Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
File: lFtz335v4RAPHROgfBjVmvIoQow.mft (raw, json)
Hash identifier: MeJZxjsPP4tLLFghrKHcLid541xd/tlXmawCbO+eSUg=
Subject key identifier: F2:57:14:DB:C5:15:5C:17:A5:EA:85:A5:88:C2:9C:D3:1D:4E:9A:B5
Authority key identifier: 94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C
Certificate issuer: /CN=945b73df7e6fe1100f1d13a07c18d59af228428c
Certificate serial: 0197B820FEBA4CF9BB5A98383B4CD6282810
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
Manifest number: 145C
Signing time: Sat 28 Jun 2025 20:00:59 +0000
Manifest this update: Sat 28 Jun 2025 20:00:59 +0000
Manifest next update: Sun 29 Jun 2025 20:00:59 +0000
Files and hashes: 1: 9LVEIaMlmJxNlD9z3n5kSDNE07w.roa (hash: Ts++AgaSboNBt9jLBwSwB9DRgMmL7vyooMiQkdJdfP8=)
2: lFtz335v4RAPHROgfBjVmvIoQow.crl (hash: Iv18L7KVlHhZRonn8nQVpfTpmn/ytzmg4kCJSj+8xEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:fe:ba:4c:f9:bb:5a:98:38:3b:4c:d6:28:28:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=945b73df7e6fe1100f1d13a07c18d59af228428c
Validity
Not Before: Jun 28 20:00:59 2025 GMT
Not After : Jun 29 20:00:59 2025 GMT
Subject: CN=f25714dbc5155c17a5ea85a588c29cd31d4e9ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:58:bb:39:d5:4c:59:26:65:95:6e:3b:5b:a3:
02:f8:35:62:18:63:93:c5:35:ef:e5:48:78:88:18:
5a:2b:80:1d:af:28:03:ec:45:9d:5a:67:e8:9d:ae:
e3:09:14:7e:31:a0:f6:ab:8e:06:91:e2:6b:a4:03:
63:b3:1e:2c:b7:de:7b:fd:ed:c0:de:10:e5:e1:96:
2e:ab:28:bc:13:5e:b2:1b:d5:3a:13:ec:f3:5e:5d:
2f:ae:a9:28:3e:31:f0:94:4f:10:c3:ae:32:5f:8d:
df:78:d0:f2:86:56:5b:7f:a6:5f:11:8f:bf:8c:b8:
23:3b:8c:0e:fa:a5:74:2e:28:0c:93:dd:a7:53:1d:
ef:e6:72:26:b4:c6:0b:ed:fa:1c:c4:06:e1:da:cc:
0e:a8:50:5e:18:ce:d3:2d:93:3e:d6:5e:96:f6:4d:
ec:39:89:6c:71:b2:7a:49:f8:01:77:32:aa:67:67:
70:80:11:c7:2e:5f:d6:22:0d:68:27:d7:ce:c8:21:
3a:ee:a7:29:be:2a:5c:ad:2c:3a:92:e1:31:95:80:
fc:cf:6d:27:88:f9:6e:6e:19:b0:76:7a:63:5d:02:
31:34:a7:97:02:6e:43:aa:3e:d7:ac:39:c5:e1:2c:
21:b9:71:56:99:24:da:04:f8:83:09:2e:ce:09:9d:
d3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:57:14:DB:C5:15:5C:17:A5:EA:85:A5:88:C2:9C:D3:1D:4E:9A:B5
X509v3 Authority Key Identifier:
keyid:94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:b8:ec:9d:b9:b2:aa:43:72:7b:cd:df:2f:fb:cc:13:4b:52:
f5:79:2a:70:00:64:3f:8e:dd:4b:8c:92:c5:99:3e:b7:37:ac:
1d:ef:79:17:84:cd:ca:15:6d:17:8e:79:2e:e1:5b:f6:65:94:
7c:a5:c7:94:51:92:6f:9e:14:ee:4b:ee:9c:3e:4b:14:6e:17:
c7:b4:e0:9f:ff:29:c8:4e:30:05:0f:02:47:df:82:61:98:1d:
0e:7d:d7:a4:55:bc:e1:88:72:12:cb:13:85:6b:31:1b:0f:2c:
54:4c:dc:86:dc:62:2f:9f:e5:c7:95:1e:0e:f4:ef:55:1c:60:
00:2c:4e:9f:94:d9:48:73:cc:87:e3:c7:da:00:97:fc:6e:ab:
38:e7:b2:64:31:e1:b6:2d:05:be:b0:38:c1:0e:36:9b:13:e6:
9b:43:5b:ea:f6:00:7c:b0:ca:a5:49:42:57:0d:3d:c0:8b:71:
77:70:e3:2c:17:4e:ce:d5:b5:89:9c:07:ae:64:38:61:67:2f:
3e:2e:e3:43:71:8b:ad:43:33:db:ab:91:44:a6:53:06:56:a6:
d2:4a:ee:c8:f9:59:aa:52:b2:b0:5b:4d:d9:3a:d3:51:fc:f7:
25:2e:f0:68:4b:58:38:2f:34:15:7a:e9:77:22:f9:70:61:9a:
73:ab:eb:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4IP66TPm7Wpg4O0zWKCgQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NWI3M2RmN2U2ZmUxMTAwZjFkMTNhMDdjMThkNTlhZjIy
ODQyOGMwHhcNMjUwNjI4MjAwMDU5WhcNMjUwNjI5MjAwMDU5WjAzMTEwLwYDVQQD
EyhmMjU3MTRkYmM1MTU1YzE3YTVlYTg1YTU4OGMyOWNkMzFkNGU5YWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1i7OdVMWSZllW47W6MC+DViGGOT
xTXv5Uh4iBhaK4AdrygD7EWdWmfona7jCRR+MaD2q44GkeJrpANjsx4st957/e3A
3hDl4ZYuqyi8E16yG9U6E+zzXl0vrqkoPjHwlE8Qw64yX43feNDyhlZbf6ZfEY+/
jLgjO4wO+qV0LigMk92nUx3v5nImtMYL7focxAbh2swOqFBeGM7TLZM+1l6W9k3s
OYlscbJ6SfgBdzKqZ2dwgBHHLl/WIg1oJ9fOyCE67qcpvipcrSw6kuExlYD8z20n
iPlubhmwdnpjXQIxNKeXAm5Dqj7XrDnF4SwhuXFWmSTaBPiDCS7OCZ3TowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPJXFNvFFVwXpeqFpYjCnNMdTpq1MB8GA1UdIwQY
MBaAFJRbc99+b+EQDx0ToHwY1ZryKEKMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEZ0ejMzNXY0UkFQSFJPZ2ZCalZtdklvUW93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9lYzYxOGYtOWY2MS00MTg1LWJhMGQt
NmU0NTI0MjVhMTkzLzEvbEZ0ejMzNXY0UkFQSFJPZ2ZCalZtdklvUW93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9lYzYxOGYtOWY2MS00MTg1LWJhMGQtNmU0NTI0MjVhMTkz
LzEvbEZ0ejMzNXY0UkFQSFJPZ2ZCalZtdklvUW93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAobjsnbmy
qkNye83fL/vME0tS9XkqcABkP47dS4ySxZk+tzesHe95F4TNyhVtF455LuFb9mWU
fKXHlFGSb54U7kvunD5LFG4Xx7Tgn/8pyE4wBQ8CR9+CYZgdDn3XpFW84YhyEssT
hWsxGw8sVEzchtxiL5/lx5UeDvTvVRxgACxOn5TZSHPMh+PH2gCX/G6rOOeyZDHh
ti0FvrA4wQ42mxPmm0Nb6vYAfLDKpUlCVw09wItxd3DjLBdOztW1iZwHrmQ4YWcv
Pi7jQ3GLrUMz26uRRKZTBlam0kruyPlZqlKysFtN2TrTUfz3JS7waEtYOC80FXrp
dyL5cGGac6vrkA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:59:26 2025 by rpki-client