Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/6b0dc9-c1b9-4fae-acd9-6bff1c0e68ae/1/lkyqlAOgjTc7kLcQpW0-roE5T_A.mft
File: lkyqlAOgjTc7kLcQpW0-roE5T_A.mft (raw, json)
Hash identifier: 5i6/QAlmANlNtaHuVe30kNRV/D2zGGGAVdoBpYWid8w=
Subject key identifier: 95:08:6E:47:77:10:8B:EE:E0:2E:17:57:BE:0F:0A:98:A7:AD:8F:B8
Authority key identifier: 96:4C:AA:94:03:A0:8D:37:3B:90:B7:10:A5:6D:3E:AE:81:39:4F:F0
Certificate issuer: /CN=964caa9403a08d373b90b710a56d3eae81394ff0
Certificate serial: 0199221EDCB46E365EEB988B1A2EF4505DFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkyqlAOgjTc7kLcQpW0-roE5T_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/6b0dc9-c1b9-4fae-acd9-6bff1c0e68ae/1/lkyqlAOgjTc7kLcQpW0-roE5T_A.mft
Manifest number: 15FE
Signing time: Sun 07 Sep 2025 03:01:11 +0000
Manifest this update: Sun 07 Sep 2025 03:01:11 +0000
Manifest next update: Mon 08 Sep 2025 03:01:11 +0000
Files and hashes: 1: lkyqlAOgjTc7kLcQpW0-roE5T_A.crl (hash: Ja6tqgtt3zo/WZSVPVBSrzCpDTD+9tDqqfnOnrQLW5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/6b0dc9-c1b9-4fae-acd9-6bff1c0e68ae/1/lkyqlAOgjTc7kLcQpW0-roE5T_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/6b0dc9-c1b9-4fae-acd9-6bff1c0e68ae/1/lkyqlAOgjTc7kLcQpW0-roE5T_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/lkyqlAOgjTc7kLcQpW0-roE5T_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:dc:b4:6e:36:5e:eb:98:8b:1a:2e:f4:50:5d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=964caa9403a08d373b90b710a56d3eae81394ff0
Validity
Not Before: Sep 7 03:01:11 2025 GMT
Not After : Sep 8 03:01:11 2025 GMT
Subject: CN=95086e4777108beee02e1757be0f0a98a7ad8fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:14:d8:86:f1:29:8a:a3:3d:5f:51:be:e4:56:
e7:21:f4:88:ae:3f:83:35:01:f3:38:be:c6:ff:b8:
56:be:83:33:c5:69:c2:c7:51:41:72:5f:46:df:bc:
02:98:e1:2d:36:c6:4f:c6:0d:60:57:86:d0:05:18:
58:37:80:d8:05:71:6e:e8:6a:49:ec:9e:37:04:06:
23:30:88:e1:88:4d:cd:68:f8:6b:ba:2d:bd:7f:ab:
40:0b:c1:2b:5a:68:4e:70:61:60:44:79:1d:48:35:
61:30:39:51:be:a9:4e:22:61:c5:09:0d:a0:70:bb:
d8:bc:38:bf:c6:47:cf:d4:a2:d1:2e:c3:36:98:4d:
29:c9:ea:de:8f:91:87:ef:8b:24:a8:63:7a:65:14:
45:9a:66:69:16:2e:67:e6:38:03:2a:5a:7d:07:a7:
6c:81:d5:36:d6:d0:a0:37:c6:69:24:5d:7e:8c:2e:
46:f4:da:73:1b:68:50:12:e0:eb:3f:37:c0:ce:1a:
bf:4f:09:d5:46:10:c3:09:df:89:b5:87:40:dd:b1:
bc:7d:50:13:01:2e:e1:c3:75:92:b5:02:e8:3b:3d:
83:6d:b5:6e:1b:c1:a7:7a:c0:c2:f8:44:d2:ec:d8:
fb:b3:1c:fc:70:c2:5b:b1:7f:6a:22:a9:0c:6d:6e:
7b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:08:6E:47:77:10:8B:EE:E0:2E:17:57:BE:0F:0A:98:A7:AD:8F:B8
X509v3 Authority Key Identifier:
keyid:96:4C:AA:94:03:A0:8D:37:3B:90:B7:10:A5:6D:3E:AE:81:39:4F:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkyqlAOgjTc7kLcQpW0-roE5T_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6b0dc9-c1b9-4fae-acd9-6bff1c0e68ae/1/lkyqlAOgjTc7kLcQpW0-roE5T_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6b0dc9-c1b9-4fae-acd9-6bff1c0e68ae/1/lkyqlAOgjTc7kLcQpW0-roE5T_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:55:22:98:49:17:9f:a4:77:70:d8:0c:55:4e:36:52:37:ca:
85:3f:69:f5:c3:07:0b:dc:fe:a6:39:85:01:2f:7b:d2:a9:98:
39:d7:fb:75:28:9b:0a:59:11:74:91:87:d8:c3:e6:a7:6d:38:
8b:7c:ac:89:43:a0:79:4e:2a:df:b8:a8:52:46:52:07:f1:d2:
6d:70:bb:11:74:03:12:89:06:5a:2d:2e:06:8c:b4:84:4e:3a:
13:6e:c8:26:34:2a:79:91:90:81:1f:9c:dd:93:ce:d0:f4:4f:
b7:e6:d5:80:7a:2c:54:5b:14:56:d0:9c:14:39:65:be:5a:82:
37:0f:28:f2:0a:52:16:0f:d4:c6:2e:ed:ec:b4:64:73:92:a7:
ee:df:79:09:3a:06:35:b8:80:bb:96:fe:69:49:5b:a9:30:1c:
9f:68:62:3b:dc:01:01:af:b4:55:0a:97:de:f5:64:31:1f:98:
72:56:5f:88:e5:bd:0e:a5:53:99:42:57:46:f9:29:d1:5e:b6:
5a:3e:97:02:8d:aa:12:2e:3d:76:3a:78:bd:72:c8:04:49:86:
96:59:b4:e9:0f:68:b6:30:80:e0:0f:12:93:73:fa:9f:2f:94:
cb:de:d5:30:8b:5b:3a:a6:0b:89:e8:86:05:f2:5b:b1:f0:91:
b2:b2:b0:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHty0bjZe65iLGi70UF37MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NGNhYTk0MDNhMDhkMzczYjkwYjcxMGE1NmQzZWFlODEz
OTRmZjAwHhcNMjUwOTA3MDMwMTExWhcNMjUwOTA4MDMwMTExWjAzMTEwLwYDVQQD
Eyg5NTA4NmU0Nzc3MTA4YmVlZTAyZTE3NTdiZTBmMGE5OGE3YWQ4ZmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4BTYhvEpiqM9X1G+5FbnIfSIrj+D
NQHzOL7G/7hWvoMzxWnCx1FBcl9G37wCmOEtNsZPxg1gV4bQBRhYN4DYBXFu6GpJ
7J43BAYjMIjhiE3NaPhrui29f6tAC8ErWmhOcGFgRHkdSDVhMDlRvqlOImHFCQ2g
cLvYvDi/xkfP1KLRLsM2mE0pyerej5GH74skqGN6ZRRFmmZpFi5n5jgDKlp9B6ds
gdU21tCgN8ZpJF1+jC5G9NpzG2hQEuDrPzfAzhq/TwnVRhDDCd+JtYdA3bG8fVAT
AS7hw3WStQLoOz2DbbVuG8GnesDC+ETS7Nj7sxz8cMJbsX9qIqkMbW57EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJUIbkd3EIvu4C4XV74PCpinrY+4MB8GA1UdIwQY
MBaAFJZMqpQDoI03O5C3EKVtPq6BOU/wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGt5cWxBT2dqVGM3a0xjUXBXMC1yb0U1VF9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS82YjBkYzktYzFiOS00ZmFlLWFjZDkt
NmJmZjFjMGU2OGFlLzEvbGt5cWxBT2dqVGM3a0xjUXBXMC1yb0U1VF9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS82YjBkYzktYzFiOS00ZmFlLWFjZDktNmJmZjFjMGU2OGFl
LzEvbGt5cWxBT2dqVGM3a0xjUXBXMC1yb0U1VF9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaVUimEkX
n6R3cNgMVU42UjfKhT9p9cMHC9z+pjmFAS970qmYOdf7dSibClkRdJGH2MPmp204
i3ysiUOgeU4q37ioUkZSB/HSbXC7EXQDEokGWi0uBoy0hE46E27IJjQqeZGQgR+c
3ZPO0PRPt+bVgHosVFsUVtCcFDllvlqCNw8o8gpSFg/Uxi7t7LRkc5Kn7t95CToG
NbiAu5b+aUlbqTAcn2hiO9wBAa+0VQqX3vVkMR+YclZfiOW9DqVTmUJXRvkp0V62
Wj6XAo2qEi49djp4vXLIBEmGllm06Q9otjCA4A8Sk3P6ny+Uy97VMItbOqYLieiG
BfJbsfCRsrKw2Q==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:46:09 2025 by rpki-client