Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
File: lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft (raw, json)
Hash identifier: DwMrOn5QWXCw/LgBknZ4b0acA5HZiCDGXCQHqa46Xyo=
Subject key identifier: 57:35:49:0C:AA:F1:D7:9A:27:A8:20:AC:8B:27:BA:49:29:6F:D4:87
Authority key identifier: 95:77:34:5D:FC:C9:34:78:C5:FF:22:1D:48:2E:E4:C9:84:83:F9:08
Certificate issuer: /CN=9577345dfcc93478c5ff221d482ee4c98483f908
Certificate serial: 0197C45C67BEF891134C59F64FA679340568
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
Manifest number: CE
Signing time: Tue 01 Jul 2025 05:01:19 +0000
Manifest this update: Tue 01 Jul 2025 05:01:19 +0000
Manifest next update: Wed 02 Jul 2025 05:01:19 +0000
Files and hashes: 1: 6Uqj3qB__xu3P3uEygfv-bB5aGM.roa (hash: DA+xFEu9e7gbATHhCec3WbWJPfAhFTSBmNWKRbMDyro=)
2: lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl (hash: RX48yBogUqeBApNKQQO0Sij518BIXipKxqoJwGOUWEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:5c:67:be:f8:91:13:4c:59:f6:4f:a6:79:34:05:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9577345dfcc93478c5ff221d482ee4c98483f908
Validity
Not Before: Jul 1 05:01:19 2025 GMT
Not After : Jul 2 05:01:19 2025 GMT
Subject: CN=5735490caaf1d79a27a820ac8b27ba49296fd487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:68:a1:39:e8:26:2f:26:ef:e3:3e:42:16:4c:
11:01:f3:7e:cd:25:0b:f8:b4:c4:d3:17:5d:58:64:
3e:25:88:7d:c6:0c:a9:4a:4f:d8:f7:7b:7e:ad:05:
1e:92:03:cf:5d:5c:3f:11:e8:44:7c:a0:0a:45:c3:
20:75:a0:1a:b6:e9:2f:2e:c0:cd:fc:03:68:c2:bf:
65:8a:2d:54:7d:2d:eb:61:04:a1:3e:6a:75:60:60:
77:ec:2d:ff:2f:b7:57:f9:b0:d1:79:22:12:3a:fa:
c0:6a:b3:8b:1b:ae:01:1e:57:49:ae:05:01:21:e3:
44:ad:6f:1f:d9:13:67:8d:35:37:fe:7b:df:fe:3d:
cb:29:d8:ff:79:8a:7a:76:2f:ab:5d:59:19:6f:7f:
a4:86:46:6c:88:6b:b3:a5:0c:95:30:0e:eb:2b:c0:
32:45:a5:8b:08:8f:e1:b8:de:37:ce:20:c8:d1:d9:
c8:fc:79:13:39:c3:39:b2:f0:68:fb:fc:43:23:93:
e6:6f:2f:d2:02:f8:03:46:65:3b:76:17:a0:aa:1a:
ad:86:46:f1:54:21:26:87:8e:13:fb:25:1c:25:ca:
50:2f:07:44:c8:5c:a9:6e:51:6b:8a:54:68:45:d6:
2a:f5:0d:38:87:04:3d:fe:e6:73:2c:16:6e:82:99:
fe:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:35:49:0C:AA:F1:D7:9A:27:A8:20:AC:8B:27:BA:49:29:6F:D4:87
X509v3 Authority Key Identifier:
keyid:95:77:34:5D:FC:C9:34:78:C5:FF:22:1D:48:2E:E4:C9:84:83:F9:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:dc:b9:0d:0a:fc:8b:d2:8a:b4:e7:1b:38:ae:78:ec:f0:c0:
27:54:10:33:14:29:71:75:90:3f:8b:e5:d1:51:ea:53:65:25:
33:5b:eb:6f:05:cd:4b:36:1c:59:f4:9f:18:95:6f:c8:50:ab:
8e:50:97:3a:76:bc:00:67:3c:d8:6c:44:a5:16:54:58:d3:e6:
15:ce:fa:31:bc:a5:1e:4d:a9:be:a8:81:9a:09:a5:07:90:f0:
0f:9f:a6:e1:0f:8a:ea:88:fc:99:7a:15:d7:f2:69:e8:dd:8c:
48:8f:c4:2c:ee:06:14:1b:5f:44:e5:f6:9b:05:6d:fa:85:fd:
26:fb:0b:84:20:62:35:4e:b1:d5:9b:18:d9:b0:8e:03:33:1b:
00:e1:e8:44:26:7b:0b:bf:1a:28:a7:88:dd:9e:ac:fe:f5:eb:
0d:d5:fc:c7:b7:aa:6b:7e:55:13:16:7a:02:bf:ca:89:57:e2:
65:2b:b3:ce:c9:c4:d9:77:ed:42:51:c9:dc:cc:63:c3:94:5c:
05:f4:bd:bc:93:62:7b:cb:73:3f:47:56:9f:01:b0:0a:bc:bb:
9d:fc:1c:04:a1:25:a6:b3:43:90:cc:51:7c:34:34:50:d2:35:
0f:84:ac:45:0c:76:68:1c:5a:1c:2c:16:1c:6d:09:f2:28:ba:
f5:28:1c:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfEXGe++JETTFn2T6Z5NAVoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NzczNDVkZmNjOTM0NzhjNWZmMjIxZDQ4MmVlNGM5ODQ4
M2Y5MDgwHhcNMjUwNzAxMDUwMTE5WhcNMjUwNzAyMDUwMTE5WjAzMTEwLwYDVQQD
Eyg1NzM1NDkwY2FhZjFkNzlhMjdhODIwYWM4YjI3YmE0OTI5NmZkNDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGihOegmLybv4z5CFkwRAfN+zSUL
+LTE0xddWGQ+JYh9xgypSk/Y93t+rQUekgPPXVw/EehEfKAKRcMgdaAatukvLsDN
/ANowr9lii1UfS3rYQShPmp1YGB37C3/L7dX+bDReSISOvrAarOLG64BHldJrgUB
IeNErW8f2RNnjTU3/nvf/j3LKdj/eYp6di+rXVkZb3+khkZsiGuzpQyVMA7rK8Ay
RaWLCI/huN43ziDI0dnI/HkTOcM5svBo+/xDI5Pmby/SAvgDRmU7dhegqhqthkbx
VCEmh44T+yUcJcpQLwdEyFypblFrilRoRdYq9Q04hwQ9/uZzLBZugpn+sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFc1SQyq8deaJ6ggrIsnukkpb9SHMB8GA1UdIwQY
MBaAFJV3NF38yTR4xf8iHUgu5MmEg/kIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFhjMFhmekpOSGpGX3lJZFNDN2t5WVNELVFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9iMTZmNjYtMmFmNC00NjNlLTk3ODUt
NDMzZjVmYTRmOTAxLzEvbFhjMFhmekpOSGpGX3lJZFNDN2t5WVNELVFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9iMTZmNjYtMmFmNC00NjNlLTk3ODUtNDMzZjVmYTRmOTAx
LzEvbFhjMFhmekpOSGpGX3lJZFNDN2t5WVNELVFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa9y5DQr8
i9KKtOcbOK547PDAJ1QQMxQpcXWQP4vl0VHqU2UlM1vrbwXNSzYcWfSfGJVvyFCr
jlCXOna8AGc82GxEpRZUWNPmFc76MbylHk2pvqiBmgmlB5DwD5+m4Q+K6oj8mXoV
1/Jp6N2MSI/ELO4GFBtfROX2mwVt+oX9JvsLhCBiNU6x1ZsY2bCOAzMbAOHoRCZ7
C78aKKeI3Z6s/vXrDdX8x7eqa35VExZ6Ar/KiVfiZSuzzsnE2XftQlHJ3Mxjw5Rc
BfS9vJNie8tzP0dWnwGwCry7nfwcBKElprNDkMxRfDQ0UNI1D4SsRQx2aBxaHCwW
HG0J8ii69Sgc9Q==
-----END CERTIFICATE-----
Generated at Tue Jul 1 08:56:31 2025 by rpki-client