
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft
File: l59cqMM_E0w8FX1IucKuTpG2ML8.mft (raw, json)
Hash identifier: 8PljS6Ff9SgEO6ED1I3tDm9PFJ5oZijebClOcWIuQrE=
Subject key identifier: A2:84:1C:DA:67:39:89:EE:3D:A6:C0:26:E5:EE:E7:A6:4C:EF:E8:94
Authority key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
Certificate issuer: /CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Certificate serial: 0196BE931CF0659B7BD90AA17AAA8DD00C04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft
Manifest number: 1328
Signing time: Sun 11 May 2025 09:00:34 +0000
Manifest this update: Sun 11 May 2025 09:00:34 +0000
Manifest next update: Mon 12 May 2025 09:00:34 +0000
Files and hashes: 1: 9fuYulUVxtgS2OdAoDqw73sL458.roa (hash: 4sliq0762rmQYCBsPA1iMqCrKBq5MvjcOahYDnYc2F8=)
2: GCT36J3n1OxX-WHPNyMOxT30V1I.roa (hash: a5Pszieg/F5+mp8skMSq3X98683NVjkxEMhhyfalK24=)
3: HHQySsc2sVncpl_R112Rp7UBme8.roa (hash: o5Y2R7hIF0WuEuOP3GMyoZ2q0qHpF5bawNz2lBwugJ8=)
4: M3nuXRHV-HSVCrPsQchhdr5_x7Q.roa (hash: yixO/lM/jrXq6xFtI0OoJ7LnqzWDwB/3Pvi4UUX0Sqg=)
5: SMFHgAd465jvbKDW6YZwTehlmXs.roa (hash: mo74I69JinqweIsRPNZbaqL0YDRPxBEE9SrCUOt17NI=)
6: ZBchq6XY20TTbsyHdd1bA4NXQDI.roa (hash: cXsbXY9mXAQImf4zNq8oJbYuL59z2XDzDCo4Q8qeQoc=)
7: l59cqMM_E0w8FX1IucKuTpG2ML8.crl (hash: N1SN4GIPvM0gV0RZnOG3qsy0MmqvimKpkuH+G/WdARs=)
8: p906kmkgY0qUYyVJw53cck20ZMc.roa (hash: RM2au0VYfH5622DYXzfGpU015sseQv18gBHvKAhN9Co=)
9: z-gzGRp6g46RfhDlKhHGqEoG68k.roa (hash: zEuoDm3Q5DkSIXVAGKauWFsGpEgi0zHMp7amnQaC+g0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft
rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:93:1c:f0:65:9b:7b:d9:0a:a1:7a:aa:8d:d0:0c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Validity
Not Before: May 11 09:00:34 2025 GMT
Not After : May 12 09:00:34 2025 GMT
Subject: CN=a2841cda673989ee3da6c026e5eee7a64cefe894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7a:58:c6:11:0d:b1:d0:1a:38:4f:99:89:d4:
3e:ce:23:5b:74:72:12:d2:0f:37:cc:b2:9f:db:12:
ac:03:fc:ce:23:1d:85:cc:4b:18:bb:3d:2c:11:d7:
7f:af:e8:cc:8f:ba:cc:31:b0:9a:6c:26:30:b3:cf:
0d:e7:5a:c0:4c:8f:f4:c4:6e:17:c6:2e:4e:ac:9f:
72:6a:cd:eb:1d:fd:34:51:94:57:97:82:22:a1:ee:
2d:bb:cd:ea:f7:ef:fa:bc:70:a5:97:89:d2:eb:b3:
9a:31:5c:d8:eb:c7:f3:2a:ee:b2:f7:bd:19:d2:f3:
73:11:20:4e:29:cc:b3:05:8b:f4:71:93:e9:7b:d9:
dd:89:ad:99:90:54:c4:1b:c9:a0:73:fe:6c:d0:8e:
a3:00:91:58:9e:29:c3:c6:ae:32:31:c8:6f:d6:dd:
6e:53:c3:33:23:04:59:a8:af:65:ca:c2:1b:60:c6:
16:18:d5:c2:c9:3a:4f:be:1f:44:46:6f:ef:6f:71:
ca:11:46:fd:65:e4:de:e8:53:ad:4d:64:b4:f8:99:
d1:32:84:ca:bb:60:a9:ed:6b:59:ef:f2:44:93:81:
45:cd:c6:9a:8c:2a:42:b8:47:fa:b1:3b:56:aa:37:
0b:b3:c6:f7:3f:20:10:9b:66:02:c7:aa:62:bb:9e:
77:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:84:1C:DA:67:39:89:EE:3D:A6:C0:26:E5:EE:E7:A6:4C:EF:E8:94
X509v3 Authority Key Identifier:
keyid:97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:f6:d4:7c:22:6c:00:dc:e0:8b:60:9b:f9:76:62:41:c4:92:
fb:4f:74:af:b0:82:45:ec:55:df:67:04:d1:8a:90:bc:1a:72:
42:0e:86:36:29:21:a8:1f:02:a2:23:db:80:85:72:7e:f4:37:
51:31:08:69:bf:41:97:e0:98:8e:21:af:00:8f:8e:6b:3b:a9:
e5:f4:b0:eb:fd:39:6b:16:36:b2:ae:1a:2a:1b:51:98:4f:d0:
45:16:d2:38:2a:64:cc:52:f8:15:e2:69:d1:da:ee:de:be:34:
a6:07:05:f4:49:60:91:53:42:59:ff:c8:13:a6:1d:0e:21:4d:
b6:33:1f:a3:53:49:fd:0c:c3:11:fb:52:00:f6:28:d7:c9:b5:
88:20:30:6b:21:fd:7c:3c:57:e2:0f:40:ee:d8:fd:fd:f0:88:
be:cd:e0:32:07:2f:61:c3:d7:f2:4d:e1:2e:96:48:6f:65:dc:
b5:c0:d2:1f:04:84:5c:80:64:3d:3e:94:78:0c:93:00:51:bb:
3e:99:b6:06:79:c3:36:07:42:4a:64:aa:f7:18:3b:9d:46:40:
a6:0c:ee:f5:2c:76:33:42:5f:66:e6:2c:d2:53:21:78:27:6b:
8d:f1:00:75:b5:4a:77:6a:60:bf:ad:b7:6a:9a:b4:bd:df:08:
19:5c:ad:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa+kxzwZZt72QqheqqN0AwEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3OWY1Y2E4YzMzZjEzNGMzYzE1N2Q0OGI5YzJhZTRlOTFi
NjMwYmYwHhcNMjUwNTExMDkwMDM0WhcNMjUwNTEyMDkwMDM0WjAzMTEwLwYDVQQD
EyhhMjg0MWNkYTY3Mzk4OWVlM2RhNmMwMjZlNWVlZTdhNjRjZWZlODk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnpYxhENsdAaOE+ZidQ+ziNbdHIS
0g83zLKf2xKsA/zOIx2FzEsYuz0sEdd/r+jMj7rMMbCabCYws88N51rATI/0xG4X
xi5OrJ9yas3rHf00UZRXl4Iioe4tu83q9+/6vHCll4nS67OaMVzY68fzKu6y970Z
0vNzESBOKcyzBYv0cZPpe9ndia2ZkFTEG8mgc/5s0I6jAJFYninDxq4yMchv1t1u
U8MzIwRZqK9lysIbYMYWGNXCyTpPvh9ERm/vb3HKEUb9ZeTe6FOtTWS0+JnRMoTK
u2Cp7WtZ7/JEk4FFzcaajCpCuEf6sTtWqjcLs8b3PyAQm2YCx6piu5531wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKKEHNpnOYnuPabAJuXu56ZM7+iUMB8GA1UdIwQY
MBaAFJefXKjDPxNMPBV9SLnCrk6RtjC/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgt
MTQ3MGFjMzY0ZGQyLzEvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgtMTQ3MGFjMzY0ZGQy
LzEvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr/bUfCJs
ANzgi2Cb+XZiQcSS+090r7CCRexV32cE0YqQvBpyQg6GNikhqB8CoiPbgIVyfvQ3
UTEIab9Bl+CYjiGvAI+Oazup5fSw6/05axY2sq4aKhtRmE/QRRbSOCpkzFL4FeJp
0dru3r40pgcF9ElgkVNCWf/IE6YdDiFNtjMfo1NJ/QzDEftSAPYo18m1iCAwayH9
fDxX4g9A7tj9/fCIvs3gMgcvYcPX8k3hLpZIb2XctcDSHwSEXIBkPT6UeAyTAFG7
Ppm2BnnDNgdCSmSq9xg7nUZApgzu9Sx2M0JfZuYs0lMheCdrjfEAdbVKd2pgv623
apq0vd8IGVytcg==
-----END CERTIFICATE-----
Generated at Sun May 11 17:05:52 2025 by rpki-client