2IxOGM3ZWNlNmJkZGM5NTcwZjM3ZmY3ODY2MGI1OGU2
YzIwNDQwHhcNMjUwNzI3MDcwMDM2WhcNMjUwNzI4MDcwMDM2WjAzMTEwLwYDVQQD
EyhhOGQ0YWE1OTlkNGU3ZTU4YzRiOTljZWI1NDY5ZjUzNjVlZDNhYjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FHa8zxXj2z8N+6kHtkVAvAgr6Ni
lvySzlmwe4R/M0Xcm+Nb/NVLyZO8BJE1fZJDwXOxMGi3+7pfLSvT33yhiPtAr/Gz
weCA9foJzfR8qnk3myx1rAX7zFrxYqa7uevsDKrSXQjpCXiD6DTz6UTuD3jkRssZ
CVxADL50Aoh1ZXJ/KCdhw+B1+NrC6CQGHJShs9j3g+1yUv5P4Ho6YJ6GSgeeU2ea
s+n+8po3tz+nETaBEUjVLGHWXhwp4YUHkAUuP7gp7yJ+UGWhqJuEXjpzbXFl7k3B
6w7z5kQdwMUUL3+mrDdkDiqYtwbA9U8JB8LRtKxIJaWjuqNDuXlLzXNcqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKjUqlmdTn5YxLmc61Rp9TZe06uPMB8GA1UdIwQY
MBaAFJXLGMfs5r3clXDzf/eGYLWObCBEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGNzWXgtem12ZHlWY1BOXzk0Wmd0WTVzSUVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi84ZjRhMmItNDkyYy00MzMxLTg0Zjgt
MDI2ZTBhNGNjYWFhLzEvbGNzWXgtem12ZHlWY1BOXzk0Wmd0WTVzSUVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi84ZjRhMmItNDkyYy00MzMxLTg0ZjgtMDI2ZTBhNGNjYWFh
LzEvbGNzWXgtem12ZHlWY1BOXzk0Wmd0WTVzSUVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACjI0a/te
6rOE5gNAILEUL4cSBOMPTtAmMDyVUBON6V8N0kKZO8YvXGNzJfWVWRlRzWrEYiEC
+um9Vu0Q83QEwIP52iReNnPys46nBmtC2xmS2XFQDzpqJTdrhkigsEq42UPtPWmN
OAu5BxgIoP5tExNzjygYSf6poWbAjZrcVJDtlAkQNQWq9K53UjQfGQ0X7TPMHU0p
1fEy59/ZDeBR4QzD2+3qJZE/e/16EWV8G98/Oaf/gv6eXosgE+pt7xM6z0L+9RnT
qEpoJLMg845uzbgUWRzIaDup/dOMNl5jmLtoWdSA2FN38fyU9XQPOgMO1L1p5WX6
sFJYXLQ+Junh6A==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:37:21 2025 by rpki-client