Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/lKpBiudwvajvBRax0cYzpn6R84s.mft
File: lKpBiudwvajvBRax0cYzpn6R84s.mft (raw, json)
Hash identifier: ua9uPVnRPyBe8kC9Ywr7iN9G6zt89NBw15JO0Ay0e/g=
Subject key identifier: F0:BC:F5:9E:31:1B:75:21:B2:BF:A6:87:0B:6C:3B:B0:C3:55:41:EC
Authority key identifier: 94:AA:41:8A:E7:70:BD:A8:EF:05:16:B1:D1:C6:33:A6:7E:91:F3:8B
Certificate issuer: /CN=94aa418ae770bda8ef0516b1d1c633a67e91f38b
Certificate serial: 019921B1DFFD527D93EA3D5DA8FCD112AE0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKpBiudwvajvBRax0cYzpn6R84s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/lKpBiudwvajvBRax0cYzpn6R84s.mft
Manifest number: 1039
Signing time: Sun 07 Sep 2025 01:02:09 +0000
Manifest this update: Sun 07 Sep 2025 01:02:09 +0000
Manifest next update: Mon 08 Sep 2025 01:02:09 +0000
Files and hashes: 1: JDbsNRiv_WMTlViBQXQ3g59gK5M.roa (hash: 5BHapuXzcbpJhpfOa/evo44J0f0F6BTnvXfMcpPhdEU=)
2: lKpBiudwvajvBRax0cYzpn6R84s.crl (hash: j//Z/DWVYV0X4GSse4R6+22QRL4qLT8AAYEmm3VocB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/lKpBiudwvajvBRax0cYzpn6R84s.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/lKpBiudwvajvBRax0cYzpn6R84s.mft
rsync://rpki.ripe.net/repository/DEFAULT/lKpBiudwvajvBRax0cYzpn6R84s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:df:fd:52:7d:93:ea:3d:5d:a8:fc:d1:12:ae:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94aa418ae770bda8ef0516b1d1c633a67e91f38b
Validity
Not Before: Sep 7 01:02:09 2025 GMT
Not After : Sep 8 01:02:09 2025 GMT
Subject: CN=f0bcf59e311b7521b2bfa6870b6c3bb0c35541ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:9c:7f:8b:56:2c:4b:ca:ce:4a:e9:9f:de:98:
63:f1:aa:b9:70:2c:99:00:48:94:09:cf:52:0b:ca:
8e:f6:51:c3:a9:f5:ed:68:f9:df:c5:fd:95:f5:29:
96:1b:af:97:e0:a3:de:b4:67:01:d5:32:5b:4a:58:
3e:55:13:18:67:1a:b9:6f:0f:ff:e6:a2:00:f3:63:
be:48:b8:90:1c:eb:2d:c0:44:3f:00:54:4a:28:6c:
89:61:cc:ac:9f:61:ae:30:2c:a1:b9:39:e9:e2:49:
34:9e:8a:cb:bb:58:77:61:a0:40:a3:ed:f6:4a:27:
5e:03:1f:29:e6:c5:5e:e6:e9:f7:b4:d1:a3:04:22:
c1:5e:56:af:71:0e:a6:ea:f4:49:c2:d9:e3:c0:48:
4b:dd:62:d4:04:3f:cb:e9:ce:40:88:8f:cb:f1:ce:
9a:e2:e7:25:7b:4e:e0:02:16:b8:c3:22:60:b7:59:
cc:97:f5:13:72:50:85:2a:f3:68:de:12:94:8a:ee:
93:dc:71:7e:fe:48:41:0f:17:34:33:7e:fa:d1:b0:
24:9a:0b:fc:fa:bc:28:58:c7:3d:e8:8e:c3:9e:87:
70:3e:ad:b2:fd:cc:a7:e7:64:0e:06:fc:cf:f8:83:
5d:3f:d2:65:87:db:a0:96:4e:7c:54:dd:99:22:80:
4f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:BC:F5:9E:31:1B:75:21:B2:BF:A6:87:0B:6C:3B:B0:C3:55:41:EC
X509v3 Authority Key Identifier:
keyid:94:AA:41:8A:E7:70:BD:A8:EF:05:16:B1:D1:C6:33:A6:7E:91:F3:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKpBiudwvajvBRax0cYzpn6R84s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/lKpBiudwvajvBRax0cYzpn6R84s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/09e2f7-e650-4f38-a745-c396200fe0bf/1/lKpBiudwvajvBRax0cYzpn6R84s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:94:12:96:7f:12:5c:f6:48:28:4c:f7:65:1a:1f:95:97:e5:
ab:4e:42:6f:60:52:e0:fd:7c:dc:2a:32:c6:bf:c1:55:b8:80:
a0:a3:4a:cb:ab:4c:b4:38:a7:38:f2:0e:85:3f:81:8e:4a:20:
bd:99:0e:39:e7:04:2a:27:40:4a:6c:8b:f9:1f:9e:6b:b1:76:
e1:01:41:12:ff:eb:9a:77:42:01:f9:63:69:11:90:9b:a8:ee:
c7:ef:2e:20:b1:2b:73:1b:95:33:f0:a8:5c:8c:f6:3e:99:59:
5c:dd:27:4d:d7:9a:bd:50:65:93:58:23:e1:8f:a9:96:c5:38:
80:aa:0a:5d:25:17:58:ef:a5:65:d5:75:7a:a3:62:f3:a4:2c:
35:ef:63:87:f7:24:ff:7d:e2:4f:56:27:74:5f:e4:fa:5b:69:
aa:a7:2d:de:63:5c:9b:df:d2:b1:30:94:ca:69:c6:23:d5:96:
05:32:ea:34:ca:70:69:b4:8c:59:68:6b:1a:d6:ff:ea:57:8e:
2a:3b:39:9f:05:0e:6a:d8:a4:64:39:d6:7a:8b:f1:86:fc:66:
84:74:be:53:db:0d:8c:b2:af:53:98:fa:48:88:f9:ac:29:9a:
13:f9:eb:a8:27:af:ef:6e:ad:34:56:fe:92:12:79:99:76:bf:
f6:22:8a:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsd/9Un2T6j1dqPzREq4NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0YWE0MThhZTc3MGJkYThlZjA1MTZiMWQxYzYzM2E2N2U5
MWYzOGIwHhcNMjUwOTA3MDEwMjA5WhcNMjUwOTA4MDEwMjA5WjAzMTEwLwYDVQQD
EyhmMGJjZjU5ZTMxMWI3NTIxYjJiZmE2ODcwYjZjM2JiMGMzNTU0MWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Zx/i1YsS8rOSumf3phj8aq5cCyZ
AEiUCc9SC8qO9lHDqfXtaPnfxf2V9SmWG6+X4KPetGcB1TJbSlg+VRMYZxq5bw//
5qIA82O+SLiQHOstwEQ/AFRKKGyJYcysn2GuMCyhuTnp4kk0norLu1h3YaBAo+32
SideAx8p5sVe5un3tNGjBCLBXlavcQ6m6vRJwtnjwEhL3WLUBD/L6c5AiI/L8c6a
4ucle07gAha4wyJgt1nMl/UTclCFKvNo3hKUiu6T3HF+/khBDxc0M3760bAkmgv8
+rwoWMc96I7DnodwPq2y/cyn52QOBvzP+INdP9Jlh9uglk58VN2ZIoBPPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPC89Z4xG3Uhsr+mhwtsO7DDVUHsMB8GA1UdIwQY
MBaAFJSqQYrncL2o7wUWsdHGM6Z+kfOLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEtwQml1ZHd2YWp2QlJheDBjWXpwbjZSODRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8wOWUyZjctZTY1MC00ZjM4LWE3NDUt
YzM5NjIwMGZlMGJmLzEvbEtwQml1ZHd2YWp2QlJheDBjWXpwbjZSODRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8wOWUyZjctZTY1MC00ZjM4LWE3NDUtYzM5NjIwMGZlMGJm
LzEvbEtwQml1ZHd2YWp2QlJheDBjWXpwbjZSODRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbJQSln8S
XPZIKEz3ZRoflZflq05Cb2BS4P183Coyxr/BVbiAoKNKy6tMtDinOPIOhT+Bjkog
vZkOOecEKidASmyL+R+ea7F24QFBEv/rmndCAfljaRGQm6jux+8uILErcxuVM/Co
XIz2PplZXN0nTdeavVBlk1gj4Y+plsU4gKoKXSUXWO+lZdV1eqNi86QsNe9jh/ck
/33iT1YndF/k+ltpqqct3mNcm9/SsTCUymnGI9WWBTLqNMpwabSMWWhrGtb/6leO
Kjs5nwUOatikZDnWeovxhvxmhHS+U9sNjLKvU5j6SIj5rCmaE/nrqCev726tNFb+
khJ5mXa/9iKK7A==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:05:56 2025 by rpki-client