Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.mft
File: _-LSEcNBNyjvBNJUQlgoqLQYHuA.mft (raw, json)
Hash identifier: 7vyxdmJhrqGhLWgNQ8NB5D9+8c8pJz/+9aQUH9BTBCE=
Subject key identifier: BF:D0:3E:04:85:1E:4E:6D:31:A9:B0:F0:0F:14:F7:FA:9B:54:D9:EC
Authority key identifier: FF:E2:D2:11:C3:41:37:28:EF:04:D2:54:42:58:28:A8:B4:18:1E:E0
Certificate issuer: /CN=ffe2d211c3413728ef04d254425828a8b4181ee0
Certificate serial: 019922C3A04A37CB9B2A5D72E319E5183862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-LSEcNBNyjvBNJUQlgoqLQYHuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.mft
Manifest number: 05BB
Signing time: Sun 07 Sep 2025 06:01:09 +0000
Manifest this update: Sun 07 Sep 2025 06:01:09 +0000
Manifest next update: Mon 08 Sep 2025 06:01:09 +0000
Files and hashes: 1: _-LSEcNBNyjvBNJUQlgoqLQYHuA.crl (hash: o7HaLcnt3H18r/PpH8qEIr09xeYUNRq/VF0C3bfS/JQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-LSEcNBNyjvBNJUQlgoqLQYHuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:a0:4a:37:cb:9b:2a:5d:72:e3:19:e5:18:38:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe2d211c3413728ef04d254425828a8b4181ee0
Validity
Not Before: Sep 7 06:01:09 2025 GMT
Not After : Sep 8 06:01:09 2025 GMT
Subject: CN=bfd03e04851e4e6d31a9b0f00f14f7fa9b54d9ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:24:c6:ea:15:97:0c:46:ab:6d:33:44:d5:4a:
9c:c9:bc:2f:c1:70:9f:45:30:b5:4e:77:4d:44:c8:
1f:4c:7d:2d:60:8e:0c:72:af:2d:b6:47:19:b6:b7:
1b:e1:c5:08:22:b8:c2:e0:e1:49:13:9e:90:4c:e5:
5f:aa:60:62:c0:d8:af:d9:3a:88:08:a3:c8:76:f4:
16:11:17:15:63:66:80:3d:d2:83:07:7f:43:16:81:
08:7c:12:43:70:ba:3e:0c:49:63:7c:de:c9:d4:a6:
00:62:16:de:fa:8b:97:4a:37:69:0d:eb:74:78:5b:
c5:a0:ce:ab:13:d7:da:cc:c5:ac:79:ce:d0:df:7d:
f8:19:f4:52:36:b0:64:f7:84:94:cd:87:1b:81:d1:
a8:f8:63:e5:07:cc:2c:74:15:25:5d:b1:eb:1f:6d:
46:40:29:4f:f7:20:ae:49:5b:81:8e:38:05:50:ba:
59:61:eb:8b:9b:f0:b3:a8:da:e1:d5:d9:4a:54:b7:
be:65:e3:8a:df:72:aa:29:46:74:f4:79:f1:9f:1e:
d4:5a:ac:1a:e5:be:ac:cf:8c:40:75:80:dc:37:98:
40:ab:3e:05:a6:6a:72:4a:fa:ba:35:d1:bf:be:37:
9b:d9:77:4e:06:17:07:3f:30:db:54:d2:52:6f:8e:
6d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D0:3E:04:85:1E:4E:6D:31:A9:B0:F0:0F:14:F7:FA:9B:54:D9:EC
X509v3 Authority Key Identifier:
keyid:FF:E2:D2:11:C3:41:37:28:EF:04:D2:54:42:58:28:A8:B4:18:1E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-LSEcNBNyjvBNJUQlgoqLQYHuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:27:ed:4d:5c:dd:0d:2e:e6:a4:2d:ad:f1:1d:01:2b:76:71:
a7:aa:6a:4e:eb:45:19:66:12:0c:1e:4c:1b:66:85:ab:a2:00:
2e:68:15:8c:5e:3c:9f:e6:a2:a5:36:f3:d5:ad:d0:6e:00:34:
c1:ed:2f:ad:c6:ad:b8:8b:6b:6d:98:fb:13:18:d1:9a:53:2a:
c6:34:2e:d7:86:ae:4d:45:d4:07:f1:b1:d6:01:e9:83:97:fd:
b1:74:b4:85:77:a6:8b:6f:bd:3b:ae:d7:ea:58:67:db:ca:d4:
41:db:ed:29:ad:94:38:be:6e:3a:bc:3f:f0:12:e7:d9:61:49:
d7:d1:b4:ec:be:14:e3:36:1d:bf:2d:dc:32:70:2a:18:70:b9:
d0:2a:81:e2:f2:9f:49:c2:01:9b:e8:1c:a4:f9:57:92:89:f7:
4e:87:14:b0:d8:76:f6:24:28:5e:a8:17:26:35:8a:55:9e:91:
ff:66:60:24:07:d8:7b:56:c6:45:61:83:08:63:f2:11:8c:1b:
64:b4:ed:06:84:b0:29:b4:22:9c:a3:4a:38:5b:31:d0:c7:79:
a0:37:e6:a6:0a:3f:a6:45:fb:a1:d0:d5:ed:15:37:1c:f9:bb:
9e:18:0a:2e:d7:6a:9c:5b:75:f7:c9:d7:29:db:fa:3c:2d:97:
3a:0e:18:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiw6BKN8ubKl1y4xnlGDhiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZTJkMjExYzM0MTM3MjhlZjA0ZDI1NDQyNTgyOGE4YjQx
ODFlZTAwHhcNMjUwOTA3MDYwMTA5WhcNMjUwOTA4MDYwMTA5WjAzMTEwLwYDVQQD
EyhiZmQwM2UwNDg1MWU0ZTZkMzFhOWIwZjAwZjE0ZjdmYTliNTRkOWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iTG6hWXDEarbTNE1UqcybwvwXCf
RTC1TndNRMgfTH0tYI4Mcq8ttkcZtrcb4cUIIrjC4OFJE56QTOVfqmBiwNiv2TqI
CKPIdvQWERcVY2aAPdKDB39DFoEIfBJDcLo+DEljfN7J1KYAYhbe+ouXSjdpDet0
eFvFoM6rE9fazMWsec7Q3334GfRSNrBk94SUzYcbgdGo+GPlB8wsdBUlXbHrH21G
QClP9yCuSVuBjjgFULpZYeuLm/CzqNrh1dlKVLe+ZeOK33KqKUZ09Hnxnx7UWqwa
5b6sz4xAdYDcN5hAqz4FpmpySvq6NdG/vjeb2XdOBhcHPzDbVNJSb45tWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL/QPgSFHk5tMamw8A8U9/qbVNnsMB8GA1UdIwQY
MBaAFP/i0hHDQTco7wTSVEJYKKi0GB7gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXy1MU0VjTkJOeWp2Qk5KVVFsZ29xTFFZSHVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9jNDk4MmMtYjRhNS00Y2FkLTg5MWEt
OGZkMTAzYjhjYzg5LzEvXy1MU0VjTkJOeWp2Qk5KVVFsZ29xTFFZSHVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9jNDk4MmMtYjRhNS00Y2FkLTg5MWEtOGZkMTAzYjhjYzg5
LzEvXy1MU0VjTkJOeWp2Qk5KVVFsZ29xTFFZSHVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYiftTVzd
DS7mpC2t8R0BK3Zxp6pqTutFGWYSDB5MG2aFq6IALmgVjF48n+aipTbz1a3QbgA0
we0vrcatuItrbZj7ExjRmlMqxjQu14auTUXUB/Gx1gHpg5f9sXS0hXemi2+9O67X
6lhn28rUQdvtKa2UOL5uOrw/8BLn2WFJ19G07L4U4zYdvy3cMnAqGHC50CqB4vKf
ScIBm+gcpPlXkon3TocUsNh29iQoXqgXJjWKVZ6R/2ZgJAfYe1bGRWGDCGPyEYwb
ZLTtBoSwKbQinKNKOFsx0Md5oDfmpgo/pkX7odDV7RU3HPm7nhgKLtdqnFt198nX
Kdv6PC2XOg4Ydw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:12 2025 by rpki-client