Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
File: lWrZqVrBWALlg0GAigTeU9nPgvE.mft (raw, json)
Hash identifier: be8syfz7Jdvlbqanm3Ry/ERO7jdUBERXTEsOnSZH2R8=
Subject key identifier: 71:26:AE:D5:5D:8B:52:24:68:DC:96:E8:61:7D:20:33:A0:7C:D4:05
Authority key identifier: 95:6A:D9:A9:5A:C1:58:02:E5:83:41:80:8A:04:DE:53:D9:CF:82:F1
Certificate issuer: /CN=956ad9a95ac15802e58341808a04de53d9cf82f1
Certificate serial: 019838047344619F1E6A44A71799FB499E69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
Manifest number: 03D4
Signing time: Wed 23 Jul 2025 16:01:12 +0000
Manifest this update: Wed 23 Jul 2025 16:01:12 +0000
Manifest next update: Thu 24 Jul 2025 16:01:12 +0000
Files and hashes: 1: 4YBXe8RE4S0Fk9SfNj4wJTcLrVk.roa (hash: WUAHcqSoRFHEIzq6sNJ7rw55t9mNYQd5wmOKsglGkH0=)
2: lWrZqVrBWALlg0GAigTeU9nPgvE.crl (hash: sKtZBgG8jcRZSpTa8Wp1XKvgIqU9uY9GFJ3mBpM8MnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:04:73:44:61:9f:1e:6a:44:a7:17:99:fb:49:9e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=956ad9a95ac15802e58341808a04de53d9cf82f1
Validity
Not Before: Jul 23 16:01:12 2025 GMT
Not After : Jul 24 16:01:12 2025 GMT
Subject: CN=7126aed55d8b522468dc96e8617d2033a07cd405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:29:42:d9:14:e1:2a:14:30:9c:48:87:d7:25:
6f:bb:63:b2:a8:89:fe:9b:b7:37:19:85:8c:06:34:
13:b1:05:99:1e:09:42:9b:f2:3f:8c:8d:59:db:07:
b6:1c:9f:87:b9:c7:a0:ee:ed:dc:65:c6:22:a7:ef:
a3:53:30:9c:d7:ed:e0:f8:49:f6:eb:95:0b:2e:f2:
e8:02:05:b6:4b:4f:be:6a:7d:2d:e9:3a:1a:6e:0b:
10:9c:0d:f0:be:5d:12:7f:8a:11:41:62:b4:6d:02:
e6:02:98:74:1c:c6:0e:19:0a:44:ee:85:69:f4:22:
09:bc:cd:ad:70:5f:4f:98:4a:71:e9:58:2b:74:b2:
92:8c:23:b1:98:1e:9f:d4:b1:66:1c:63:fa:ac:c6:
7c:e6:ea:5c:6d:0b:6f:32:20:8f:b9:20:f8:a9:e5:
bd:dd:e5:64:04:7d:4c:18:29:cd:c6:93:85:4a:70:
8c:6b:8c:b8:a6:73:65:21:de:12:fa:a1:5f:84:6e:
ae:70:4d:83:2f:47:4a:21:a3:23:89:b0:94:3a:df:
3c:02:51:02:29:66:0f:8f:0b:cf:df:4c:6e:6f:3c:
7b:97:2e:c3:9f:4f:8e:12:d2:f8:32:da:af:d7:dd:
ab:42:d5:78:f7:8c:7e:f6:b8:a2:35:52:69:2c:2a:
be:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:26:AE:D5:5D:8B:52:24:68:DC:96:E8:61:7D:20:33:A0:7C:D4:05
X509v3 Authority Key Identifier:
keyid:95:6A:D9:A9:5A:C1:58:02:E5:83:41:80:8A:04:DE:53:D9:CF:82:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:7d:2e:02:b5:ec:84:17:0c:32:ef:22:bc:e8:77:3f:b1:0c:
41:a5:8c:f9:df:f6:43:3b:29:bd:b7:1a:09:b0:94:c5:71:f8:
a2:f9:39:74:da:22:41:48:e4:ce:fe:02:83:35:33:60:31:c1:
8b:31:e4:e8:b4:cc:55:9a:67:48:21:19:90:fd:f5:e2:ef:b1:
03:1b:98:63:78:26:32:90:97:25:ce:c4:d0:6c:6f:17:51:6f:
e0:cb:b4:63:9e:45:c2:f8:25:85:27:2a:26:ee:ea:90:2d:2c:
49:70:11:df:e3:94:22:dc:4c:5d:8f:4f:3c:69:03:8e:5b:7e:
fa:40:ba:2d:7b:f6:2b:c9:52:60:56:72:6e:ad:a3:bc:a7:17:
8a:02:ff:2d:10:b0:1b:ac:4a:9d:f5:1b:b9:18:81:96:6e:aa:
7f:41:1f:4a:4b:60:9d:36:86:d6:03:b2:b7:18:aa:bc:5e:a0:
13:d8:85:5d:58:87:a5:8f:8a:72:b8:29:a0:9c:4f:e0:39:b8:
2a:45:44:9d:e3:e3:02:c7:c0:2e:e2:3f:bc:a8:d6:96:4d:11:
0e:56:c4:77:bd:fe:ff:29:91:d9:c7:4f:aa:34:45:81:92:29:
41:d3:6f:87:f2:8f:00:06:3e:78:9f:f0:77:65:ab:4b:69:7e:
ae:0c:83:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg4BHNEYZ8eakSnF5n7SZ5pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NmFkOWE5NWFjMTU4MDJlNTgzNDE4MDhhMDRkZTUzZDlj
ZjgyZjEwHhcNMjUwNzIzMTYwMTEyWhcNMjUwNzI0MTYwMTEyWjAzMTEwLwYDVQQD
Eyg3MTI2YWVkNTVkOGI1MjI0NjhkYzk2ZTg2MTdkMjAzM2EwN2NkNDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoylC2RThKhQwnEiH1yVvu2OyqIn+
m7c3GYWMBjQTsQWZHglCm/I/jI1Z2we2HJ+Huceg7u3cZcYip++jUzCc1+3g+En2
65ULLvLoAgW2S0++an0t6ToabgsQnA3wvl0Sf4oRQWK0bQLmAph0HMYOGQpE7oVp
9CIJvM2tcF9PmEpx6VgrdLKSjCOxmB6f1LFmHGP6rMZ85upcbQtvMiCPuSD4qeW9
3eVkBH1MGCnNxpOFSnCMa4y4pnNlId4S+qFfhG6ucE2DL0dKIaMjibCUOt88AlEC
KWYPjwvP30xubzx7ly7Dn0+OEtL4Mtqv192rQtV494x+9riiNVJpLCq+9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHEmrtVdi1IkaNyW6GF9IDOgfNQFMB8GA1UdIwQY
MBaAFJVq2alawVgC5YNBgIoE3lPZz4LxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFdyWnFWckJXQUxsZzBHQWlnVGVVOW5QZ3ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9hNDEzYzYtMDhiYS00MmQ4LTk0Y2Et
ZDg3MjFiODBkZDc5LzEvbFdyWnFWckJXQUxsZzBHQWlnVGVVOW5QZ3ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9hNDEzYzYtMDhiYS00MmQ4LTk0Y2EtZDg3MjFiODBkZDc5
LzEvbFdyWnFWckJXQUxsZzBHQWlnVGVVOW5QZ3ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdX0uArXs
hBcMMu8ivOh3P7EMQaWM+d/2QzspvbcaCbCUxXH4ovk5dNoiQUjkzv4CgzUzYDHB
izHk6LTMVZpnSCEZkP314u+xAxuYY3gmMpCXJc7E0GxvF1Fv4Mu0Y55FwvglhScq
Ju7qkC0sSXAR3+OUItxMXY9PPGkDjlt++kC6LXv2K8lSYFZybq2jvKcXigL/LRCw
G6xKnfUbuRiBlm6qf0EfSktgnTaG1gOytxiqvF6gE9iFXViHpY+KcrgpoJxP4Dm4
KkVEnePjAsfALuI/vKjWlk0RDlbEd73+/ymR2cdPqjRFgZIpQdNvh/KPAAY+eJ/w
d2WrS2l+rgyDIg==
-----END CERTIFICATE-----
Generated at Wed Jul 23 18:05:56 2025 by rpki-client