Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
File: lOb0czAsajyJ33uJMsVryEHLX6w.mft (raw, json)
Hash identifier: Kr+GYENQffpxpwAaGDlHRwjVxWQ9pGGwZ16fstZv56U=
Subject key identifier: 71:02:3E:1E:A2:DE:0F:AE:5F:50:DD:93:78:23:C6:D7:69:CF:E6:16
Authority key identifier: 94:E6:F4:73:30:2C:6A:3C:89:DF:7B:89:32:C5:6B:C8:41:CB:5F:AC
Certificate issuer: /CN=94e6f473302c6a3c89df7b8932c56bc841cb5fac
Certificate serial: 0197B6A18BE3A1932A26BD88141893914AFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOb0czAsajyJ33uJMsVryEHLX6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
Manifest number: 0922
Signing time: Sat 28 Jun 2025 13:02:09 +0000
Manifest this update: Sat 28 Jun 2025 13:02:09 +0000
Manifest next update: Sun 29 Jun 2025 13:02:09 +0000
Files and hashes: 1: TocS328LtH4EypX0JXxV-WS9TT0.roa (hash: bEdaCkmgCoynn5OTjJyCYh6lNgGRH20s+aBGflckEag=)
2: lOb0czAsajyJ33uJMsVryEHLX6w.crl (hash: rrau6z4aEDG1zopjUI6cMrTU+fBsI+FbG6yOAJWenV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lOb0czAsajyJ33uJMsVryEHLX6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:8b:e3:a1:93:2a:26:bd:88:14:18:93:91:4a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e6f473302c6a3c89df7b8932c56bc841cb5fac
Validity
Not Before: Jun 28 13:02:09 2025 GMT
Not After : Jun 29 13:02:09 2025 GMT
Subject: CN=71023e1ea2de0fae5f50dd937823c6d769cfe616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:30:69:3a:07:c1:11:ea:92:8c:75:e8:b3:1f:
de:8b:42:e4:3b:d8:80:3d:e5:a8:5d:0c:61:c4:c4:
58:03:ec:ca:73:9b:8d:2d:39:e4:00:7d:07:2d:79:
b4:bb:45:89:98:a5:90:bf:8f:0a:dc:32:8d:de:d2:
f8:25:92:c6:0d:51:aa:34:cb:e4:76:23:ac:d2:c3:
08:87:06:75:97:4a:d2:2d:c2:f3:79:02:dd:f5:3d:
f7:d1:b5:1a:48:52:0e:f6:7b:4c:90:53:29:8a:fc:
87:2f:22:85:80:e2:a3:15:ec:63:d4:9b:7f:26:2f:
a0:1e:ae:50:49:ca:0c:9d:61:4f:6b:f4:17:2f:1e:
0f:04:98:b2:2c:88:85:4f:f1:8c:88:26:16:92:69:
e0:c9:c1:f2:9d:2e:08:17:9d:7d:fd:cb:ab:92:6d:
8e:bc:24:93:78:16:eb:e7:21:32:ac:73:6f:5d:de:
aa:47:ba:4b:ae:5f:16:42:a2:6f:fb:07:b6:ed:d1:
42:4b:8e:b2:03:61:91:af:fc:28:16:1d:b8:87:24:
e4:2c:0b:ec:46:d8:df:77:72:16:f0:03:71:b4:50:
86:35:49:bf:c5:4c:fe:82:c2:39:d8:79:03:6c:7a:
6e:29:39:8c:5d:68:4c:94:59:ec:db:69:26:11:ee:
0e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:02:3E:1E:A2:DE:0F:AE:5F:50:DD:93:78:23:C6:D7:69:CF:E6:16
X509v3 Authority Key Identifier:
keyid:94:E6:F4:73:30:2C:6A:3C:89:DF:7B:89:32:C5:6B:C8:41:CB:5F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOb0czAsajyJ33uJMsVryEHLX6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:79:3a:eb:04:8d:9b:4d:5e:25:c1:b5:fc:54:7a:4f:70:12:
54:ae:a5:8b:d2:d6:8e:ca:27:16:2e:93:b1:80:07:6e:50:b3:
a9:9d:2f:19:1c:22:4e:bf:89:c0:04:c7:de:74:70:8f:48:44:
94:16:d0:32:53:e9:7f:9c:63:b6:47:d6:6a:19:1d:a1:eb:b9:
8d:2e:98:30:8b:51:64:71:85:75:5b:41:7a:48:0a:83:68:60:
a3:50:ed:6f:44:e3:a8:07:c1:4c:04:0f:00:d0:96:1e:8d:e8:
26:8c:11:28:98:32:42:70:97:e1:46:4c:68:a6:f5:88:85:36:
e8:f6:2c:54:d7:f0:b6:96:89:cb:c9:7d:5f:b4:1b:91:ee:e4:
50:38:60:ee:be:a5:43:d4:be:f3:34:97:6a:d7:79:b8:54:03:
ef:71:8b:11:bd:2f:ab:76:d0:0e:c4:c2:20:1d:87:26:f0:86:
a6:82:24:57:89:a5:17:04:ef:95:62:b4:c7:9b:61:02:c1:b2:
87:55:18:b3:15:1f:74:5b:e0:5a:12:5d:c2:db:a2:9f:3a:d9:
1e:50:2d:05:ad:39:40:a9:66:ee:35:e5:dd:8e:18:5a:75:59:
64:11:7c:73:fa:3d:5f:11:f4:1c:9c:a0:90:60:b2:5d:cc:9a:
9f:ac:fd:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oYvjoZMqJr2IFBiTkUr+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ZTZmNDczMzAyYzZhM2M4OWRmN2I4OTMyYzU2YmM4NDFj
YjVmYWMwHhcNMjUwNjI4MTMwMjA5WhcNMjUwNjI5MTMwMjA5WjAzMTEwLwYDVQQD
Eyg3MTAyM2UxZWEyZGUwZmFlNWY1MGRkOTM3ODIzYzZkNzY5Y2ZlNjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDBpOgfBEeqSjHXosx/ei0LkO9iA
PeWoXQxhxMRYA+zKc5uNLTnkAH0HLXm0u0WJmKWQv48K3DKN3tL4JZLGDVGqNMvk
diOs0sMIhwZ1l0rSLcLzeQLd9T330bUaSFIO9ntMkFMpivyHLyKFgOKjFexj1Jt/
Ji+gHq5QScoMnWFPa/QXLx4PBJiyLIiFT/GMiCYWkmngycHynS4IF519/curkm2O
vCSTeBbr5yEyrHNvXd6qR7pLrl8WQqJv+we27dFCS46yA2GRr/woFh24hyTkLAvs
Rtjfd3IW8ANxtFCGNUm/xUz+gsI52HkDbHpuKTmMXWhMlFns22kmEe4OOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHECPh6i3g+uX1Ddk3gjxtdpz+YWMB8GA1UdIwQY
MBaAFJTm9HMwLGo8id97iTLFa8hBy1+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbE9iMGN6QXNhanlKMzN1Sk1zVnJ5RUhMWDZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8wN2U5NDctYTRkYy00OGRmLTkyYzAt
OWExZjBkZGI5ZTcwLzEvbE9iMGN6QXNhanlKMzN1Sk1zVnJ5RUhMWDZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi8wN2U5NDctYTRkYy00OGRmLTkyYzAtOWExZjBkZGI5ZTcw
LzEvbE9iMGN6QXNhanlKMzN1Sk1zVnJ5RUhMWDZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ3k66wSN
m01eJcG1/FR6T3ASVK6li9LWjsonFi6TsYAHblCzqZ0vGRwiTr+JwATH3nRwj0hE
lBbQMlPpf5xjtkfWahkdoeu5jS6YMItRZHGFdVtBekgKg2hgo1Dtb0TjqAfBTAQP
ANCWHo3oJowRKJgyQnCX4UZMaKb1iIU26PYsVNfwtpaJy8l9X7Qbke7kUDhg7r6l
Q9S+8zSXatd5uFQD73GLEb0vq3bQDsTCIB2HJvCGpoIkV4mlFwTvlWK0x5thAsGy
h1UYsxUfdFvgWhJdwtuinzrZHlAtBa05QKlm7jXl3Y4YWnVZZBF8c/o9XxH0HJyg
kGCyXcyan6z9jw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:18:39 2025 by rpki-client