Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
File: lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft (raw, json)
Hash identifier: ZcuEpFEESdPn5b114qMboCLr5hM03E/vlv3Mi6+3nnM=
Subject key identifier: 4B:10:FD:A3:7A:89:02:42:30:B6:B6:DD:AE:08:5F:32:1F:B8:C5:A2
Authority key identifier: 94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD
Certificate issuer: /CN=946733318c62c47920fe375ad99cb729ee90a1ad
Certificate serial: 0197B77C7C66DCDD8E737F12E888D9520BEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
Manifest number: 1170
Signing time: Sat 28 Jun 2025 17:01:18 +0000
Manifest this update: Sat 28 Jun 2025 17:01:18 +0000
Manifest next update: Sun 29 Jun 2025 17:01:18 +0000
Files and hashes: 1: SH4rDP4bziCb5bkV8rhoTxfuNjk.roa (hash: vVCfK4MgaGYgFq117gziTiwL0UcNweWxSUnO8MCkGI8=)
2: SpTXo1fwWeGOWpTg6Zsx5tHHgL8.roa (hash: pd+04X0269GarNL7eAEgGDcIT45S+rvIYMVZpLeD2m8=)
3: lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl (hash: QQ+91dbLJb7HoiS8OAWadNBEURSmCYwBbBBvQ2io68c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:7c:66:dc:dd:8e:73:7f:12:e8:88:d9:52:0b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=946733318c62c47920fe375ad99cb729ee90a1ad
Validity
Not Before: Jun 28 17:01:18 2025 GMT
Not After : Jun 29 17:01:18 2025 GMT
Subject: CN=4b10fda37a89024230b6b6ddae085f321fb8c5a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b9:1c:63:c1:75:51:21:5c:21:b2:7c:17:ae:
8a:46:1e:86:a2:f4:33:5f:27:54:99:ee:59:a7:6d:
36:35:fc:d2:15:92:fb:38:5c:c1:99:f6:53:ed:bb:
78:db:f9:00:20:9c:69:1e:c6:e3:cf:df:af:f5:47:
cc:6e:34:ea:2f:2a:c3:a3:9d:7c:1c:25:8a:ae:85:
a5:13:29:4a:af:59:83:47:85:bb:fb:eb:ef:6d:c6:
d5:aa:ba:cf:3b:db:03:56:38:a0:6b:e6:5b:8b:f3:
2f:6d:3e:39:35:79:77:5f:2a:38:e7:d6:23:9a:45:
e0:3a:67:24:7e:e1:52:b4:25:8e:99:52:b7:f5:93:
4b:6e:46:75:e0:67:92:13:9b:47:03:d7:2f:da:d8:
b9:73:f6:a8:04:82:85:c7:4f:b3:14:70:eb:97:24:
df:cf:c8:64:ea:8e:f1:43:67:a7:37:ca:9a:b1:0b:
e5:b7:8c:25:fa:ae:c5:3f:31:ec:6c:53:4b:98:b9:
ba:97:23:b8:28:f9:a8:1e:c7:cb:0f:87:0c:dd:70:
6d:2a:3f:02:3c:44:51:d2:0e:c8:40:c2:2c:8f:87:
84:4c:75:c6:12:5d:14:f7:42:2e:35:07:c1:90:0f:
3b:82:35:92:58:aa:b9:c6:1f:d6:d6:ad:62:46:6d:
ec:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:10:FD:A3:7A:89:02:42:30:B6:B6:DD:AE:08:5F:32:1F:B8:C5:A2
X509v3 Authority Key Identifier:
keyid:94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:a6:2a:f6:24:9d:45:d7:51:61:c5:6c:a5:53:d5:ef:f0:36:
7d:04:ad:37:11:a7:8f:db:ae:b8:68:55:10:98:35:a9:2f:3c:
e1:4f:ee:35:a4:82:cd:b8:1a:41:41:47:a4:8f:d2:0b:7a:7b:
94:cf:8f:89:bd:45:cc:0b:d2:5e:7e:42:96:ad:8a:bd:f6:c8:
1f:9f:8a:96:74:5e:e4:12:b5:c0:19:be:b6:11:88:e5:be:f7:
93:78:b5:e8:a3:cf:ba:d5:d5:1b:e2:51:81:be:ce:92:1a:f9:
38:70:39:fb:02:cb:3a:a7:35:81:f9:33:51:79:5a:17:fb:6c:
c7:3b:25:9e:44:51:8a:ea:5d:0a:a3:eb:a5:98:67:f6:a5:3b:
42:0f:57:6b:7a:3f:f8:b3:45:5e:e1:18:eb:8e:d7:71:d9:9b:
85:17:d0:72:0c:8b:e0:6e:d6:fe:52:13:76:e6:f7:dc:3a:97:
37:db:cd:98:4d:18:71:1c:db:50:e6:b4:4d:0d:f1:20:72:8f:
cf:81:9a:ea:02:e1:e5:ee:e5:b0:1d:17:4f:22:d8:f3:6b:47:
76:42:9a:7b:3d:c8:ee:26:00:25:ca:f6:13:87:6a:1e:d0:8a:
25:10:03:32:cc:8c:6d:ef:95:16:fd:28:22:be:bb:5f:35:93:
8c:36:55:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fHxm3N2Oc38S6IjZUgvrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NjczMzMxOGM2MmM0NzkyMGZlMzc1YWQ5OWNiNzI5ZWU5
MGExYWQwHhcNMjUwNjI4MTcwMTE4WhcNMjUwNjI5MTcwMTE4WjAzMTEwLwYDVQQD
Eyg0YjEwZmRhMzdhODkwMjQyMzBiNmI2ZGRhZTA4NWYzMjFmYjhjNWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLkcY8F1USFcIbJ8F66KRh6GovQz
XydUme5Zp202NfzSFZL7OFzBmfZT7bt42/kAIJxpHsbjz9+v9UfMbjTqLyrDo518
HCWKroWlEylKr1mDR4W7++vvbcbVqrrPO9sDVjiga+Zbi/MvbT45NXl3Xyo459Yj
mkXgOmckfuFStCWOmVK39ZNLbkZ14GeSE5tHA9cv2ti5c/aoBIKFx0+zFHDrlyTf
z8hk6o7xQ2enN8qasQvlt4wl+q7FPzHsbFNLmLm6lyO4KPmoHsfLD4cM3XBtKj8C
PERR0g7IQMIsj4eETHXGEl0U90IuNQfBkA87gjWSWKq5xh/W1q1iRm3sJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEsQ/aN6iQJCMLa23a4IXzIfuMWiMB8GA1UdIwQY
MBaAFJRnMzGMYsR5IP43WtmctynukKGtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEdjek1ZeGl4SGtnX2pkYTJaeTNLZTZRb2EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9kNzYwOWUtNjM5Ni00MTU1LWFkMzUt
Yjc0MDg5ZDhlNTllLzEvbEdjek1ZeGl4SGtnX2pkYTJaeTNLZTZRb2EwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9kNzYwOWUtNjM5Ni00MTU1LWFkMzUtYjc0MDg5ZDhlNTll
LzEvbEdjek1ZeGl4SGtnX2pkYTJaeTNLZTZRb2EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASaYq9iSd
RddRYcVspVPV7/A2fQStNxGnj9uuuGhVEJg1qS884U/uNaSCzbgaQUFHpI/SC3p7
lM+Pib1FzAvSXn5Clq2KvfbIH5+KlnRe5BK1wBm+thGI5b73k3i16KPPutXVG+JR
gb7Okhr5OHA5+wLLOqc1gfkzUXlaF/tsxzslnkRRiupdCqPrpZhn9qU7Qg9Xa3o/
+LNFXuEY647XcdmbhRfQcgyL4G7W/lITdub33DqXN9vNmE0YcRzbUOa0TQ3xIHKP
z4Ga6gLh5e7lsB0XTyLY82tHdkKaez3I7iYAJcr2E4dqHtCKJRADMsyMbe+VFv0o
Ir67XzWTjDZVgA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:21:17 2025 by rpki-client