Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.mft
File: 03lp9dJTIQsKvo4HoIb2CNbyoK8.mft (raw, json)
Hash identifier: AD7/zkdFPUu3r4DWqd0YdZ0vO2pw+jXSI0T07Kl6fek=
Subject key identifier: 65:B0:3D:C3:BA:4B:FC:22:19:BA:95:BA:B9:0C:7A:0C:B9:CE:0A:5E
Authority key identifier: D3:79:69:F5:D2:53:21:0B:0A:BE:8E:07:A0:86:F6:08:D6:F2:A0:AF
Certificate issuer: /CN=d37969f5d253210b0abe8e07a086f608d6f2a0af
Certificate serial: 0199228CA28E4953793E52EDBAEDEDFA1BED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/03lp9dJTIQsKvo4HoIb2CNbyoK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.mft
Manifest number: 0103
Signing time: Sun 07 Sep 2025 05:01:05 +0000
Manifest this update: Sun 07 Sep 2025 05:01:05 +0000
Manifest next update: Mon 08 Sep 2025 05:01:05 +0000
Files and hashes: 1: 03lp9dJTIQsKvo4HoIb2CNbyoK8.crl (hash: z82k8vQkPLve8w19BJbn45zN4clNMOPqkXx3fOJkMaM=)
2: TsJN_TLkQxu445oc0XMKkszh0nw.roa (hash: B4z6N7CnokVq03fzYP/xAwd45WDAB7sy85muMR/wd1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/03lp9dJTIQsKvo4HoIb2CNbyoK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:a2:8e:49:53:79:3e:52:ed:ba:ed:ed:fa:1b:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d37969f5d253210b0abe8e07a086f608d6f2a0af
Validity
Not Before: Sep 7 05:01:05 2025 GMT
Not After : Sep 8 05:01:05 2025 GMT
Subject: CN=65b03dc3ba4bfc2219ba95bab90c7a0cb9ce0a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8f:5b:7d:fa:ae:93:b4:e5:9f:e8:57:e5:c3:
ec:5a:39:2f:e5:a5:8e:dc:92:9d:a9:84:af:5d:a4:
66:d1:b0:37:28:eb:ff:31:4e:21:c3:79:82:95:41:
f5:6b:a2:a9:6b:f3:c4:41:99:4a:1f:8f:ad:68:3d:
05:e8:01:07:93:69:fe:d6:cc:02:f0:37:7d:c6:95:
da:a9:b4:b1:ac:b2:5e:ac:1a:d0:79:46:7d:6f:fe:
ca:21:b4:a4:2c:a2:79:f1:bc:57:16:b1:be:f8:1d:
af:26:84:71:bf:fd:b9:84:52:78:5a:2a:fc:32:10:
9b:d8:6e:02:79:6b:1c:4e:bc:9c:47:92:80:57:f0:
fc:a9:2e:0e:44:84:20:53:02:92:31:4f:02:96:da:
61:ac:70:9c:88:ca:74:23:96:c2:7e:54:cb:63:d5:
48:37:75:97:9c:01:94:f9:01:93:c1:e1:4c:bb:7b:
d0:21:48:bb:b7:89:a9:d8:88:7a:e4:96:a7:95:c3:
af:0c:8e:e9:7c:76:57:28:b9:47:7d:f8:88:bb:3c:
87:2a:18:54:b2:2a:de:2b:f7:d0:dc:c9:73:da:84:
e5:3a:03:1e:e3:f8:3d:57:8e:eb:43:d4:7c:9d:1f:
f9:24:ef:e3:0d:93:84:38:ac:23:65:e2:f6:d5:ca:
95:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B0:3D:C3:BA:4B:FC:22:19:BA:95:BA:B9:0C:7A:0C:B9:CE:0A:5E
X509v3 Authority Key Identifier:
keyid:D3:79:69:F5:D2:53:21:0B:0A:BE:8E:07:A0:86:F6:08:D6:F2:A0:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/03lp9dJTIQsKvo4HoIb2CNbyoK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:03:ed:cc:14:99:8b:ff:20:29:58:6d:24:b3:01:c1:da:38:
ba:79:89:37:93:c9:5d:c0:48:25:ff:b4:e4:be:9e:e1:fb:f3:
c4:bb:59:0f:62:f1:da:a1:3f:00:b0:65:ac:6c:da:06:44:ab:
40:84:fb:bd:fd:17:47:38:ec:7b:14:3b:3a:da:8b:9d:39:ff:
36:eb:36:f7:00:42:c8:ca:22:53:3b:b1:bf:a6:f9:29:bf:67:
f8:f3:82:3b:52:74:a8:7c:79:1d:b7:bc:eb:bd:a8:42:17:1d:
ef:a1:90:54:bf:67:36:d3:6a:f8:a9:00:83:b8:12:f1:d6:78:
be:c8:12:94:d4:59:0e:ff:7a:32:bc:99:50:c4:8b:24:68:e2:
fc:7a:48:7f:93:3f:99:c1:bb:e0:eb:51:2f:8a:84:5a:f4:30:
79:db:76:27:c2:75:e4:b5:c3:53:b0:81:fb:4b:a3:00:5c:55:
32:92:1b:0f:a9:3e:a1:10:b2:ef:c5:a0:fe:9e:e9:09:4b:81:
27:8a:10:ab:a2:e1:4a:6c:c1:bb:6a:19:61:5d:04:d0:d2:67:
3f:5e:24:c5:e7:3d:7a:38:07:7f:96:94:18:25:5a:e4:a0:35:
ef:82:1a:5e:c0:94:38:5b:8e:61:07:ee:db:5a:22:8a:c7:93:
e7:d7:7a:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijKKOSVN5PlLtuu3t+hvtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNzk2OWY1ZDI1MzIxMGIwYWJlOGUwN2EwODZmNjA4ZDZm
MmEwYWYwHhcNMjUwOTA3MDUwMTA1WhcNMjUwOTA4MDUwMTA1WjAzMTEwLwYDVQQD
Eyg2NWIwM2RjM2JhNGJmYzIyMTliYTk1YmFiOTBjN2EwY2I5Y2UwYTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoY9bffquk7Tln+hX5cPsWjkv5aWO
3JKdqYSvXaRm0bA3KOv/MU4hw3mClUH1a6Kpa/PEQZlKH4+taD0F6AEHk2n+1swC
8Dd9xpXaqbSxrLJerBrQeUZ9b/7KIbSkLKJ58bxXFrG++B2vJoRxv/25hFJ4Wir8
MhCb2G4CeWscTrycR5KAV/D8qS4ORIQgUwKSMU8CltphrHCciMp0I5bCflTLY9VI
N3WXnAGU+QGTweFMu3vQIUi7t4mp2Ih65JanlcOvDI7pfHZXKLlHffiIuzyHKhhU
sireK/fQ3Mlz2oTlOgMe4/g9V47rQ9R8nR/5JO/jDZOEOKwjZeL21cqVqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGWwPcO6S/wiGbqVurkMegy5zgpeMB8GA1UdIwQY
MBaAFNN5afXSUyELCr6OB6CG9gjW8qCvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDNscDlkSlRJUXNLdm80SG9JYjJDTmJ5b0s4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC81MjQwYTYtY2Q2MS00ZTBjLTg4YjYt
ZjU5ZDIwZWYyN2I0LzEvMDNscDlkSlRJUXNLdm80SG9JYjJDTmJ5b0s4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC81MjQwYTYtY2Q2MS00ZTBjLTg4YjYtZjU5ZDIwZWYyN2I0
LzEvMDNscDlkSlRJUXNLdm80SG9JYjJDTmJ5b0s4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkQPtzBSZ
i/8gKVhtJLMBwdo4unmJN5PJXcBIJf+05L6e4fvzxLtZD2Lx2qE/ALBlrGzaBkSr
QIT7vf0XRzjsexQ7OtqLnTn/Nus29wBCyMoiUzuxv6b5Kb9n+POCO1J0qHx5Hbe8
672oQhcd76GQVL9nNtNq+KkAg7gS8dZ4vsgSlNRZDv96MryZUMSLJGji/HpIf5M/
mcG74OtRL4qEWvQwedt2J8J15LXDU7CB+0ujAFxVMpIbD6k+oRCy78Wg/p7pCUuB
J4oQq6LhSmzBu2oZYV0E0NJnP14kxec9ejgHf5aUGCVa5KA174IaXsCUOFuOYQfu
21oiiseT59d67Q==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:52:50 2025 by rpki-client