Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft
File: LQSlVAgkJpvlwR8gEouGQUzVWUU.mft (raw, json)
Hash identifier: BugFRM4/PTy5JDLWD9bDKbC8ZEKikcNzSwHpGtXjaY0=
Subject key identifier: 77:D2:1E:66:9B:79:9C:04:E2:01:3C:DD:14:F3:36:40:0C:17:73:AB
Authority key identifier: 2D:04:A5:54:08:24:26:9B:E5:C1:1F:20:12:8B:86:41:4C:D5:59:45
Certificate issuer: /CN=2d04a5540824269be5c11f20128b86414cd55945
Certificate serial: 0197B745B74EBB28C8A206E30BC1F9E2D137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQSlVAgkJpvlwR8gEouGQUzVWUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft
Manifest number: 0105
Signing time: Sat 28 Jun 2025 16:01:28 +0000
Manifest this update: Sat 28 Jun 2025 16:01:28 +0000
Manifest next update: Sun 29 Jun 2025 16:01:28 +0000
Files and hashes: 1: LQSlVAgkJpvlwR8gEouGQUzVWUU.crl (hash: hf5sN2z6qKIkHQeyL6DcybPmUnJcurQerW4pGv4np6c=)
2: LY5WGxr4gD_bvJfdNplUqALGFP0.roa (hash: tD9kvMegisj3R+7j2aUVrLlOEggEnyS436eQuZ4pUas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LQSlVAgkJpvlwR8gEouGQUzVWUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:b7:4e:bb:28:c8:a2:06:e3:0b:c1:f9:e2:d1:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d04a5540824269be5c11f20128b86414cd55945
Validity
Not Before: Jun 28 16:01:28 2025 GMT
Not After : Jun 29 16:01:28 2025 GMT
Subject: CN=77d21e669b799c04e2013cdd14f336400c1773ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f0:57:1b:4f:61:57:57:77:cb:0a:7e:74:c4:
a9:ed:dc:25:df:6c:63:2f:6c:10:43:9f:bf:08:f5:
73:d9:41:11:c5:61:10:63:48:36:c8:0a:f2:bd:84:
d1:dd:e4:9b:30:5d:87:9f:cb:fc:d9:32:f1:14:e0:
ea:0f:6a:73:9a:ea:0e:01:51:ab:e9:92:44:b5:4c:
3a:72:2c:d4:e1:ae:e5:9c:4d:dc:67:52:fb:2b:ab:
03:65:59:38:69:43:5f:da:17:23:b6:98:fe:fb:dd:
30:78:94:20:a7:d7:d3:0b:29:bc:b3:e9:d0:60:f8:
ef:ee:cc:70:bf:b2:f9:23:50:b1:58:a5:b9:6a:59:
30:7c:fa:9b:be:40:66:23:84:6b:60:ce:fe:9a:c5:
06:0e:cc:4c:0c:72:55:4d:c3:33:11:5d:0b:50:67:
97:a7:c2:70:ad:ae:e0:ad:9d:22:c9:38:09:71:5e:
57:87:ac:7f:98:da:fc:16:78:37:38:c8:af:c3:b7:
27:b2:62:ef:a3:3b:91:80:ad:69:23:4f:22:4b:c0:
b2:b2:5a:5b:f4:42:e0:5d:40:a9:43:e8:bb:cf:29:
24:46:0f:60:9f:24:38:ec:5d:80:97:ba:7f:2a:fb:
83:75:4d:d9:7d:2b:dd:12:17:da:a1:77:b1:45:3e:
64:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D2:1E:66:9B:79:9C:04:E2:01:3C:DD:14:F3:36:40:0C:17:73:AB
X509v3 Authority Key Identifier:
keyid:2D:04:A5:54:08:24:26:9B:E5:C1:1F:20:12:8B:86:41:4C:D5:59:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQSlVAgkJpvlwR8gEouGQUzVWUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/09d854-9940-4dd5-a747-ceb27bfcb947/1/LQSlVAgkJpvlwR8gEouGQUzVWUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:b9:fd:a7:29:74:8f:9d:9b:b5:72:fd:71:35:d3:49:8b:01:
f3:d4:fe:f1:a4:d2:73:82:49:98:8d:e7:93:d8:d9:67:06:ef:
29:40:3d:ea:c7:ab:56:63:b3:f3:ac:2f:a2:f2:68:19:a2:a3:
fc:2c:c1:af:3d:3c:da:76:09:86:bf:9f:0a:12:c3:31:a4:0f:
dd:74:4c:e0:21:73:a8:c6:56:4b:3c:f4:5d:c9:c7:91:fd:56:
63:5b:e1:bf:76:d5:25:0b:f4:26:df:14:d2:5b:bb:57:c5:f1:
f4:aa:f6:9d:c9:12:aa:b5:ae:f5:43:dd:2f:13:7a:e2:04:40:
9f:61:4f:f6:28:03:46:64:48:4b:80:b9:23:f8:25:f2:7e:22:
95:b2:08:62:87:61:89:93:f7:44:97:75:21:6b:db:43:3f:54:
9b:09:9f:8c:54:5b:0e:f3:f9:3c:67:7e:4d:35:cc:db:fc:5a:
66:d3:55:83:8d:85:8e:ac:48:ff:b9:6f:55:12:21:37:3a:35:
c3:4c:6b:73:ba:7b:d0:f4:52:7e:b4:55:37:25:76:76:85:7a:
9c:58:dc:c3:9c:50:15:b8:82:a2:d2:4a:ff:5f:5e:4a:5c:93:
10:57:e2:04:4e:cb:ff:fb:d0:ab:ed:8e:81:a7:d5:a2:0e:c4:
72:0c:de:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RbdOuyjIogbjC8H54tE3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMDRhNTU0MDgyNDI2OWJlNWMxMWYyMDEyOGI4NjQxNGNk
NTU5NDUwHhcNMjUwNjI4MTYwMTI4WhcNMjUwNjI5MTYwMTI4WjAzMTEwLwYDVQQD
Eyg3N2QyMWU2NjliNzk5YzA0ZTIwMTNjZGQxNGYzMzY0MDBjMTc3M2FiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPBXG09hV1d3ywp+dMSp7dwl32xj
L2wQQ5+/CPVz2UERxWEQY0g2yAryvYTR3eSbMF2Hn8v82TLxFODqD2pzmuoOAVGr
6ZJEtUw6cizU4a7lnE3cZ1L7K6sDZVk4aUNf2hcjtpj++90weJQgp9fTCym8s+nQ
YPjv7sxwv7L5I1CxWKW5alkwfPqbvkBmI4RrYM7+msUGDsxMDHJVTcMzEV0LUGeX
p8Jwra7grZ0iyTgJcV5Xh6x/mNr8Fng3OMivw7cnsmLvozuRgK1pI08iS8Cyslpb
9ELgXUCpQ+i7zykkRg9gnyQ47F2Al7p/KvuDdU3ZfSvdEhfaoXexRT5kEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHfSHmabeZwE4gE83RTzNkAMF3OrMB8GA1UdIwQY
MBaAFC0EpVQIJCab5cEfIBKLhkFM1VlFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFFTbFZBZ2tKcHZsd1I4Z0VvdUdRVXpWV1VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8wOWQ4NTQtOTk0MC00ZGQ1LWE3NDct
Y2ViMjdiZmNiOTQ3LzEvTFFTbFZBZ2tKcHZsd1I4Z0VvdUdRVXpWV1VVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi8wOWQ4NTQtOTk0MC00ZGQ1LWE3NDctY2ViMjdiZmNiOTQ3
LzEvTFFTbFZBZ2tKcHZsd1I4Z0VvdUdRVXpWV1VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB7n9pyl0
j52btXL9cTXTSYsB89T+8aTSc4JJmI3nk9jZZwbvKUA96serVmOz86wvovJoGaKj
/CzBrz082nYJhr+fChLDMaQP3XRM4CFzqMZWSzz0XcnHkf1WY1vhv3bVJQv0Jt8U
0lu7V8Xx9Kr2nckSqrWu9UPdLxN64gRAn2FP9igDRmRIS4C5I/gl8n4ilbIIYodh
iZP3RJd1IWvbQz9UmwmfjFRbDvP5PGd+TTXM2/xaZtNVg42FjqxI/7lvVRIhNzo1
w0xrc7p70PRSfrRVNyV2doV6nFjcw5xQFbiCotJK/19eSlyTEFfiBE7L//vQq+2O
gafVog7Ecgzelg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:26:52 2025 by rpki-client