Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft
File: lvbqdo68ndwGj1aX39dcrt164Qg.mft (raw, json)
Hash identifier: MAEqh15dtU6dKf+ccE6sbFCu3mHcTNL31WF+gC3AbOM=
Subject key identifier: 03:EC:A3:F5:53:4A:D5:79:93:19:6E:6A:2E:8D:D7:B9:61:92:BE:DE
Authority key identifier: 96:F6:EA:76:8E:BC:9D:DC:06:8F:56:97:DF:D7:5C:AE:DD:7A:E1:08
Certificate issuer: /CN=96f6ea768ebc9ddc068f5697dfd75caedd7ae108
Certificate serial: 01992DB5078DB3DFC5A621DE313A743C0A5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvbqdo68ndwGj1aX39dcrt164Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft
Manifest number: 0FDE
Signing time: Tue 09 Sep 2025 09:01:02 +0000
Manifest this update: Tue 09 Sep 2025 09:01:02 +0000
Manifest next update: Wed 10 Sep 2025 09:01:02 +0000
Files and hashes: 1: hpkYZsr4ehkRhZoX0PY5vhGw4f0.roa (hash: yIy93XAXh8xhvhofZiP5cDUdE2rbmmhviH4jDOGAZ/g=)
2: lvbqdo68ndwGj1aX39dcrt164Qg.crl (hash: /d2/KnHUYKa2KW8XjnyHMlyXxTAljEvo92dyovDnM0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvbqdo68ndwGj1aX39dcrt164Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 09:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:b5:07:8d:b3:df:c5:a6:21:de:31:3a:74:3c:0a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f6ea768ebc9ddc068f5697dfd75caedd7ae108
Validity
Not Before: Sep 9 09:01:02 2025 GMT
Not After : Sep 10 09:01:02 2025 GMT
Subject: CN=03eca3f5534ad57993196e6a2e8dd7b96192bede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c7:8c:ca:fa:43:7e:93:0f:50:44:0e:27:79:
40:f7:08:fe:47:5d:b3:3e:ea:5e:b6:f5:9f:86:87:
21:29:75:6f:ee:8b:2f:3f:4f:14:39:4b:26:53:19:
2f:ab:5d:d6:d9:8b:a8:a7:b5:50:c8:fe:66:24:c3:
0a:f5:d4:56:60:19:1d:50:6e:0f:e4:4e:b9:49:19:
79:b6:b2:f1:50:7d:6e:be:fa:67:84:76:81:af:6b:
79:f2:19:a6:07:72:7f:fc:1b:b4:d1:69:26:1e:29:
96:12:13:d4:b0:cd:fe:fc:9d:e6:26:20:d4:57:e8:
6f:88:f5:83:73:eb:8a:e6:b0:c3:42:05:4c:3b:c7:
21:16:bf:d6:89:d6:94:96:29:65:df:ad:ec:a6:53:
7f:a8:df:81:ba:db:52:82:b6:3e:52:92:11:c9:1a:
4e:43:d8:99:c3:a6:24:e0:c2:5c:10:6b:a3:24:8f:
7b:59:a6:04:df:04:16:b3:df:6f:84:e6:b9:93:9c:
18:a6:1c:4d:b6:36:aa:59:a3:90:29:9a:7b:68:12:
20:c5:bc:7c:ca:90:59:0f:d1:25:fb:99:26:b8:f0:
90:83:8f:26:30:95:6e:3c:ce:93:8e:7a:11:9b:c1:
88:27:f7:bc:50:55:6f:d6:63:35:54:45:db:c6:4f:
85:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:EC:A3:F5:53:4A:D5:79:93:19:6E:6A:2E:8D:D7:B9:61:92:BE:DE
X509v3 Authority Key Identifier:
keyid:96:F6:EA:76:8E:BC:9D:DC:06:8F:56:97:DF:D7:5C:AE:DD:7A:E1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvbqdo68ndwGj1aX39dcrt164Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d0:f2:90:06:90:8a:96:d8:99:a9:1e:a3:57:d5:10:0a:35:
db:31:7f:5a:c6:34:fb:39:c2:c3:29:db:82:bc:7c:db:0d:f0:
66:96:ba:04:02:f4:90:52:92:d6:30:d8:09:36:0f:5e:5c:73:
75:fb:6e:db:25:70:fa:0b:f8:87:2b:3c:1d:04:d7:55:ee:c6:
3e:b6:15:6d:6e:54:ed:bc:fd:b1:5c:30:26:65:86:2d:dd:70:
b5:8a:24:3c:22:44:94:ee:37:70:17:f9:9c:ea:20:5e:b6:1b:
e3:56:74:24:41:43:f4:b4:d4:57:f5:46:d7:88:e4:de:49:a2:
a6:5e:79:54:9c:a9:57:5c:5a:d0:b9:76:92:47:81:3d:16:50:
5e:da:fe:92:c1:d1:1f:d4:df:0f:0b:45:07:5f:cb:35:a8:34:
bf:a7:e7:64:61:ec:a8:42:d0:f9:d5:41:00:d9:1f:55:48:c8:
8d:79:08:82:00:0f:3d:92:73:44:d0:8e:43:a4:20:b6:d0:6f:
8a:48:7a:0b:e4:7d:71:a0:13:d4:58:49:e7:db:84:77:11:ec:
fc:7e:4d:61:90:1e:d2:ae:74:93:58:fe:41:04:bd:84:52:07:
e1:fe:b9:af:a8:f5:f8:c7:38:d4:42:82:2c:b5:5f:51:c8:82:
72:8e:96:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkttQeNs9/FpiHeMTp0PApdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZjZlYTc2OGViYzlkZGMwNjhmNTY5N2RmZDc1Y2FlZGQ3
YWUxMDgwHhcNMjUwOTA5MDkwMTAyWhcNMjUwOTEwMDkwMTAyWjAzMTEwLwYDVQQD
EygwM2VjYTNmNTUzNGFkNTc5OTMxOTZlNmEyZThkZDdiOTYxOTJiZWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMeMyvpDfpMPUEQOJ3lA9wj+R12z
PupetvWfhochKXVv7osvP08UOUsmUxkvq13W2Yuop7VQyP5mJMMK9dRWYBkdUG4P
5E65SRl5trLxUH1uvvpnhHaBr2t58hmmB3J//Bu00WkmHimWEhPUsM3+/J3mJiDU
V+hviPWDc+uK5rDDQgVMO8chFr/WidaUlill363splN/qN+ButtSgrY+UpIRyRpO
Q9iZw6Yk4MJcEGujJI97WaYE3wQWs99vhOa5k5wYphxNtjaqWaOQKZp7aBIgxbx8
ypBZD9El+5kmuPCQg48mMJVuPM6TjnoRm8GIJ/e8UFVv1mM1VEXbxk+FlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAPso/VTStV5kxluai6N17lhkr7eMB8GA1UdIwQY
MBaAFJb26naOvJ3cBo9Wl9/XXK7deuEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHZicWRvNjhuZHdHajFhWDM5ZGNydDE2NFFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83YmFhMWMtOGRhMS00ZjgwLWJhYmIt
YjRiZmMyOWU3MWEzLzEvbHZicWRvNjhuZHdHajFhWDM5ZGNydDE2NFFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS83YmFhMWMtOGRhMS00ZjgwLWJhYmItYjRiZmMyOWU3MWEz
LzEvbHZicWRvNjhuZHdHajFhWDM5ZGNydDE2NFFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiNDykAaQ
ipbYmakeo1fVEAo12zF/WsY0+znCwynbgrx82w3wZpa6BAL0kFKS1jDYCTYPXlxz
dftu2yVw+gv4hys8HQTXVe7GPrYVbW5U7bz9sVwwJmWGLd1wtYokPCJElO43cBf5
nOogXrYb41Z0JEFD9LTUV/VG14jk3kmipl55VJypV1xa0Ll2kkeBPRZQXtr+ksHR
H9TfDwtFB1/LNag0v6fnZGHsqELQ+dVBANkfVUjIjXkIggAPPZJzRNCOQ6QgttBv
ikh6C+R9caAT1FhJ59uEdxHs/H5NYZAe0q50k1j+QQS9hFIH4f65r6j1+Mc41EKC
LLVfUciCco6WQA==
-----END CERTIFICATE-----
Generated at Tue Sep 9 19:02:37 2025 by rpki-client