Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
File: lmAVV4yUjzG_dKHh__1_o-NGAgY.mft (raw, json)
Hash identifier: XS0E62Fd6eouXHVu1uOsCTNhn7Ma7FbRP7p8gLC9k3E=
Subject key identifier: ED:6A:D6:9F:48:73:F0:19:AC:8B:2F:EF:C0:D2:01:B5:16:11:AB:7A
Authority key identifier: 96:60:15:57:8C:94:8F:31:BF:74:A1:E1:FF:FD:7F:A3:E3:46:02:06
Certificate issuer: /CN=966015578c948f31bf74a1e1fffd7fa3e3460206
Certificate serial: 0197B820D107AFB86B76CDFD37F9F56A6428
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
Manifest number: 0C42
Signing time: Sat 28 Jun 2025 20:00:47 +0000
Manifest this update: Sat 28 Jun 2025 20:00:47 +0000
Manifest next update: Sun 29 Jun 2025 20:00:47 +0000
Files and hashes: 1: OE686EGR1IVKz-bx67_ZsH11lHQ.roa (hash: S5Z4RalwztbreTYazKn4Yw+ySxhuT6+PltCXQ/y03p0=)
2: lmAVV4yUjzG_dKHh__1_o-NGAgY.crl (hash: 8d4G2z0Mn2xnQve+LaZazgMsoCJ+QcT/DLsM+5oTafk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:d1:07:af:b8:6b:76:cd:fd:37:f9:f5:6a:64:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=966015578c948f31bf74a1e1fffd7fa3e3460206
Validity
Not Before: Jun 28 20:00:47 2025 GMT
Not After : Jun 29 20:00:47 2025 GMT
Subject: CN=ed6ad69f4873f019ac8b2fefc0d201b51611ab7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:14:0e:eb:ec:95:7a:fd:e9:a7:28:36:16:ca:
52:ce:90:b0:08:1d:50:a7:84:90:38:5b:cf:32:6a:
a2:ee:9c:d8:39:8c:b1:c9:49:15:5c:4a:68:08:c5:
5b:9e:e0:25:86:f1:8f:8d:30:69:43:a3:9b:12:21:
e0:c2:9e:f0:88:1f:de:0b:14:76:2b:a5:e6:d2:e7:
bc:65:a3:69:69:49:3e:33:b2:eb:54:3f:37:6b:1a:
87:ad:d5:79:35:df:40:51:9a:ab:cb:5e:3c:1b:9f:
b8:dc:22:db:77:81:c8:d6:f8:3f:c8:50:7f:31:f5:
1e:5f:1f:bf:35:e9:25:e5:37:38:5a:cb:b8:bb:85:
30:83:e9:2d:07:a0:7f:a7:64:32:4d:20:bf:a4:a7:
32:cc:b7:f8:63:65:59:40:3a:96:2c:41:6d:07:10:
1f:81:51:02:60:36:f5:b1:21:50:28:b4:f9:b3:b1:
a5:12:b0:d1:33:c6:b7:41:15:b9:a6:e6:05:3a:ff:
16:e3:c4:ee:0f:53:98:e4:99:22:9c:a4:03:bf:c5:
fa:97:88:e0:d7:d0:83:e3:97:41:f9:ad:01:c6:0a:
fd:88:af:ed:c8:e8:52:fd:2d:98:23:59:91:d7:b5:
5d:d9:da:ae:f9:b7:bd:5d:8a:8c:2e:ec:7e:55:21:
e2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:6A:D6:9F:48:73:F0:19:AC:8B:2F:EF:C0:D2:01:B5:16:11:AB:7A
X509v3 Authority Key Identifier:
keyid:96:60:15:57:8C:94:8F:31:BF:74:A1:E1:FF:FD:7F:A3:E3:46:02:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:16:7c:65:03:a8:dd:20:01:08:45:a4:b2:1f:2c:3f:78:d1:
22:ff:28:17:3e:15:d5:19:76:a2:7c:81:95:60:1f:06:73:39:
c3:87:b2:a3:34:62:3c:28:ed:70:81:06:8e:74:92:c4:4d:bb:
23:bf:ae:05:84:73:34:21:2d:4d:27:55:56:b3:fd:2e:3d:a0:
7d:5c:e8:07:8f:be:72:44:2e:1d:53:eb:8e:2c:01:de:4f:cc:
bd:9b:11:89:b6:53:74:60:ae:8b:6e:97:84:f2:27:ab:c4:83:
4f:60:51:37:86:0f:55:42:2f:07:61:28:e1:2d:60:81:de:db:
0b:6a:c8:33:9b:a2:7b:03:8f:1d:9a:12:da:f0:f0:1a:49:be:
6d:ab:fc:7a:b6:44:d1:d3:ab:db:62:d7:b6:bc:56:94:d7:6b:
35:de:d8:aa:fc:fe:47:65:bf:09:3e:80:8b:12:74:41:3e:08:
d2:92:86:01:6f:0a:df:8d:f0:9d:6b:7c:2e:9b:cb:14:e5:76:
9f:4a:73:ee:ee:93:cd:de:ee:49:57:9c:35:b8:4f:b7:00:6f:
84:eb:7c:c8:e8:3b:54:da:cd:42:fb:c2:ee:62:63:24:86:7f:
e0:dd:50:fd:e6:79:50:2c:8b:09:07:79:4a:c5:46:67:a0:89:
a4:86:ee:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4INEHr7hrds39N/n1amQoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NjAxNTU3OGM5NDhmMzFiZjc0YTFlMWZmZmQ3ZmEzZTM0
NjAyMDYwHhcNMjUwNjI4MjAwMDQ3WhcNMjUwNjI5MjAwMDQ3WjAzMTEwLwYDVQQD
EyhlZDZhZDY5ZjQ4NzNmMDE5YWM4YjJmZWZjMGQyMDFiNTE2MTFhYjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBQO6+yVev3ppyg2FspSzpCwCB1Q
p4SQOFvPMmqi7pzYOYyxyUkVXEpoCMVbnuAlhvGPjTBpQ6ObEiHgwp7wiB/eCxR2
K6Xm0ue8ZaNpaUk+M7LrVD83axqHrdV5Nd9AUZqry148G5+43CLbd4HI1vg/yFB/
MfUeXx+/Nekl5Tc4Wsu4u4Uwg+ktB6B/p2QyTSC/pKcyzLf4Y2VZQDqWLEFtBxAf
gVECYDb1sSFQKLT5s7GlErDRM8a3QRW5puYFOv8W48TuD1OY5JkinKQDv8X6l4jg
19CD45dB+a0Bxgr9iK/tyOhS/S2YI1mR17Vd2dqu+be9XYqMLux+VSHieQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO1q1p9Ic/AZrIsv78DSAbUWEat6MB8GA1UdIwQY
MBaAFJZgFVeMlI8xv3Sh4f/9f6PjRgIGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbG1BVlY0eVVqekdfZEtIaF9fMV9vLU5HQWdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9iNTAxMTAtMDJiMC00MjM1LTk4NGYt
MmQ4MGNiMjU1NzlhLzEvbG1BVlY0eVVqekdfZEtIaF9fMV9vLU5HQWdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9iNTAxMTAtMDJiMC00MjM1LTk4NGYtMmQ4MGNiMjU1Nzlh
LzEvbG1BVlY0eVVqekdfZEtIaF9fMV9vLU5HQWdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeRZ8ZQOo
3SABCEWksh8sP3jRIv8oFz4V1Rl2onyBlWAfBnM5w4eyozRiPCjtcIEGjnSSxE27
I7+uBYRzNCEtTSdVVrP9Lj2gfVzoB4++ckQuHVPrjiwB3k/MvZsRibZTdGCui26X
hPInq8SDT2BRN4YPVUIvB2Eo4S1ggd7bC2rIM5uiewOPHZoS2vDwGkm+bav8erZE
0dOr22LXtrxWlNdrNd7Yqvz+R2W/CT6AixJ0QT4I0pKGAW8K343wnWt8LpvLFOV2
n0pz7u6Tzd7uSVecNbhPtwBvhOt8yOg7VNrNQvvC7mJjJIZ/4N1Q/eZ5UCyLCQd5
SsVGZ6CJpIbu9g==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:34 2025 by rpki-client