Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft
File: Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft (raw, json)
Hash identifier: 0/+gT5XVuXOGQmC7bFS5AfT/sQ8PDSx6UFkGXpYr6D0=
Subject key identifier: 7A:F9:F7:84:A2:BD:18:BE:44:17:0E:2B:E9:BC:58:CF:F8:31:28:B7
Authority key identifier: 2E:7D:6F:55:A1:3B:00:1E:74:01:F4:0E:AA:AE:B8:2F:67:BD:42:2E
Certificate issuer: /CN=2e7d6f55a13b001e7401f40eaaaeb82f67bd422e
Certificate serial: 0197B70EDB29A3AE6656134D06841C5EA82F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ln1vVaE7AB50AfQOqq64L2e9Qi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 15:01:33 +0000
Manifest this update: Sat 28 Jun 2025 15:01:33 +0000
Manifest next update: Sun 29 Jun 2025 15:01:33 +0000
Files and hashes: 1: Ln1vVaE7AB50AfQOqq64L2e9Qi4.crl (hash: KDJyoniocytwj8I3QW3WlGRZwElb+VQbXrZzdd3x3mE=)
2: ldODaBOmVHo8BFc3Qw9pGDyJiEs.roa (hash: rmdsvK470zI9xYT/Ts/JVvHVmj5J/Tw+y1heTWpL5gU=)
3: pzcGKLsYJDgAvVmaLC043N77QRg.roa (hash: YvI3zWVk1s/r/kGix6qKrguJ1csuD/jUAsuyDHU2sFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ln1vVaE7AB50AfQOqq64L2e9Qi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:db:29:a3:ae:66:56:13:4d:06:84:1c:5e:a8:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e7d6f55a13b001e7401f40eaaaeb82f67bd422e
Validity
Not Before: Jun 28 15:01:33 2025 GMT
Not After : Jun 29 15:01:33 2025 GMT
Subject: CN=7af9f784a2bd18be44170e2be9bc58cff83128b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:71:76:8f:b2:fb:fc:24:b3:41:24:4b:16:97:
6d:15:73:2a:9e:39:4f:c2:38:0c:95:2d:1d:3a:73:
03:52:43:22:1a:97:17:23:6c:31:04:12:d2:cf:be:
5f:c3:7b:29:77:bd:2d:e6:0d:20:89:74:fb:f9:8b:
8d:47:74:f1:91:20:dd:5c:29:48:2a:ab:a9:0f:05:
25:e1:e9:1f:a7:c2:22:0f:aa:79:61:bb:8b:6b:00:
4e:59:8f:6a:29:cf:32:1f:6f:0c:a0:51:a0:a0:c5:
e6:af:c9:26:e0:36:26:92:d8:70:51:60:c5:4e:eb:
91:a3:6f:a6:56:ca:ea:79:fd:36:32:19:b5:65:24:
50:6c:9e:37:68:a0:08:11:0b:14:f7:25:4e:88:23:
1e:3b:a2:a0:2c:97:dc:7c:4a:97:6f:6f:db:51:f0:
e3:62:45:ef:ca:8d:a1:23:21:e7:2b:9e:21:87:41:
b7:3e:8f:89:de:c6:8a:35:a0:78:23:2f:3c:19:c8:
2f:26:a1:c2:f6:a1:61:8d:d3:12:2d:97:71:e2:dd:
05:57:54:43:a1:0f:97:0d:41:9d:1e:f0:c9:e8:3d:
e4:56:cc:a3:fa:9b:b0:44:3f:62:c6:24:2c:b5:4f:
d4:0a:cd:8c:d6:fe:25:d4:32:c2:31:3a:20:76:4f:
cb:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F9:F7:84:A2:BD:18:BE:44:17:0E:2B:E9:BC:58:CF:F8:31:28:B7
X509v3 Authority Key Identifier:
keyid:2E:7D:6F:55:A1:3B:00:1E:74:01:F4:0E:AA:AE:B8:2F:67:BD:42:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ln1vVaE7AB50AfQOqq64L2e9Qi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:d2:3e:7b:46:8c:5e:b1:e0:47:bc:d9:1e:8a:8b:ee:2e:82:
6a:49:5f:15:dd:fc:f6:9c:fa:1a:36:32:5c:54:17:4c:81:3f:
cb:3e:32:49:11:76:8a:01:d5:02:dd:8f:83:96:9c:71:95:0f:
e7:45:54:9f:68:18:d5:8e:8e:f0:55:c9:89:c0:f1:21:76:4e:
88:ff:d8:cb:39:d7:5a:01:ba:f7:30:63:b6:4c:56:da:9e:b7:
0b:5e:8a:2c:fa:2b:31:97:c0:fc:08:a2:d5:b3:e0:01:e5:e7:
13:62:9d:03:e5:54:1f:b7:cd:25:ab:4a:78:0f:20:11:c9:ef:
7e:c3:da:7d:b9:10:ee:70:97:ca:e1:fa:18:8f:08:ba:0d:94:
ff:0d:14:dd:f7:d6:29:a9:64:2a:ac:79:ca:78:e9:3e:cd:7f:
14:bb:e5:dc:70:79:a8:29:01:7a:c2:9b:12:72:85:f4:12:7a:
0d:80:38:d1:53:de:7d:00:13:7e:78:76:7a:4d:dc:c4:96:b5:
f7:3b:25:17:10:d4:51:cc:47:a7:bc:21:a1:fd:f9:82:17:24:
27:e6:3f:ab:6b:21:55:56:0c:09:f1:87:c4:de:c5:4d:2e:45:
73:86:06:c0:87:be:62:4d:34:09:a3:fc:f3:32:79:b8:f9:06:
d5:52:14:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dtspo65mVhNNBoQcXqgvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlN2Q2ZjU1YTEzYjAwMWU3NDAxZjQwZWFhYWViODJmNjdi
ZDQyMmUwHhcNMjUwNjI4MTUwMTMzWhcNMjUwNjI5MTUwMTMzWjAzMTEwLwYDVQQD
Eyg3YWY5Zjc4NGEyYmQxOGJlNDQxNzBlMmJlOWJjNThjZmY4MzEyOGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3F2j7L7/CSzQSRLFpdtFXMqnjlP
wjgMlS0dOnMDUkMiGpcXI2wxBBLSz75fw3spd70t5g0giXT7+YuNR3TxkSDdXClI
KqupDwUl4ekfp8IiD6p5YbuLawBOWY9qKc8yH28MoFGgoMXmr8km4DYmkthwUWDF
TuuRo2+mVsrqef02Mhm1ZSRQbJ43aKAIEQsU9yVOiCMeO6KgLJfcfEqXb2/bUfDj
YkXvyo2hIyHnK54hh0G3Po+J3saKNaB4Iy88GcgvJqHC9qFhjdMSLZdx4t0FV1RD
oQ+XDUGdHvDJ6D3kVsyj+puwRD9ixiQstU/UCs2M1v4l1DLCMTogdk/LawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHr594SivRi+RBcOK+m8WM/4MSi3MB8GA1UdIwQY
MBaAFC59b1WhOwAedAH0DqquuC9nvUIuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG4xdlZhRTdBQjUwQWZRT3FxNjRMMmU5UWk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9mY2ZkOGMtODg3MS00ZDZhLWI0YTUt
ZDY1YjY1NGM5OWM1LzEvTG4xdlZhRTdBQjUwQWZRT3FxNjRMMmU5UWk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9mY2ZkOGMtODg3MS00ZDZhLWI0YTUtZDY1YjY1NGM5OWM1
LzEvTG4xdlZhRTdBQjUwQWZRT3FxNjRMMmU5UWk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvNI+e0aM
XrHgR7zZHoqL7i6CaklfFd389pz6GjYyXFQXTIE/yz4ySRF2igHVAt2Pg5accZUP
50VUn2gY1Y6O8FXJicDxIXZOiP/YyznXWgG69zBjtkxW2p63C16KLPorMZfA/Aii
1bPgAeXnE2KdA+VUH7fNJatKeA8gEcnvfsPafbkQ7nCXyuH6GI8Iug2U/w0U3ffW
KalkKqx5ynjpPs1/FLvl3HB5qCkBesKbEnKF9BJ6DYA40VPefQATfnh2ek3cxJa1
9zslFxDUUcxHp7whof35ghckJ+Y/q2shVVYMCfGHxN7FTS5Fc4YGwIe+Yk00CaP8
8zJ5uPkG1VIUUQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 18:53:00 2025 by rpki-client