Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
File: lVcdiLU5ZafQgfOx2CicvCh3W4g.mft (raw, json)
Hash identifier: Xp+4vZzZLjtNaGA8bfLI/1vhc0oGgf+tPsYvyj9MtKk=
Subject key identifier: E8:56:2B:C2:48:6C:EF:DB:8B:06:78:B3:EE:62:09:76:91:32:6C:E3
Authority key identifier: 95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88
Certificate issuer: /CN=95571d88b53965a7d081f3b1d8289cbc28775b88
Certificate serial: 0197B88EFC79F5B015D53079CAB1BBC25B91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 22:01:07 +0000
Manifest this update: Sat 28 Jun 2025 22:01:07 +0000
Manifest next update: Sun 29 Jun 2025 22:01:07 +0000
Files and hashes: 1: e5DeESZZoV9ugwD2DDetvmmqaNQ.roa (hash: oBItgFG7VmwghbXnqb4YDSc7wHHSkFpawBFKEQ4ggoU=)
2: lVcdiLU5ZafQgfOx2CicvCh3W4g.crl (hash: xnvR4J6/C+3Pdt0uvE+n59N6BWYjns9HT78kMikeRXY=)
3: pusRxy9QftUa2YYJz6wip986r9U.roa (hash: RNMs7mYaUX06i+bmjYIm1r/crAvFi8r8tzeB1u4p4Jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:fc:79:f5:b0:15:d5:30:79:ca:b1:bb:c2:5b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95571d88b53965a7d081f3b1d8289cbc28775b88
Validity
Not Before: Jun 28 22:01:07 2025 GMT
Not After : Jun 29 22:01:07 2025 GMT
Subject: CN=e8562bc2486cefdb8b0678b3ee62097691326ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:88:32:f0:5a:f1:57:b3:f2:11:13:56:62:4b:
5d:46:b7:a5:d8:b0:9e:ad:61:23:db:fc:6f:43:c9:
60:dc:0c:2e:63:e3:2c:b0:b9:d5:60:b7:c9:7b:68:
b6:8b:3f:4f:92:08:76:9d:8f:e4:46:ff:9e:d7:dc:
c1:d7:9b:e6:8b:ee:30:f6:f2:89:a0:9c:33:31:e5:
6e:48:33:ac:ed:b5:c5:1a:6c:ea:9c:d8:48:84:f3:
07:53:44:4a:b6:53:de:a8:07:71:b6:c5:72:fe:a2:
7d:d1:60:22:be:be:be:5b:80:09:0f:ba:8f:7c:d1:
19:97:46:f8:81:12:e5:50:f6:0c:73:55:de:25:7f:
f8:55:b3:d2:5b:5d:53:1c:1a:ca:29:e5:91:c3:66:
a3:4d:31:59:02:01:8a:a1:33:02:10:38:08:7e:8e:
2b:44:ea:ef:ef:6d:6a:e6:d3:c5:9b:20:d4:15:33:
36:64:a8:d7:b6:bd:79:48:2b:41:3a:7b:d5:da:fa:
c2:87:47:72:6c:76:b7:a0:33:44:5d:4a:86:22:85:
2b:37:06:8b:f7:50:4e:15:97:5e:19:a4:5a:ee:82:
db:28:f2:01:70:bb:08:c9:ee:66:ec:3d:55:ea:70:
49:3b:a1:d8:4d:10:99:31:d6:0d:d7:5c:7a:ec:b0:
b3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:56:2B:C2:48:6C:EF:DB:8B:06:78:B3:EE:62:09:76:91:32:6C:E3
X509v3 Authority Key Identifier:
keyid:95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ce:66:56:b8:e8:c3:72:db:ac:ab:3e:5c:a0:96:9d:72:10:
37:ff:95:8e:28:c8:b0:9d:ec:b4:4b:93:7f:c4:39:e8:c6:01:
f3:c8:c4:d5:25:7c:51:a2:ad:3c:93:36:43:ac:93:9c:d1:44:
fa:77:f7:15:1a:aa:ad:4f:ee:1b:84:76:b6:32:88:ce:b6:7e:
7e:d0:a8:ad:b7:f2:d2:02:6d:fe:53:3a:fd:ab:e9:59:52:8a:
cc:70:77:1d:ed:59:d9:dd:46:dd:d4:c3:07:1b:e6:f6:06:b5:
76:a5:db:88:4c:72:88:02:2b:56:cb:9f:78:10:3e:67:db:e4:
4c:26:0b:53:5e:05:a2:08:45:fc:3d:1f:bc:52:90:4d:d3:c9:
9f:5e:34:88:ee:e9:fa:4d:15:93:fd:1e:f5:96:b4:a6:d7:bc:
d8:ca:7a:ba:2b:80:e7:90:7c:8c:90:38:1f:32:b5:86:ee:82:
4f:96:f8:9e:de:fe:37:46:13:78:9a:38:8c:72:d7:23:95:1e:
9d:97:fe:4d:7f:d1:0b:ff:d8:d7:aa:bf:a3:75:b1:c8:2b:b0:
88:9b:0d:20:ba:db:27:fc:65:36:69:37:14:91:22:a3:0d:5c:
6c:7e:56:94:0d:ae:73:4f:2b:40:1f:83:7f:f7:d6:9e:28:91:
d0:d0:cc:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4jvx59bAV1TB5yrG7wluRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NTcxZDg4YjUzOTY1YTdkMDgxZjNiMWQ4Mjg5Y2JjMjg3
NzViODgwHhcNMjUwNjI4MjIwMTA3WhcNMjUwNjI5MjIwMTA3WjAzMTEwLwYDVQQD
EyhlODU2MmJjMjQ4NmNlZmRiOGIwNjc4YjNlZTYyMDk3NjkxMzI2Y2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYgy8FrxV7PyERNWYktdRrel2LCe
rWEj2/xvQ8lg3AwuY+MssLnVYLfJe2i2iz9Pkgh2nY/kRv+e19zB15vmi+4w9vKJ
oJwzMeVuSDOs7bXFGmzqnNhIhPMHU0RKtlPeqAdxtsVy/qJ90WAivr6+W4AJD7qP
fNEZl0b4gRLlUPYMc1XeJX/4VbPSW11THBrKKeWRw2ajTTFZAgGKoTMCEDgIfo4r
ROrv721q5tPFmyDUFTM2ZKjXtr15SCtBOnvV2vrCh0dybHa3oDNEXUqGIoUrNwaL
91BOFZdeGaRa7oLbKPIBcLsIye5m7D1V6nBJO6HYTRCZMdYN11x67LCzmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOhWK8JIbO/biwZ4s+5iCXaRMmzjMB8GA1UdIwQY
MBaAFJVXHYi1OWWn0IHzsdgonLwod1uIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFZjZGlMVTVaYWZRZ2ZPeDJDaWN2Q2gzVzRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9iM2Y5OTMtZDAzYi00YjEzLTgxYWYt
YWE2MjI5Njk4NDYxLzEvbFZjZGlMVTVaYWZRZ2ZPeDJDaWN2Q2gzVzRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9iM2Y5OTMtZDAzYi00YjEzLTgxYWYtYWE2MjI5Njk4NDYx
LzEvbFZjZGlMVTVaYWZRZ2ZPeDJDaWN2Q2gzVzRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZc5mVrjo
w3LbrKs+XKCWnXIQN/+VjijIsJ3stEuTf8Q56MYB88jE1SV8UaKtPJM2Q6yTnNFE
+nf3FRqqrU/uG4R2tjKIzrZ+ftCorbfy0gJt/lM6/avpWVKKzHB3He1Z2d1G3dTD
Bxvm9ga1dqXbiExyiAIrVsufeBA+Z9vkTCYLU14FoghF/D0fvFKQTdPJn140iO7p
+k0Vk/0e9Za0pte82Mp6uiuA55B8jJA4HzK1hu6CT5b4nt7+N0YTeJo4jHLXI5Ue
nZf+TX/RC//Y16q/o3WxyCuwiJsNILrbJ/xlNmk3FJEiow1cbH5WlA2uc08rQB+D
f/fWniiR0NDMwQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:22:39 2025 by rpki-client