Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3b58d8-6d94-4302-aa91-7c2bd984d735/1/LofD1fRf7zjBBbk91E3ST1vuYOc.mft
File: LofD1fRf7zjBBbk91E3ST1vuYOc.mft (raw, json)
Hash identifier: kJ7chxnHbjqI3xxipYjBJbx/VerqTTrs8q/DWV5spwc=
Subject key identifier: 88:F3:32:71:BA:7B:9D:D0:EA:88:AA:69:CD:D1:72:49:A7:07:7C:9B
Authority key identifier: 2E:87:C3:D5:F4:5F:EF:38:C1:05:B9:3D:D4:4D:D2:4F:5B:EE:60:E7
Certificate issuer: /CN=2e87c3d5f45fef38c105b93dd44dd24f5bee60e7
Certificate serial: 0197B8908AE29CE051C42C75A009D4E2792F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LofD1fRf7zjBBbk91E3ST1vuYOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3b58d8-6d94-4302-aa91-7c2bd984d735/1/LofD1fRf7zjBBbk91E3ST1vuYOc.mft
Manifest number: 0E06
Signing time: Sat 28 Jun 2025 22:02:49 +0000
Manifest this update: Sat 28 Jun 2025 22:02:49 +0000
Manifest next update: Sun 29 Jun 2025 22:02:49 +0000
Files and hashes: 1: LofD1fRf7zjBBbk91E3ST1vuYOc.crl (hash: u1tkWsTB30MX1MNif/2Orw94NHiPBHMJavT4RBSWyM8=)
2: QDqzI6mtk0OSKHPd6aEPhi6zaB8.roa (hash: EsH+qC6DrpZNrpMwjRlDLqXBAg493TRAVaOfxpJfUMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3b58d8-6d94-4302-aa91-7c2bd984d735/1/LofD1fRf7zjBBbk91E3ST1vuYOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/3b58d8-6d94-4302-aa91-7c2bd984d735/1/LofD1fRf7zjBBbk91E3ST1vuYOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/LofD1fRf7zjBBbk91E3ST1vuYOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:8a:e2:9c:e0:51:c4:2c:75:a0:09:d4:e2:79:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e87c3d5f45fef38c105b93dd44dd24f5bee60e7
Validity
Not Before: Jun 28 22:02:49 2025 GMT
Not After : Jun 29 22:02:49 2025 GMT
Subject: CN=88f33271ba7b9dd0ea88aa69cdd17249a7077c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:28:d8:46:d6:a2:68:3a:ad:da:6f:92:2b:5e:
74:15:86:63:71:f2:0f:fb:25:fa:a3:07:b7:db:f8:
43:c9:2c:54:43:60:e4:d6:5d:29:d2:14:ec:00:d0:
c8:e5:bd:bd:3e:08:a1:a0:0c:97:5b:01:33:dc:dd:
96:e6:c5:cc:05:12:03:08:35:90:21:df:ee:76:94:
b4:4f:e6:27:5d:7b:b3:a2:3c:1c:bf:ca:2e:bd:52:
96:c0:74:cf:6b:f6:7f:9b:ea:3d:22:06:ae:40:42:
63:2b:0e:c0:9b:b3:6b:1b:3f:fa:13:99:ce:c7:a9:
38:73:d0:23:10:1b:79:06:6f:a1:a0:0e:c5:f5:07:
23:27:1d:54:e3:1b:16:ea:2c:52:7f:12:0e:d9:fd:
88:32:f0:0a:eb:f1:74:94:49:04:62:6a:34:47:9f:
d8:95:ea:a5:a4:4e:4c:0a:f5:39:d3:e8:fa:8e:d8:
38:1c:44:9e:94:2a:4c:24:4f:26:cc:e6:19:6e:20:
46:be:44:9e:06:32:9d:87:ee:7c:45:dd:40:5b:05:
fb:fa:b7:5d:b5:98:b2:e4:61:2b:8d:93:f7:0f:7c:
ec:51:65:20:ae:c0:35:d0:8d:4e:e8:d7:38:1e:ea:
e4:b6:04:8f:14:ea:80:8e:00:73:4f:8c:ae:6d:0c:
9e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F3:32:71:BA:7B:9D:D0:EA:88:AA:69:CD:D1:72:49:A7:07:7C:9B
X509v3 Authority Key Identifier:
keyid:2E:87:C3:D5:F4:5F:EF:38:C1:05:B9:3D:D4:4D:D2:4F:5B:EE:60:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LofD1fRf7zjBBbk91E3ST1vuYOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3b58d8-6d94-4302-aa91-7c2bd984d735/1/LofD1fRf7zjBBbk91E3ST1vuYOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3b58d8-6d94-4302-aa91-7c2bd984d735/1/LofD1fRf7zjBBbk91E3ST1vuYOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:e9:79:7e:28:c7:3c:c0:04:b2:90:51:10:65:16:77:f8:d8:
3a:62:42:ed:b5:11:0b:30:47:32:d5:29:d5:7f:e6:c4:f9:1e:
c0:52:38:cc:14:95:e5:f6:f3:7b:2b:1d:5c:b3:93:ec:f6:96:
0e:0c:d7:38:13:dd:e6:5c:35:c8:47:2a:93:cb:2d:76:77:9b:
48:e4:ae:c6:eb:e2:58:81:1a:63:33:a1:0b:dc:ff:15:99:64:
1f:41:bc:54:12:05:f2:20:a1:bf:0a:d7:cc:24:b6:66:60:fb:
6b:9d:af:ed:54:9d:b6:e0:82:55:71:f7:79:e0:b3:20:d1:95:
aa:b3:75:f2:5a:da:d9:3c:45:c3:eb:62:48:36:cc:d9:bf:c1:
7a:86:24:b6:bd:83:6c:75:79:c2:d7:37:32:1c:50:e3:6c:e8:
6e:b6:27:dd:8d:ef:d3:aa:51:07:7f:c6:e2:5c:40:07:94:3f:
c3:04:5d:9a:07:65:69:2d:50:3a:32:ff:59:39:02:e1:88:2c:
02:e7:5d:ca:d2:09:c6:c9:81:8f:2c:d3:97:4f:71:62:89:09:
47:66:4b:a0:3b:63:97:e4:31:22:11:3d:e4:d7:ec:76:dc:95:
dd:44:f6:f3:02:2b:5f:e7:1f:4f:4a:1e:4b:b5:46:92:34:da:
01:0f:5e:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4kIrinOBRxCx1oAnU4nkvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlODdjM2Q1ZjQ1ZmVmMzhjMTA1YjkzZGQ0NGRkMjRmNWJl
ZTYwZTcwHhcNMjUwNjI4MjIwMjQ5WhcNMjUwNjI5MjIwMjQ5WjAzMTEwLwYDVQQD
Eyg4OGYzMzI3MWJhN2I5ZGQwZWE4OGFhNjljZGQxNzI0OWE3MDc3YzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yjYRtaiaDqt2m+SK150FYZjcfIP
+yX6owe32/hDySxUQ2Dk1l0p0hTsANDI5b29PgihoAyXWwEz3N2W5sXMBRIDCDWQ
Id/udpS0T+YnXXuzojwcv8ouvVKWwHTPa/Z/m+o9IgauQEJjKw7Am7NrGz/6E5nO
x6k4c9AjEBt5Bm+hoA7F9QcjJx1U4xsW6ixSfxIO2f2IMvAK6/F0lEkEYmo0R5/Y
leqlpE5MCvU50+j6jtg4HESelCpMJE8mzOYZbiBGvkSeBjKdh+58Rd1AWwX7+rdd
tZiy5GErjZP3D3zsUWUgrsA10I1O6Nc4HurktgSPFOqAjgBzT4yubQyenQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIjzMnG6e53Q6oiqac3RckmnB3ybMB8GA1UdIwQY
MBaAFC6Hw9X0X+84wQW5PdRN0k9b7mDnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG9mRDFmUmY3empCQmJrOTFFM1NUMXZ1WU9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zYjU4ZDgtNmQ5NC00MzAyLWFhOTEt
N2MyYmQ5ODRkNzM1LzEvTG9mRDFmUmY3empCQmJrOTFFM1NUMXZ1WU9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8zYjU4ZDgtNmQ5NC00MzAyLWFhOTEtN2MyYmQ5ODRkNzM1
LzEvTG9mRDFmUmY3empCQmJrOTFFM1NUMXZ1WU9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4ul5fijH
PMAEspBREGUWd/jYOmJC7bURCzBHMtUp1X/mxPkewFI4zBSV5fbzeysdXLOT7PaW
DgzXOBPd5lw1yEcqk8stdnebSOSuxuviWIEaYzOhC9z/FZlkH0G8VBIF8iChvwrX
zCS2ZmD7a52v7VSdtuCCVXH3eeCzINGVqrN18lra2TxFw+tiSDbM2b/BeoYktr2D
bHV5wtc3MhxQ42zobrYn3Y3v06pRB3/G4lxAB5Q/wwRdmgdlaS1QOjL/WTkC4Ygs
AuddytIJxsmBjyzTl09xYokJR2ZLoDtjl+QxIhE95NfsdtyV3UT28wIrX+cfT0oe
S7VGkjTaAQ9etw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 07:57:31 2025 by rpki-client