Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft
File: lDbagFrtoKOlD_xmJR3L-0Lw814.mft (raw, json)
Hash identifier: qnKTkp+Ysuar5eXeCjOxHS3phi3N1WYKju2oNoSpIHM=
Subject key identifier: 26:68:29:78:B7:44:0C:46:27:4E:9D:22:39:9B:DE:D3:3F:2E:7D:72
Authority key identifier: 94:36:DA:80:5A:ED:A0:A3:A5:0F:FC:66:25:1D:CB:FB:42:F0:F3:5E
Certificate issuer: /CN=9436da805aeda0a3a50ffc66251dcbfb42f0f35e
Certificate serial: 019923A0ECCE4F3DADEAB0ECD71F7C672347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDbagFrtoKOlD_xmJR3L-0Lw814.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 10:02:52 +0000
Manifest this update: Sun 07 Sep 2025 10:02:52 +0000
Manifest next update: Mon 08 Sep 2025 10:02:52 +0000
Files and hashes: 1: lDbagFrtoKOlD_xmJR3L-0Lw814.crl (hash: SWuH7GAYeKztYLvqap0nPERnEyStHXLwNzeiP+4axag=)
2: ucXy2KSNHkyj0NVTw1_Sgr3N0zY.roa (hash: rz/2Fi1HgmzQcvvjW5gJ3z/pWlF+IsIu5pUPW6A7j2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDbagFrtoKOlD_xmJR3L-0Lw814.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:ec:ce:4f:3d:ad:ea:b0:ec:d7:1f:7c:67:23:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9436da805aeda0a3a50ffc66251dcbfb42f0f35e
Validity
Not Before: Sep 7 10:02:52 2025 GMT
Not After : Sep 8 10:02:52 2025 GMT
Subject: CN=26682978b7440c46274e9d22399bded33f2e7d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0d:b1:aa:69:4d:b8:cb:29:f3:0e:12:7d:25:
72:8c:c3:5c:9d:b6:59:bf:e6:24:eb:6a:d1:6a:d1:
36:21:1a:64:d0:1c:b3:30:a0:a0:43:63:2f:6e:31:
67:f1:f4:28:95:49:dd:45:ce:b2:55:99:dc:5a:e7:
ce:0d:13:23:8d:30:78:7c:60:c0:32:bc:a4:a8:d9:
91:b9:6a:b3:0c:dd:0c:bf:07:17:5e:46:0b:f8:fe:
99:5c:4a:32:c1:cf:44:ae:14:e0:0c:ce:9a:3c:f5:
49:c6:ae:d4:d3:10:cf:89:cc:c5:43:3b:fe:5b:65:
21:e1:18:f2:eb:99:00:2c:52:47:f3:df:f5:fe:3d:
9e:9a:fb:ad:c8:fe:49:a0:6a:cd:f2:be:e2:08:fa:
83:dc:02:80:35:bf:16:8d:86:0c:3f:93:9c:5d:69:
e6:8a:e6:41:8c:8e:d2:24:e3:7a:8a:9a:c1:ac:50:
96:02:90:6a:30:f8:7c:44:07:e6:0e:26:b3:48:f2:
7b:d8:1e:b0:c5:97:fe:9c:33:5d:7d:77:f9:09:e6:
17:c3:f6:99:9f:b1:d3:15:59:d8:f4:28:8e:1a:bc:
09:a1:8b:31:e5:bb:47:73:6b:ba:60:f2:a0:ac:91:
64:9c:7e:d8:33:37:56:32:8b:11:b2:0f:96:7b:a2:
a4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:68:29:78:B7:44:0C:46:27:4E:9D:22:39:9B:DE:D3:3F:2E:7D:72
X509v3 Authority Key Identifier:
keyid:94:36:DA:80:5A:ED:A0:A3:A5:0F:FC:66:25:1D:CB:FB:42:F0:F3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDbagFrtoKOlD_xmJR3L-0Lw814.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:3a:a4:25:d4:fc:9a:bb:57:31:d3:db:e6:5a:a3:10:46:67:
6e:c5:8d:0d:ad:80:c5:44:9d:96:e1:28:e7:a1:80:d0:b8:9a:
7b:35:43:63:67:de:cd:ba:df:9e:e2:c2:c7:31:17:7d:7e:56:
be:ac:bd:cd:28:37:4d:65:66:03:9f:dd:ab:7f:60:86:ff:fb:
2a:1e:27:d8:fc:95:dd:bd:9b:17:04:82:b7:7d:21:99:37:c1:
bb:a7:71:3a:9d:ef:49:6d:65:33:01:c6:df:59:f7:1b:61:8a:
42:87:af:5a:c2:6b:69:27:09:6d:d2:96:60:0a:6c:ab:d3:9d:
f3:dd:56:d4:12:35:21:fe:9b:70:af:13:23:dc:4a:85:23:7c:
3c:5c:e5:d6:d4:8c:68:87:60:18:d7:01:66:6e:a9:a7:ce:89:
6b:c1:1e:42:7b:b0:80:f0:fd:3c:17:8b:2a:62:0a:ac:41:7d:
d0:13:fa:a5:6d:96:5c:1b:a9:f8:d6:5c:97:c0:6d:0c:12:4d:
38:90:3b:eb:21:9d:99:50:ff:c7:d7:d9:25:aa:96:3a:e8:37:
ed:af:91:6f:55:9d:e8:98:78:d6:92:36:fe:49:e3:ec:54:1b:
e9:a4:25:59:09:ad:ac:11:20:86:2e:01:86:1c:69:5e:cf:0d:
1d:3f:6e:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjoOzOTz2t6rDs1x98ZyNHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MzZkYTgwNWFlZGEwYTNhNTBmZmM2NjI1MWRjYmZiNDJm
MGYzNWUwHhcNMjUwOTA3MTAwMjUyWhcNMjUwOTA4MTAwMjUyWjAzMTEwLwYDVQQD
EygyNjY4Mjk3OGI3NDQwYzQ2Mjc0ZTlkMjIzOTliZGVkMzNmMmU3ZDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArw2xqmlNuMsp8w4SfSVyjMNcnbZZ
v+Yk62rRatE2IRpk0ByzMKCgQ2MvbjFn8fQolUndRc6yVZncWufODRMjjTB4fGDA
MrykqNmRuWqzDN0MvwcXXkYL+P6ZXEoywc9ErhTgDM6aPPVJxq7U0xDPiczFQzv+
W2Uh4Rjy65kALFJH89/1/j2emvutyP5JoGrN8r7iCPqD3AKANb8WjYYMP5OcXWnm
iuZBjI7SJON6iprBrFCWApBqMPh8RAfmDiazSPJ72B6wxZf+nDNdfXf5CeYXw/aZ
n7HTFVnY9CiOGrwJoYsx5btHc2u6YPKgrJFknH7YMzdWMosRsg+We6KkRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCZoKXi3RAxGJ06dIjmb3tM/Ln1yMB8GA1UdIwQY
MBaAFJQ22oBa7aCjpQ/8ZiUdy/tC8PNeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbERiYWdGcnRvS09sRF94bUpSM0wtMEx3ODE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wZTYyNTAtNTQyMC00MzE4LTkyODQt
MmMyNzcxZThlMTc3LzEvbERiYWdGcnRvS09sRF94bUpSM0wtMEx3ODE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8wZTYyNTAtNTQyMC00MzE4LTkyODQtMmMyNzcxZThlMTc3
LzEvbERiYWdGcnRvS09sRF94bUpSM0wtMEx3ODE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyTqkJdT8
mrtXMdPb5lqjEEZnbsWNDa2AxUSdluEo56GA0LiaezVDY2fezbrfnuLCxzEXfX5W
vqy9zSg3TWVmA5/dq39ghv/7Kh4n2PyV3b2bFwSCt30hmTfBu6dxOp3vSW1lMwHG
31n3G2GKQoevWsJraScJbdKWYApsq9Od891W1BI1If6bcK8TI9xKhSN8PFzl1tSM
aIdgGNcBZm6pp86Ja8EeQnuwgPD9PBeLKmIKrEF90BP6pW2WXBup+NZcl8BtDBJN
OJA76yGdmVD/x9fZJaqWOug37a+Rb1Wd6Jh41pI2/knj7FQb6aQlWQmtrBEghi4B
hhxpXs8NHT9uew==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:11:03 2025 by rpki-client