Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
File: lER-sxl6ox5-aEnxavVaslMB-oI.mft (raw, json)
Hash identifier: arasfwbEYazJ8+l+7HxVAjwOdZgECpGvrXyqFeRgdL0=
Subject key identifier: 8C:20:3C:BA:F9:7C:30:1B:32:BB:B3:25:D7:4C:22:8E:ED:78:02:F1
Authority key identifier: 94:44:7E:B3:19:7A:A3:1E:7E:68:49:F1:6A:F5:5A:B2:53:01:FA:82
Certificate issuer: /CN=94447eb3197aa31e7e6849f16af55ab25301fa82
Certificate serial: 0198CA255D04DB475E51762FD861EAF671A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lER-sxl6ox5-aEnxavVaslMB-oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
Manifest number: 05BC
Signing time: Thu 21 Aug 2025 01:01:42 +0000
Manifest this update: Thu 21 Aug 2025 01:01:42 +0000
Manifest next update: Fri 22 Aug 2025 01:01:42 +0000
Files and hashes: 1: lER-sxl6ox5-aEnxavVaslMB-oI.crl (hash: j8CQMNQmjuTCJmRC2VS3FC91hJiV+fz4InSmRSLpcng=)
2: o3HDa5Hn0JXB7VWawD3Vzcdyd5k.roa (hash: di4+72seaNK8FCueSsPtQY60+2j8OsXpOCEk2d98xmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lER-sxl6ox5-aEnxavVaslMB-oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ca:25:5d:04:db:47:5e:51:76:2f:d8:61:ea:f6:71:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94447eb3197aa31e7e6849f16af55ab25301fa82
Validity
Not Before: Aug 21 01:01:42 2025 GMT
Not After : Aug 22 01:01:42 2025 GMT
Subject: CN=8c203cbaf97c301b32bbb325d74c228eed7802f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1f:06:b8:f6:d2:64:65:b3:d8:70:6f:0f:28:
d5:c2:e7:9c:ee:30:a2:ce:73:e7:68:1a:e7:6b:29:
15:c2:52:66:22:4e:62:3d:98:0c:d8:6a:25:75:38:
16:c6:51:48:5e:e3:1a:db:f8:d7:9d:ca:c4:27:f1:
bd:ed:e7:1c:9c:4d:8a:2d:a9:75:d4:16:a6:45:e9:
cb:e5:99:3a:c0:b5:5d:7a:1c:02:f3:82:14:e5:73:
a1:4e:a4:98:c7:f1:38:f5:b4:c3:a9:1f:55:54:1e:
3f:f4:6d:79:83:8b:be:c7:a2:b0:7e:e3:c8:24:17:
44:06:b9:15:52:ef:1e:9e:cf:46:9d:b6:f6:14:63:
3a:2b:48:ba:fd:39:69:a6:fe:57:ce:6b:5c:17:9e:
70:28:fe:06:56:ad:d4:99:55:e5:6e:d0:91:3b:9a:
75:28:34:7d:32:c6:06:ec:bc:62:f9:48:d3:b3:7d:
cf:d4:b0:3e:df:3c:29:c9:89:81:a5:b1:9c:8a:82:
49:9d:c5:f7:53:b8:59:f8:4d:25:5d:72:7f:91:df:
18:76:e4:d0:1c:bb:55:f3:a6:9b:56:1e:97:79:15:
80:61:6c:86:31:2d:5f:ae:8a:08:31:66:87:5a:14:
17:8f:4b:84:c0:98:99:16:3c:3a:27:78:03:27:01:
c9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:20:3C:BA:F9:7C:30:1B:32:BB:B3:25:D7:4C:22:8E:ED:78:02:F1
X509v3 Authority Key Identifier:
keyid:94:44:7E:B3:19:7A:A3:1E:7E:68:49:F1:6A:F5:5A:B2:53:01:FA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lER-sxl6ox5-aEnxavVaslMB-oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d0b05-263f-403a-abf4-238bde0e1ef7/1/lER-sxl6ox5-aEnxavVaslMB-oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:68:78:11:ce:dd:12:58:33:a4:ba:f7:d4:e0:a8:2c:84:b9:
7c:30:a5:5e:be:39:d1:5d:ec:c4:c6:fe:40:95:44:f9:64:48:
bd:48:7b:0f:70:26:30:27:a4:3d:a9:63:be:0f:92:36:7f:ca:
18:c5:81:cb:67:ac:aa:92:08:a4:98:3f:dc:05:ce:39:1e:16:
0d:1a:6b:f3:5e:da:57:90:78:81:ba:d6:a2:f0:0f:6c:4c:b4:
cc:6a:82:a9:60:f5:d7:49:a0:09:55:22:fa:8f:30:b0:cf:12:
7d:0e:df:b7:71:46:f0:8f:f7:ae:b8:b9:3e:73:0c:bd:e4:05:
5b:80:f8:06:cc:3e:56:24:2f:4e:12:57:59:7e:75:b7:4e:15:
ee:64:0b:4f:e1:2c:0d:ca:67:c0:52:51:1e:f4:00:4e:61:87:
3b:f4:dd:8a:41:ca:b3:c2:ba:a3:67:ff:a8:08:57:bd:34:07:
8a:0e:02:7e:f0:8d:86:fe:d3:a7:a0:7b:c9:a6:7b:15:92:29:
a8:ff:3f:8b:6e:08:6b:6c:c5:93:65:5d:4a:95:62:64:d8:93:
ac:3c:a0:39:cf:f2:27:a2:59:9e:a4:2f:33:2f:55:83:29:1d:
2a:24:37:48:40:a8:01:66:dc:b0:2f:e4:5c:cc:c1:4e:82:e7:
51:a2:ab:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjKJV0E20deUXYv2GHq9nGmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NDQ3ZWIzMTk3YWEzMWU3ZTY4NDlmMTZhZjU1YWIyNTMw
MWZhODIwHhcNMjUwODIxMDEwMTQyWhcNMjUwODIyMDEwMTQyWjAzMTEwLwYDVQQD
Eyg4YzIwM2NiYWY5N2MzMDFiMzJiYmIzMjVkNzRjMjI4ZWVkNzgwMmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApB8GuPbSZGWz2HBvDyjVwuec7jCi
znPnaBrnaykVwlJmIk5iPZgM2GoldTgWxlFIXuMa2/jXncrEJ/G97eccnE2KLal1
1BamRenL5Zk6wLVdehwC84IU5XOhTqSYx/E49bTDqR9VVB4/9G15g4u+x6KwfuPI
JBdEBrkVUu8ens9Gnbb2FGM6K0i6/Tlppv5XzmtcF55wKP4GVq3UmVXlbtCRO5p1
KDR9MsYG7Lxi+UjTs33P1LA+3zwpyYmBpbGcioJJncX3U7hZ+E0lXXJ/kd8YduTQ
HLtV86abVh6XeRWAYWyGMS1frooIMWaHWhQXj0uEwJiZFjw6J3gDJwHJmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIwgPLr5fDAbMruzJddMIo7teALxMB8GA1UdIwQY
MBaAFJREfrMZeqMefmhJ8Wr1WrJTAfqCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEVSLXN4bDZveDUtYUVueGF2VmFzbE1CLW9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84ZDBiMDUtMjYzZi00MDNhLWFiZjQt
MjM4YmRlMGUxZWY3LzEvbEVSLXN4bDZveDUtYUVueGF2VmFzbE1CLW9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC84ZDBiMDUtMjYzZi00MDNhLWFiZjQtMjM4YmRlMGUxZWY3
LzEvbEVSLXN4bDZveDUtYUVueGF2VmFzbE1CLW9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARGh4Ec7d
ElgzpLr31OCoLIS5fDClXr450V3sxMb+QJVE+WRIvUh7D3AmMCekPaljvg+SNn/K
GMWBy2esqpIIpJg/3AXOOR4WDRpr817aV5B4gbrWovAPbEy0zGqCqWD110mgCVUi
+o8wsM8SfQ7ft3FG8I/3rri5PnMMveQFW4D4Bsw+ViQvThJXWX51t04V7mQLT+Es
DcpnwFJRHvQATmGHO/TdikHKs8K6o2f/qAhXvTQHig4CfvCNhv7Tp6B7yaZ7FZIp
qP8/i24Ia2zFk2VdSpViZNiTrDygOc/yJ6JZnqQvMy9VgykdKiQ3SECoAWbcsC/k
XMzBToLnUaKrKQ==
-----END CERTIFICATE-----
Generated at Thu Aug 21 03:49:04 2025 by rpki-client