Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft
File: lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft (raw, json)
Hash identifier: 3UqEKBLPKPefN4sE8QsWWwFL6BE59ZLMx7fhJZvvab4=
Subject key identifier: 0D:2E:F9:77:B9:F3:66:E5:4D:D5:CC:E4:00:8A:A7:AC:F1:E9:F6:E8
Authority key identifier: 94:FC:DE:45:30:5B:D0:CC:8D:25:D7:C6:ED:CA:71:91:36:F5:60:6D
Certificate issuer: /CN=94fcde45305bd0cc8d25d7c6edca719136f5606d
Certificate serial: 0199228CA176BBBECDFE2EEAC3C57A88F915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft
Manifest number: 141F
Signing time: Sun 07 Sep 2025 05:01:05 +0000
Manifest this update: Sun 07 Sep 2025 05:01:05 +0000
Manifest next update: Mon 08 Sep 2025 05:01:05 +0000
Files and hashes: 1: lPzeRTBb0MyNJdfG7cpxkTb1YG0.crl (hash: r2Uj54yWkEb8OVrt3qkcX818Hh3/1/V3S2hcgz2rLeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:a1:76:bb:be:cd:fe:2e:ea:c3:c5:7a:88:f9:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94fcde45305bd0cc8d25d7c6edca719136f5606d
Validity
Not Before: Sep 7 05:01:05 2025 GMT
Not After : Sep 8 05:01:05 2025 GMT
Subject: CN=0d2ef977b9f366e54dd5cce4008aa7acf1e9f6e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a2:69:ce:33:2e:3a:0d:f2:4e:68:4c:43:13:
e8:59:e4:39:ff:a7:5c:ce:82:b5:1f:af:00:b4:17:
ec:0b:85:70:a5:2f:09:db:85:2f:5b:f1:be:c3:67:
7c:c1:be:69:88:3a:94:be:7b:1a:8c:7a:aa:a6:36:
e8:bf:8c:ed:61:b4:7a:ba:57:f3:92:bd:be:81:2e:
d4:df:6b:93:66:e8:46:4e:07:aa:5c:d2:5a:7b:6a:
68:74:ce:bb:34:42:c4:9f:93:70:f4:ce:a2:df:8d:
93:6b:b1:a1:db:37:79:fd:8e:a2:7b:41:db:61:42:
90:14:41:8f:3e:13:f1:c5:97:db:85:c8:e0:f8:10:
62:6c:4f:b4:b5:dc:15:fd:ac:0a:ef:38:f7:80:a6:
e5:6f:36:8e:94:a8:42:e1:3a:11:16:a3:00:42:ba:
79:66:4f:a3:b9:68:54:1c:3f:5b:dd:1a:2d:12:39:
7e:dc:74:d3:d1:cf:73:40:5c:60:20:d5:98:9c:69:
9d:47:f3:6f:d3:ad:67:cc:f9:25:73:de:5a:bc:f7:
a8:cd:57:0d:f8:01:ec:8b:61:b5:b5:c7:1a:fd:a3:
4e:1a:e6:e5:31:4f:d3:58:5b:bc:a1:7b:45:b5:1c:
21:88:22:ad:b1:b0:f6:a6:35:09:a1:e8:af:5a:1d:
aa:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:2E:F9:77:B9:F3:66:E5:4D:D5:CC:E4:00:8A:A7:AC:F1:E9:F6:E8
X509v3 Authority Key Identifier:
keyid:94:FC:DE:45:30:5B:D0:CC:8D:25:D7:C6:ED:CA:71:91:36:F5:60:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPzeRTBb0MyNJdfG7cpxkTb1YG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1b1be4-bcc0-4b21-80df-203dcbf7d3fc/1/lPzeRTBb0MyNJdfG7cpxkTb1YG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:02:56:46:46:1f:0c:d7:db:fa:42:0f:17:34:57:c5:14:44:
75:33:24:68:ab:fe:1f:cb:ed:9b:de:09:02:30:c2:2c:d4:03:
92:ca:7b:d3:bc:41:f4:88:63:a4:c8:43:7c:2c:72:7d:21:33:
84:f8:05:91:f0:16:df:ec:e0:32:7a:23:87:50:93:b7:2a:c2:
d7:3e:3c:76:1a:e3:f7:91:f7:e7:c5:5e:9f:9f:a1:e3:a3:8e:
07:42:37:93:0f:bc:f3:b5:21:49:ee:80:60:ef:67:87:22:05:
eb:11:a5:3b:52:5e:5f:a5:7e:a4:67:c6:ba:45:cf:a5:9e:ec:
bb:6e:14:b1:3b:01:9c:43:ff:11:a5:1d:a2:03:eb:00:0e:63:
3e:e8:c2:ad:3a:69:d8:7c:10:e2:95:8e:de:6e:1b:6a:ac:ba:
08:d9:bc:26:e7:8b:b2:0f:40:b5:17:ae:a5:37:d3:49:e6:c5:
b2:82:3e:ea:ee:b7:86:99:cb:3e:f3:0f:e6:91:5d:1f:1f:d1:
3e:ee:3f:18:fb:53:ba:ef:3f:58:be:4a:20:18:c1:a1:74:29:
2d:a1:3b:09:3d:8b:ee:65:9e:50:a7:d4:1d:12:09:ea:52:8d:
18:f1:48:55:a1:43:63:e4:09:d6:20:88:38:50:ff:8c:45:4d:
8e:ae:cf:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijKF2u77N/i7qw8V6iPkVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ZmNkZTQ1MzA1YmQwY2M4ZDI1ZDdjNmVkY2E3MTkxMzZm
NTYwNmQwHhcNMjUwOTA3MDUwMTA1WhcNMjUwOTA4MDUwMTA1WjAzMTEwLwYDVQQD
EygwZDJlZjk3N2I5ZjM2NmU1NGRkNWNjZTQwMDhhYTdhY2YxZTlmNmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKJpzjMuOg3yTmhMQxPoWeQ5/6dc
zoK1H68AtBfsC4VwpS8J24UvW/G+w2d8wb5piDqUvnsajHqqpjbov4ztYbR6ulfz
kr2+gS7U32uTZuhGTgeqXNJae2podM67NELEn5Nw9M6i342Ta7Gh2zd5/Y6ie0Hb
YUKQFEGPPhPxxZfbhcjg+BBibE+0tdwV/awK7zj3gKblbzaOlKhC4ToRFqMAQrp5
Zk+juWhUHD9b3RotEjl+3HTT0c9zQFxgINWYnGmdR/Nv061nzPklc95avPeozVcN
+AHsi2G1tcca/aNOGublMU/TWFu8oXtFtRwhiCKtsbD2pjUJoeivWh2q3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0u+Xe582blTdXM5ACKp6zx6fboMB8GA1UdIwQY
MBaAFJT83kUwW9DMjSXXxu3KcZE29WBtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFB6ZVJUQmIwTXlOSmRmRzdjcHhrVGIxWUcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8xYjFiZTQtYmNjMC00YjIxLTgwZGYt
MjAzZGNiZjdkM2ZjLzEvbFB6ZVJUQmIwTXlOSmRmRzdjcHhrVGIxWUcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8xYjFiZTQtYmNjMC00YjIxLTgwZGYtMjAzZGNiZjdkM2Zj
LzEvbFB6ZVJUQmIwTXlOSmRmRzdjcHhrVGIxWUcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmgJWRkYf
DNfb+kIPFzRXxRREdTMkaKv+H8vtm94JAjDCLNQDksp707xB9IhjpMhDfCxyfSEz
hPgFkfAW3+zgMnojh1CTtyrC1z48dhrj95H358Ven5+h46OOB0I3kw+887UhSe6A
YO9nhyIF6xGlO1JeX6V+pGfGukXPpZ7su24UsTsBnEP/EaUdogPrAA5jPujCrTpp
2HwQ4pWO3m4baqy6CNm8JueLsg9AtReupTfTSebFsoI+6u63hpnLPvMP5pFdHx/R
Pu4/GPtTuu8/WL5KIBjBoXQpLaE7CT2L7mWeUKfUHRIJ6lKNGPFIVaFDY+QJ1iCI
OFD/jEVNjq7PrQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:30:55 2025 by rpki-client