Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.mft
File: gZTqPO1PE3ENNARM_LPR1WxVCGI.mft (raw, json)
Hash identifier: mpOijLXHhVnJTcPUxM6HrUVuWJFrGs/Mg1Sf8N/zDX8=
Subject key identifier: 83:DE:F6:89:BA:D6:48:93:29:4E:8D:EA:05:E0:5A:63:6F:C4:62:AA
Authority key identifier: 81:94:EA:3C:ED:4F:13:71:0D:34:04:4C:FC:B3:D1:D5:6C:55:08:62
Certificate issuer: /CN=8194ea3ced4f13710d34044cfcb3d1d56c550862
Certificate serial: 01992331740DD3BD48B4BDB288D80917B92B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZTqPO1PE3ENNARM_LPR1WxVCGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.mft
Manifest number: 1675
Signing time: Sun 07 Sep 2025 08:01:07 +0000
Manifest this update: Sun 07 Sep 2025 08:01:07 +0000
Manifest next update: Mon 08 Sep 2025 08:01:07 +0000
Files and hashes: 1: gZTqPO1PE3ENNARM_LPR1WxVCGI.crl (hash: 7RfbbtERIoO3C5PzqTc9Aa/HwZw9uaXXp58iTKzEuI0=)
2: p9ItdLtiYL4LWX5NZZnUSYwNxz8.roa (hash: c3ouMCi1srY/NIddYqnssOpjDGBDizKKZ8LNdOn0Anc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZTqPO1PE3ENNARM_LPR1WxVCGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:74:0d:d3:bd:48:b4:bd:b2:88:d8:09:17:b9:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8194ea3ced4f13710d34044cfcb3d1d56c550862
Validity
Not Before: Sep 7 08:01:07 2025 GMT
Not After : Sep 8 08:01:07 2025 GMT
Subject: CN=83def689bad64893294e8dea05e05a636fc462aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c4:5d:a9:e1:9f:94:ab:28:fb:0d:59:8c:07:
40:c2:82:cf:9f:f2:99:95:6c:ef:8f:a4:76:07:7f:
a3:83:6f:60:1c:f5:11:e9:85:e1:8a:3a:09:29:10:
d7:5d:19:d9:1a:d1:0b:b6:98:f4:a7:6f:4d:22:22:
b2:28:a2:90:78:e7:7b:d5:03:68:55:a0:95:5c:dd:
cb:db:ee:ca:54:ab:69:a6:08:a3:19:08:9d:15:75:
90:4d:15:d8:00:a9:af:08:75:53:5f:99:69:4d:5e:
29:c3:e9:3c:3e:7e:88:21:e6:85:c6:10:5e:ef:c8:
55:8d:6e:bb:32:6b:5d:dd:2b:46:b4:c5:79:b6:2f:
93:49:68:14:a4:c0:7b:24:69:ce:1f:f9:a1:b5:8d:
f4:88:76:6f:68:05:9b:04:2a:3a:1a:43:b3:be:5d:
57:01:b3:e7:6d:db:e4:a5:02:2e:cd:b1:49:b0:39:
d8:ab:b7:68:23:80:75:2e:56:f1:9c:ae:a0:8a:b9:
ca:e6:25:cd:e8:66:c5:ad:8d:53:7f:29:ae:14:cd:
c5:6c:92:71:6e:c7:c4:06:96:0e:75:2c:ee:a5:74:
94:52:9f:3e:4c:ba:26:88:72:06:04:b2:14:81:13:
a4:e6:c8:b5:41:ac:97:c5:bb:9b:3d:21:da:04:86:
bf:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DE:F6:89:BA:D6:48:93:29:4E:8D:EA:05:E0:5A:63:6F:C4:62:AA
X509v3 Authority Key Identifier:
keyid:81:94:EA:3C:ED:4F:13:71:0D:34:04:4C:FC:B3:D1:D5:6C:55:08:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZTqPO1PE3ENNARM_LPR1WxVCGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3da6fd-5f10-4058-bc02-23724bab2227/1/gZTqPO1PE3ENNARM_LPR1WxVCGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:b1:6b:b1:dd:36:e1:af:ee:cf:6e:6b:c7:64:6c:96:10:15:
ed:3a:7b:df:6b:ed:08:a4:fb:fb:27:53:f0:18:77:ce:35:99:
c0:54:92:3c:47:5b:a8:6f:b5:76:89:8b:40:48:30:2a:97:b6:
f1:13:8e:2e:d1:42:a3:77:87:af:e4:29:38:f6:39:0e:3c:34:
1b:15:c3:20:3c:1a:68:23:a4:44:0d:ac:0b:6c:a4:fd:1a:e6:
c6:47:75:dd:13:3e:2b:b0:59:62:d5:65:b1:09:ba:70:13:9e:
a8:ae:80:f3:a6:37:8e:b2:6a:22:bc:fa:90:86:62:ed:d1:31:
38:13:1b:dc:f4:20:07:51:02:14:0a:d0:53:68:2e:26:bf:e4:
b2:d6:e1:2e:7d:72:a1:08:2a:d8:b4:ed:af:6f:bc:61:9f:1b:
23:68:f3:6a:e3:21:d4:c9:e6:02:1f:ce:e0:f1:dc:7e:d9:54:
1a:ba:60:88:7b:8e:1f:a1:f8:00:8b:31:46:aa:95:48:6b:fd:
2d:9a:b4:a9:a2:7e:42:56:dc:c5:73:59:7a:31:d4:b2:c2:a1:
f4:8e:7b:81:2c:7b:2e:e0:e6:55:1d:7b:53:4c:1b:7b:3f:83:
b8:0f:d5:90:ee:1c:13:4e:40:aa:6f:84:dd:3b:e7:e8:5f:08:
37:c3:ac:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMXQN071ItL2yiNgJF7krMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOTRlYTNjZWQ0ZjEzNzEwZDM0MDQ0Y2ZjYjNkMWQ1NmM1
NTA4NjIwHhcNMjUwOTA3MDgwMTA3WhcNMjUwOTA4MDgwMTA3WjAzMTEwLwYDVQQD
Eyg4M2RlZjY4OWJhZDY0ODkzMjk0ZThkZWEwNWUwNWE2MzZmYzQ2MmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8RdqeGflKso+w1ZjAdAwoLPn/KZ
lWzvj6R2B3+jg29gHPUR6YXhijoJKRDXXRnZGtELtpj0p29NIiKyKKKQeOd71QNo
VaCVXN3L2+7KVKtppgijGQidFXWQTRXYAKmvCHVTX5lpTV4pw+k8Pn6IIeaFxhBe
78hVjW67Mmtd3StGtMV5ti+TSWgUpMB7JGnOH/mhtY30iHZvaAWbBCo6GkOzvl1X
AbPnbdvkpQIuzbFJsDnYq7doI4B1LlbxnK6girnK5iXN6GbFrY1TfymuFM3FbJJx
bsfEBpYOdSzupXSUUp8+TLomiHIGBLIUgROk5si1QayXxbubPSHaBIa/ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIPe9om61kiTKU6N6gXgWmNvxGKqMB8GA1UdIwQY
MBaAFIGU6jztTxNxDTQETPyz0dVsVQhiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1pUcVBPMVBFM0VOTkFSTV9MUFIxV3hWQ0dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zZGE2ZmQtNWYxMC00MDU4LWJjMDIt
MjM3MjRiYWIyMjI3LzEvZ1pUcVBPMVBFM0VOTkFSTV9MUFIxV3hWQ0dJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8zZGE2ZmQtNWYxMC00MDU4LWJjMDItMjM3MjRiYWIyMjI3
LzEvZ1pUcVBPMVBFM0VOTkFSTV9MUFIxV3hWQ0dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd7Frsd02
4a/uz25rx2RslhAV7Tp732vtCKT7+ydT8Bh3zjWZwFSSPEdbqG+1domLQEgwKpe2
8ROOLtFCo3eHr+QpOPY5Djw0GxXDIDwaaCOkRA2sC2yk/Rrmxkd13RM+K7BZYtVl
sQm6cBOeqK6A86Y3jrJqIrz6kIZi7dExOBMb3PQgB1ECFArQU2guJr/kstbhLn1y
oQgq2LTtr2+8YZ8bI2jzauMh1MnmAh/O4PHcftlUGrpgiHuOH6H4AIsxRqqVSGv9
LZq0qaJ+QlbcxXNZejHUssKh9I57gSx7LuDmVR17U0wbez+DuA/VkO4cE05Aqm+E
3Tvn6F8IN8Osig==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:56:13 2025 by rpki-client