Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft
File: lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft (raw, json)
Hash identifier: 6cWBFieDn7MWF/kFcS6C3Dg+JTrC5d+cIqEvNMKhqVY=
Subject key identifier: FE:0D:F7:66:D1:46:61:79:82:AE:C3:64:B7:92:C2:85:AB:0E:32:4B
Authority key identifier: 95:52:46:B1:B6:5C:95:04:62:59:C2:24:8C:1D:30:6F:F1:35:B9:84
Certificate issuer: /CN=955246b1b65c95046259c2248c1d306ff135b984
Certificate serial: 0197B8FCFBC727B2C218D347956FEE6369BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lVJGsbZclQRiWcIkjB0wb_E1uYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft
Manifest number: 10FA
Signing time: Sun 29 Jun 2025 00:01:16 +0000
Manifest this update: Sun 29 Jun 2025 00:01:16 +0000
Manifest next update: Mon 30 Jun 2025 00:01:16 +0000
Files and hashes: 1: d62eL6CZy4sqfG2HJBBtw2_a_Xo.roa (hash: VQJVLEqVpBvW0EhwHp75V7iW+dHN3GO38t078QYSo/g=)
2: lVJGsbZclQRiWcIkjB0wb_E1uYQ.crl (hash: 9B6hwIjpNfd7uvV00G9qJCViyzGjG1xKxcoL/4REPj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lVJGsbZclQRiWcIkjB0wb_E1uYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fc:fb:c7:27:b2:c2:18:d3:47:95:6f:ee:63:69:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=955246b1b65c95046259c2248c1d306ff135b984
Validity
Not Before: Jun 29 00:01:16 2025 GMT
Not After : Jun 30 00:01:16 2025 GMT
Subject: CN=fe0df766d146617982aec364b792c285ab0e324b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:52:ed:35:b0:3f:6c:45:c8:fb:45:6f:1e:bd:
f5:65:66:75:e4:7d:9e:fe:0d:65:ed:d2:c6:2e:6a:
31:97:e5:d0:5b:2d:53:35:57:8f:52:31:e4:84:f0:
50:54:89:5e:81:9c:8a:04:6f:5a:93:b6:ce:c2:78:
c6:cb:eb:db:fd:c5:d7:dd:78:65:57:2f:3f:4a:56:
8c:b7:da:3c:46:f2:2d:37:ef:c0:88:c3:d2:a5:22:
57:6e:2c:23:ee:a7:f6:a4:0e:1e:75:ec:df:1c:c7:
e2:7b:2e:c1:6d:cc:49:2c:e9:df:62:be:50:ea:cb:
5d:7a:3b:18:b6:d5:51:88:78:b2:93:2e:ba:ec:79:
c0:d5:47:63:95:08:f4:c7:da:37:50:35:db:81:18:
8c:70:62:d2:92:76:76:23:b0:78:0d:05:7d:db:b0:
8d:e4:f7:16:72:49:46:9e:cb:e6:32:51:a3:ee:df:
94:65:0d:db:00:86:df:3a:e0:78:da:ab:bb:f8:52:
9d:56:d5:b3:9f:71:19:2b:d4:8b:5d:e8:b3:d5:c2:
40:62:09:89:75:c0:37:f9:b6:bf:b1:93:c7:9b:97:
c6:65:b5:e9:68:25:8d:33:78:e2:4a:da:f2:25:ec:
4c:9b:de:9f:20:ec:0b:b4:b9:92:66:52:d7:ad:9c:
59:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:0D:F7:66:D1:46:61:79:82:AE:C3:64:B7:92:C2:85:AB:0E:32:4B
X509v3 Authority Key Identifier:
keyid:95:52:46:B1:B6:5C:95:04:62:59:C2:24:8C:1D:30:6F:F1:35:B9:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lVJGsbZclQRiWcIkjB0wb_E1uYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:1e:4f:a7:76:6d:f2:a1:b5:32:86:c2:5d:2e:b4:12:10:70:
e4:9a:fa:4f:32:21:e1:52:60:b5:22:6f:56:99:df:97:5e:47:
ab:f8:cb:b2:4f:4f:f6:55:6f:08:5c:b1:0f:be:23:65:2f:88:
ac:f9:5c:4a:48:14:ad:b0:c5:ef:7d:d6:3c:9c:25:19:a0:93:
43:ff:97:c7:8c:12:cb:58:b0:cb:4e:9a:9a:71:51:90:db:f1:
87:94:41:80:1b:93:4a:66:02:72:01:5a:0f:ac:1d:d7:a3:7f:
5d:71:af:78:21:30:4a:37:b9:71:35:e2:d4:60:f5:f5:0b:e9:
8a:40:03:59:94:81:44:1e:8d:a2:ec:df:e4:63:75:20:0a:e9:
1e:78:16:06:d1:8b:80:d1:ca:8f:8d:ee:71:25:e9:63:fc:45:
c3:c7:57:56:5c:c7:2f:dc:30:ba:e2:49:70:ff:b4:ce:8b:6f:
1e:c4:7a:e4:b6:a1:14:6c:d5:38:eb:03:4d:e1:5f:5d:19:b4:
8e:91:8f:db:d1:c0:a0:9f:a2:e7:e6:c4:8a:bb:2b:97:5d:52:
88:1a:30:32:5d:99:16:32:a4:c6:cb:92:43:0d:4d:f5:a8:42:
46:05:18:28:60:33:70:66:27:ad:a5:c4:77:03:9b:a9:bc:6c:
56:36:e4:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4/PvHJ7LCGNNHlW/uY2m+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NTI0NmIxYjY1Yzk1MDQ2MjU5YzIyNDhjMWQzMDZmZjEz
NWI5ODQwHhcNMjUwNjI5MDAwMTE2WhcNMjUwNjMwMDAwMTE2WjAzMTEwLwYDVQQD
EyhmZTBkZjc2NmQxNDY2MTc5ODJhZWMzNjRiNzkyYzI4NWFiMGUzMjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVLtNbA/bEXI+0VvHr31ZWZ15H2e
/g1l7dLGLmoxl+XQWy1TNVePUjHkhPBQVIlegZyKBG9ak7bOwnjGy+vb/cXX3Xhl
Vy8/SlaMt9o8RvItN+/AiMPSpSJXbiwj7qf2pA4edezfHMfiey7BbcxJLOnfYr5Q
6stdejsYttVRiHiyky667HnA1UdjlQj0x9o3UDXbgRiMcGLSknZ2I7B4DQV927CN
5PcWcklGnsvmMlGj7t+UZQ3bAIbfOuB42qu7+FKdVtWzn3EZK9SLXeiz1cJAYgmJ
dcA3+ba/sZPHm5fGZbXpaCWNM3jiStryJexMm96fIOwLtLmSZlLXrZxZXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP4N92bRRmF5gq7DZLeSwoWrDjJLMB8GA1UdIwQY
MBaAFJVSRrG2XJUEYlnCJIwdMG/xNbmEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFZKR3NiWmNsUVJpV2NJa2pCMHdiX0UxdVlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9hN2M4ZDAtYzkyZC00NWQwLTkxYTMt
MjhjMjJhYmYwOGQwLzEvbFZKR3NiWmNsUVJpV2NJa2pCMHdiX0UxdVlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9hN2M4ZDAtYzkyZC00NWQwLTkxYTMtMjhjMjJhYmYwOGQw
LzEvbFZKR3NiWmNsUVJpV2NJa2pCMHdiX0UxdVlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjx5Pp3Zt
8qG1MobCXS60EhBw5Jr6TzIh4VJgtSJvVpnfl15Hq/jLsk9P9lVvCFyxD74jZS+I
rPlcSkgUrbDF733WPJwlGaCTQ/+Xx4wSy1iwy06amnFRkNvxh5RBgBuTSmYCcgFa
D6wd16N/XXGveCEwSje5cTXi1GD19QvpikADWZSBRB6Nouzf5GN1IArpHngWBtGL
gNHKj43ucSXpY/xFw8dXVlzHL9wwuuJJcP+0zotvHsR65LahFGzVOOsDTeFfXRm0
jpGP29HAoJ+i5+bEirsrl11SiBowMl2ZFjKkxsuSQw1N9ahCRgUYKGAzcGYnraXE
dwObqbxsVjbkTQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:42:55 2025 by rpki-client