Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
File: LWmLr5_z7uvmYoSIn79onU5oPIE.mft (raw, json)
Hash identifier: LT4Lg07XOXYSPEP1WBH4WLtoozbGCT/BSMT8EOmv230=
Subject key identifier: FB:89:31:22:45:EA:0C:09:CF:48:E9:B6:5D:E6:99:4A:9E:4F:79:4D
Authority key identifier: 2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81
Certificate issuer: /CN=2d698baf9ff3eeebe66284889fbf689d4e683c81
Certificate serial: 019930B5A1ADB0F316E9CFD15B19E0C2CD91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
Manifest number: 0F02
Signing time: Tue 09 Sep 2025 23:00:33 +0000
Manifest this update: Tue 09 Sep 2025 23:00:33 +0000
Manifest next update: Wed 10 Sep 2025 23:00:33 +0000
Files and hashes: 1: LWmLr5_z7uvmYoSIn79onU5oPIE.crl (hash: Xfsu5mmiyQ16BlYulhvoZ8dqITYSLLY0po3LgwpdbZA=)
2: k4aTxBF_DmBio83fOwNHIHkeyiA.roa (hash: IVVbmDsKyhVLGaHbxiyIMsj1K/TNy+QiBpkicXXI0O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:b5:a1:ad:b0:f3:16:e9:cf:d1:5b:19:e0:c2:cd:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d698baf9ff3eeebe66284889fbf689d4e683c81
Validity
Not Before: Sep 9 23:00:33 2025 GMT
Not After : Sep 10 23:00:33 2025 GMT
Subject: CN=fb89312245ea0c09cf48e9b65de6994a9e4f794d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f0:33:2e:a0:42:bb:4f:63:1c:cc:60:a3:e2:
6a:f0:f1:da:45:4e:7a:86:88:85:ad:df:a3:0f:3c:
1d:d3:cc:da:67:6a:b2:46:6a:5c:e3:b4:9b:43:74:
74:50:1e:fc:14:aa:fb:11:11:37:1f:6c:e3:97:e9:
52:54:36:54:8d:45:db:db:69:6a:74:de:08:ed:8b:
79:32:d0:ee:fb:6c:3c:f7:38:7e:96:8d:90:62:bb:
0e:1a:b2:25:74:9d:e7:99:6b:e5:28:de:5a:07:2f:
63:31:d9:0a:45:a2:23:33:c9:e5:41:be:a4:88:0e:
bd:f4:70:f1:38:f8:24:46:5e:5a:0b:52:cc:c7:d9:
4f:ad:7c:8b:a7:65:48:d9:95:54:70:c3:20:ad:a0:
32:95:7f:b5:7a:f6:1d:55:50:4e:b7:16:6e:57:30:
35:44:fb:26:1f:71:f4:7d:2a:d8:49:31:86:85:2e:
55:5d:db:0f:22:e6:02:0f:a7:6c:f4:6d:bb:07:8a:
99:91:8f:4c:6b:70:39:81:c3:96:e8:2e:dd:dc:21:
b2:4e:b9:ff:e1:35:c5:a7:8f:4d:76:8e:48:88:73:
98:ed:8a:44:2b:3c:9e:61:4a:8a:48:08:6a:c3:c8:
74:0b:e2:87:62:f1:63:8a:5a:57:49:0c:ed:db:ae:
64:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:89:31:22:45:EA:0C:09:CF:48:E9:B6:5D:E6:99:4A:9E:4F:79:4D
X509v3 Authority Key Identifier:
keyid:2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:cd:12:b6:6c:92:81:c6:fb:3f:f9:66:63:75:12:c5:9f:4c:
bb:8a:49:60:1c:56:cc:f2:88:de:fc:4b:b5:66:81:ad:59:c1:
91:0f:e7:d8:56:cd:26:7a:7d:6f:2a:39:c3:5b:bc:a2:f3:45:
af:94:ba:89:48:70:4e:05:ed:d3:b4:c9:b1:09:97:3f:92:97:
85:1c:44:b3:ff:2a:76:6a:f2:f7:a2:fc:58:1a:76:60:65:03:
f7:c6:ae:ac:47:be:2e:b3:e1:64:fd:b9:1d:33:cd:58:72:49:
4e:68:8c:f7:1e:f9:78:6b:aa:78:90:fb:c8:4c:cb:c8:b2:d2:
32:5e:be:35:3f:5d:68:b7:e0:cf:b6:ec:8b:9a:cf:94:c6:31:
5a:d7:df:d6:8f:87:04:86:1a:65:00:c9:19:1c:0c:b5:3b:b3:
26:f3:4f:29:c4:0b:ec:cb:20:73:15:b0:4b:3b:d0:18:ac:63:
5d:22:4a:bd:91:92:c0:8c:5a:4f:88:5f:44:51:41:97:90:8c:
16:13:76:e7:d2:b4:2b:f0:46:9c:74:86:95:db:20:59:48:1d:
00:ec:46:86:9b:e6:2e:3c:2f:ad:9b:4b:de:74:f3:5b:51:31:
e4:44:57:9f:34:0b:79:a1:14:d8:f1:ba:8c:8b:c6:ef:44:b5:
18:28:00:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkwtaGtsPMW6c/RWxngws2RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNjk4YmFmOWZmM2VlZWJlNjYyODQ4ODlmYmY2ODlkNGU2
ODNjODEwHhcNMjUwOTA5MjMwMDMzWhcNMjUwOTEwMjMwMDMzWjAzMTEwLwYDVQQD
EyhmYjg5MzEyMjQ1ZWEwYzA5Y2Y0OGU5YjY1ZGU2OTk0YTllNGY3OTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvAzLqBCu09jHMxgo+Jq8PHaRU56
hoiFrd+jDzwd08zaZ2qyRmpc47SbQ3R0UB78FKr7ERE3H2zjl+lSVDZUjUXb22lq
dN4I7Yt5MtDu+2w89zh+lo2QYrsOGrIldJ3nmWvlKN5aBy9jMdkKRaIjM8nlQb6k
iA699HDxOPgkRl5aC1LMx9lPrXyLp2VI2ZVUcMMgraAylX+1evYdVVBOtxZuVzA1
RPsmH3H0fSrYSTGGhS5VXdsPIuYCD6ds9G27B4qZkY9Ma3A5gcOW6C7d3CGyTrn/
4TXFp49Ndo5IiHOY7YpEKzyeYUqKSAhqw8h0C+KHYvFjilpXSQzt265kFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPuJMSJF6gwJz0jptl3mmUqeT3lNMB8GA1UdIwQY
MBaAFC1pi6+f8+7r5mKEiJ+/aJ1OaDyBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFdtTHI1X3o3dXZtWW9TSW43OW9uVTVvUElFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS81NzJhOTgtM2JiNy00Mjc2LTlkMzkt
ZGZmNWEwOWE4MmNiLzEvTFdtTHI1X3o3dXZtWW9TSW43OW9uVTVvUElFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS81NzJhOTgtM2JiNy00Mjc2LTlkMzktZGZmNWEwOWE4MmNi
LzEvTFdtTHI1X3o3dXZtWW9TSW43OW9uVTVvUElFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZM0StmyS
gcb7P/lmY3USxZ9Mu4pJYBxWzPKI3vxLtWaBrVnBkQ/n2FbNJnp9byo5w1u8ovNF
r5S6iUhwTgXt07TJsQmXP5KXhRxEs/8qdmry96L8WBp2YGUD98aurEe+LrPhZP25
HTPNWHJJTmiM9x75eGuqeJD7yEzLyLLSMl6+NT9daLfgz7bsi5rPlMYxWtff1o+H
BIYaZQDJGRwMtTuzJvNPKcQL7MsgcxWwSzvQGKxjXSJKvZGSwIxaT4hfRFFBl5CM
FhN259K0K/BGnHSGldsgWUgdAOxGhpvmLjwvrZtL3nTzW1Ex5ERXnzQLeaEU2PG6
jIvG70S1GCgAJQ==
-----END CERTIFICATE-----
Generated at Wed Sep 10 07:16:26 2025 by rpki-client