Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
File: LRjYfouf6XS-3wl_iJSDmIYaxH4.mft (raw, json)
Hash identifier: Da6A3II5O8998Jb/HejQ/G5j5YW4mBsTeemiMQiCmE4=
Subject key identifier: 4B:E2:EC:53:8E:17:7D:1B:72:77:CD:9F:C8:D2:21:50:7C:DF:B3:F2
Authority key identifier: 2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E
Certificate issuer: /CN=2d18d87e8b9fe974bedf097f88948398861ac47e
Certificate serial: 019858D9CBE6E8595512F9F958E0F17A3405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
Manifest number: 0EB7
Signing time: Wed 30 Jul 2025 01:02:05 +0000
Manifest this update: Wed 30 Jul 2025 01:02:05 +0000
Manifest next update: Thu 31 Jul 2025 01:02:05 +0000
Files and hashes: 1: D0SM7svQIwgtTWtBXQRfVaYEWCM.roa (hash: 0gzyVGki8KAciWCmOf7f1a5tlOgoH/nOkPBzCHojuSo=)
2: LRjYfouf6XS-3wl_iJSDmIYaxH4.crl (hash: FVPk00y+/XV4CnpQ7zXU5/cUkBzsyT4uoaIa0jI2h94=)
3: _IXLnCzw_zVB3dV_MJacG4jX80Y.roa (hash: Gt8+0DW6xRdgGsnmBSXKglilyEwDNEUME1kVSSFIiv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:58:d9:cb:e6:e8:59:55:12:f9:f9:58:e0:f1:7a:34:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d18d87e8b9fe974bedf097f88948398861ac47e
Validity
Not Before: Jul 30 01:02:05 2025 GMT
Not After : Jul 31 01:02:05 2025 GMT
Subject: CN=4be2ec538e177d1b7277cd9fc8d221507cdfb3f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1d:a4:5c:4f:75:b2:53:63:37:ab:c3:8a:03:
7c:19:69:d5:52:94:a6:17:1b:07:23:56:e4:5c:51:
29:0a:4e:13:c2:b5:36:c6:4e:ca:ca:d9:29:05:38:
13:37:e6:c0:ca:28:f0:26:5a:78:c6:3d:64:28:c1:
3d:87:1b:67:00:ad:81:59:6b:4b:ab:d0:2c:7e:a2:
69:6b:50:c7:2f:78:65:44:fa:aa:14:03:17:94:73:
dc:04:f0:b6:bd:63:76:df:fe:59:29:1b:b9:93:25:
6c:de:28:9e:64:d3:83:2e:c9:ea:41:e5:96:e6:79:
2e:46:26:e0:71:03:38:6e:23:18:67:a7:c4:93:a1:
35:c7:eb:3e:46:7c:18:a7:46:27:13:d6:c3:82:49:
63:b0:c2:da:b7:ab:1b:e4:3c:14:50:e9:b1:20:20:
ad:46:64:03:9b:51:57:a6:b8:11:96:d4:9d:b5:8c:
c0:20:39:d3:2b:59:d7:55:e6:6e:c2:97:70:09:fe:
4c:d0:f4:0b:7a:ab:67:b7:8b:6f:23:26:eb:8c:02:
c2:31:ee:71:ae:d6:cd:ca:81:45:a9:3f:d8:d5:02:
ce:3e:84:39:14:c4:d4:c8:6b:54:56:eb:03:07:99:
bd:da:a2:19:0a:9c:6c:6c:00:37:2b:e3:40:77:b5:
ef:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E2:EC:53:8E:17:7D:1B:72:77:CD:9F:C8:D2:21:50:7C:DF:B3:F2
X509v3 Authority Key Identifier:
keyid:2D:18:D8:7E:8B:9F:E9:74:BE:DF:09:7F:88:94:83:98:86:1A:C4:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRjYfouf6XS-3wl_iJSDmIYaxH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ec85f5-7f65-49f2-98b9-cf0907133241/1/LRjYfouf6XS-3wl_iJSDmIYaxH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d4:02:eb:23:fa:35:52:32:91:21:8b:c9:f6:3e:ec:cb:d7:
3f:ce:9e:40:cc:75:2f:2a:06:d9:4d:92:ae:85:fd:1b:fa:73:
e9:74:4a:23:f3:97:85:6d:ce:2e:50:b1:28:ee:26:48:8f:ed:
1d:d5:2e:6c:0f:29:bb:cf:d0:64:91:f2:b1:e4:ff:1d:9b:d8:
5e:d3:96:de:b1:2c:d0:7d:a8:02:61:db:94:58:85:3c:82:60:
db:c5:10:0e:17:00:80:46:42:e8:6a:a9:b4:75:a4:8b:6e:15:
8c:ce:56:be:c4:33:3b:03:9f:bb:1c:0c:22:a6:73:36:46:a0:
5c:07:34:bf:db:47:70:89:88:a7:cf:15:5e:10:7a:3b:0e:a1:
bc:7e:f8:7d:d9:20:9a:71:d0:f6:48:11:24:d6:7c:d0:ba:98:
12:61:5d:5e:5a:62:97:b5:fa:f9:f5:cb:da:11:49:94:5e:99:
3d:df:4c:7e:db:b6:4d:24:e3:9b:e8:6b:9d:49:30:35:f2:ad:
52:4b:11:8c:c6:35:4d:4f:a2:0a:c9:e8:4d:bc:4a:d8:c7:a0:
23:0c:63:b2:d9:bc:38:1a:aa:9d:5e:aa:38:f1:f3:82:ef:7c:
80:0b:bc:7c:18:c6:cf:5c:16:40:ed:60:c7:01:f2:33:89:d1:
8b:7e:8e:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhY2cvm6FlVEvn5WODxejQFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMThkODdlOGI5ZmU5NzRiZWRmMDk3Zjg4OTQ4Mzk4ODYx
YWM0N2UwHhcNMjUwNzMwMDEwMjA1WhcNMjUwNzMxMDEwMjA1WjAzMTEwLwYDVQQD
Eyg0YmUyZWM1MzhlMTc3ZDFiNzI3N2NkOWZjOGQyMjE1MDdjZGZiM2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArB2kXE91slNjN6vDigN8GWnVUpSm
FxsHI1bkXFEpCk4TwrU2xk7KytkpBTgTN+bAyijwJlp4xj1kKME9hxtnAK2BWWtL
q9AsfqJpa1DHL3hlRPqqFAMXlHPcBPC2vWN23/5ZKRu5kyVs3iieZNODLsnqQeWW
5nkuRibgcQM4biMYZ6fEk6E1x+s+RnwYp0YnE9bDgkljsMLat6sb5DwUUOmxICCt
RmQDm1FXprgRltSdtYzAIDnTK1nXVeZuwpdwCf5M0PQLeqtnt4tvIybrjALCMe5x
rtbNyoFFqT/Y1QLOPoQ5FMTUyGtUVusDB5m92qIZCpxsbAA3K+NAd7Xv9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEvi7FOOF30bcnfNn8jSIVB837PyMB8GA1UdIwQY
MBaAFC0Y2H6Ln+l0vt8Jf4iUg5iGGsR+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFJqWWZvdWY2WFMtM3dsX2lKU0RtSVlheEg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lYzg1ZjUtN2Y2NS00OWYyLTk4Yjkt
Y2YwOTA3MTMzMjQxLzEvTFJqWWZvdWY2WFMtM3dsX2lKU0RtSVlheEg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9lYzg1ZjUtN2Y2NS00OWYyLTk4YjktY2YwOTA3MTMzMjQx
LzEvTFJqWWZvdWY2WFMtM3dsX2lKU0RtSVlheEg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXdQC6yP6
NVIykSGLyfY+7MvXP86eQMx1LyoG2U2SroX9G/pz6XRKI/OXhW3OLlCxKO4mSI/t
HdUubA8pu8/QZJHyseT/HZvYXtOW3rEs0H2oAmHblFiFPIJg28UQDhcAgEZC6Gqp
tHWki24VjM5WvsQzOwOfuxwMIqZzNkagXAc0v9tHcImIp88VXhB6Ow6hvH74fdkg
mnHQ9kgRJNZ80LqYEmFdXlpil7X6+fXL2hFJlF6ZPd9Mftu2TSTjm+hrnUkwNfKt
UksRjMY1TU+iCsnoTbxK2MegIwxjstm8OBqqnV6qOPHzgu98gAu8fBjGz1wWQO1g
xwHyM4nRi36OOg==
-----END CERTIFICATE-----
Generated at Wed Jul 30 05:19:18 2025 by rpki-client