Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.mft
File: Lo7asSIV4pvTjB2pteOWvQyWvgk.mft (raw, json)
Hash identifier: gD/1WyNS3/YtnPb+3drllCGVoar/up3ZVINGSiXo6cQ=
Subject key identifier: 90:56:41:A4:3A:A6:A5:5F:79:C3:CC:A7:3F:0D:81:96:9B:61:8B:88
Authority key identifier: 2E:8E:DA:B1:22:15:E2:9B:D3:8C:1D:A9:B5:E3:96:BD:0C:96:BE:09
Certificate issuer: /CN=2e8edab12215e29bd38c1da9b5e396bd0c96be09
Certificate serial: 0197B7458D6751FDE0BB5D107602C32F578D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lo7asSIV4pvTjB2pteOWvQyWvgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 16:01:18 +0000
Manifest this update: Sat 28 Jun 2025 16:01:18 +0000
Manifest next update: Sun 29 Jun 2025 16:01:18 +0000
Files and hashes: 1: 036tWscrBo3WQktUJkLutI8dnhI.roa (hash: SbRgrcoBWhT2vLik5V86VTcCJ3Ave5F15tRHkOT5qDg=)
2: Lo7asSIV4pvTjB2pteOWvQyWvgk.crl (hash: 5WvQikLZ/bg60U8yTpAVz91+K/fCR7Vd58HGtPLYE4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lo7asSIV4pvTjB2pteOWvQyWvgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:8d:67:51:fd:e0:bb:5d:10:76:02:c3:2f:57:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e8edab12215e29bd38c1da9b5e396bd0c96be09
Validity
Not Before: Jun 28 16:01:18 2025 GMT
Not After : Jun 29 16:01:18 2025 GMT
Subject: CN=905641a43aa6a55f79c3cca73f0d81969b618b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:2d:2d:aa:9d:c8:1c:da:4d:49:f0:81:b8:f9:
32:ac:79:f3:f9:1c:9b:34:07:db:d2:ea:27:d9:45:
0a:22:bb:50:98:8b:a6:81:ef:77:a0:3e:5e:9e:e2:
6a:ab:73:82:87:ca:88:85:ab:ab:11:e5:a3:98:fe:
e2:48:fc:11:d3:22:d3:13:8e:85:c1:11:8a:b1:8f:
8b:89:cf:0b:07:03:21:1e:8c:75:05:55:10:ad:b6:
cf:fe:99:e2:0d:51:0d:2b:a3:53:cd:56:e0:75:a8:
c7:60:c1:5f:dd:d8:a2:e5:74:1f:4b:cc:32:47:3c:
26:18:da:ec:72:76:85:6a:0e:96:04:bf:11:12:3b:
45:68:54:8c:58:f9:3a:cd:76:9f:a6:7d:ab:0d:01:
12:f5:6d:2a:ed:c0:45:18:eb:f7:a4:7c:81:6d:03:
a5:68:80:31:d3:5c:7c:17:1c:82:d6:83:ff:16:d8:
96:39:d6:9e:5f:95:05:8a:bf:b9:b9:b2:fb:61:b0:
f3:28:26:86:d7:b9:f1:40:17:a1:5f:5e:d5:21:77:
9a:c9:93:1d:e7:fc:1f:c8:28:31:e0:1b:41:de:ac:
39:67:c3:1d:bb:db:06:a4:a7:7c:5e:a6:74:5e:76:
ca:4a:62:99:89:4c:5e:b1:a9:0c:da:8f:7b:6a:ea:
45:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:56:41:A4:3A:A6:A5:5F:79:C3:CC:A7:3F:0D:81:96:9B:61:8B:88
X509v3 Authority Key Identifier:
keyid:2E:8E:DA:B1:22:15:E2:9B:D3:8C:1D:A9:B5:E3:96:BD:0C:96:BE:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lo7asSIV4pvTjB2pteOWvQyWvgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:7d:66:6d:19:bb:e0:ec:db:5c:2b:88:17:2d:75:59:23:de:
26:f5:c3:c8:2d:8e:fe:76:ae:ba:8f:82:a8:9d:87:8b:e7:63:
3f:3b:54:2b:ac:d7:95:d0:de:d0:ba:6e:7d:21:1f:6b:13:55:
80:42:9b:f9:82:90:10:60:f1:ec:8d:c4:b1:8a:f0:32:70:c1:
22:83:a9:55:36:38:d7:80:81:c0:18:d9:ab:fb:53:ed:7b:cf:
48:1c:99:ac:bb:11:b1:73:7b:0e:ae:f9:e6:c8:7e:45:24:15:
6c:50:41:61:28:7d:d1:06:e6:70:1a:58:ba:2d:15:47:20:82:
32:66:21:a9:0b:f1:f7:52:5d:04:db:21:9c:8a:b1:85:a1:6e:
28:e6:a3:40:d3:76:eb:82:48:bc:90:0b:94:f9:4a:36:7f:4c:
84:45:19:46:60:79:b4:53:ef:cb:b6:a9:6c:0b:40:d6:bb:f1:
6e:c3:a4:37:98:f8:7b:db:fa:1c:3e:68:d7:e2:1a:1b:90:c4:
69:3a:a0:fd:d4:d1:f5:09:84:6e:ab:81:43:f9:09:08:47:f1:
60:90:57:9d:6c:f3:c2:bb:1f:28:4e:8f:13:97:f1:b7:26:5b:
8d:d2:88:1b:ed:b0:fe:c3:78:a3:d2:e5:b6:c8:ec:18:46:92:
1c:d8:08:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RY1nUf3gu10QdgLDL1eNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlOGVkYWIxMjIxNWUyOWJkMzhjMWRhOWI1ZTM5NmJkMGM5
NmJlMDkwHhcNMjUwNjI4MTYwMTE4WhcNMjUwNjI5MTYwMTE4WjAzMTEwLwYDVQQD
Eyg5MDU2NDFhNDNhYTZhNTVmNzljM2NjYTczZjBkODE5NjliNjE4Yjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9C0tqp3IHNpNSfCBuPkyrHnz+Ryb
NAfb0uon2UUKIrtQmIumge93oD5enuJqq3OCh8qIhaurEeWjmP7iSPwR0yLTE46F
wRGKsY+Lic8LBwMhHox1BVUQrbbP/pniDVENK6NTzVbgdajHYMFf3dii5XQfS8wy
RzwmGNrscnaFag6WBL8REjtFaFSMWPk6zXafpn2rDQES9W0q7cBFGOv3pHyBbQOl
aIAx01x8FxyC1oP/FtiWOdaeX5UFir+5ubL7YbDzKCaG17nxQBehX17VIXeayZMd
5/wfyCgx4BtB3qw5Z8Mdu9sGpKd8XqZ0XnbKSmKZiUxesakM2o97aupFPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJBWQaQ6pqVfecPMpz8NgZabYYuIMB8GA1UdIwQY
MBaAFC6O2rEiFeKb04wdqbXjlr0Mlr4JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG83YXNTSVY0cHZUakIycHRlT1d2UXlXdmdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9hZjc2ZTAtNmI3ZC00MGFjLTk2MjEt
NjQzYTJmYzQ0NzNlLzEvTG83YXNTSVY0cHZUakIycHRlT1d2UXlXdmdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9hZjc2ZTAtNmI3ZC00MGFjLTk2MjEtNjQzYTJmYzQ0NzNl
LzEvTG83YXNTSVY0cHZUakIycHRlT1d2UXlXdmdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkX1mbRm7
4OzbXCuIFy11WSPeJvXDyC2O/nauuo+CqJ2Hi+djPztUK6zXldDe0LpufSEfaxNV
gEKb+YKQEGDx7I3EsYrwMnDBIoOpVTY414CBwBjZq/tT7XvPSByZrLsRsXN7Dq75
5sh+RSQVbFBBYSh90QbmcBpYui0VRyCCMmYhqQvx91JdBNshnIqxhaFuKOajQNN2
64JIvJALlPlKNn9MhEUZRmB5tFPvy7apbAtA1rvxbsOkN5j4e9v6HD5o1+IaG5DE
aTqg/dTR9QmEbquBQ/kJCEfxYJBXnWzzwrsfKE6PE5fxtyZbjdKIG+2w/sN4o9Ll
tsjsGEaSHNgI+w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:26:34 2025 by rpki-client