Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
File: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft (raw, json)
Hash identifier: uuCLpwxVwUKPusT/Nc235ZGA/VEbEG+Q5t8GjL8BfvE=
Subject key identifier: DD:1E:66:3E:6D:6F:BF:78:A6:6A:2C:7C:29:D9:B4:AE:59:82:61:A8
Authority key identifier: 2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
Certificate issuer: /CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Certificate serial: 01993725C051D6009B4CD1634745E108C6A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
Manifest number: 167F
Signing time: Thu 11 Sep 2025 05:00:44 +0000
Manifest this update: Thu 11 Sep 2025 05:00:44 +0000
Manifest next update: Fri 12 Sep 2025 05:00:44 +0000
Files and hashes: 1: 0CCtO-p9B4ORLnQWHO_vIlBkP0Y.roa (hash: OI3JSqGoVhnWz6wBW9AEkvVH4snnPUL3xdpL+eJr7uQ=)
2: Fkh2hiOOX1_9ZIsh1QOkg1uOFC8.roa (hash: 4wHVTXOU9z+SM/PpUwslG9Qh7bHf21AbIIUgGIPuA60=)
3: Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl (hash: KgQ3uTkl4vaD1QPEGWDAFjZTGQuWlbP1eALnfoLo9eo=)
4: sbB_qhcZ5C6QsaRQey8d6Z2fiqQ.roa (hash: UF7xshn/lezkLw7gZiOHSmc0ml+xgRop+HTs7XfValk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 00:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:25:c0:51:d6:00:9b:4c:d1:63:47:45:e1:08:c6:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Validity
Not Before: Sep 11 05:00:44 2025 GMT
Not After : Sep 12 05:00:44 2025 GMT
Subject: CN=dd1e663e6d6fbf78a66a2c7c29d9b4ae598261a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b4:6f:be:52:35:96:c5:22:ed:8d:80:2a:bc:
a3:33:67:08:e5:f6:3a:f9:31:17:23:25:25:aa:b6:
c5:3c:23:54:2b:df:a9:0d:56:52:72:e0:af:63:58:
f4:75:08:4e:ad:8c:de:c9:44:91:2d:72:3f:8e:c5:
0c:aa:e6:f9:2c:27:29:ff:2a:86:ba:72:6e:d4:b3:
f2:d3:80:fd:7f:08:55:ea:b8:c5:c4:52:dc:a4:e0:
47:4e:e2:1b:74:a8:bc:f5:cf:b9:11:74:02:72:87:
3c:cc:ec:ca:28:93:a8:d3:33:2b:ac:18:71:ac:3d:
f5:e9:ea:0e:45:ab:90:f9:9a:f4:0b:2e:0c:62:e7:
80:03:3e:ee:94:00:08:64:52:d1:44:7d:02:55:81:
71:4e:61:c1:64:87:69:23:73:1b:70:27:ec:5a:04:
67:34:cf:b0:56:52:e7:95:1d:49:08:ed:38:93:c3:
cf:e4:d2:ca:0d:e5:5e:b8:7c:b9:7f:4c:3d:93:f4:
51:f2:1a:88:7b:03:de:f8:2c:66:a8:cc:07:f6:ac:
68:fb:b4:23:95:3d:77:f3:cc:8b:6d:27:af:1f:b6:
f0:0b:6e:01:c7:64:61:d6:8d:18:17:56:31:7a:ed:
84:6a:3b:69:92:09:ea:c4:a6:b0:9c:87:f5:1b:c2:
92:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:1E:66:3E:6D:6F:BF:78:A6:6A:2C:7C:29:D9:B4:AE:59:82:61:A8
X509v3 Authority Key Identifier:
keyid:2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:0b:e1:ac:54:06:bb:78:80:a6:9d:75:31:b4:22:aa:f1:73:
f0:9c:95:21:88:4e:35:11:09:50:20:bd:6f:2c:7b:09:da:4d:
bf:2c:8c:89:bd:1d:1c:ac:6a:2a:b0:a0:31:ef:10:c2:ae:da:
2c:dc:15:3a:cd:32:f9:05:31:ee:ef:0c:73:1a:88:62:5b:4a:
45:51:7b:4f:17:c0:7e:e4:f4:2e:40:d4:8e:59:5d:df:72:db:
b4:09:8b:ce:be:cb:da:64:47:38:f1:83:e2:a1:cc:ea:14:84:
5d:60:7d:62:2b:a1:7a:f6:01:1d:1e:ee:fd:17:73:24:51:dc:
c5:21:21:36:d0:0f:bd:85:e4:67:5a:7a:38:5c:18:bc:ea:8e:
18:f7:ae:03:98:33:36:48:e2:05:5d:1f:44:63:90:b9:bc:06:
15:cf:4c:7b:c1:7b:8e:8a:ca:5f:3a:20:2b:1d:ec:f8:1c:16:
ba:06:c4:e3:1b:e3:cd:9c:2d:ae:11:7b:60:eb:1d:85:54:ab:
05:03:df:a4:bb:ca:56:35:55:f6:2b:60:78:48:ca:00:77:3f:
b9:70:eb:31:f9:af:d1:54:20:37:93:c8:2d:6d:f5:f1:20:68:
f4:aa:ee:bd:19:53:2c:93:80:f6:60:aa:75:28:c5:76:4a:56:
ff:87:25:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk3JcBR1gCbTNFjR0XhCMajMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlYmIzNjI0YjgyZjBlMWU1MzhiMDA5MTlmNDQyZDIwMGM3
ZTNjZDIwHhcNMjUwOTExMDUwMDQ0WhcNMjUwOTEyMDUwMDQ0WjAzMTEwLwYDVQQD
EyhkZDFlNjYzZTZkNmZiZjc4YTY2YTJjN2MyOWQ5YjRhZTU5ODI2MWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA57RvvlI1lsUi7Y2AKryjM2cI5fY6
+TEXIyUlqrbFPCNUK9+pDVZScuCvY1j0dQhOrYzeyUSRLXI/jsUMqub5LCcp/yqG
unJu1LPy04D9fwhV6rjFxFLcpOBHTuIbdKi89c+5EXQCcoc8zOzKKJOo0zMrrBhx
rD316eoORauQ+Zr0Cy4MYueAAz7ulAAIZFLRRH0CVYFxTmHBZIdpI3MbcCfsWgRn
NM+wVlLnlR1JCO04k8PP5NLKDeVeuHy5f0w9k/RR8hqIewPe+CxmqMwH9qxo+7Qj
lT1388yLbSevH7bwC24Bx2Rh1o0YF1Yxeu2EajtpkgnqxKawnIf1G8KS5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN0eZj5tb794pmosfCnZtK5ZgmGoMB8GA1UdIwQY
MBaAFC67NiS4Lw4eU4sAkZ9ELSAMfjzSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHJzMkpMZ3ZEaDVUaXdDUm4wUXRJQXgtUE5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC80OWJlZjEtNDAxYS00OGQyLTg3NDYt
MjY3Mjc1ZTkyNTcwLzEvTHJzMkpMZ3ZEaDVUaXdDUm4wUXRJQXgtUE5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC80OWJlZjEtNDAxYS00OGQyLTg3NDYtMjY3Mjc1ZTkyNTcw
LzEvTHJzMkpMZ3ZEaDVUaXdDUm4wUXRJQXgtUE5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJQvhrFQG
u3iApp11MbQiqvFz8JyVIYhONREJUCC9byx7CdpNvyyMib0dHKxqKrCgMe8Qwq7a
LNwVOs0y+QUx7u8McxqIYltKRVF7TxfAfuT0LkDUjlld33LbtAmLzr7L2mRHOPGD
4qHM6hSEXWB9YiuhevYBHR7u/RdzJFHcxSEhNtAPvYXkZ1p6OFwYvOqOGPeuA5gz
NkjiBV0fRGOQubwGFc9Me8F7jorKXzogKx3s+BwWugbE4xvjzZwtrhF7YOsdhVSr
BQPfpLvKVjVV9itgeEjKAHc/uXDrMfmv0VQgN5PILW318SBo9KruvRlTLJOA9mCq
dSjFdkpW/4clWQ==
-----END CERTIFICATE-----
Generated at Thu Sep 11 06:55:30 2025 by rpki-client