Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.mft
File: lCbTCdDbAt8dfgS7s5MTvR3xM1g.mft (raw, json)
Hash identifier: /G68WQhfcoJq2fZYwZkKLO12OoPMV5emU9pMeI15rnw=
Subject key identifier: 1E:5D:1A:A2:2F:A8:F2:6C:BF:25:95:42:F8:41:4F:8A:14:29:3E:54
Authority key identifier: 94:26:D3:09:D0:DB:02:DF:1D:7E:04:BB:B3:93:13:BD:1D:F1:33:58
Certificate issuer: /CN=9426d309d0db02df1d7e04bbb39313bd1df13358
Certificate serial: 0197B6A12E1EDDED7753376749058551F0A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCbTCdDbAt8dfgS7s5MTvR3xM1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.mft
Manifest number: 0C41
Signing time: Sat 28 Jun 2025 13:01:45 +0000
Manifest this update: Sat 28 Jun 2025 13:01:45 +0000
Manifest next update: Sun 29 Jun 2025 13:01:45 +0000
Files and hashes: 1: JXlTdhSRTj5ed6JsXH8jc65Ou3M.roa (hash: ddm9bvtQw1cVvC7zNZuu5Y38UnapRIQ8ZhO6Ib5Ks0o=)
2: lCbTCdDbAt8dfgS7s5MTvR3xM1g.crl (hash: KFeLO3mBLvtC28hblKaA5wKfLce/17s9c22qVAo4Ey0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/lCbTCdDbAt8dfgS7s5MTvR3xM1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:2e:1e:dd:ed:77:53:37:67:49:05:85:51:f0:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9426d309d0db02df1d7e04bbb39313bd1df13358
Validity
Not Before: Jun 28 13:01:45 2025 GMT
Not After : Jun 29 13:01:45 2025 GMT
Subject: CN=1e5d1aa22fa8f26cbf259542f8414f8a14293e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4f:0a:82:3b:86:c3:07:6f:20:db:1d:63:d7:
6b:51:da:fc:60:55:2a:24:a4:f0:f2:3e:7e:a9:ab:
d9:6c:78:ba:a2:ac:ab:45:d2:6d:87:f9:71:b8:f4:
86:ae:ba:23:1e:7c:c3:1f:ea:13:0e:fc:5c:7d:4b:
5f:f9:92:12:12:ec:1b:42:fd:3b:2a:d0:ac:66:9d:
22:e7:6a:be:8e:f6:11:56:d6:ce:2c:7c:43:51:9e:
b5:7b:20:ba:26:04:e3:85:b9:5b:18:ea:2c:7b:f3:
78:67:f2:11:37:24:80:55:25:a6:4a:31:b4:b7:98:
e8:1a:3b:98:a9:b6:cd:a8:57:6e:6c:cd:12:33:46:
60:a9:e1:a8:6d:fa:34:e2:32:c9:c8:1c:b9:80:8a:
db:ca:e6:c3:ec:b9:fb:8e:fa:72:e3:95:27:21:2c:
0e:51:83:54:83:72:e7:8d:04:1d:59:cc:94:02:c6:
af:8a:0a:1a:23:7a:2b:08:94:90:f8:50:71:89:19:
49:75:54:fb:5f:0b:0f:9f:e9:71:0b:14:b6:0f:16:
7e:29:98:5f:0b:21:52:a5:7b:eb:73:0e:d3:26:cb:
d6:3a:97:fe:28:7e:52:f9:30:e6:95:ac:8d:17:25:
95:03:74:3c:2f:0b:03:a5:5b:57:d5:1f:e6:95:22:
d9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:5D:1A:A2:2F:A8:F2:6C:BF:25:95:42:F8:41:4F:8A:14:29:3E:54
X509v3 Authority Key Identifier:
keyid:94:26:D3:09:D0:DB:02:DF:1D:7E:04:BB:B3:93:13:BD:1D:F1:33:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCbTCdDbAt8dfgS7s5MTvR3xM1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:0a:ba:f1:a4:f7:70:25:48:9a:a0:34:cc:1a:07:09:34:5e:
fa:91:86:e6:1f:66:03:80:d1:04:78:c8:64:6b:d4:c3:bb:8e:
46:2c:2c:08:ce:f6:d9:1a:55:a1:a2:19:01:a0:24:d7:9f:ed:
c5:6a:6b:e9:ac:40:aa:7f:2a:10:64:22:84:41:54:55:b6:5a:
c4:af:b8:1c:91:79:3f:f6:a4:87:63:43:00:1e:a2:c6:6d:91:
87:b1:bb:10:8f:31:71:71:c4:82:24:9a:91:f7:6c:d2:4a:ed:
2b:66:fa:7a:2a:e1:3e:11:aa:dd:22:ad:59:e3:28:73:1c:0f:
ea:93:67:43:f2:23:12:5a:f2:02:23:09:36:bc:6f:5e:44:92:
48:cd:d8:73:4d:41:3e:8b:f4:ac:02:98:ef:3b:52:16:96:5e:
25:af:c1:49:48:d0:87:ba:78:d1:7f:cc:c4:31:0a:aa:f6:3e:
1b:d0:c6:9e:15:a8:29:64:69:71:d9:bf:d7:df:1f:0b:13:60:
dc:8e:62:29:f8:be:6d:10:62:c2:2c:a0:4b:35:c4:8e:c4:35:
e4:b7:5b:f8:f3:f0:6d:f4:09:dd:21:94:d3:11:b7:20:6e:b9:
fd:e1:7f:0d:4c:07:f7:cf:01:72:da:19:85:be:9f:cb:3f:49:
3a:14:2e:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oS4e3e13UzdnSQWFUfCkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MjZkMzA5ZDBkYjAyZGYxZDdlMDRiYmIzOTMxM2JkMWRm
MTMzNTgwHhcNMjUwNjI4MTMwMTQ1WhcNMjUwNjI5MTMwMTQ1WjAzMTEwLwYDVQQD
EygxZTVkMWFhMjJmYThmMjZjYmYyNTk1NDJmODQxNGY4YTE0MjkzZTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsE8KgjuGwwdvINsdY9drUdr8YFUq
JKTw8j5+qavZbHi6oqyrRdJth/lxuPSGrrojHnzDH+oTDvxcfUtf+ZISEuwbQv07
KtCsZp0i52q+jvYRVtbOLHxDUZ61eyC6JgTjhblbGOose/N4Z/IRNySAVSWmSjG0
t5joGjuYqbbNqFdubM0SM0ZgqeGobfo04jLJyBy5gIrbyubD7Ln7jvpy45UnISwO
UYNUg3LnjQQdWcyUAsavigoaI3orCJSQ+FBxiRlJdVT7XwsPn+lxCxS2DxZ+KZhf
CyFSpXvrcw7TJsvWOpf+KH5S+TDmlayNFyWVA3Q8LwsDpVtX1R/mlSLZDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB5dGqIvqPJsvyWVQvhBT4oUKT5UMB8GA1UdIwQY
MBaAFJQm0wnQ2wLfHX4Eu7OTE70d8TNYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbENiVENkRGJBdDhkZmdTN3M1TVR2UjN4TTFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi85MTQzMWEtYjUwZC00ZDUwLWE2ZDYt
ZjE3ZjA5NWRkM2FmLzEvbENiVENkRGJBdDhkZmdTN3M1TVR2UjN4TTFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi85MTQzMWEtYjUwZC00ZDUwLWE2ZDYtZjE3ZjA5NWRkM2Fm
LzEvbENiVENkRGJBdDhkZmdTN3M1TVR2UjN4TTFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiwq68aT3
cCVImqA0zBoHCTRe+pGG5h9mA4DRBHjIZGvUw7uORiwsCM722RpVoaIZAaAk15/t
xWpr6axAqn8qEGQihEFUVbZaxK+4HJF5P/akh2NDAB6ixm2Rh7G7EI8xcXHEgiSa
kfds0krtK2b6eirhPhGq3SKtWeMocxwP6pNnQ/IjElryAiMJNrxvXkSSSM3Yc01B
Pov0rAKY7ztSFpZeJa/BSUjQh7p40X/MxDEKqvY+G9DGnhWoKWRpcdm/198fCxNg
3I5iKfi+bRBiwiygSzXEjsQ15Ldb+PPwbfQJ3SGU0xG3IG65/eF/DUwH988BctoZ
hb6fyz9JOhQufg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:40:28 2025 by rpki-client