Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
File: lPNHF_8y_ix2RK610O6iMBYX8SQ.mft (raw, json)
Hash identifier: QzPzxhZIAO0AfjGtuLdHplQ82nLzcyuuBqNZjMXMsN8=
Subject key identifier: FF:5A:2C:0D:46:AB:A5:4F:18:79:0E:8D:87:D2:A5:7A:1D:35:49:66
Authority key identifier: 94:F3:47:17:FF:32:FE:2C:76:44:AE:B5:D0:EE:A2:30:16:17:F1:24
Certificate issuer: /CN=94f34717ff32fe2c7644aeb5d0eea2301617f124
Certificate serial: 019922C379300AA9AB48862E8F5D2DCB88F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
Manifest number: 05F3
Signing time: Sun 07 Sep 2025 06:00:59 +0000
Manifest this update: Sun 07 Sep 2025 06:00:59 +0000
Manifest next update: Mon 08 Sep 2025 06:00:59 +0000
Files and hashes: 1: lPNHF_8y_ix2RK610O6iMBYX8SQ.crl (hash: c/+TUIbeD59UsuHuFq4WlGh7NEEZWUikCJpgMGMz5zQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:79:30:0a:a9:ab:48:86:2e:8f:5d:2d:cb:88:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f34717ff32fe2c7644aeb5d0eea2301617f124
Validity
Not Before: Sep 7 06:00:59 2025 GMT
Not After : Sep 8 06:00:59 2025 GMT
Subject: CN=ff5a2c0d46aba54f18790e8d87d2a57a1d354966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:87:ab:eb:6b:8d:d2:7b:5a:81:da:6a:2e:49:
e6:25:30:ff:77:46:a1:fd:68:41:c4:c6:97:aa:38:
a2:e7:a6:d8:79:37:d7:5c:b2:51:bf:62:9d:d3:bb:
c6:a3:38:90:39:df:6f:3b:44:7b:a6:97:38:4a:7e:
c6:d7:06:cd:f2:cc:c4:57:08:89:17:1c:fb:04:b5:
8f:5d:46:a4:6a:29:56:21:4a:c3:e1:27:d5:11:a7:
bc:62:77:5f:65:2b:16:ac:fe:86:b7:fb:82:5f:7d:
62:b8:1d:71:95:bb:74:df:80:6e:4f:cb:7a:fa:d6:
82:85:30:ed:1d:c8:44:ad:ae:b4:91:b0:e3:25:be:
1d:3f:ed:19:b7:35:ea:74:81:31:c5:c8:7d:e2:e6:
c7:d4:6d:58:fc:34:e9:34:0b:d3:04:b4:8d:82:9b:
e2:56:d5:c6:1c:16:4a:16:22:e3:24:25:1a:9a:a5:
46:74:31:f8:91:dc:7b:8a:b9:91:73:ce:b6:31:df:
a2:c9:52:97:4f:41:fc:d7:3a:3e:3c:86:73:ab:93:
f5:de:29:b8:cc:a0:ff:f9:7e:4a:91:78:c8:70:17:
d2:bf:55:4b:5d:ff:fe:98:e9:3a:0c:cb:7b:67:cc:
48:f9:86:0a:84:fc:ea:60:6e:ed:86:b1:73:d2:24:
08:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:5A:2C:0D:46:AB:A5:4F:18:79:0E:8D:87:D2:A5:7A:1D:35:49:66
X509v3 Authority Key Identifier:
keyid:94:F3:47:17:FF:32:FE:2C:76:44:AE:B5:D0:EE:A2:30:16:17:F1:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:8b:3c:f4:85:45:c1:e9:3d:da:85:3f:d5:ff:30:bf:b9:19:
dd:97:b2:a7:fa:e7:04:90:34:81:2d:2d:e7:99:b3:8d:3b:9e:
4d:1b:ca:af:d4:b7:43:db:31:ef:36:cc:52:32:7d:83:13:12:
aa:a1:0c:6c:4f:f5:2a:82:25:7c:3d:46:23:98:51:ec:fc:ad:
90:89:7b:fb:91:8f:98:14:3a:3b:17:20:09:27:7b:01:5c:e0:
78:96:01:fc:3e:d6:d6:ec:2f:58:67:2a:50:2b:cc:c7:9c:c1:
14:bf:75:e4:01:56:3c:c7:f6:fa:38:4e:a3:3b:a5:8f:f2:48:
18:eb:65:27:0d:bc:fb:14:dd:5e:64:a6:56:cf:6e:b2:01:e7:
24:01:6a:19:40:16:b8:28:07:a3:e9:14:f6:5f:1c:cc:f8:f2:
d4:2b:1b:7e:de:d1:2f:54:7b:3c:a5:90:40:38:3a:f9:83:a5:
85:d1:38:12:3e:01:4b:5e:7f:14:07:14:4d:d6:07:d2:12:34:
74:39:91:9d:23:17:37:a4:0d:17:db:a9:94:ae:51:ea:37:f5:
79:1a:22:3d:a1:a0:a1:1e:aa:44:4f:16:99:d7:5b:1c:28:79:
cd:20:64:6e:b4:d6:cd:ef:b9:8a:16:8b:a5:ec:40:ac:4f:ae:
4a:70:20:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiw3kwCqmrSIYuj10ty4j1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ZjM0NzE3ZmYzMmZlMmM3NjQ0YWViNWQwZWVhMjMwMTYx
N2YxMjQwHhcNMjUwOTA3MDYwMDU5WhcNMjUwOTA4MDYwMDU5WjAzMTEwLwYDVQQD
EyhmZjVhMmMwZDQ2YWJhNTRmMTg3OTBlOGQ4N2QyYTU3YTFkMzU0OTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoer62uN0ntagdpqLknmJTD/d0ah
/WhBxMaXqjii56bYeTfXXLJRv2Kd07vGoziQOd9vO0R7ppc4Sn7G1wbN8szEVwiJ
Fxz7BLWPXUakailWIUrD4SfVEae8YndfZSsWrP6Gt/uCX31iuB1xlbt034BuT8t6
+taChTDtHchEra60kbDjJb4dP+0ZtzXqdIExxch94ubH1G1Y/DTpNAvTBLSNgpvi
VtXGHBZKFiLjJCUamqVGdDH4kdx7irmRc862Md+iyVKXT0H81zo+PIZzq5P13im4
zKD/+X5KkXjIcBfSv1VLXf/+mOk6DMt7Z8xI+YYKhPzqYG7thrFz0iQIAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP9aLA1Gq6VPGHkOjYfSpXodNUlmMB8GA1UdIwQY
MBaAFJTzRxf/Mv4sdkSutdDuojAWF/EkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFBOSEZfOHlfaXgyUks2MTBPNmlNQllYOFNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jYWIxOTgtM2U4NC00YjAxLWJmYmEt
ODJiOWU1ZmU5YjA2LzEvbFBOSEZfOHlfaXgyUks2MTBPNmlNQllYOFNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9jYWIxOTgtM2U4NC00YjAxLWJmYmEtODJiOWU1ZmU5YjA2
LzEvbFBOSEZfOHlfaXgyUks2MTBPNmlNQllYOFNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOos89IVF
wek92oU/1f8wv7kZ3Zeyp/rnBJA0gS0t55mzjTueTRvKr9S3Q9sx7zbMUjJ9gxMS
qqEMbE/1KoIlfD1GI5hR7PytkIl7+5GPmBQ6OxcgCSd7AVzgeJYB/D7W1uwvWGcq
UCvMx5zBFL915AFWPMf2+jhOozulj/JIGOtlJw28+xTdXmSmVs9usgHnJAFqGUAW
uCgHo+kU9l8czPjy1Csbft7RL1R7PKWQQDg6+YOlhdE4Ej4BS15/FAcUTdYH0hI0
dDmRnSMXN6QNF9uplK5R6jf1eRoiPaGgoR6qRE8WmddbHCh5zSBkbrTWze+5ihaL
pexArE+uSnAgkQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:02 2025 by rpki-client