Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/19c9e1-8543-4f50-acae-e4045d8cfe8f/1/ljoPxHp632KEWtbc1_t2GmwZ_ts.mft
File: ljoPxHp632KEWtbc1_t2GmwZ_ts.mft (raw, json)
Hash identifier: U1up9yYmKU0UkAP6jb7DzI+JAYOFvhf0u0ZSkLg4abA=
Subject key identifier: CB:2E:7C:D1:56:EC:CD:AB:F5:C9:43:81:A5:2A:43:48:45:DC:18:25
Authority key identifier: 96:3A:0F:C4:7A:7A:DF:62:84:5A:D6:DC:D7:FB:76:1A:6C:19:FE:DB
Certificate issuer: /CN=963a0fc47a7adf62845ad6dcd7fb761a6c19fedb
Certificate serial: 0197B6A243D07236E7FBA7042C5CD33F68B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljoPxHp632KEWtbc1_t2GmwZ_ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/19c9e1-8543-4f50-acae-e4045d8cfe8f/1/ljoPxHp632KEWtbc1_t2GmwZ_ts.mft
Manifest number: 0BB2
Signing time: Sat 28 Jun 2025 13:02:56 +0000
Manifest this update: Sat 28 Jun 2025 13:02:56 +0000
Manifest next update: Sun 29 Jun 2025 13:02:56 +0000
Files and hashes: 1: flK9dI6qS59uuhUTdI9-Lm32F14.roa (hash: zlQ+q1YmxirUq/y5GYQVkTybydvIz392HoitTR1/bAQ=)
2: ljoPxHp632KEWtbc1_t2GmwZ_ts.crl (hash: VSw4tnEgfDyubLUKeQpeMEEb1m2GzdAIuf9E+LvT+nM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/19c9e1-8543-4f50-acae-e4045d8cfe8f/1/ljoPxHp632KEWtbc1_t2GmwZ_ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/19c9e1-8543-4f50-acae-e4045d8cfe8f/1/ljoPxHp632KEWtbc1_t2GmwZ_ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/ljoPxHp632KEWtbc1_t2GmwZ_ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:43:d0:72:36:e7:fb:a7:04:2c:5c:d3:3f:68:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=963a0fc47a7adf62845ad6dcd7fb761a6c19fedb
Validity
Not Before: Jun 28 13:02:56 2025 GMT
Not After : Jun 29 13:02:56 2025 GMT
Subject: CN=cb2e7cd156eccdabf5c94381a52a434845dc1825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cc:e4:a6:1b:61:96:86:2a:e5:06:ea:94:9e:
89:90:78:a4:53:af:78:bc:96:95:4b:3a:41:14:09:
11:25:d7:0f:70:ad:4f:8f:10:0f:16:71:40:d3:6a:
36:99:64:1b:8b:e7:e0:f2:87:75:0d:46:1f:1a:fa:
65:b2:7d:c1:85:49:09:5c:99:27:40:e8:7f:96:1e:
ba:4f:c9:af:40:d0:c5:2d:8f:38:b7:63:af:2b:e8:
0d:56:b5:30:60:47:83:b0:dc:25:40:b5:e2:a0:8b:
4d:a2:78:93:1f:42:eb:b2:6e:10:82:0b:ac:66:18:
75:d0:32:6b:7f:aa:18:27:4c:6f:e7:ce:a6:23:d4:
c7:af:d9:d6:31:00:e0:33:75:c6:9a:b3:3f:e1:2b:
a0:b8:63:cd:18:9c:fc:49:49:c1:df:5b:cc:89:88:
a5:85:6a:1a:18:13:80:52:23:31:83:64:db:00:8b:
de:82:02:78:68:78:fb:1c:07:f0:60:49:25:d7:ec:
9c:51:7d:15:3e:f1:ca:d4:6d:f6:a3:4b:5f:28:69:
26:7c:04:d5:53:89:05:20:fd:18:33:cd:d8:e2:6c:
ae:a4:e9:d0:bc:73:3a:a2:e4:61:c6:6d:f4:a1:8f:
47:64:92:27:a4:f5:b0:a7:85:24:b3:80:dd:ae:fa:
81:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:2E:7C:D1:56:EC:CD:AB:F5:C9:43:81:A5:2A:43:48:45:DC:18:25
X509v3 Authority Key Identifier:
keyid:96:3A:0F:C4:7A:7A:DF:62:84:5A:D6:DC:D7:FB:76:1A:6C:19:FE:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljoPxHp632KEWtbc1_t2GmwZ_ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/19c9e1-8543-4f50-acae-e4045d8cfe8f/1/ljoPxHp632KEWtbc1_t2GmwZ_ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/19c9e1-8543-4f50-acae-e4045d8cfe8f/1/ljoPxHp632KEWtbc1_t2GmwZ_ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c8:3a:36:4c:e4:25:a8:bf:44:4c:b8:a8:a6:c5:5a:04:3c:
24:a0:d0:59:02:00:76:91:09:0c:27:b2:9d:ca:fb:2f:5e:78:
6b:89:93:d3:5a:a5:d8:51:5e:97:65:b6:e5:ad:7b:6f:73:30:
58:20:4a:ae:15:77:86:d1:cb:78:9c:fa:c2:ec:c7:7f:f5:0d:
33:0c:b8:42:93:cc:07:41:eb:df:e2:3e:f2:c2:47:70:d9:70:
e1:db:f3:71:cf:e8:46:42:00:c4:64:44:27:45:a7:b8:b9:09:
d5:47:3b:16:9a:ef:7e:50:82:ad:18:77:e3:c7:00:8a:c8:13:
3f:b9:c6:37:ee:80:48:4f:0b:63:82:88:a6:be:a7:75:ab:4f:
d4:8f:79:78:5b:ce:71:ce:91:19:65:43:90:ab:17:c2:df:52:
c2:62:01:6c:7f:50:f7:39:63:13:78:de:b1:a7:8f:d1:1e:ac:
26:c4:84:c6:f5:8d:44:63:30:09:8b:8f:f9:38:8c:46:42:e6:
f4:fc:75:cb:36:80:7e:ac:a3:1e:67:84:52:ef:37:d8:07:55:
91:69:92:bc:9b:a0:00:06:99:39:4b:d0:f1:35:28:29:19:92:
26:1b:5a:d1:b7:43:a3:5f:12:1a:b7:94:3c:c7:04:83:48:60:
0d:32:23:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2okPQcjbn+6cELFzTP2iyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2M2EwZmM0N2E3YWRmNjI4NDVhZDZkY2Q3ZmI3NjFhNmMx
OWZlZGIwHhcNMjUwNjI4MTMwMjU2WhcNMjUwNjI5MTMwMjU2WjAzMTEwLwYDVQQD
EyhjYjJlN2NkMTU2ZWNjZGFiZjVjOTQzODFhNTJhNDM0ODQ1ZGMxODI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMzkphthloYq5QbqlJ6JkHikU694
vJaVSzpBFAkRJdcPcK1PjxAPFnFA02o2mWQbi+fg8od1DUYfGvplsn3BhUkJXJkn
QOh/lh66T8mvQNDFLY84t2OvK+gNVrUwYEeDsNwlQLXioItNoniTH0Lrsm4Qggus
Zhh10DJrf6oYJ0xv586mI9THr9nWMQDgM3XGmrM/4SuguGPNGJz8SUnB31vMiYil
hWoaGBOAUiMxg2TbAIveggJ4aHj7HAfwYEkl1+ycUX0VPvHK1G32o0tfKGkmfATV
U4kFIP0YM83Y4myupOnQvHM6ouRhxm30oY9HZJInpPWwp4Uks4DdrvqB8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMsufNFW7M2r9clDgaUqQ0hF3BglMB8GA1UdIwQY
MBaAFJY6D8R6et9ihFrW3Nf7dhpsGf7bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGpvUHhIcDYzMktFV3RiYzFfdDJHbXdaX3RzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8xOWM5ZTEtODU0My00ZjUwLWFjYWUt
ZTQwNDVkOGNmZThmLzEvbGpvUHhIcDYzMktFV3RiYzFfdDJHbXdaX3RzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8xOWM5ZTEtODU0My00ZjUwLWFjYWUtZTQwNDVkOGNmZThm
LzEvbGpvUHhIcDYzMktFV3RiYzFfdDJHbXdaX3RzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWMg6Nkzk
Jai/REy4qKbFWgQ8JKDQWQIAdpEJDCeyncr7L154a4mT01ql2FFel2W25a17b3Mw
WCBKrhV3htHLeJz6wuzHf/UNMwy4QpPMB0Hr3+I+8sJHcNlw4dvzcc/oRkIAxGRE
J0WnuLkJ1Uc7FprvflCCrRh348cAisgTP7nGN+6ASE8LY4KIpr6ndatP1I95eFvO
cc6RGWVDkKsXwt9SwmIBbH9Q9zljE3jesaeP0R6sJsSExvWNRGMwCYuP+TiMRkLm
9Px1yzaAfqyjHmeEUu832AdVkWmSvJugAAaZOUvQ8TUoKRmSJhta0bdDo18SGreU
PMcEg0hgDTIj5Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:06:03 2025 by rpki-client