Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.mft
File: lBb6apDtlOIh22nSH83afGbRPJE.mft (raw, json)
Hash identifier: +xlFKwMI1bd3pWQL+kq0ZXKhBWbH1H0TmSs9vPTaf50=
Subject key identifier: 55:2D:95:9A:25:AA:4F:28:EA:D0:E5:42:1E:35:F8:E2:40:38:CF:51
Authority key identifier: 94:16:FA:6A:90:ED:94:E2:21:DB:69:D2:1F:CD:DA:7C:66:D1:3C:91
Certificate issuer: /CN=9416fa6a90ed94e221db69d21fcdda7c66d13c91
Certificate serial: 0197C0B69ED361975BCC977DFBEC6590611F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBb6apDtlOIh22nSH83afGbRPJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.mft
Manifest number: 135B
Signing time: Mon 30 Jun 2025 12:01:22 +0000
Manifest this update: Mon 30 Jun 2025 12:01:22 +0000
Manifest next update: Tue 01 Jul 2025 12:01:22 +0000
Files and hashes: 1: 1-zf9ZQZT2xUgEblVxx2k6xoE3Oc.roa (hash: J6Mj0qs7STVl56/TudBQhf4GIVoZij0kDMBUdFZiWTw=)
2: j0079Gdow0tNd5CU-iJwLzd7i5w.roa (hash: jQOc91e0vtBGc9svQgrVHCBuuuVKwjHcOWkr8bE2xq8=)
3: lBb6apDtlOIh22nSH83afGbRPJE.crl (hash: 9H/AAD8L5aPkkXhcyl6gUVnOKs4o4UOz/iQJZEKDu5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBb6apDtlOIh22nSH83afGbRPJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 12:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:b6:9e:d3:61:97:5b:cc:97:7d:fb:ec:65:90:61:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9416fa6a90ed94e221db69d21fcdda7c66d13c91
Validity
Not Before: Jun 30 12:01:22 2025 GMT
Not After : Jul 1 12:01:22 2025 GMT
Subject: CN=552d959a25aa4f28ead0e5421e35f8e24038cf51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:aa:ba:56:c6:56:6e:16:57:d8:79:86:5d:b1:
ce:62:7a:24:fc:cb:5d:4b:bc:e8:29:f3:a4:ac:d0:
0e:0f:00:56:c3:8f:a5:71:03:89:12:a6:87:98:e6:
d9:c4:66:cf:ee:7a:26:31:00:e9:ed:28:34:f6:dd:
3c:92:a4:26:80:8e:9f:10:c5:66:fa:b6:f3:86:55:
0a:c3:ee:02:65:3e:5d:f5:b8:88:7e:04:dd:ab:1a:
6f:45:a5:0a:50:c5:13:a0:4b:74:c7:97:a8:b3:bc:
0a:76:a5:90:1d:0e:85:36:ad:bc:be:90:e4:7a:20:
f0:d9:f3:09:92:ea:50:b8:c5:f2:cf:ca:ac:c7:8d:
54:85:30:25:bd:8d:47:31:4b:6d:d8:ba:c6:33:95:
80:52:45:f1:d9:b6:26:1d:0f:45:42:20:28:9a:ae:
16:11:37:c9:c8:be:34:d1:0d:cb:92:ca:08:81:2d:
7f:c1:16:34:f4:a3:a2:d8:ac:71:22:a0:30:e0:86:
70:6b:61:b1:9c:9f:a0:de:51:eb:25:06:98:50:8c:
28:70:a1:0b:7a:b9:05:9b:e5:79:04:0c:03:1a:42:
74:db:7e:21:58:52:87:7f:4c:cf:80:d7:44:68:5e:
61:9a:48:80:d0:82:08:e6:5d:4c:dc:3f:a5:45:a6:
61:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:2D:95:9A:25:AA:4F:28:EA:D0:E5:42:1E:35:F8:E2:40:38:CF:51
X509v3 Authority Key Identifier:
keyid:94:16:FA:6A:90:ED:94:E2:21:DB:69:D2:1F:CD:DA:7C:66:D1:3C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBb6apDtlOIh22nSH83afGbRPJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/036213-74b1-425c-9e56-7de910e00bed/1/lBb6apDtlOIh22nSH83afGbRPJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:96:26:9f:55:8c:ef:88:54:58:db:54:b9:c0:05:6b:4d:e7:
c8:55:53:04:78:f0:c6:66:cd:e8:34:90:4c:d1:3e:1a:60:00:
eb:5a:8b:0a:5b:05:1b:24:96:b2:15:81:24:28:e4:30:6b:7a:
4e:1c:4c:fc:49:5a:2d:5f:26:73:c5:40:c1:57:16:3f:f1:a3:
26:8d:33:c8:c4:af:c9:bb:34:46:f2:2b:b9:88:29:3e:f6:bf:
61:d4:5a:c1:de:78:52:ff:f7:6a:c7:8e:19:90:86:a2:00:2d:
a7:5c:69:8a:7a:f7:b7:35:f6:5d:ca:78:56:d2:6a:22:1b:66:
bc:93:fa:64:8d:4b:b5:13:7c:5f:14:9e:29:1d:32:2b:25:66:
ad:67:4a:4c:d5:dd:9f:ca:98:42:2b:e1:fe:34:da:2b:76:b7:
4c:50:58:5d:b3:40:c6:90:21:a4:c1:68:17:28:c8:dc:cd:f4:
ab:4a:c0:a5:60:40:64:ef:c9:41:c6:6f:9f:ef:b5:82:72:9a:
e5:a6:df:1c:79:b1:7e:12:8d:f3:d7:4d:f8:2f:ff:8d:19:a3:
f1:f0:b4:ed:a3:17:ff:36:4f:74:e4:39:35:96:64:79:aa:bd:
fb:b0:df:6b:84:8c:cf:43:ff:cd:d8:f4:44:f7:b6:f0:50:81:
7d:78:e4:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfAtp7TYZdbzJd9++xlkGEfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MTZmYTZhOTBlZDk0ZTIyMWRiNjlkMjFmY2RkYTdjNjZk
MTNjOTEwHhcNMjUwNjMwMTIwMTIyWhcNMjUwNzAxMTIwMTIyWjAzMTEwLwYDVQQD
Eyg1NTJkOTU5YTI1YWE0ZjI4ZWFkMGU1NDIxZTM1ZjhlMjQwMzhjZjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraq6VsZWbhZX2HmGXbHOYnok/Mtd
S7zoKfOkrNAODwBWw4+lcQOJEqaHmObZxGbP7nomMQDp7Sg09t08kqQmgI6fEMVm
+rbzhlUKw+4CZT5d9biIfgTdqxpvRaUKUMUToEt0x5eos7wKdqWQHQ6FNq28vpDk
eiDw2fMJkupQuMXyz8qsx41UhTAlvY1HMUtt2LrGM5WAUkXx2bYmHQ9FQiAomq4W
ETfJyL400Q3LksoIgS1/wRY09KOi2KxxIqAw4IZwa2GxnJ+g3lHrJQaYUIwocKEL
erkFm+V5BAwDGkJ0234hWFKHf0zPgNdEaF5hmkiA0III5l1M3D+lRaZhlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFUtlZolqk8o6tDlQh41+OJAOM9RMB8GA1UdIwQY
MBaAFJQW+mqQ7ZTiIdtp0h/N2nxm0TyRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEJiNmFwRHRsT0loMjJuU0g4M2FmR2JSUEpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8wMzYyMTMtNzRiMS00MjVjLTllNTYt
N2RlOTEwZTAwYmVkLzEvbEJiNmFwRHRsT0loMjJuU0g4M2FmR2JSUEpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8wMzYyMTMtNzRiMS00MjVjLTllNTYtN2RlOTEwZTAwYmVk
LzEvbEJiNmFwRHRsT0loMjJuU0g4M2FmR2JSUEpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADpYmn1WM
74hUWNtUucAFa03nyFVTBHjwxmbN6DSQTNE+GmAA61qLClsFGySWshWBJCjkMGt6
ThxM/ElaLV8mc8VAwVcWP/GjJo0zyMSvybs0RvIruYgpPva/YdRawd54Uv/3aseO
GZCGogAtp1xpinr3tzX2Xcp4VtJqIhtmvJP6ZI1LtRN8XxSeKR0yKyVmrWdKTNXd
n8qYQivh/jTaK3a3TFBYXbNAxpAhpMFoFyjI3M30q0rApWBAZO/JQcZvn++1gnKa
5abfHHmxfhKN89dN+C//jRmj8fC07aMX/zZPdOQ5NZZkeaq9+7Dfa4SMz0P/zdj0
RPe28FCBfXjkhA==
-----END CERTIFICATE-----
Generated at Mon Jun 30 20:33:34 2025 by rpki-client