Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
File: lXPBpW7MJKV9K2hOVILat7jZ0ss.mft (raw, json)
Hash identifier: Am4J9lGk620GEFx8vowXtlFQVIv+gzGe7zkAvMOAp4I=
Subject key identifier: 6B:53:F0:3A:C7:4B:BC:4E:A6:A8:17:2B:13:F8:FD:6E:E1:F8:0E:DD
Authority key identifier: 95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB
Certificate issuer: /CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb
Certificate serial: 0197B9A142F2041C66DEADD42AD5DD14227F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
Manifest number: 13FF
Signing time: Sun 29 Jun 2025 03:00:42 +0000
Manifest this update: Sun 29 Jun 2025 03:00:42 +0000
Manifest next update: Mon 30 Jun 2025 03:00:42 +0000
Files and hashes: 1: i6ZkgPOU4WKpq6-T7FEmeCgO4_U.roa (hash: 4/Gord29LMo6fRm1iefbRHE4SPhSa5o/5bLxx5zdzBU=)
2: lXPBpW7MJKV9K2hOVILat7jZ0ss.crl (hash: QdGd1unqNyRNcXz94mHAWfU2ye2DvSYAmw1JLxiB42Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:42:f2:04:1c:66:de:ad:d4:2a:d5:dd:14:22:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb
Validity
Not Before: Jun 29 03:00:42 2025 GMT
Not After : Jun 30 03:00:42 2025 GMT
Subject: CN=6b53f03ac74bbc4ea6a8172b13f8fd6ee1f80edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4c:cd:38:87:a1:f1:0e:94:43:1e:39:37:4a:
b9:c0:84:9f:0c:ca:e2:fe:6a:87:fa:63:05:48:33:
12:b2:42:bd:f3:42:a3:95:e1:5b:8f:46:28:9a:9c:
f6:2e:06:59:9f:47:d9:1b:6a:af:fc:7a:35:0e:eb:
54:90:dc:08:a0:12:cb:9c:af:e6:ce:7e:45:eb:b4:
04:cc:cf:01:a1:a7:4b:02:f5:fd:f0:ee:e4:0d:75:
ff:6b:38:75:b8:8d:54:5b:47:40:2a:1c:de:f6:8e:
e4:67:8a:09:c3:3c:99:fd:59:de:2c:fb:92:5e:61:
fe:79:1b:73:43:b9:d7:16:17:e3:4c:4b:d8:2b:a5:
6c:46:82:90:c5:cf:ae:4b:f6:ca:81:23:ef:2f:f0:
fc:1a:9d:1c:9e:1e:ae:97:47:e4:71:6f:6d:63:e7:
55:b9:2e:0a:c4:fb:be:d0:42:cd:3b:ae:f2:db:61:
fe:cc:5d:f3:31:d7:90:9b:b5:00:eb:4b:45:7b:0f:
15:86:a0:50:c5:eb:32:8c:6d:6a:c1:3d:dc:c2:ba:
83:ca:63:ef:00:9e:98:8b:2a:ff:d0:88:c1:fc:99:
c2:23:81:a4:62:75:e7:23:58:3b:ed:c4:7d:ba:dd:
32:af:60:58:0b:0e:1d:58:ad:36:64:97:1f:01:0b:
c2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:53:F0:3A:C7:4B:BC:4E:A6:A8:17:2B:13:F8:FD:6E:E1:F8:0E:DD
X509v3 Authority Key Identifier:
keyid:95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:8a:42:9c:81:59:30:1e:bf:4c:44:6c:56:6d:9a:f7:e7:40:
6b:f9:e8:60:b5:7a:3e:5c:3f:24:2b:aa:51:c1:6d:3a:4b:b4:
3b:cc:01:d4:62:4e:73:b7:07:d5:55:5c:70:e3:58:2f:1e:03:
97:27:0f:21:98:df:b2:87:39:8e:15:86:c4:d3:11:36:31:c1:
2d:67:01:55:e9:ac:e0:36:0a:63:9f:dd:2a:9b:93:7f:7b:ec:
70:0c:88:1a:b6:b1:86:ca:c0:31:17:4e:c4:7e:46:6e:b2:e3:
c1:4d:ce:a5:2a:92:82:58:a6:2c:97:33:14:31:a7:c0:64:35:
3f:e3:82:f4:31:41:df:ac:9c:51:3f:a5:c2:92:94:9d:9f:9c:
a9:ba:12:62:4d:4f:75:01:c9:e8:ee:62:f9:0e:aa:d2:68:eb:
60:c1:27:e7:32:1e:8f:ff:bb:c1:8f:a3:57:73:c5:2a:9e:be:
fd:24:66:9a:2a:26:80:26:56:c9:96:4b:e0:8a:a3:52:a9:cc:
65:05:bf:7e:ba:25:e4:3e:01:ba:29:d6:e2:b4:a4:7a:55:88:
74:37:33:05:94:31:d7:6f:a6:3f:6a:dc:49:38:54:aa:fc:24:
4f:17:a2:9c:0d:71:32:e4:aa:31:08:9a:23:8a:a9:c8:43:82:
67:b2:59:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5oULyBBxm3q3UKtXdFCJ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NzNjMWE1NmVjYzI0YTU3ZDJiNjg0ZTU0ODJkYWI3Yjhk
OWQyY2IwHhcNMjUwNjI5MDMwMDQyWhcNMjUwNjMwMDMwMDQyWjAzMTEwLwYDVQQD
Eyg2YjUzZjAzYWM3NGJiYzRlYTZhODE3MmIxM2Y4ZmQ2ZWUxZjgwZWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUzNOIeh8Q6UQx45N0q5wISfDMri
/mqH+mMFSDMSskK980KjleFbj0Yompz2LgZZn0fZG2qv/Ho1DutUkNwIoBLLnK/m
zn5F67QEzM8BoadLAvX98O7kDXX/azh1uI1UW0dAKhze9o7kZ4oJwzyZ/VneLPuS
XmH+eRtzQ7nXFhfjTEvYK6VsRoKQxc+uS/bKgSPvL/D8Gp0cnh6ul0fkcW9tY+dV
uS4KxPu+0ELNO67y22H+zF3zMdeQm7UA60tFew8VhqBQxesyjG1qwT3cwrqDymPv
AJ6Yiyr/0IjB/JnCI4GkYnXnI1g77cR9ut0yr2BYCw4dWK02ZJcfAQvCXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGtT8DrHS7xOpqgXKxP4/W7h+A7dMB8GA1UdIwQY
MBaAFJVzwaVuzCSlfStoTlSC2re42dLLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFhQQnBXN01KS1Y5SzJoT1ZJTGF0N2paMHNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82NDI4NGYtMDM1Yy00NjIwLTk0ZGIt
NGNiOWRkZjA5ZDQ1LzEvbFhQQnBXN01KS1Y5SzJoT1ZJTGF0N2paMHNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC82NDI4NGYtMDM1Yy00NjIwLTk0ZGItNGNiOWRkZjA5ZDQ1
LzEvbFhQQnBXN01KS1Y5SzJoT1ZJTGF0N2paMHNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAropCnIFZ
MB6/TERsVm2a9+dAa/noYLV6Plw/JCuqUcFtOku0O8wB1GJOc7cH1VVccONYLx4D
lycPIZjfsoc5jhWGxNMRNjHBLWcBVems4DYKY5/dKpuTf3vscAyIGraxhsrAMRdO
xH5GbrLjwU3OpSqSglimLJczFDGnwGQ1P+OC9DFB36ycUT+lwpKUnZ+cqboSYk1P
dQHJ6O5i+Q6q0mjrYMEn5zIej/+7wY+jV3PFKp6+/SRmmiomgCZWyZZL4IqjUqnM
ZQW/frol5D4BuinW4rSkelWIdDczBZQx12+mP2rcSThUqvwkTxeinA1xMuSqMQia
I4qpyEOCZ7JZuQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 05:34:18 2025 by rpki-client