Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
File: lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft (raw, json)
Hash identifier: orxa00QJI4l4CquFqPZBAMPaOT+25B38uxGZfc41eSI=
Subject key identifier: 86:D7:71:6F:69:23:10:1E:F7:16:C9:BC:D9:82:46:78:EC:D5:8A:54
Authority key identifier: 95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2
Certificate issuer: /CN=95461fbee1c06e3eafac0f2f95253ca8603accf2
Certificate serial: 0197B8FD8FF93D8008F65EBF727F09AA94BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
Manifest number: 072C
Signing time: Sun 29 Jun 2025 00:01:54 +0000
Manifest this update: Sun 29 Jun 2025 00:01:54 +0000
Manifest next update: Mon 30 Jun 2025 00:01:54 +0000
Files and hashes: 1: _HX0nKUguEjDK_UXSZxDRu7j10o.roa (hash: nDwDdh/G4BS8EpikB8I09Ea4NwJkgiqchJXpY1cDAL4=)
2: lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl (hash: YjmDxSXIt5316ngTyz8NKiwu9KgVRBRwm++LhACEefc=)
3: zuaQcYGr_SOorxrrm1R8vFKkh3o.roa (hash: +Frydy4vUNiwXuYX5nBMIXixa4+W5EMNDEkn6Iy0AhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:8f:f9:3d:80:08:f6:5e:bf:72:7f:09:aa:94:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95461fbee1c06e3eafac0f2f95253ca8603accf2
Validity
Not Before: Jun 29 00:01:54 2025 GMT
Not After : Jun 30 00:01:54 2025 GMT
Subject: CN=86d7716f6923101ef716c9bcd9824678ecd58a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:76:07:5c:71:e8:c8:b2:f0:4a:74:b7:58:bf:
3e:d1:a1:ec:88:d4:23:24:90:02:fb:82:a5:29:56:
1c:eb:88:2c:c0:7a:dc:57:71:d0:63:e5:69:de:91:
8e:f9:66:ed:22:89:1f:0a:d3:98:73:10:57:b9:71:
f7:9e:62:c7:41:30:dc:5b:86:1c:a7:4a:10:7c:51:
89:fa:4a:2c:42:2f:6e:e2:4f:9d:47:85:ef:3a:a7:
0b:e6:92:ae:74:e3:7d:77:12:1c:bb:c7:51:29:97:
fe:f9:88:af:e0:b6:8b:f8:2a:d2:61:0c:d5:ec:8d:
cf:33:1a:a9:ea:9a:4c:43:6d:af:a3:60:a9:2f:41:
41:1f:59:2f:32:82:ab:05:28:2a:75:92:0e:85:b4:
6d:ca:5b:cb:b0:20:7c:23:fc:7f:61:4a:36:a3:eb:
db:43:28:00:87:44:3c:b1:38:7d:6d:93:0d:61:9c:
4a:05:f3:fc:a8:24:c7:11:8d:a4:38:bf:44:8f:3d:
d8:d2:cd:a5:5d:b5:1b:b4:67:dc:fd:7d:20:ba:68:
7e:f8:3b:eb:de:a0:00:5a:6b:6a:7b:ef:77:fc:55:
f9:46:ad:70:a3:bf:8c:90:ee:5f:06:32:49:69:a2:
30:f2:c4:5b:a5:d9:33:2c:a4:dd:eb:b6:cd:a7:4b:
1f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D7:71:6F:69:23:10:1E:F7:16:C9:BC:D9:82:46:78:EC:D5:8A:54
X509v3 Authority Key Identifier:
keyid:95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:b0:3c:28:52:b9:65:d2:35:3b:63:db:be:63:02:e6:b9:67:
a2:3f:be:22:d1:0a:83:66:ca:07:b9:27:30:ad:38:dd:3e:7d:
a5:aa:0f:55:1f:ec:85:b4:f1:2b:b3:9a:77:c1:e6:b5:47:68:
ca:98:23:c4:0a:0f:62:07:64:4d:90:09:7a:c1:f7:f6:02:b1:
d0:4a:fe:69:01:8a:6e:c5:97:d6:26:6d:4e:08:90:9d:51:93:
48:20:c8:88:fc:b1:03:98:85:b1:f6:d9:f2:05:14:5f:2c:5b:
8e:63:c9:cc:d3:53:70:b2:3a:e2:c6:61:10:2b:79:87:92:85:
39:39:8e:da:86:99:a8:3f:ab:a7:49:fe:40:cd:fc:96:4c:83:
1d:e2:98:38:6c:36:e5:1e:68:7d:cb:56:41:5a:46:ac:47:a9:
66:66:00:b9:f2:ab:07:c7:a5:64:3d:a9:71:5b:4c:94:2d:4e:
2f:59:a0:de:ab:c3:a3:a8:9a:bc:8d:74:51:02:f3:6f:1f:12:
c2:ba:04:6d:01:1e:9d:b9:cf:ff:1e:e5:24:fe:54:d2:ae:42:
f4:a0:f4:9c:0c:a5:3e:86:d3:2f:77:27:43:7a:55:02:6c:ac:
14:cd:7b:b1:d8:22:74:37:f3:95:de:7b:96:1f:15:c1:17:42:
c2:a9:38:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4/Y/5PYAI9l6/cn8JqpS7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NDYxZmJlZTFjMDZlM2VhZmFjMGYyZjk1MjUzY2E4NjAz
YWNjZjIwHhcNMjUwNjI5MDAwMTU0WhcNMjUwNjMwMDAwMTU0WjAzMTEwLwYDVQQD
Eyg4NmQ3NzE2ZjY5MjMxMDFlZjcxNmM5YmNkOTgyNDY3OGVjZDU4YTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnYHXHHoyLLwSnS3WL8+0aHsiNQj
JJAC+4KlKVYc64gswHrcV3HQY+Vp3pGO+WbtIokfCtOYcxBXuXH3nmLHQTDcW4Yc
p0oQfFGJ+kosQi9u4k+dR4XvOqcL5pKudON9dxIcu8dRKZf++Yiv4LaL+CrSYQzV
7I3PMxqp6ppMQ22vo2CpL0FBH1kvMoKrBSgqdZIOhbRtylvLsCB8I/x/YUo2o+vb
QygAh0Q8sTh9bZMNYZxKBfP8qCTHEY2kOL9Ejz3Y0s2lXbUbtGfc/X0gumh++Dvr
3qAAWmtqe+93/FX5Rq1wo7+MkO5fBjJJaaIw8sRbpdkzLKTd67bNp0sftQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbXcW9pIxAe9xbJvNmCRnjs1YpUMB8GA1UdIwQY
MBaAFJVGH77hwG4+r6wPL5UlPKhgOszyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFVZZnZ1SEFiajZ2ckE4dmxTVThxR0E2elBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9lNWNlOGYtNWVhMC00NzlmLTkzZTkt
ODlkNWM2MGY1MDFmLzEvbFVZZnZ1SEFiajZ2ckE4dmxTVThxR0E2elBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9lNWNlOGYtNWVhMC00NzlmLTkzZTktODlkNWM2MGY1MDFm
LzEvbFVZZnZ1SEFiajZ2ckE4dmxTVThxR0E2elBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABLA8KFK5
ZdI1O2PbvmMC5rlnoj++ItEKg2bKB7knMK043T59paoPVR/shbTxK7Oad8HmtUdo
ypgjxAoPYgdkTZAJesH39gKx0Er+aQGKbsWX1iZtTgiQnVGTSCDIiPyxA5iFsfbZ
8gUUXyxbjmPJzNNTcLI64sZhECt5h5KFOTmO2oaZqD+rp0n+QM38lkyDHeKYOGw2
5R5ofctWQVpGrEepZmYAufKrB8elZD2pcVtMlC1OL1mg3qvDo6iavI10UQLzbx8S
wroEbQEenbnP/x7lJP5U0q5C9KD0nAylPobTL3cnQ3pVAmysFM17sdgidDfzld57
lh8VwRdCwqk4EQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:38:33 2025 by rpki-client