Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.mft
File: lpztpb83kB_p5E9ztb-CtoezRXI.mft (raw, json)
Hash identifier: b1RI2XBovggztbbYsKWkJp4PWz1AMXJud0UhxtJUEvE=
Subject key identifier: FF:A3:81:26:A4:4D:8A:EF:FB:75:6E:B3:C4:6F:EA:82:7C:71:7E:7D
Authority key identifier: 96:9C:ED:A5:BF:37:90:1F:E9:E4:4F:73:B5:BF:82:B6:87:B3:45:72
Certificate issuer: /CN=969ceda5bf37901fe9e44f73b5bf82b687b34572
Certificate serial: 01991CC16EA591171265AB8A944E85347815
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lpztpb83kB_p5E9ztb-CtoezRXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.mft
Manifest number: 0B13
Signing time: Sat 06 Sep 2025 02:01:02 +0000
Manifest this update: Sat 06 Sep 2025 02:01:02 +0000
Manifest next update: Sun 07 Sep 2025 02:01:02 +0000
Files and hashes: 1: BlSKEWV8a0Pu0DQWSBEZ8E6j6Ig.roa (hash: E+fl2IDftOEsy56bvfa1HOBzyBMqnDbK6GEdF9F9KeI=)
2: amBacDdU6Mjk1rJegCvOmhPZCuI.roa (hash: QFuN87Ca0aIv1BOf1cf5zbuSpQPxJlnZXFNDEW5Ik9U=)
3: lpztpb83kB_p5E9ztb-CtoezRXI.crl (hash: nC48dMiSPozsii8zEGAftp2n1lmlqDN1HPZ/wmQvCBU=)
4: oQUx3CaetTGOoOfH7R_GIuQC9ZM.roa (hash: QXtVeIAnBIaJbBWzjL0HKxzProdKFi/c2re+3CNcveM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lpztpb83kB_p5E9ztb-CtoezRXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1c:c1:6e:a5:91:17:12:65:ab:8a:94:4e:85:34:78:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969ceda5bf37901fe9e44f73b5bf82b687b34572
Validity
Not Before: Sep 6 02:01:02 2025 GMT
Not After : Sep 7 02:01:02 2025 GMT
Subject: CN=ffa38126a44d8aeffb756eb3c46fea827c717e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9d:13:05:a4:aa:47:c9:f4:73:40:13:b5:b4:
54:8f:b5:93:b7:26:2b:6f:1e:cc:66:31:21:11:cb:
e6:e4:28:73:83:18:4c:68:68:f2:8d:5c:f8:fb:31:
03:f0:91:5c:e1:9d:55:b5:7f:80:89:88:89:2a:5f:
8c:a4:d3:ec:6d:48:96:2a:8f:9d:50:af:f2:a8:62:
8c:2e:46:f9:1b:21:11:f3:56:93:e5:8d:bd:01:12:
83:36:d3:13:41:c6:8c:7c:2c:76:db:05:df:93:a9:
10:e9:55:a6:2c:ba:4e:25:c9:05:74:de:3c:11:85:
76:ef:a4:77:f4:41:00:3b:61:d7:d6:ee:68:e7:8a:
ec:5a:bc:61:3d:d4:20:d0:52:c8:59:bf:7d:9d:d9:
a0:9b:7f:f5:23:56:02:10:b0:7c:c8:99:7b:af:b7:
2b:dd:fc:5e:c8:d8:98:18:5a:a9:65:26:60:48:1e:
d4:74:94:24:8d:4e:46:79:2a:7e:25:0f:31:c2:8b:
a8:4a:9f:7e:66:40:d9:d0:0c:4b:d8:d6:75:9e:43:
09:63:81:6d:41:f9:cb:4d:b8:8c:86:ad:a4:77:7c:
ab:60:fc:07:7d:7b:9e:e6:ec:be:4a:ee:28:bc:d4:
7e:eb:9e:74:60:5b:28:8d:08:89:ee:ce:67:d6:b3:
21:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A3:81:26:A4:4D:8A:EF:FB:75:6E:B3:C4:6F:EA:82:7C:71:7E:7D
X509v3 Authority Key Identifier:
keyid:96:9C:ED:A5:BF:37:90:1F:E9:E4:4F:73:B5:BF:82:B6:87:B3:45:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lpztpb83kB_p5E9ztb-CtoezRXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/5cffd2-b568-4d55-a124-21fc9afc8ac1/1/lpztpb83kB_p5E9ztb-CtoezRXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:17:59:27:57:4b:c2:ed:c9:46:91:40:ff:8d:25:b5:3e:30:
80:a2:b8:97:2b:b6:f5:73:c6:b8:59:fb:91:94:1e:13:85:fc:
a7:dd:1a:ab:28:90:1e:91:a4:5c:b3:53:af:0b:36:87:cb:48:
c9:59:fe:82:ae:94:76:f8:19:62:55:94:8e:e6:da:46:3a:f1:
b7:d5:ec:5f:5b:e9:fb:dc:a6:34:bf:c8:aa:d2:e7:df:e7:21:
77:e7:2e:e0:42:14:04:6b:56:57:ae:69:5f:28:51:ea:45:d3:
5e:48:3e:7b:d2:9a:b5:22:82:e2:81:10:de:95:c4:c1:02:e6:
5d:94:8f:c0:2e:59:f4:8b:64:84:8e:60:b6:c3:28:ce:82:96:
7d:20:d9:89:55:0d:a8:c4:4e:a6:71:8d:ae:16:32:a0:60:b0:
41:05:8e:0f:f7:9d:a5:dc:a1:20:3b:2f:67:5d:d7:d7:89:fd:
f4:f3:48:a9:fc:53:d6:1d:a7:01:2e:76:5d:e6:c2:95:4f:3f:
e5:80:f8:94:f0:1e:d6:34:99:e2:3c:b0:e6:54:50:dd:19:5f:
7e:57:1b:e9:ad:bd:d9:26:0a:2c:26:0e:6d:55:99:a3:62:1f:
8c:78:d6:bd:cf:d7:40:f6:37:d1:61:78:eb:68:b1:73:88:a4:
b2:89:71:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkcwW6lkRcSZauKlE6FNHgVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2OWNlZGE1YmYzNzkwMWZlOWU0NGY3M2I1YmY4MmI2ODdi
MzQ1NzIwHhcNMjUwOTA2MDIwMTAyWhcNMjUwOTA3MDIwMTAyWjAzMTEwLwYDVQQD
EyhmZmEzODEyNmE0NGQ4YWVmZmI3NTZlYjNjNDZmZWE4MjdjNzE3ZTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsp0TBaSqR8n0c0ATtbRUj7WTtyYr
bx7MZjEhEcvm5ChzgxhMaGjyjVz4+zED8JFc4Z1VtX+AiYiJKl+MpNPsbUiWKo+d
UK/yqGKMLkb5GyER81aT5Y29ARKDNtMTQcaMfCx22wXfk6kQ6VWmLLpOJckFdN48
EYV276R39EEAO2HX1u5o54rsWrxhPdQg0FLIWb99ndmgm3/1I1YCELB8yJl7r7cr
3fxeyNiYGFqpZSZgSB7UdJQkjU5GeSp+JQ8xwouoSp9+ZkDZ0AxL2NZ1nkMJY4Ft
QfnLTbiMhq2kd3yrYPwHfXue5uy+Su4ovNR+6550YFsojQiJ7s5n1rMhPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+jgSakTYrv+3Vus8Rv6oJ8cX59MB8GA1UdIwQY
MBaAFJac7aW/N5Af6eRPc7W/graHs0VyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHB6dHBiODNrQl9wNUU5enRiLUN0b2V6UlhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS81Y2ZmZDItYjU2OC00ZDU1LWExMjQt
MjFmYzlhZmM4YWMxLzEvbHB6dHBiODNrQl9wNUU5enRiLUN0b2V6UlhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS81Y2ZmZDItYjU2OC00ZDU1LWExMjQtMjFmYzlhZmM4YWMx
LzEvbHB6dHBiODNrQl9wNUU5enRiLUN0b2V6UlhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIxdZJ1dL
wu3JRpFA/40ltT4wgKK4lyu29XPGuFn7kZQeE4X8p90aqyiQHpGkXLNTrws2h8tI
yVn+gq6UdvgZYlWUjubaRjrxt9XsX1vp+9ymNL/IqtLn3+chd+cu4EIUBGtWV65p
XyhR6kXTXkg+e9KatSKC4oEQ3pXEwQLmXZSPwC5Z9ItkhI5gtsMozoKWfSDZiVUN
qMROpnGNrhYyoGCwQQWOD/edpdyhIDsvZ13X14n99PNIqfxT1h2nAS52XebClU8/
5YD4lPAe1jSZ4jyw5lRQ3Rlfflcb6a292SYKLCYObVWZo2IfjHjWvc/XQPY30WF4
62ixc4iksolxTg==
-----END CERTIFICATE-----
Generated at Sat Sep 6 10:06:12 2025 by rpki-client