Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft
File: lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft (raw, json)
Hash identifier: pxbiMUoRuo7M1P9oLRJZdAxi7lipjSgBBkNKuneQZeQ=
Subject key identifier: EF:BC:F0:E1:53:86:C0:F4:48:C0:B5:DA:92:FC:D9:59:F1:EE:3D:73
Authority key identifier: 97:15:33:CB:7A:67:96:AC:5C:38:2B:38:DC:F4:59:F9:17:69:31:F4
Certificate issuer: /CN=971533cb7a6796ac5c382b38dcf459f9176931f4
Certificate serial: 0197B9337111B2EF4C7D2F9A1E556D4D4529
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft
Manifest number: 0662
Signing time: Sun 29 Jun 2025 01:00:45 +0000
Manifest this update: Sun 29 Jun 2025 01:00:45 +0000
Manifest next update: Mon 30 Jun 2025 01:00:45 +0000
Files and hashes: 1: lxUzy3pnlqxcOCs43PRZ-RdpMfQ.crl (hash: OhTAIIDrTxyCbZSI1e9f4tatAGsROpM+mMUaF0519fQ=)
2: tU-16s9tq9lFPI9LdHnUudxWQ80.roa (hash: C3zkVEZCC33fk0KY3UR1pX59nVM27axL5/PozEIPAG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:71:11:b2:ef:4c:7d:2f:9a:1e:55:6d:4d:45:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971533cb7a6796ac5c382b38dcf459f9176931f4
Validity
Not Before: Jun 29 01:00:45 2025 GMT
Not After : Jun 30 01:00:45 2025 GMT
Subject: CN=efbcf0e15386c0f448c0b5da92fcd959f1ee3d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:19:36:34:b5:0c:f0:d6:61:12:cb:b1:65:c7:
eb:3e:bb:a0:f0:2b:1b:ac:6d:53:29:c7:e2:60:25:
29:ba:d7:8e:aa:85:c5:fc:96:ad:c2:bb:b7:d4:93:
d5:7f:fc:3b:95:ba:8d:dd:ad:96:76:43:ab:cb:97:
42:85:a9:75:88:73:c3:7b:06:c8:a6:89:1e:16:83:
1c:f5:43:4b:78:16:63:35:e0:16:1a:b2:7b:35:c1:
e8:a3:fa:52:cc:d5:c5:bd:8f:cd:98:1e:7c:89:61:
51:59:a6:85:b7:09:72:08:33:50:62:b9:ed:b6:32:
f0:92:e5:cf:82:4f:8f:f7:d9:e9:2b:73:6d:06:7a:
1b:c3:93:cf:90:eb:f1:05:9c:12:31:83:65:56:22:
57:12:69:44:29:c4:f6:85:9f:99:fd:ba:37:7b:0b:
df:57:7e:f5:15:4f:05:96:09:6a:a8:d9:f7:4f:f1:
6e:b0:d4:ab:10:93:e4:dc:25:1c:f6:b4:4c:9a:18:
d8:d8:f1:2b:6a:30:a6:10:2c:15:da:a3:ab:8a:41:
85:7b:86:27:85:ce:72:79:21:a3:de:59:83:ea:b4:
c9:58:23:45:67:b7:17:b0:1c:a2:ed:7b:07:7a:22:
b9:ca:5d:92:fd:6d:92:86:d4:e3:6e:73:88:ef:67:
4f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:BC:F0:E1:53:86:C0:F4:48:C0:B5:DA:92:FC:D9:59:F1:EE:3D:73
X509v3 Authority Key Identifier:
keyid:97:15:33:CB:7A:67:96:AC:5C:38:2B:38:DC:F4:59:F9:17:69:31:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d6577d-f2d2-4530-b9d2-39eca472668b/1/lxUzy3pnlqxcOCs43PRZ-RdpMfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:6f:1e:34:44:e3:ad:62:83:0a:17:e5:57:d5:6e:d4:a3:0c:
b0:82:bc:07:b9:04:f9:bf:95:d2:f4:94:b7:4e:aa:56:50:9b:
85:d3:eb:35:b5:09:39:ea:ad:a4:39:48:74:95:8d:54:b9:ef:
22:83:1f:92:12:46:91:8a:9e:c8:b0:34:de:08:c9:0f:ff:0a:
e7:2d:67:6a:ed:af:a4:95:54:25:eb:04:7a:65:21:fb:d5:90:
03:b7:0f:66:67:71:28:d3:0e:c6:70:22:4b:c9:bd:e2:74:b2:
99:d3:f1:b1:47:a3:e9:82:6f:c6:1f:fc:5a:60:fe:b5:30:f8:
2e:f0:9b:27:e8:dd:c2:82:0b:bd:05:a4:4a:0b:db:f2:9f:a0:
fb:65:87:af:21:11:f9:9a:bf:e1:e9:0a:79:32:b6:53:bc:56:
16:1a:4a:b2:c1:bb:46:ab:a9:02:46:c3:7d:15:6a:3d:b8:57:
08:c1:97:9c:2e:df:70:71:83:65:6b:ee:59:65:20:1b:be:23:
c7:38:81:8f:2e:24:c8:73:9a:2e:5a:1c:74:d0:17:0d:a2:4a:
26:48:18:3f:63:30:34:28:1b:13:19:3f:bf:13:37:13:48:67:
45:4c:39:9c:5a:18:ee:25:e8:8f:88:14:f2:bb:fa:40:de:9f:
8e:0e:7c:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5M3ERsu9MfS+aHlVtTUUpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MTUzM2NiN2E2Nzk2YWM1YzM4MmIzOGRjZjQ1OWY5MTc2
OTMxZjQwHhcNMjUwNjI5MDEwMDQ1WhcNMjUwNjMwMDEwMDQ1WjAzMTEwLwYDVQQD
EyhlZmJjZjBlMTUzODZjMGY0NDhjMGI1ZGE5MmZjZDk1OWYxZWUzZDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xk2NLUM8NZhEsuxZcfrPrug8Csb
rG1TKcfiYCUputeOqoXF/Jatwru31JPVf/w7lbqN3a2WdkOry5dChal1iHPDewbI
pokeFoMc9UNLeBZjNeAWGrJ7NcHoo/pSzNXFvY/NmB58iWFRWaaFtwlyCDNQYrnt
tjLwkuXPgk+P99npK3NtBnobw5PPkOvxBZwSMYNlViJXEmlEKcT2hZ+Z/bo3ewvf
V371FU8FlglqqNn3T/FusNSrEJPk3CUc9rRMmhjY2PErajCmECwV2qOrikGFe4Yn
hc5yeSGj3lmD6rTJWCNFZ7cXsByi7XsHeiK5yl2S/W2ShtTjbnOI72dPqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO+88OFThsD0SMC12pL82Vnx7j1zMB8GA1UdIwQY
MBaAFJcVM8t6Z5asXDgrONz0WfkXaTH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHhVenkzcG5scXhjT0NzNDNQUlotUmRwTWZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9kNjU3N2QtZjJkMi00NTMwLWI5ZDIt
MzllY2E0NzI2NjhiLzEvbHhVenkzcG5scXhjT0NzNDNQUlotUmRwTWZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9kNjU3N2QtZjJkMi00NTMwLWI5ZDItMzllY2E0NzI2Njhi
LzEvbHhVenkzcG5scXhjT0NzNDNQUlotUmRwTWZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI28eNETj
rWKDChflV9Vu1KMMsIK8B7kE+b+V0vSUt06qVlCbhdPrNbUJOeqtpDlIdJWNVLnv
IoMfkhJGkYqeyLA03gjJD/8K5y1nau2vpJVUJesEemUh+9WQA7cPZmdxKNMOxnAi
S8m94nSymdPxsUej6YJvxh/8WmD+tTD4LvCbJ+jdwoILvQWkSgvb8p+g+2WHryER
+Zq/4ekKeTK2U7xWFhpKssG7RqupAkbDfRVqPbhXCMGXnC7fcHGDZWvuWWUgG74j
xziBjy4kyHOaLlocdNAXDaJKJkgYP2MwNCgbExk/vxM3E0hnRUw5nFoY7iXoj4gU
8rv6QN6fjg58rw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:05:02 2025 by rpki-client