Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
File: UFbHUIQP5cAQOn9RAix87qj-lps.mft (raw, json)
Hash identifier: aNqOC5xBuZaHM5Q2A8USDV+u3MJF4UDgzZ55fmj4tlA=
Subject key identifier: 16:49:55:4F:6A:AF:4F:B1:F0:73:48:AC:45:0A:68:0B:1D:C2:7C:3C
Authority key identifier: 50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B
Certificate issuer: /CN=5056c750840fe5c0103a7f51022c7ceea8fe969b
Certificate serial: 0197B88FB0D5A6605780B5F9495B92D75320
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 22:01:54 +0000
Manifest this update: Sat 28 Jun 2025 22:01:54 +0000
Manifest next update: Sun 29 Jun 2025 22:01:54 +0000
Files and hashes: 1: Jv9Nh0xOPBNwvCj4qQsYimYMUWo.roa (hash: 8AwiF+JbJZD/dD5pedRyRTuhxKXhlfELIIZ2EaE0IKM=)
2: UFbHUIQP5cAQOn9RAix87qj-lps.crl (hash: IXHXxfHuP/6dZbNSCZWrGsCjgwuVQErp9qHfn/aEDMg=)
3: yXOU2r32sucGxB9-Z9ZhjZOhedM.roa (hash: vAVSTyHryWSEFu+zHv/t5/KHUJutcYo2/piybcJJ41A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:b0:d5:a6:60:57:80:b5:f9:49:5b:92:d7:53:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5056c750840fe5c0103a7f51022c7ceea8fe969b
Validity
Not Before: Jun 28 22:01:54 2025 GMT
Not After : Jun 29 22:01:54 2025 GMT
Subject: CN=1649554f6aaf4fb1f07348ac450a680b1dc27c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:09:b5:5f:f6:d0:3a:18:24:12:6b:b4:4f:9c:
0f:29:8e:cf:83:11:5c:f3:14:2a:de:b4:37:d9:8c:
69:08:1e:f3:2b:35:e1:c2:5f:cc:aa:b3:1d:83:53:
f7:92:c4:d1:7a:71:dd:b4:82:48:48:e2:ec:cd:67:
f9:03:af:b2:b9:1e:1b:dd:5d:87:81:c8:1a:e2:45:
fd:be:71:7a:4e:1c:be:b0:85:16:41:a3:7e:cf:0d:
b4:e1:eb:4d:6a:43:d6:7a:53:83:7a:fb:a2:e0:76:
01:ba:dc:70:d9:ae:2d:11:49:f2:6c:46:d5:a6:29:
85:4b:0c:7f:b3:2a:61:9d:8b:56:f9:6f:58:75:91:
ea:f6:20:4c:0b:f1:91:20:24:88:b9:c5:71:f1:59:
a3:fe:2b:c0:b4:d0:ae:60:bb:50:25:d1:e6:3b:e9:
6f:eb:3d:18:1c:7f:7b:df:0d:db:78:c6:e6:66:65:
02:64:f4:37:03:6c:bc:79:79:e5:27:cf:26:44:13:
6f:a6:fb:8f:d6:3f:55:ec:02:44:16:19:53:b2:73:
9c:dc:03:2b:22:b9:11:fd:95:1d:61:ed:70:1f:fa:
c8:17:57:85:a2:17:bf:ad:21:0c:f0:01:34:3e:b5:
ca:50:ae:41:72:96:94:af:26:99:36:36:c7:c2:9a:
4b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:49:55:4F:6A:AF:4F:B1:F0:73:48:AC:45:0A:68:0B:1D:C2:7C:3C
X509v3 Authority Key Identifier:
keyid:50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:14:f5:29:8d:74:07:bf:af:2d:87:f0:2c:39:7c:32:48:93:
d3:6c:8d:83:f0:ec:e4:dd:f6:31:82:09:96:39:5c:fb:8b:25:
73:73:00:0e:b2:5a:0a:66:b8:27:1c:98:62:29:fe:a2:57:d7:
5e:49:fa:96:01:74:77:f8:16:27:db:0f:1d:cc:4d:44:84:79:
bd:f6:0b:59:16:45:f5:62:09:69:6e:ca:e3:b8:80:5f:a7:32:
68:de:1b:ee:46:2a:9d:f6:46:1c:3f:9b:a1:a7:51:7c:75:e7:
76:76:3d:c1:51:12:c2:a5:3b:82:86:9d:77:7d:36:91:fd:07:
9d:7d:17:74:ea:bd:88:d6:34:3a:40:6a:ab:ec:eb:0f:6c:9f:
75:df:4b:38:96:8c:2c:4c:87:17:db:db:28:0f:f5:e8:0f:13:
c7:77:bc:d7:af:9e:7c:b9:f7:50:67:a6:b1:23:c4:d2:78:a3:
3d:93:71:3c:0d:25:7d:b3:c5:9b:55:f8:19:3c:75:3d:ae:75:
6e:3e:3b:ab:30:a8:e7:19:d7:cd:97:32:91:7b:fb:61:df:b9:
b8:3f:0e:8c:e6:79:cb:ef:ac:09:25:a9:f1:21:f9:cd:bf:74:
4f:6d:4d:de:bd:c6:75:1e:a1:11:a2:83:05:56:7f:19:8f:32:
aa:bb:76:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4j7DVpmBXgLX5SVuS11MgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNTZjNzUwODQwZmU1YzAxMDNhN2Y1MTAyMmM3Y2VlYThm
ZTk2OWIwHhcNMjUwNjI4MjIwMTU0WhcNMjUwNjI5MjIwMTU0WjAzMTEwLwYDVQQD
EygxNjQ5NTU0ZjZhYWY0ZmIxZjA3MzQ4YWM0NTBhNjgwYjFkYzI3YzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgm1X/bQOhgkEmu0T5wPKY7PgxFc
8xQq3rQ32YxpCB7zKzXhwl/MqrMdg1P3ksTRenHdtIJISOLszWf5A6+yuR4b3V2H
gcga4kX9vnF6Thy+sIUWQaN+zw204etNakPWelODevui4HYButxw2a4tEUnybEbV
pimFSwx/syphnYtW+W9YdZHq9iBMC/GRICSIucVx8Vmj/ivAtNCuYLtQJdHmO+lv
6z0YHH973w3beMbmZmUCZPQ3A2y8eXnlJ88mRBNvpvuP1j9V7AJEFhlTsnOc3AMr
IrkR/ZUdYe1wH/rIF1eFohe/rSEM8AE0PrXKUK5BcpaUryaZNjbHwppL6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBZJVU9qr0+x8HNIrEUKaAsdwnw8MB8GA1UdIwQY
MBaAFFBWx1CED+XAEDp/UQIsfO6o/pabMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZiSFVJUVA1Y0FRT245UkFpeDg3cWotbHBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8yNTI5NjgtYjhiYS00ZTE5LTg0ZDct
MzIyODI4NmRhNjAxLzEvVUZiSFVJUVA1Y0FRT245UkFpeDg3cWotbHBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi8yNTI5NjgtYjhiYS00ZTE5LTg0ZDctMzIyODI4NmRhNjAx
LzEvVUZiSFVJUVA1Y0FRT245UkFpeDg3cWotbHBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvRT1KY10
B7+vLYfwLDl8MkiT02yNg/Ds5N32MYIJljlc+4slc3MADrJaCma4JxyYYin+olfX
Xkn6lgF0d/gWJ9sPHcxNRIR5vfYLWRZF9WIJaW7K47iAX6cyaN4b7kYqnfZGHD+b
oadRfHXndnY9wVESwqU7goadd302kf0HnX0XdOq9iNY0OkBqq+zrD2yfdd9LOJaM
LEyHF9vbKA/16A8Tx3e816+efLn3UGemsSPE0nijPZNxPA0lfbPFm1X4GTx1Pa51
bj47qzCo5xnXzZcykXv7Yd+5uD8OjOZ5y++sCSWp8SH5zb90T21N3r3GdR6hEaKD
BVZ/GY8yqrt2AA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:31:13 2025 by rpki-client