Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
File: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft (raw, json)
Hash identifier: wxacUdMEv903PIHwhSIRIPCumECt+WwqJvhhsDiy8rg=
Subject key identifier: 21:B5:7E:33:BB:D2:33:ED:74:CD:F3:13:9D:22:13:CE:C8:60:DA:99
Authority key identifier: 95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C
Certificate issuer: /CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c
Certificate serial: 0197C8A6FA9D871A1114C7E15400EE8071B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
Manifest number: 04B4
Signing time: Wed 02 Jul 2025 01:01:15 +0000
Manifest this update: Wed 02 Jul 2025 01:01:15 +0000
Manifest next update: Thu 03 Jul 2025 01:01:15 +0000
Files and hashes: 1: 3lPRro5fMsXxYuW-hKXrt5HlTo4.roa (hash: DuXt+VcN5cXAHGtGx0Qm+zdCVxsi9h5/RSKUTcxydqs=)
2: Eg4zth0ANX0mkRnAh6suVOeAzdk.roa (hash: zASvpGNGcNFQXQ8M9IjuKp7MbbcQqn5NoJLmUtGca/I=)
3: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl (hash: BVMpWUdMphBR68vsZA+t06pZ5BsIyUaHfgQnvx7V1LM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:a6:fa:9d:87:1a:11:14:c7:e1:54:00:ee:80:71:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c
Validity
Not Before: Jul 2 01:01:15 2025 GMT
Not After : Jul 3 01:01:15 2025 GMT
Subject: CN=21b57e33bbd233ed74cdf3139d2213cec860da99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:29:8b:02:36:43:ac:0e:e0:81:51:72:63:d6:
f9:43:07:35:9b:1f:5f:95:e8:ec:5b:e1:ec:3f:56:
78:f2:c4:35:46:2a:27:ca:eb:03:82:80:10:39:88:
bc:71:a3:54:be:dd:b8:90:e6:c5:1b:d2:08:f8:a4:
ca:74:74:26:fc:a6:67:45:bd:7e:c8:68:80:75:ed:
20:79:01:db:26:30:02:f5:26:13:52:b4:36:ba:c9:
c1:9e:14:01:c0:8b:8d:7a:90:d8:59:9e:73:3b:60:
24:e4:6f:43:17:04:35:54:22:c7:28:a0:d7:46:e7:
4f:cd:9f:66:c7:e4:b0:6c:f4:61:23:c2:ee:7f:0c:
09:78:3a:ad:b8:f5:30:73:2f:1f:4d:90:c4:14:db:
29:51:b6:11:00:00:40:a1:d4:f7:96:47:b9:38:98:
f1:a5:b7:47:83:ae:32:02:0b:01:46:68:e5:4f:b7:
41:73:28:87:1d:91:08:0e:11:ff:c4:05:ac:11:42:
46:7c:25:a3:e4:b7:be:c3:fe:8d:5a:c0:b5:3f:35:
b5:2f:3f:13:a6:19:3f:6b:64:10:fe:72:1f:50:d7:
cf:18:1b:bb:31:fd:ba:3f:2d:49:54:23:14:41:23:
33:bb:70:76:53:28:c3:cd:75:6f:90:a0:f0:76:41:
89:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B5:7E:33:BB:D2:33:ED:74:CD:F3:13:9D:22:13:CE:C8:60:DA:99
X509v3 Authority Key Identifier:
keyid:95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:5c:51:49:9a:13:8d:6b:32:72:11:f9:27:93:d3:11:78:88:
95:ea:40:de:03:79:c7:f2:2e:63:45:eb:19:1b:2d:cd:e8:6e:
a9:eb:d5:cb:f8:d2:3c:59:1c:f0:03:3d:19:db:9d:d4:8e:48:
75:28:ce:b6:9d:5b:c6:ce:86:46:1d:de:7c:7f:87:d5:0a:0f:
8d:e4:fa:3b:29:44:a0:dc:b7:a8:58:52:d6:48:cc:96:a8:5c:
42:15:16:d8:11:d7:df:d6:bc:58:88:70:b0:29:f1:e4:76:79:
b6:a3:cb:0f:ac:4f:ac:bd:aa:d6:d9:47:28:ec:e3:8a:42:2c:
c2:e3:a5:79:6f:ff:c7:99:db:eb:57:1b:15:0a:cb:7a:cc:89:
43:8a:74:6b:fe:b1:58:26:c2:8e:96:8f:20:53:e3:0f:30:0e:
2e:5c:1f:09:83:c8:bb:f6:68:06:94:5c:32:8f:5a:05:03:36:
91:98:e9:18:c4:2d:76:65:2c:bb:6f:b3:39:85:e3:60:05:91:
7f:b6:28:82:a9:cf:06:86:43:a4:be:e1:85:8c:ed:83:74:34:
1d:91:89:0d:a1:98:e3:4a:f9:2e:0c:5d:99:6c:ef:d5:ee:3e:
b2:6f:b9:66:f6:c4:66:b3:e6:34:ca:12:b3:f4:34:88:b2:1f:
df:98:0b:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfIpvqdhxoRFMfhVADugHG2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NjhjNjAwNWIyODQwYWI3YmY4YTNhZDcyYTE3NTFkMGRi
MjliOWMwHhcNMjUwNzAyMDEwMTE1WhcNMjUwNzAzMDEwMTE1WjAzMTEwLwYDVQQD
EygyMWI1N2UzM2JiZDIzM2VkNzRjZGYzMTM5ZDIyMTNjZWM4NjBkYTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSmLAjZDrA7ggVFyY9b5Qwc1mx9f
lejsW+HsP1Z48sQ1RionyusDgoAQOYi8caNUvt24kObFG9II+KTKdHQm/KZnRb1+
yGiAde0geQHbJjAC9SYTUrQ2usnBnhQBwIuNepDYWZ5zO2Ak5G9DFwQ1VCLHKKDX
RudPzZ9mx+SwbPRhI8LufwwJeDqtuPUwcy8fTZDEFNspUbYRAABAodT3lke5OJjx
pbdHg64yAgsBRmjlT7dBcyiHHZEIDhH/xAWsEUJGfCWj5Le+w/6NWsC1PzW1Lz8T
phk/a2QQ/nIfUNfPGBu7Mf26Py1JVCMUQSMzu3B2UyjDzXVvkKDwdkGJZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCG1fjO70jPtdM3zE50iE87IYNqZMB8GA1UdIwQY
MBaAFJVoxgBbKECre/ijrXKhdR0NspucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFdqR0FGc29RS3Q3LUtPdGNxRjFIUTJ5bTV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yYjk4MGEtMWViNi00ODA4LThhZmEt
M2E1ZTE4ZDAwZGRjLzEvbFdqR0FGc29RS3Q3LUtPdGNxRjFIUTJ5bTV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8yYjk4MGEtMWViNi00ODA4LThhZmEtM2E1ZTE4ZDAwZGRj
LzEvbFdqR0FGc29RS3Q3LUtPdGNxRjFIUTJ5bTV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAalxRSZoT
jWsychH5J5PTEXiIlepA3gN5x/IuY0XrGRstzehuqevVy/jSPFkc8AM9Gdud1I5I
dSjOtp1bxs6GRh3efH+H1QoPjeT6OylEoNy3qFhS1kjMlqhcQhUW2BHX39a8WIhw
sCnx5HZ5tqPLD6xPrL2q1tlHKOzjikIswuOleW//x5nb61cbFQrLesyJQ4p0a/6x
WCbCjpaPIFPjDzAOLlwfCYPIu/ZoBpRcMo9aBQM2kZjpGMQtdmUsu2+zOYXjYAWR
f7YogqnPBoZDpL7hhYztg3Q0HZGJDaGY40r5LgxdmWzv1e4+sm+5ZvbEZrPmNMoS
s/Q0iLIf35gL7Q==
-----END CERTIFICATE-----
Generated at Wed Jul 2 05:57:08 2025 by rpki-client