Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft
File: lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft (raw, json)
Hash identifier: UVWCEndIdZ/EsIIKmMBneMJpXmVJsA7w4xn4AhHO+A0=
Subject key identifier: 08:77:40:B5:F7:AD:94:A2:3F:CA:02:29:0C:9D:33:23:C7:88:3A:62
Authority key identifier: 97:10:2C:69:3A:F3:A0:90:F8:F9:4B:A1:FD:08:2D:B0:92:4E:AF:12
Certificate issuer: /CN=97102c693af3a090f8f94ba1fd082db0924eaf12
Certificate serial: 0197B6D7A3BC495E020EDABD394DA6EA5078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 14:01:14 +0000
Manifest this update: Sat 28 Jun 2025 14:01:14 +0000
Manifest next update: Sun 29 Jun 2025 14:01:14 +0000
Files and hashes: 1: UADfQRfiU0qMqkC7bWaFEbHeHdA.roa (hash: WP9x47zoRlAi5Co+JqhZvWC2k3pFeOAzkBoA6TCx0aU=)
2: lxAsaTrzoJD4-Uuh_QgtsJJOrxI.crl (hash: Xg/CHt4utIoBSjJxYtirhXNT/rHcgz3sE2yLKOj4nOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:a3:bc:49:5e:02:0e:da:bd:39:4d:a6:ea:50:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97102c693af3a090f8f94ba1fd082db0924eaf12
Validity
Not Before: Jun 28 14:01:14 2025 GMT
Not After : Jun 29 14:01:14 2025 GMT
Subject: CN=087740b5f7ad94a23fca02290c9d3323c7883a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a1:7a:ca:98:90:89:aa:e3:7c:51:5e:d0:4f:
d3:7a:af:3f:d3:9a:1d:6c:2a:4c:f1:64:eb:26:fd:
31:52:a8:7a:8e:3d:2f:45:32:32:96:1a:ba:a5:5e:
11:59:37:05:2c:e3:a8:89:c4:d7:ba:70:8d:4e:c2:
15:d2:76:3a:11:39:10:3d:77:93:2b:7a:e4:e2:ad:
7a:54:3f:0c:ce:9b:6d:f1:5c:a4:ce:46:04:77:34:
72:d6:8f:68:68:89:83:07:e8:71:77:01:da:97:4a:
a2:28:a0:de:7a:aa:1a:03:42:3a:ed:62:16:2d:77:
08:a1:b0:33:89:43:33:cc:ff:98:80:49:66:c8:fd:
09:71:7b:89:61:d0:0e:5f:b1:2f:c0:fc:7c:0b:a6:
97:ae:41:49:e3:3b:70:dd:34:f6:3f:24:a1:8d:35:
6b:ca:75:8c:d4:ff:5f:2a:5f:1e:d0:32:79:8f:a9:
74:bd:af:a7:54:ed:ea:42:d3:40:3c:db:68:dc:e3:
7a:03:2a:c6:3a:80:da:db:49:e3:ba:03:37:fd:44:
b5:ce:e3:e9:27:70:ac:ce:5c:48:3f:a5:9d:27:5c:
f5:be:0b:b9:b6:86:36:77:bc:f3:8d:fa:bb:2c:9a:
c8:52:3e:97:58:3d:45:8f:49:f7:89:cf:27:4a:ae:
63:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:77:40:B5:F7:AD:94:A2:3F:CA:02:29:0C:9D:33:23:C7:88:3A:62
X509v3 Authority Key Identifier:
keyid:97:10:2C:69:3A:F3:A0:90:F8:F9:4B:A1:FD:08:2D:B0:92:4E:AF:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8dda48-e84b-4ca7-aaf4-f53ef521dbe0/1/lxAsaTrzoJD4-Uuh_QgtsJJOrxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:b6:57:36:42:87:b8:6c:27:b1:13:df:ee:ca:eb:6d:74:ca:
49:ea:b7:fa:32:14:10:a2:94:fb:a6:93:dc:64:27:e7:f2:8b:
9d:38:e7:46:60:9a:1b:7f:20:de:7f:39:62:f1:ce:05:cb:2c:
64:66:ab:16:36:7e:da:4f:0f:4e:dc:27:7b:95:67:04:3a:83:
7d:0a:7e:fd:6f:79:5d:1d:53:48:a6:ec:b5:31:a8:b7:c3:bb:
04:ad:8c:bf:19:31:f5:26:49:45:8e:d7:49:a1:30:94:95:ea:
26:ee:e3:5d:da:b0:32:31:7f:6b:4e:d2:d0:fe:c7:bf:64:39:
59:31:84:9d:55:f9:7f:69:96:1c:d9:dd:76:ff:ff:82:53:ae:
3f:b3:c2:61:ef:64:52:f3:18:6c:d2:73:9b:0b:0c:9c:08:7a:
11:11:ae:d8:cd:24:d8:48:01:b2:96:50:54:9a:e5:a7:09:57:
b5:12:97:9e:bf:ca:35:79:b7:bd:d0:92:22:69:e2:4f:74:08:
be:1f:28:55:34:1c:49:6d:da:8c:e5:86:21:6d:1f:d1:b9:e7:
5b:ac:77:58:1b:f9:09:38:21:91:bc:88:99:b6:f8:06:86:c3:
f2:47:f2:63:ca:cc:b1:72:26:37:cc:4e:47:27:0c:09:5d:6c:
4c:82:9d:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe216O8SV4CDtq9OU2m6lB4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MTAyYzY5M2FmM2EwOTBmOGY5NGJhMWZkMDgyZGIwOTI0
ZWFmMTIwHhcNMjUwNjI4MTQwMTE0WhcNMjUwNjI5MTQwMTE0WjAzMTEwLwYDVQQD
EygwODc3NDBiNWY3YWQ5NGEyM2ZjYTAyMjkwYzlkMzMyM2M3ODgzYTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKF6ypiQiarjfFFe0E/Teq8/05od
bCpM8WTrJv0xUqh6jj0vRTIylhq6pV4RWTcFLOOoicTXunCNTsIV0nY6ETkQPXeT
K3rk4q16VD8Mzptt8VykzkYEdzRy1o9oaImDB+hxdwHal0qiKKDeeqoaA0I67WIW
LXcIobAziUMzzP+YgElmyP0JcXuJYdAOX7EvwPx8C6aXrkFJ4ztw3TT2PyShjTVr
ynWM1P9fKl8e0DJ5j6l0va+nVO3qQtNAPNto3ON6AyrGOoDa20njugM3/US1zuPp
J3CszlxIP6WdJ1z1vgu5toY2d7zzjfq7LJrIUj6XWD1Fj0n3ic8nSq5jcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAh3QLX3rZSiP8oCKQydMyPHiDpiMB8GA1UdIwQY
MBaAFJcQLGk686CQ+PlLof0ILbCSTq8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHhBc2FUcnpvSkQ0LVV1aF9RZ3RzSkpPcnhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS84ZGRhNDgtZTg0Yi00Y2E3LWFhZjQt
ZjUzZWY1MjFkYmUwLzEvbHhBc2FUcnpvSkQ0LVV1aF9RZ3RzSkpPcnhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS84ZGRhNDgtZTg0Yi00Y2E3LWFhZjQtZjUzZWY1MjFkYmUw
LzEvbHhBc2FUcnpvSkQ0LVV1aF9RZ3RzSkpPcnhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsbZXNkKH
uGwnsRPf7srrbXTKSeq3+jIUEKKU+6aT3GQn5/KLnTjnRmCaG38g3n85YvHOBcss
ZGarFjZ+2k8PTtwne5VnBDqDfQp+/W95XR1TSKbstTGot8O7BK2Mvxkx9SZJRY7X
SaEwlJXqJu7jXdqwMjF/a07S0P7Hv2Q5WTGEnVX5f2mWHNnddv//glOuP7PCYe9k
UvMYbNJzmwsMnAh6ERGu2M0k2EgBspZQVJrlpwlXtRKXnr/KNXm3vdCSImniT3QI
vh8oVTQcSW3ajOWGIW0f0bnnW6x3WBv5CTghkbyImbb4BobD8kfyY8rMsXImN8xO
RycMCV1sTIKdkA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:20:25 2025 by rpki-client