Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
File: 1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft (raw, json)
Hash identifier: I8Ba35X8r3UIxoUGko/UbSD73Palh6H5zL7iP3heVGk=
Subject key identifier: 4A:73:95:29:04:6C:A0:95:FF:38:AA:5C:D6:2F:72:61:1C:0C:31:9E
Authority key identifier: FA:55:D2:87:71:32:AA:AD:CD:F5:40:58:AC:BF:9E:07:ED:DB:59:8C
Certificate issuer: /CN=fa55d2877132aaadcdf54058acbf9e07eddb598c
Certificate serial: 0197B5FC4F5B05795839775783D28F78F3D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 10:01:40 +0000
Manifest this update: Sat 28 Jun 2025 10:01:40 +0000
Manifest next update: Sun 29 Jun 2025 10:01:40 +0000
Files and hashes: 1: 1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl (hash: /rViasRUJIxDXFFdZY9YJ6ROAUBVYaH0+sns80FaVTU=)
2: NMUyPdZC5qwvI-uU8yAq__R87OE.roa (hash: wNqu5LklcPh8GK25XCT828wVBYluabvZCKgobN8TPqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:4f:5b:05:79:58:39:77:57:83:d2:8f:78:f3:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa55d2877132aaadcdf54058acbf9e07eddb598c
Validity
Not Before: Jun 28 10:01:40 2025 GMT
Not After : Jun 29 10:01:40 2025 GMT
Subject: CN=4a739529046ca095ff38aa5cd62f72611c0c319e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:eb:7f:71:58:5d:10:91:85:da:01:e2:83:e4:
07:9a:1e:f8:c0:bc:e2:5e:18:b6:7f:ca:0f:f2:96:
5d:4f:fa:e6:73:d7:87:eb:74:6c:97:79:ab:fe:d7:
bb:b1:54:c5:11:2b:fb:93:02:44:52:3b:44:9b:64:
83:2c:66:67:5b:68:cd:55:5c:3f:63:c3:68:35:c0:
37:20:50:33:ae:01:42:dc:14:68:fc:8b:9a:8f:cf:
4b:4a:47:e7:a6:dc:d0:81:72:e3:3b:41:b7:25:22:
88:36:f7:fa:d4:ca:ff:d4:63:ab:f7:b2:d4:71:09:
60:31:91:0d:a7:9a:99:9b:79:05:e2:ea:43:20:c0:
1d:ba:9b:06:2b:87:bc:94:43:c9:ab:ca:2b:db:f6:
f9:1d:d8:0f:d0:bd:9a:c8:c9:0b:62:20:e7:46:9d:
58:b8:2a:bc:63:e0:75:9c:93:c2:cc:9a:2b:dd:d8:
60:1c:0f:47:01:0f:ab:41:64:46:41:6e:b9:01:2a:
32:47:47:4e:01:1d:40:c5:ee:91:31:d2:db:f5:0b:
15:f7:cf:e2:7e:c0:65:03:a8:1d:14:f8:7f:c5:03:
d4:03:a0:c7:5c:ee:37:48:d2:d6:bf:04:f1:13:9a:
8e:06:bc:fa:d5:6e:49:d3:f1:77:93:f8:05:63:ab:
c4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:73:95:29:04:6C:A0:95:FF:38:AA:5C:D6:2F:72:61:1C:0C:31:9E
X509v3 Authority Key Identifier:
keyid:FA:55:D2:87:71:32:AA:AD:CD:F5:40:58:AC:BF:9E:07:ED:DB:59:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:0d:87:dc:19:b1:55:a5:a1:db:a4:8c:b3:2b:90:97:4b:53:
8e:34:4a:bc:05:fc:96:40:3c:34:29:c1:a0:e5:3c:35:ae:4b:
e7:b6:e7:48:9c:ef:5e:36:46:4c:c9:de:c7:bc:4f:e5:57:63:
a0:13:6e:05:46:a6:40:bf:d9:1c:2c:3a:4c:53:79:58:8b:3e:
ae:1a:17:bd:f5:ba:95:20:92:36:fa:1a:03:32:c8:a7:14:f9:
20:30:b7:e8:25:f2:5b:a4:49:25:95:76:d2:c0:21:b6:93:53:
74:27:ac:9d:75:12:6f:dc:6c:24:14:05:23:44:eb:2a:26:f9:
4b:c5:fd:c6:7c:32:5e:af:f6:13:71:bc:f6:61:32:a5:0a:17:
80:ba:78:2a:2a:38:7e:3c:76:93:51:12:cc:84:5a:35:c2:45:
43:53:3d:f1:3f:7a:53:bc:5a:4e:a3:91:c9:25:77:fc:60:0a:
26:8a:e5:e9:1b:29:4c:06:3e:2c:00:22:e3:19:02:53:9c:21:
34:b9:89:c8:de:da:e6:08:a7:31:a0:88:de:9a:0c:57:6e:cf:
7c:84:63:13:fc:73:8a:8e:d2:82:03:0e:11:b4:27:62:0d:22:
9f:98:80:b3:2d:0e:d3:28:7b:2d:de:d5:55:31:e9:cb:35:fc:
3e:59:6c:10
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZe1/E9bBXlYOXdXg9KPePPXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNTVkMjg3NzEzMmFhYWRjZGY1NDA1OGFjYmY5ZTA3ZWRk
YjU5OGMwHhcNMjUwNjI4MTAwMTQwWhcNMjUwNjI5MTAwMTQwWjAzMTEwLwYDVQQD
Eyg0YTczOTUyOTA0NmNhMDk1ZmYzOGFhNWNkNjJmNzI2MTFjMGMzMTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArut/cVhdEJGF2gHig+QHmh74wLzi
Xhi2f8oP8pZdT/rmc9eH63Rsl3mr/te7sVTFESv7kwJEUjtEm2SDLGZnW2jNVVw/
Y8NoNcA3IFAzrgFC3BRo/Iuaj89LSkfnptzQgXLjO0G3JSKINvf61Mr/1GOr97LU
cQlgMZENp5qZm3kF4upDIMAdupsGK4e8lEPJq8or2/b5HdgP0L2ayMkLYiDnRp1Y
uCq8Y+B1nJPCzJor3dhgHA9HAQ+rQWRGQW65ASoyR0dOAR1Axe6RMdLb9QsV98/i
fsBlA6gdFPh/xQPUA6DHXO43SNLWvwTxE5qOBrz61W5J0/F3k/gFY6vE4wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFEpzlSkEbKCV/ziqXNYvcmEcDDGeMB8GA1UdIwQY
MBaAFPpV0odxMqqtzfVAWKy/ngft21mMMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1sWFNoM0V5cXEzTjlVQllyTC1lQi0zYldZdy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDIvOTJkMjA4LWEyMmEtNDIxYy04YzVi
LWVhZjlkYTRhZGVmNi8xLzEtbFhTaDNFeXFxM045VUJZckwtZUItM2JXWXcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzAyLzkyZDIwOC1hMjJhLTQyMWMtOGM1Yi1lYWY5ZGE0YWRl
ZjYvMS8xLWxYU2gzRXlxcTNOOVVCWXJMLWVCLTNiV1l3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeg2H
3BmxVaWh26SMsyuQl0tTjjRKvAX8lkA8NCnBoOU8Na5L57bnSJzvXjZGTMnex7xP
5VdjoBNuBUamQL/ZHCw6TFN5WIs+rhoXvfW6lSCSNvoaAzLIpxT5IDC36CXyW6RJ
JZV20sAhtpNTdCesnXUSb9xsJBQFI0TrKib5S8X9xnwyXq/2E3G89mEypQoXgLp4
Kio4fjx2k1ESzIRaNcJFQ1M98T96U7xaTqORySV3/GAKJorl6RspTAY+LAAi4xkC
U5whNLmJyN7a5ginMaCI3poMV27PfIRjE/xzio7SggMOEbQnYg0in5iAsy0O0yh7
Ld7VVTHpyzX8PllsEA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:13:02 2025 by rpki-client