Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
File: LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft (raw, json)
Hash identifier: e08aQ6Pe7IO5EjWpKRx/zjazlinV1vscFhayyHUeIhE=
Subject key identifier: 84:86:78:4E:D2:05:57:97:CF:A5:1B:DB:90:C8:AC:36:FB:7E:9D:B5
Authority key identifier: 2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
Certificate issuer: /CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Certificate serial: 0199342492BCDCB5AEF2F9367C2EA04202A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
Manifest number: 066C
Signing time: Wed 10 Sep 2025 15:00:35 +0000
Manifest this update: Wed 10 Sep 2025 15:00:35 +0000
Manifest next update: Thu 11 Sep 2025 15:00:35 +0000
Files and hashes: 1: CW_LnyX1zugkzNOIUd8XzpBN5Bw.roa (hash: fnDAooAgubqCaqW4AjdSJ+J1ErpgOuY9lVFJ+sN2CYg=)
2: LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl (hash: z6h2DIjNM7Hv7gAcUouZFxwHmW0xMku5Xl4Pz4/jtb0=)
3: eQf0fzT1TpCrCtQpX64ANEQyzhI.roa (hash: HlHU7MK+aLw3ArQHYGvb135KcLlwl9X+zO2+NofGyyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 15:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:24:92:bc:dc:b5:ae:f2:f9:36:7c:2e:a0:42:02:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Validity
Not Before: Sep 10 15:00:35 2025 GMT
Not After : Sep 11 15:00:35 2025 GMT
Subject: CN=8486784ed2055797cfa51bdb90c8ac36fb7e9db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a8:0c:bf:db:30:56:79:8a:d7:86:4e:2a:72:
e6:f1:07:ab:5e:09:26:a7:3b:41:21:f6:09:45:c2:
0e:8d:72:93:8e:ad:6d:41:0e:dc:5f:7a:bb:d7:45:
2e:7f:a3:94:b4:b8:f6:5b:3c:d9:aa:64:92:d2:ac:
9c:cc:a2:f3:e0:90:07:79:5f:d7:61:ae:40:13:e8:
b8:08:5d:60:ee:dd:ff:58:1a:53:48:44:c4:bb:03:
35:8e:8e:57:63:ab:38:49:4b:39:cf:e6:fd:e0:57:
9a:59:a4:dd:5a:02:c7:42:d1:3d:41:23:4e:60:4e:
43:6e:a1:f7:00:49:92:4f:22:72:6b:60:9e:97:72:
f8:c9:af:e0:92:89:c1:78:b1:e9:83:31:21:f7:bf:
03:f2:5a:b1:a2:f6:1a:48:55:3c:3d:ed:7b:57:90:
cf:32:54:74:ad:89:99:c2:96:2c:59:c6:25:4a:19:
bf:c2:e0:00:15:73:39:b0:57:43:56:ff:70:e8:f6:
1d:76:43:17:98:e5:f5:e1:c2:bd:c5:b4:c8:f9:eb:
db:e2:22:0a:c6:04:eb:5e:bd:7d:f7:be:d6:c7:c9:
8b:46:5f:89:f0:08:f6:f2:c3:56:27:88:69:d2:10:
57:a6:ff:cb:d9:1e:d3:c2:37:96:40:f0:f2:f5:29:
1e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:86:78:4E:D2:05:57:97:CF:A5:1B:DB:90:C8:AC:36:FB:7E:9D:B5
X509v3 Authority Key Identifier:
keyid:2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:34:2f:22:61:8d:a3:1a:8a:15:35:0b:ea:4a:69:b4:93:39:
8a:42:2b:ea:ea:0b:27:cb:4b:c8:63:fc:b1:c6:d4:d7:37:23:
f6:65:b9:a9:ea:8a:b5:c8:6d:2f:e1:44:b5:23:3a:41:bb:68:
d1:f4:33:4f:da:e1:6b:18:a4:49:4b:de:7c:b5:c7:d8:32:9c:
36:f9:b4:99:91:60:4c:48:4b:a6:32:85:df:d5:07:f5:45:6d:
69:f2:81:14:01:1c:e8:f8:53:ab:c2:15:1f:63:b0:16:27:12:
28:68:a0:c7:1a:29:ba:c4:72:76:53:cf:2c:5b:46:ef:28:3f:
c2:34:db:a6:d3:02:dd:be:c5:59:d8:13:6b:64:8e:91:fb:c2:
7a:7d:a1:c9:75:02:cb:3f:53:07:b2:c2:58:5e:37:4d:2d:73:
15:40:39:51:5c:cb:c4:88:50:2d:46:12:05:2f:eb:05:d2:36:
47:84:74:79:b7:bb:2e:ad:34:6e:ba:1f:af:ab:a0:c9:d6:2b:
c1:e7:81:e6:17:a5:ca:da:77:ea:86:d5:64:6c:4a:bf:50:46:
aa:f2:20:1e:e2:46:3e:0b:f5:70:27:ac:6a:84:54:45:62:8c:
72:35:d8:e8:39:fd:8d:f6:5c:e6:d0:f6:b7:16:b0:d6:08:68:
9f:e7:a4:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk0JJK83LWu8vk2fC6gQgKgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMGQ2MjEyOWQwMjA2M2Q0MDllYmZiMDFjNjQ4ZDQ2ZjM0
ODg5ZTAwHhcNMjUwOTEwMTUwMDM1WhcNMjUwOTExMTUwMDM1WjAzMTEwLwYDVQQD
Eyg4NDg2Nzg0ZWQyMDU1Nzk3Y2ZhNTFiZGI5MGM4YWMzNmZiN2U5ZGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKgMv9swVnmK14ZOKnLm8QerXgkm
pztBIfYJRcIOjXKTjq1tQQ7cX3q710Uuf6OUtLj2WzzZqmSS0qyczKLz4JAHeV/X
Ya5AE+i4CF1g7t3/WBpTSETEuwM1jo5XY6s4SUs5z+b94FeaWaTdWgLHQtE9QSNO
YE5DbqH3AEmSTyJya2Cel3L4ya/gkonBeLHpgzEh978D8lqxovYaSFU8Pe17V5DP
MlR0rYmZwpYsWcYlShm/wuAAFXM5sFdDVv9w6PYddkMXmOX14cK9xbTI+evb4iIK
xgTrXr19977Wx8mLRl+J8Aj28sNWJ4hp0hBXpv/L2R7TwjeWQPDy9SkeKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFISGeE7SBVeXz6Ub25DIrDb7fp21MB8GA1UdIwQY
MBaAFC0NYhKdAgY9QJ6/sBxkjUbzSIngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFExaUVwMENCajFBbnItd0hHU05Sdk5JaWVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wNjBmN2UtOGNmMC00ZWMyLWFmN2Et
MWRhZWE0YmM5NGIzLzEvTFExaUVwMENCajFBbnItd0hHU05Sdk5JaWVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8wNjBmN2UtOGNmMC00ZWMyLWFmN2EtMWRhZWE0YmM5NGIz
LzEvTFExaUVwMENCajFBbnItd0hHU05Sdk5JaWVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdjQvImGN
oxqKFTUL6kpptJM5ikIr6uoLJ8tLyGP8scbU1zcj9mW5qeqKtchtL+FEtSM6Qbto
0fQzT9rhaxikSUvefLXH2DKcNvm0mZFgTEhLpjKF39UH9UVtafKBFAEc6PhTq8IV
H2OwFicSKGigxxopusRydlPPLFtG7yg/wjTbptMC3b7FWdgTa2SOkfvCen2hyXUC
yz9TB7LCWF43TS1zFUA5UVzLxIhQLUYSBS/rBdI2R4R0ebe7Lq00brofr6ugydYr
weeB5helytp36obVZGxKv1BGqvIgHuJGPgv1cCesaoRURWKMcjXY6Dn9jfZc5tD2
txaw1ghon+ek8Q==
-----END CERTIFICATE-----
Generated at Thu Sep 11 01:20:08 2025 by rpki-client