Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.mft
File: LViUkjuwAqQ0EogQYH37UmciAE8.mft (raw, json)
Hash identifier: 25uw3OhUYj8LqmEP5u5mjDAfkxYVT4gkKXPYr8B8i9k=
Subject key identifier: 89:CE:A4:30:C8:53:CB:B1:41:E3:D0:DB:5C:30:4D:75:D7:DF:66:86
Authority key identifier: 2D:58:94:92:3B:B0:02:A4:34:12:88:10:60:7D:FB:52:67:22:00:4F
Certificate issuer: /CN=2d5894923bb002a434128810607dfb526722004f
Certificate serial: 0199221E6CBC926908C5933A48D3A75CE13D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LViUkjuwAqQ0EogQYH37UmciAE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 03:00:43 +0000
Manifest this update: Sun 07 Sep 2025 03:00:43 +0000
Manifest next update: Mon 08 Sep 2025 03:00:43 +0000
Files and hashes: 1: LViUkjuwAqQ0EogQYH37UmciAE8.crl (hash: BN86jR9taIxC87zbuNIv02IV0aRnR4BU/ppY9DQsJo4=)
2: _eRNvbcACjLb9zEN3lnrbv0mjjE.roa (hash: Ry+XCwkTsLP6ueqUWQ1SIxu219L75tL3GOyhLkzc9RI=)
3: ufpRI9yuEp7tjzAxssHQURYt3B4.roa (hash: 7g6vsYsyIBAU9MzilTSjquNoGwZYrdhjnklJiiSJri8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LViUkjuwAqQ0EogQYH37UmciAE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:6c:bc:92:69:08:c5:93:3a:48:d3:a7:5c:e1:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d5894923bb002a434128810607dfb526722004f
Validity
Not Before: Sep 7 03:00:43 2025 GMT
Not After : Sep 8 03:00:43 2025 GMT
Subject: CN=89cea430c853cbb141e3d0db5c304d75d7df6686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:82:4b:4f:a6:9f:d3:34:54:5f:0b:9b:67:99:
5a:db:c8:07:00:92:8a:48:fd:76:6b:fa:77:0a:ee:
9a:cd:fd:e4:88:b9:fe:d4:cb:65:ae:ef:0c:f9:29:
71:9f:25:70:0a:f1:91:2e:50:c0:a4:20:4f:0d:48:
32:d5:0e:5c:01:ad:17:cc:0c:06:bc:8a:5c:6d:d4:
f9:82:ba:57:35:ce:68:f7:cb:be:dc:bb:28:9d:e2:
3f:90:49:6d:07:57:c7:82:42:97:90:8c:c9:ac:8a:
26:dd:50:11:52:67:48:2c:71:69:6d:8d:82:f8:34:
2e:04:1a:06:ed:46:24:b8:37:93:49:11:83:31:ab:
fd:7b:bc:22:e2:b9:42:5f:1b:dd:77:d8:e7:9f:c2:
3c:0e:6a:80:ec:4b:bc:45:79:81:7d:3a:a2:30:27:
9d:73:e4:89:79:da:b1:35:3b:ad:53:55:58:bb:d2:
62:bd:0d:09:ff:17:de:2a:09:48:73:a2:08:0b:a9:
02:d2:f3:e1:36:50:50:1a:ab:c9:ca:bd:d6:1d:9d:
02:92:5e:e5:0b:f7:dd:40:51:f4:e3:7d:ec:10:fe:
07:95:dc:33:db:95:c3:be:10:a1:9c:de:a2:44:c4:
a5:21:37:5b:a7:22:24:ba:8c:d0:c0:af:8f:ea:2c:
0b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:CE:A4:30:C8:53:CB:B1:41:E3:D0:DB:5C:30:4D:75:D7:DF:66:86
X509v3 Authority Key Identifier:
keyid:2D:58:94:92:3B:B0:02:A4:34:12:88:10:60:7D:FB:52:67:22:00:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LViUkjuwAqQ0EogQYH37UmciAE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8a5353-14f1-40f6-a482-aee5927b4dd2/1/LViUkjuwAqQ0EogQYH37UmciAE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:de:cc:62:e7:8b:01:14:15:43:51:68:3a:86:5a:83:38:6f:
07:d1:7b:37:c7:8f:74:c0:f2:cd:5d:30:0d:1d:ca:70:ad:42:
09:52:a2:41:b8:66:41:95:a4:83:84:57:b8:93:10:34:42:d5:
1b:ac:1f:79:70:8a:25:d4:5e:eb:19:22:d3:d3:b2:fd:29:e3:
14:06:6d:51:88:ec:f5:02:57:a1:d2:5f:90:b2:9f:40:5c:05:
c5:c0:9d:4e:e8:ff:02:1e:5b:e5:36:bf:9d:1f:da:01:a3:6c:
25:7c:2b:89:53:ff:2d:75:73:27:6b:ec:4f:67:ba:26:a6:05:
ff:7c:56:dc:5c:14:e3:de:58:48:16:e6:82:9c:a4:ac:d3:b6:
fb:e7:b9:3f:62:b6:f0:60:bb:7f:de:df:83:7c:50:54:1e:7f:
8b:bb:f9:2e:94:58:b2:de:97:91:2c:79:39:c2:0f:6f:dc:60:
ae:d6:3b:c1:ef:90:e3:17:47:1a:5d:71:f3:10:7b:01:9d:c9:
86:78:d0:50:11:89:1b:e0:15:ff:da:71:7e:08:b4:9c:50:29:
b9:ef:b4:9e:1a:a3:9e:7b:c2:0b:48:fd:3f:59:3c:84:d6:47:
30:41:bd:cc:a5:b0:de:fc:50:3d:c5:8c:13:c6:b4:d0:d9:46:
39:6d:e6:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHmy8kmkIxZM6SNOnXOE9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNTg5NDkyM2JiMDAyYTQzNDEyODgxMDYwN2RmYjUyNjcy
MjAwNGYwHhcNMjUwOTA3MDMwMDQzWhcNMjUwOTA4MDMwMDQzWjAzMTEwLwYDVQQD
Eyg4OWNlYTQzMGM4NTNjYmIxNDFlM2QwZGI1YzMwNGQ3NWQ3ZGY2Njg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIJLT6af0zRUXwubZ5la28gHAJKK
SP12a/p3Cu6azf3kiLn+1Mtlru8M+SlxnyVwCvGRLlDApCBPDUgy1Q5cAa0XzAwG
vIpcbdT5grpXNc5o98u+3LsoneI/kEltB1fHgkKXkIzJrIom3VARUmdILHFpbY2C
+DQuBBoG7UYkuDeTSRGDMav9e7wi4rlCXxvdd9jnn8I8DmqA7Eu8RXmBfTqiMCed
c+SJedqxNTutU1VYu9JivQ0J/xfeKglIc6IIC6kC0vPhNlBQGqvJyr3WHZ0Ckl7l
C/fdQFH0433sEP4Hldwz25XDvhChnN6iRMSlITdbpyIkuozQwK+P6iwLIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFInOpDDIU8uxQePQ21wwTXXX32aGMB8GA1UdIwQY
MBaAFC1YlJI7sAKkNBKIEGB9+1JnIgBPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFZpVWtqdXdBcVEwRW9nUVlIMzdVbWNpQUU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS84YTUzNTMtMTRmMS00MGY2LWE0ODIt
YWVlNTkyN2I0ZGQyLzEvTFZpVWtqdXdBcVEwRW9nUVlIMzdVbWNpQUU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS84YTUzNTMtMTRmMS00MGY2LWE0ODItYWVlNTkyN2I0ZGQy
LzEvTFZpVWtqdXdBcVEwRW9nUVlIMzdVbWNpQUU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAht7MYueL
ARQVQ1FoOoZagzhvB9F7N8ePdMDyzV0wDR3KcK1CCVKiQbhmQZWkg4RXuJMQNELV
G6wfeXCKJdRe6xki09Oy/SnjFAZtUYjs9QJXodJfkLKfQFwFxcCdTuj/Ah5b5Ta/
nR/aAaNsJXwriVP/LXVzJ2vsT2e6JqYF/3xW3FwU495YSBbmgpykrNO2++e5P2K2
8GC7f97fg3xQVB5/i7v5LpRYst6XkSx5OcIPb9xgrtY7we+Q4xdHGl1x8xB7AZ3J
hnjQUBGJG+AV/9pxfgi0nFApue+0nhqjnnvCC0j9P1k8hNZHMEG9zKWw3vxQPcWM
E8a00NlGOW3mRA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:40 2025 by rpki-client