Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft
File: LDe0vsl9YIq-I7xXujmCRszFd2A.mft (raw, json)
Hash identifier: vVgTFxjOz50vUvoLjhuAmtntJpIKey370xQpwVSXY8I=
Subject key identifier: BE:15:D3:FD:40:F4:68:FD:E4:4F:4A:A6:50:96:CA:A9:70:90:CC:93
Authority key identifier: 2C:37:B4:BE:C9:7D:60:8A:BE:23:BC:57:BA:39:82:46:CC:C5:77:60
Certificate issuer: /CN=2c37b4bec97d608abe23bc57ba398246ccc57760
Certificate serial: 0197B820E9F5DDD354391EEF35EBE5DDF653
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDe0vsl9YIq-I7xXujmCRszFd2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 20:00:54 +0000
Manifest this update: Sat 28 Jun 2025 20:00:54 +0000
Manifest next update: Sun 29 Jun 2025 20:00:54 +0000
Files and hashes: 1: 7BY_kFwL8OEGCGg4fffLBCGfbIk.roa (hash: wPQVbJEzFYU2FTuvcz3iiUbD5hpnYkEGB5yumpXFpQo=)
2: LDe0vsl9YIq-I7xXujmCRszFd2A.crl (hash: TVV9G4OU9+NLAfHkBWEq8dgAzVZSwwLO2j5BkP3g/T0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/LDe0vsl9YIq-I7xXujmCRszFd2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:e9:f5:dd:d3:54:39:1e:ef:35:eb:e5:dd:f6:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c37b4bec97d608abe23bc57ba398246ccc57760
Validity
Not Before: Jun 28 20:00:54 2025 GMT
Not After : Jun 29 20:00:54 2025 GMT
Subject: CN=be15d3fd40f468fde44f4aa65096caa97090cc93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b2:b1:3f:d1:89:67:51:1d:34:40:dc:af:fc:
12:85:18:5b:c7:8e:1d:3f:b3:e8:02:04:93:42:ca:
85:64:f9:8e:92:4c:4a:cb:4e:b6:de:a0:ea:15:85:
b7:af:d7:db:b1:71:81:0d:6b:6a:61:4b:f0:0b:90:
d6:37:f8:06:c8:02:52:03:f8:dc:eb:54:2c:3b:cc:
6d:01:5d:25:f3:ae:4c:28:4c:e3:81:fe:83:b3:1d:
cf:4a:a5:51:27:71:db:80:6a:66:d2:5e:ff:68:cc:
fa:a4:4f:6f:29:0b:6e:04:d3:c4:59:c2:ec:82:59:
db:21:26:96:6a:dc:ff:68:1a:98:6f:5b:92:00:d1:
82:dc:51:c2:08:42:35:28:72:25:17:5f:9e:4b:4a:
f0:34:ff:99:7e:b8:08:6d:b8:d3:3a:5d:95:fa:42:
d1:65:6f:85:97:49:98:8c:78:27:d0:f5:e8:8e:8a:
60:c2:9b:d3:07:80:d7:2e:ed:7d:91:e7:d1:77:3a:
01:f9:87:9f:9c:d4:4c:63:16:47:dd:49:c8:42:45:
16:5b:e5:2a:25:90:8b:2b:28:57:ef:c5:eb:c1:5f:
e8:5f:bb:e1:86:67:56:5f:f7:91:69:0a:11:5b:9b:
cd:89:3e:c9:22:9f:e3:ba:af:3c:b0:43:47:1b:b1:
d0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:15:D3:FD:40:F4:68:FD:E4:4F:4A:A6:50:96:CA:A9:70:90:CC:93
X509v3 Authority Key Identifier:
keyid:2C:37:B4:BE:C9:7D:60:8A:BE:23:BC:57:BA:39:82:46:CC:C5:77:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDe0vsl9YIq-I7xXujmCRszFd2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b12604-b481-416d-b088-210767bd0ba2/1/LDe0vsl9YIq-I7xXujmCRszFd2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:3f:07:58:77:7a:ed:fb:78:99:d6:9e:1e:04:a6:70:b6:a0:
2e:df:f8:50:44:f9:30:19:37:dd:10:67:bd:dc:64:4a:72:32:
bd:82:c6:d6:43:de:f6:8a:16:2e:56:7a:c4:5a:a4:de:31:96:
dc:c8:72:67:ed:ca:80:b2:9f:50:b9:b8:9b:ff:c4:d5:ea:75:
df:8d:4e:68:dd:7b:57:91:df:e6:bf:ec:18:e9:d5:fe:16:d5:
ec:7b:ba:b6:d2:2f:7e:8c:68:98:bb:4e:0e:49:eb:3b:9f:85:
6b:19:dd:42:ca:a8:a6:17:c3:70:69:31:a2:0e:6f:2a:ab:37:
87:e5:7f:0c:2c:9c:bf:e9:8a:c5:98:c8:ed:bf:c8:4d:2a:82:
ea:6b:5e:19:c7:13:6b:12:82:77:b1:63:8b:43:4a:94:59:55:
9a:bb:76:a6:ca:f4:a7:58:4a:43:65:9d:d5:c2:5d:c5:b7:7c:
20:c9:a4:56:60:ae:4a:97:16:fb:51:04:3a:53:f3:d0:c5:32:
ee:7c:1c:de:6c:3a:44:ae:f0:6c:14:ee:50:bc:90:99:cd:e7:
cb:90:ad:16:29:d8:f4:67:6d:4d:94:15:3f:d3:1e:3b:39:54:
56:4e:9d:9f:0a:86:ae:0f:d2:22:0a:ed:fa:89:37:c7:fd:9f:
2b:b6:c2:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4IOn13dNUOR7vNevl3fZTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjMzdiNGJlYzk3ZDYwOGFiZTIzYmM1N2JhMzk4MjQ2Y2Nj
NTc3NjAwHhcNMjUwNjI4MjAwMDU0WhcNMjUwNjI5MjAwMDU0WjAzMTEwLwYDVQQD
EyhiZTE1ZDNmZDQwZjQ2OGZkZTQ0ZjRhYTY1MDk2Y2FhOTcwOTBjYzkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7KxP9GJZ1EdNEDcr/wShRhbx44d
P7PoAgSTQsqFZPmOkkxKy0623qDqFYW3r9fbsXGBDWtqYUvwC5DWN/gGyAJSA/jc
61QsO8xtAV0l865MKEzjgf6Dsx3PSqVRJ3HbgGpm0l7/aMz6pE9vKQtuBNPEWcLs
glnbISaWatz/aBqYb1uSANGC3FHCCEI1KHIlF1+eS0rwNP+ZfrgIbbjTOl2V+kLR
ZW+Fl0mYjHgn0PXojopgwpvTB4DXLu19kefRdzoB+YefnNRMYxZH3UnIQkUWW+Uq
JZCLKyhX78XrwV/oX7vhhmdWX/eRaQoRW5vNiT7JIp/juq88sENHG7HQ7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4V0/1A9Gj95E9KplCWyqlwkMyTMB8GA1UdIwQY
MBaAFCw3tL7JfWCKviO8V7o5gkbMxXdgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTERlMHZzbDlZSXEtSTd4WHVqbUNSc3pGZDJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9iMTI2MDQtYjQ4MS00MTZkLWIwODgt
MjEwNzY3YmQwYmEyLzEvTERlMHZzbDlZSXEtSTd4WHVqbUNSc3pGZDJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My9iMTI2MDQtYjQ4MS00MTZkLWIwODgtMjEwNzY3YmQwYmEy
LzEvTERlMHZzbDlZSXEtSTd4WHVqbUNSc3pGZDJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJT8HWHd6
7ft4mdaeHgSmcLagLt/4UET5MBk33RBnvdxkSnIyvYLG1kPe9ooWLlZ6xFqk3jGW
3MhyZ+3KgLKfULm4m//E1ep1341OaN17V5Hf5r/sGOnV/hbV7Hu6ttIvfoxomLtO
DknrO5+FaxndQsqophfDcGkxog5vKqs3h+V/DCycv+mKxZjI7b/ITSqC6mteGccT
axKCd7Fji0NKlFlVmrt2psr0p1hKQ2Wd1cJdxbd8IMmkVmCuSpcW+1EEOlPz0MUy
7nwc3mw6RK7wbBTuULyQmc3ny5CtFinY9GdtTZQVP9MeOzlUVk6dnwqGrg/SIgrt
+ok3x/2fK7bCsg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:36:03 2025 by rpki-client