Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
File: lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft (raw, json)
Hash identifier: fh5/NwUE6+Q1Z5ouLjT/ecA+TrdELXGs/++mABqF8RQ=
Subject key identifier: B1:58:16:AB:66:BE:89:8D:7D:D4:CB:93:61:2E:EA:FD:2F:49:4D:74
Authority key identifier: 95:2D:DC:B3:50:78:26:7F:4F:37:52:E5:B4:CC:C6:5A:66:3A:63:E7
Certificate issuer: /CN=952ddcb35078267f4f3752e5b4ccc65a663a63e7
Certificate serial: 0197B6A0E047DE252072CE3E6C723AD52712
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
Manifest number: 0296
Signing time: Sat 28 Jun 2025 13:01:25 +0000
Manifest this update: Sat 28 Jun 2025 13:01:25 +0000
Manifest next update: Sun 29 Jun 2025 13:01:25 +0000
Files and hashes: 1: fxlFgI3EysiECIF3mL-wg3P66gA.roa (hash: WG+Wf/XaXu5fK/R90C0HW02K/9LIUpQXBf5GmZqFRDg=)
2: lS3cs1B4Jn9PN1LltMzGWmY6Y-c.crl (hash: yJefFk43TAgohe0eIDszYBoq1asPR8z+dc3pLumMoaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:e0:47:de:25:20:72:ce:3e:6c:72:3a:d5:27:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952ddcb35078267f4f3752e5b4ccc65a663a63e7
Validity
Not Before: Jun 28 13:01:25 2025 GMT
Not After : Jun 29 13:01:25 2025 GMT
Subject: CN=b15816ab66be898d7dd4cb93612eeafd2f494d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:bb:ef:94:c5:0a:b6:d7:20:fa:9e:4a:d3:1b:
14:b3:99:44:2a:fb:19:57:0e:c5:f6:63:3c:d5:16:
89:60:ea:11:24:cc:fd:a7:ee:a9:0d:a5:0c:cd:10:
70:97:c9:70:01:dd:f0:33:68:4d:ca:5f:e7:39:24:
13:d0:a3:27:e9:cf:9b:30:1e:8b:83:3b:a5:ca:df:
7f:c2:9f:db:9a:d8:02:d1:52:e9:65:8b:99:3f:07:
ad:23:40:65:a4:3b:96:cd:8d:bd:0e:2a:f8:bc:19:
5e:40:50:54:c9:e4:ae:50:81:39:b8:9e:28:78:ce:
60:7b:6e:be:fe:31:80:b4:a0:77:e0:77:8e:8a:18:
02:3d:e3:21:0b:f5:c8:8a:88:af:d4:a8:7c:4e:a7:
76:01:c1:2a:a6:a0:6e:34:a2:26:a3:9c:71:65:4a:
bb:96:10:ee:3a:5f:d6:d7:6b:44:23:f2:f3:9a:59:
7c:86:0d:ed:3d:29:e7:f7:94:c2:42:b3:c5:bf:03:
63:47:84:d8:23:de:d0:4a:e3:7f:ca:24:df:86:ff:
74:8d:b5:73:4a:f1:d5:5f:0c:b7:a3:9d:d7:25:73:
a4:b1:47:b6:c3:5b:8c:50:f3:0d:4e:08:89:f3:3d:
b5:27:e2:cf:7a:34:93:4a:1e:82:36:c7:f6:ea:0d:
0d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:58:16:AB:66:BE:89:8D:7D:D4:CB:93:61:2E:EA:FD:2F:49:4D:74
X509v3 Authority Key Identifier:
keyid:95:2D:DC:B3:50:78:26:7F:4F:37:52:E5:B4:CC:C6:5A:66:3A:63:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:67:8d:2e:de:fb:d8:95:42:96:21:19:ab:54:ce:c8:9f:5f:
df:07:25:d9:6f:77:16:9e:81:97:34:b3:3e:66:53:6f:01:f3:
fb:68:ed:c2:79:4e:eb:80:f5:3b:4f:2a:71:b7:bd:4f:83:3a:
c5:9f:96:ea:2d:f9:05:69:36:75:ab:2d:c0:65:86:57:4f:40:
4e:2a:c7:e4:16:b2:e2:e5:43:d8:78:a0:63:18:3d:44:ad:91:
d0:0a:54:a1:c5:e1:e7:e2:a6:b9:63:85:33:fa:64:99:de:f5:
59:4c:3c:9f:48:d5:36:44:aa:32:98:fa:d0:5b:01:79:87:99:
9f:9e:80:e9:21:56:67:22:24:67:17:4d:6a:f2:1b:f4:37:f1:
bf:49:9d:8b:5a:e5:f6:bf:bf:11:ad:c5:dc:4e:bf:24:8c:62:
c6:2b:bd:ab:3d:4f:6f:6a:2f:2c:33:41:9b:4e:c4:b1:d2:1c:
a1:d1:de:2a:51:a0:aa:88:8d:ea:e5:43:57:75:da:6f:8a:8b:
43:6a:4a:92:78:a3:69:20:9e:13:4d:37:a9:89:99:e2:4a:50:
b9:6d:b2:f3:e1:38:7f:45:89:f4:06:98:bb:fa:3e:c2:f5:6c:
9b:2a:52:cf:fa:4e:0b:63:18:11:cf:72:8e:61:35:79:60:a8:
9c:94:8e:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oOBH3iUgcs4+bHI61ScSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MmRkY2IzNTA3ODI2N2Y0ZjM3NTJlNWI0Y2NjNjVhNjYz
YTYzZTcwHhcNMjUwNjI4MTMwMTI1WhcNMjUwNjI5MTMwMTI1WjAzMTEwLwYDVQQD
EyhiMTU4MTZhYjY2YmU4OThkN2RkNGNiOTM2MTJlZWFmZDJmNDk0ZDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7vvlMUKttcg+p5K0xsUs5lEKvsZ
Vw7F9mM81RaJYOoRJMz9p+6pDaUMzRBwl8lwAd3wM2hNyl/nOSQT0KMn6c+bMB6L
gzulyt9/wp/bmtgC0VLpZYuZPwetI0BlpDuWzY29Dir4vBleQFBUyeSuUIE5uJ4o
eM5ge26+/jGAtKB34HeOihgCPeMhC/XIioiv1Kh8Tqd2AcEqpqBuNKImo5xxZUq7
lhDuOl/W12tEI/Lzmll8hg3tPSnn95TCQrPFvwNjR4TYI97QSuN/yiTfhv90jbVz
SvHVXwy3o53XJXOksUe2w1uMUPMNTgiJ8z21J+LPejSTSh6CNsf26g0NFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLFYFqtmvomNfdTLk2Eu6v0vSU10MB8GA1UdIwQY
MBaAFJUt3LNQeCZ/TzdS5bTMxlpmOmPnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFMzY3MxQjRKbjlQTjFMbHRNekdXbVk2WS1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9jNTliNjEtOTExNS00MTVmLTgxZjIt
YTRjMWJiY2I4Yzk3LzEvbFMzY3MxQjRKbjlQTjFMbHRNekdXbVk2WS1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9jNTliNjEtOTExNS00MTVmLTgxZjItYTRjMWJiY2I4Yzk3
LzEvbFMzY3MxQjRKbjlQTjFMbHRNekdXbVk2WS1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcGeNLt77
2JVCliEZq1TOyJ9f3wcl2W93Fp6BlzSzPmZTbwHz+2jtwnlO64D1O08qcbe9T4M6
xZ+W6i35BWk2dastwGWGV09ATirH5Bay4uVD2HigYxg9RK2R0ApUocXh5+KmuWOF
M/pkmd71WUw8n0jVNkSqMpj60FsBeYeZn56A6SFWZyIkZxdNavIb9Dfxv0mdi1rl
9r+/Ea3F3E6/JIxixiu9qz1Pb2ovLDNBm07EsdIcodHeKlGgqoiN6uVDV3Xab4qL
Q2pKknijaSCeE003qYmZ4kpQuW2y8+E4f0WJ9AaYu/o+wvVsmypSz/pOC2MYEc9y
jmE1eWConJSOHw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:22:51 2025 by rpki-client