Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft
File: LzFLwAp-WuIzSeBUBik6fWBgzaE.mft (raw, json)
Hash identifier: BRKlEQHmbMeGmM+oQ9xV8V85eIBiT4+ldSlCSI6L+Q0=
Subject key identifier: BB:49:CA:D9:C5:52:BC:37:5F:97:29:10:17:EF:F7:1E:7D:71:82:F9
Authority key identifier: 2F:31:4B:C0:0A:7E:5A:E2:33:49:E0:54:06:29:3A:7D:60:60:CD:A1
Certificate issuer: /CN=2f314bc00a7e5ae23349e05406293a7d6060cda1
Certificate serial: 0197B7452926F421B08E5E956AE1A3C1DD62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft
Manifest number: 1277
Signing time: Sat 28 Jun 2025 16:00:52 +0000
Manifest this update: Sat 28 Jun 2025 16:00:52 +0000
Manifest next update: Sun 29 Jun 2025 16:00:52 +0000
Files and hashes: 1: 1-d5J5W-VmdNEPvaUUIc9QmXJa7c.roa (hash: WEje3N6tM8UQY4DTr2W4pxQIyOYapcmAGgNCDl+FllM=)
2: LzFLwAp-WuIzSeBUBik6fWBgzaE.crl (hash: pwgp2M5uZZ2Tlcjr8i6GDTFZd7BIgn8cD02dopj47KA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:29:26:f4:21:b0:8e:5e:95:6a:e1:a3:c1:dd:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f314bc00a7e5ae23349e05406293a7d6060cda1
Validity
Not Before: Jun 28 16:00:52 2025 GMT
Not After : Jun 29 16:00:52 2025 GMT
Subject: CN=bb49cad9c552bc375f97291017eff71e7d7182f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9d:c5:05:54:08:12:c4:99:3e:3a:a8:76:cc:
33:c3:be:34:a9:9b:ab:7a:10:03:33:4d:30:fd:0c:
90:e6:3c:b5:1b:87:ff:9f:0d:36:4b:b8:b8:4e:dc:
5e:28:8c:c7:52:d8:51:12:5f:57:48:20:31:3e:b1:
13:68:7c:c3:63:c7:45:00:e1:32:99:e2:24:19:68:
8e:28:37:1d:52:3f:2b:f6:43:c4:13:77:a6:33:9e:
86:89:e7:7f:a2:68:da:ab:fa:dc:8e:b7:8d:e9:3c:
41:46:2b:f9:9e:b5:b3:6e:a8:44:2b:2f:e7:4c:06:
49:8a:59:81:73:ee:d0:b3:af:7b:a8:33:e6:41:76:
ff:41:eb:82:0c:42:91:3f:49:dc:20:8e:ed:d9:fc:
e2:06:1f:a0:97:3b:33:00:66:ed:e6:fc:90:65:e1:
4f:f2:7e:db:92:43:9e:b1:29:83:6e:c2:33:74:66:
81:0f:dc:29:c6:e8:9d:35:91:64:01:bc:1a:f8:3d:
e8:e2:c2:89:6f:c0:76:68:ef:25:f8:df:8a:c1:54:
cf:c2:71:a2:82:ab:81:8d:51:a7:eb:ac:58:6a:34:
c2:e1:45:5b:71:4a:fe:4f:5c:87:bd:69:04:14:a8:
6d:a3:8d:5d:86:6c:a8:70:68:b6:e5:24:27:73:33:
e2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:49:CA:D9:C5:52:BC:37:5F:97:29:10:17:EF:F7:1E:7D:71:82:F9
X509v3 Authority Key Identifier:
keyid:2F:31:4B:C0:0A:7E:5A:E2:33:49:E0:54:06:29:3A:7D:60:60:CD:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzFLwAp-WuIzSeBUBik6fWBgzaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5f49d-10b0-4818-a0c4-7c0b9b19fcfb/1/LzFLwAp-WuIzSeBUBik6fWBgzaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:11:38:ea:48:e7:33:14:10:f2:d5:84:17:42:e2:c2:0a:30:
6e:5f:98:53:53:68:8f:3c:50:21:86:fb:26:f8:d0:09:2d:0d:
d1:f5:4a:92:d5:4a:89:b9:ce:14:32:05:80:9c:6b:a1:e4:a0:
ed:2e:d6:3e:d4:55:7d:e0:e3:bd:7f:01:8b:2f:09:22:9a:58:
6a:e6:23:39:15:90:89:4c:35:90:77:26:d4:51:3e:b1:3c:f8:
25:4d:ba:bf:59:82:22:48:26:bd:b7:88:37:9f:8c:bc:8c:9a:
ac:bc:f7:ca:02:1a:0a:55:80:d9:d1:7e:bb:6d:7e:9f:f4:7d:
90:88:5c:ae:53:18:19:88:48:17:69:08:73:ef:6e:91:32:47:
7a:69:3c:5e:a9:b5:0d:ef:b5:10:a4:24:b6:1c:01:92:f2:e8:
52:18:e4:14:e7:ce:57:6c:bd:6a:34:58:7f:75:d8:da:66:5c:
2d:e7:ea:42:0e:87:8c:89:21:e7:d4:68:ff:d1:23:e5:71:4f:
71:b5:23:f7:49:de:be:02:bd:14:cd:d7:64:73:e2:8c:a4:4f:
7c:7c:8d:e8:89:6f:e5:50:d4:c6:a0:5b:14:84:18:6a:19:9b:
2c:37:bb:dc:1d:23:e5:84:88:3e:cd:57:95:8b:12:c5:9d:d4:
a2:32:7f:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RSkm9CGwjl6VauGjwd1iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMzE0YmMwMGE3ZTVhZTIzMzQ5ZTA1NDA2MjkzYTdkNjA2
MGNkYTEwHhcNMjUwNjI4MTYwMDUyWhcNMjUwNjI5MTYwMDUyWjAzMTEwLwYDVQQD
EyhiYjQ5Y2FkOWM1NTJiYzM3NWY5NzI5MTAxN2VmZjcxZTdkNzE4MmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJ3FBVQIEsSZPjqodswzw740qZur
ehADM00w/QyQ5jy1G4f/nw02S7i4TtxeKIzHUthREl9XSCAxPrETaHzDY8dFAOEy
meIkGWiOKDcdUj8r9kPEE3emM56Gied/omjaq/rcjreN6TxBRiv5nrWzbqhEKy/n
TAZJilmBc+7Qs697qDPmQXb/QeuCDEKRP0ncII7t2fziBh+glzszAGbt5vyQZeFP
8n7bkkOesSmDbsIzdGaBD9wpxuidNZFkAbwa+D3o4sKJb8B2aO8l+N+KwVTPwnGi
gquBjVGn66xYajTC4UVbcUr+T1yHvWkEFKhto41dhmyocGi25SQnczPizwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLtJytnFUrw3X5cpEBfv9x59cYL5MB8GA1UdIwQY
MBaAFC8xS8AKflriM0ngVAYpOn1gYM2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHpGTHdBcC1XdUl6U2VCVUJpazZmV0JnemFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9jNWY0OWQtMTBiMC00ODE4LWEwYzQt
N2MwYjliMTlmY2ZiLzEvTHpGTHdBcC1XdUl6U2VCVUJpazZmV0JnemFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9jNWY0OWQtMTBiMC00ODE4LWEwYzQtN2MwYjliMTlmY2Zi
LzEvTHpGTHdBcC1XdUl6U2VCVUJpazZmV0JnemFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsxE46kjn
MxQQ8tWEF0Liwgowbl+YU1NojzxQIYb7JvjQCS0N0fVKktVKibnOFDIFgJxroeSg
7S7WPtRVfeDjvX8Biy8JIppYauYjORWQiUw1kHcm1FE+sTz4JU26v1mCIkgmvbeI
N5+MvIyarLz3ygIaClWA2dF+u21+n/R9kIhcrlMYGYhIF2kIc+9ukTJHemk8Xqm1
De+1EKQkthwBkvLoUhjkFOfOV2y9ajRYf3XY2mZcLefqQg6HjIkh59Ro/9Ej5XFP
cbUj90nevgK9FM3XZHPijKRPfHyN6Ilv5VDUxqBbFIQYahmbLDe73B0j5YSIPs1X
lYsSxZ3UojJ/2w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:34:29 2025 by rpki-client