Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
File: lSCTFQ9KRhAazX6jomu0OFExI7U.mft (raw, json)
Hash identifier: roLvf14ypcNpTvPCZOS5pcX+jGlOm0BvTPirO7i1CvM=
Subject key identifier: 3B:22:2A:32:26:DA:A9:D0:62:7F:A9:FB:0B:56:4C:A5:48:12:E2:84
Authority key identifier: 95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
Certificate issuer: /CN=952093150f4a46101acd7ea3a26bb438513123b5
Certificate serial: 01992E905AA578288EFB600E79C13885C768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
Manifest number: 1679
Signing time: Tue 09 Sep 2025 13:00:36 +0000
Manifest this update: Tue 09 Sep 2025 13:00:36 +0000
Manifest next update: Wed 10 Sep 2025 13:00:36 +0000
Files and hashes: 1: lSCTFQ9KRhAazX6jomu0OFExI7U.crl (hash: syAmqiQKKbQzxd2wDVcojK/2c2R0A8r/T6zETeATgNY=)
2: rK5X9NIdICE6HWbuHlM4yM6Jalc.roa (hash: YWhqfMgJTLRIqRYZxrF87FaDlWD+zYLSsh2PkoyKjDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:90:5a:a5:78:28:8e:fb:60:0e:79:c1:38:85:c7:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952093150f4a46101acd7ea3a26bb438513123b5
Validity
Not Before: Sep 9 13:00:36 2025 GMT
Not After : Sep 10 13:00:36 2025 GMT
Subject: CN=3b222a3226daa9d0627fa9fb0b564ca54812e284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3e:17:4e:80:45:6c:65:e8:06:a1:e1:3e:ba:
21:e5:7e:f1:61:de:9e:cd:2e:91:5f:08:04:40:e1:
6f:2c:11:9c:5c:68:6d:2d:e8:2a:4c:91:27:88:b9:
ce:4a:99:02:df:88:74:10:d4:6d:d6:54:bd:ca:dc:
77:2d:9c:3a:a0:21:d7:83:51:3a:0a:48:12:0e:c8:
ea:ba:6a:3c:9f:ee:53:d8:f8:f5:65:46:e0:cd:8c:
f3:ce:aa:c1:e8:b7:91:f8:b7:31:7a:c0:b6:38:d5:
c6:34:dd:2d:ff:3a:91:a0:fd:e4:13:83:76:1f:a1:
1f:96:ec:8e:01:e6:fb:bd:fb:ea:4f:92:2e:86:3e:
31:d2:54:d3:8c:52:3e:88:57:c1:1b:1e:3b:88:e9:
52:81:eb:e2:21:49:ac:b5:37:83:aa:22:d7:26:f6:
51:29:d6:8b:ea:bf:ed:1b:b1:83:76:65:01:03:67:
3d:f3:07:67:94:b6:5e:f7:62:aa:d2:59:a2:f0:a4:
3d:a0:6b:bc:d0:67:d4:21:71:62:f9:e6:f8:16:de:
30:5b:46:12:91:91:31:76:39:95:a6:3d:9d:a2:16:
1b:01:e2:3e:b7:45:85:07:ed:9c:2b:59:37:24:ed:
a6:63:6b:c1:ec:73:82:dd:93:68:14:b3:ee:25:51:
4d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:22:2A:32:26:DA:A9:D0:62:7F:A9:FB:0B:56:4C:A5:48:12:E2:84
X509v3 Authority Key Identifier:
keyid:95:20:93:15:0F:4A:46:10:1A:CD:7E:A3:A2:6B:B4:38:51:31:23:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSCTFQ9KRhAazX6jomu0OFExI7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/958cbc-c2f4-48f7-addd-e804dcbdd762/1/lSCTFQ9KRhAazX6jomu0OFExI7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:5a:3e:e6:29:44:da:a8:91:67:10:ce:1d:a5:bf:80:04:f3:
66:d3:68:44:21:bc:51:2b:93:c0:e8:d5:db:d5:03:79:11:34:
b2:82:dc:69:70:65:23:81:c8:ad:52:35:e1:9b:6a:69:37:97:
9a:7d:54:c6:e3:7c:7f:76:f3:cb:29:d7:4c:36:f9:9a:26:22:
46:4f:b4:43:ac:e0:87:36:f7:9c:b0:8a:e9:74:9a:60:c4:ea:
e5:6e:86:7b:f2:d6:f9:fd:a7:17:17:94:d1:d1:d6:7b:8a:61:
81:2c:b4:45:1f:67:8a:71:32:88:32:3b:23:00:07:e1:9b:43:
26:ab:cb:cc:31:ff:0e:72:0a:fa:34:1f:02:e8:6d:24:aa:86:
d2:dc:ec:a3:ee:9a:c3:44:b6:60:ce:54:57:e1:4c:ce:07:0d:
27:88:da:bf:96:31:03:f4:79:c8:ac:8f:aa:36:da:ca:91:aa:
21:29:08:f3:f8:23:4e:4a:10:38:37:ea:08:da:2c:aa:92:b8:
59:35:a0:5b:ff:a9:9c:91:fe:d6:ed:7b:44:1d:99:f9:7f:9d:
1a:c1:c9:4d:28:f4:ba:b9:22:35:8c:3f:60:17:77:11:eb:d0:
c5:21:a6:67:c4:6d:3a:c3:7e:03:1e:a8:f1:d7:11:86:d7:2b:
72:14:8a:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkukFqleCiO+2AOecE4hcdoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MjA5MzE1MGY0YTQ2MTAxYWNkN2VhM2EyNmJiNDM4NTEz
MTIzYjUwHhcNMjUwOTA5MTMwMDM2WhcNMjUwOTEwMTMwMDM2WjAzMTEwLwYDVQQD
EygzYjIyMmEzMjI2ZGFhOWQwNjI3ZmE5ZmIwYjU2NGNhNTQ4MTJlMjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArT4XToBFbGXoBqHhProh5X7xYd6e
zS6RXwgEQOFvLBGcXGhtLegqTJEniLnOSpkC34h0ENRt1lS9ytx3LZw6oCHXg1E6
CkgSDsjqumo8n+5T2Pj1ZUbgzYzzzqrB6LeR+LcxesC2ONXGNN0t/zqRoP3kE4N2
H6EfluyOAeb7vfvqT5Iuhj4x0lTTjFI+iFfBGx47iOlSgeviIUmstTeDqiLXJvZR
KdaL6r/tG7GDdmUBA2c98wdnlLZe92Kq0lmi8KQ9oGu80GfUIXFi+eb4Ft4wW0YS
kZExdjmVpj2dohYbAeI+t0WFB+2cK1k3JO2mY2vB7HOC3ZNoFLPuJVFNgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDsiKjIm2qnQYn+p+wtWTKVIEuKEMB8GA1UdIwQY
MBaAFJUgkxUPSkYQGs1+o6JrtDhRMSO1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFNDVEZROUtSaEFhelg2am9tdTBPRkV4STdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi85NThjYmMtYzJmNC00OGY3LWFkZGQt
ZTgwNGRjYmRkNzYyLzEvbFNDVEZROUtSaEFhelg2am9tdTBPRkV4STdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi85NThjYmMtYzJmNC00OGY3LWFkZGQtZTgwNGRjYmRkNzYy
LzEvbFNDVEZROUtSaEFhelg2am9tdTBPRkV4STdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE1o+5ilE
2qiRZxDOHaW/gATzZtNoRCG8USuTwOjV29UDeRE0soLcaXBlI4HIrVI14ZtqaTeX
mn1UxuN8f3bzyynXTDb5miYiRk+0Q6zghzb3nLCK6XSaYMTq5W6Ge/LW+f2nFxeU
0dHWe4phgSy0RR9ninEyiDI7IwAH4ZtDJqvLzDH/DnIK+jQfAuhtJKqG0tzso+6a
w0S2YM5UV+FMzgcNJ4jav5YxA/R5yKyPqjbaypGqISkI8/gjTkoQODfqCNosqpK4
WTWgW/+pnJH+1u17RB2Z+X+dGsHJTSj0urkiNYw/YBd3EevQxSGmZ8RtOsN+Ax6o
8dcRhtcrchSKbA==
-----END CERTIFICATE-----
Generated at Tue Sep 9 17:07:35 2025 by rpki-client