Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
File: lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft (raw, json)
Hash identifier: tkUBXCggSBxvOgipqvUj97HLRh3aAB04ghg9E5uJ6u4=
Subject key identifier: D7:79:F8:60:FC:47:DA:AA:25:43:9B:B9:8D:2C:85:4C:8A:00:DE:7D
Authority key identifier: 94:16:D8:E0:2B:5A:1A:75:85:9F:64:A0:5C:5A:8D:77:C8:4C:50:F1
Certificate issuer: /CN=9416d8e02b5a1a75859f64a05c5a8d77c84c50f1
Certificate serial: 0197B70F403FC57580FB7DEE1E701A3BCFA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
Manifest number: 12B1
Signing time: Sat 28 Jun 2025 15:01:59 +0000
Manifest this update: Sat 28 Jun 2025 15:01:59 +0000
Manifest next update: Sun 29 Jun 2025 15:01:59 +0000
Files and hashes: 1: 9xCRY7VEPmKHf0lyxzNpSutTsGY.roa (hash: 6rDekGO16wwWHoKHJkHXXHa8TG0Fv3Oiiu1rkWGfPt4=)
2: Z37vhTOIgXT7YFHlN3w9aL-lk5Y.roa (hash: iMlS4GRDszRpO6wfa87ZF07OseqOmumWVqUeyx1wi4Y=)
3: lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl (hash: 8PEQnnjH504NeT4JfOTxmC/CGLByjlf79O+MEKgaMVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:40:3f:c5:75:80:fb:7d:ee:1e:70:1a:3b:cf:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9416d8e02b5a1a75859f64a05c5a8d77c84c50f1
Validity
Not Before: Jun 28 15:01:59 2025 GMT
Not After : Jun 29 15:01:59 2025 GMT
Subject: CN=d779f860fc47daaa25439bb98d2c854c8a00de7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cb:b1:a9:84:fe:f9:56:c7:1e:93:f7:df:5d:
ca:c5:06:a8:0a:4a:aa:30:65:92:bc:2b:a9:3c:99:
c4:c4:81:3c:05:a6:19:55:8b:c5:f2:b2:6c:f3:9e:
e6:24:c4:cb:d1:73:16:a8:1a:2b:e1:70:dd:a8:f9:
4e:67:52:a3:1f:07:e4:9c:36:d4:f1:76:cd:24:a8:
fb:26:6d:6c:69:a3:31:e8:42:4d:52:44:a2:34:10:
68:cf:ab:a8:64:28:6e:49:a5:cc:0b:8f:2e:b9:48:
55:8a:81:46:28:5b:ae:68:7f:0b:65:b1:38:20:db:
aa:eb:07:24:b6:51:ef:e1:93:e4:f1:33:6a:84:bb:
cb:ca:d8:d1:ee:ce:56:c8:67:89:2c:1f:56:06:4e:
f5:5b:65:a1:eb:e1:f2:50:33:3a:51:21:87:48:ca:
f4:4e:7c:a1:fc:6c:f2:a2:84:05:25:74:46:5f:f2:
ce:f6:5a:03:ad:68:e1:1b:e0:5d:4c:fe:73:b3:4a:
82:58:cc:81:f2:a9:57:f4:86:ca:76:2f:19:0a:ae:
a0:8f:38:fd:ec:b1:d6:52:5a:2e:9e:47:9c:04:79:
ac:44:82:25:53:21:89:8d:c3:fc:10:d1:cd:b5:54:
b7:67:60:bb:f1:04:93:91:a3:e7:be:94:17:00:63:
db:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:79:F8:60:FC:47:DA:AA:25:43:9B:B9:8D:2C:85:4C:8A:00:DE:7D
X509v3 Authority Key Identifier:
keyid:94:16:D8:E0:2B:5A:1A:75:85:9F:64:A0:5C:5A:8D:77:C8:4C:50:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ac:f6:36:02:e4:f3:16:d5:18:dc:23:ec:c6:0d:30:b0:45:
3c:5e:d0:8b:34:3a:51:69:e9:28:d6:90:a0:51:66:73:69:84:
01:7c:c3:85:85:11:c7:7b:56:7c:48:bf:69:dd:2c:44:1f:ab:
64:dc:b8:0a:d4:54:6f:cb:e2:48:b7:89:19:ed:1d:9a:f9:5c:
ee:d4:d9:2e:06:0b:15:9a:bd:7b:ed:5d:66:5e:36:a3:2e:ac:
40:7c:0a:4a:ff:3a:56:d2:49:66:40:17:32:83:f0:62:98:6b:
45:34:3b:78:88:18:29:a5:ca:17:38:c0:66:2b:25:10:41:93:
cd:47:3f:42:31:9b:bb:8d:75:80:ba:eb:81:20:d7:98:44:25:
57:3e:39:ea:aa:43:75:3a:db:b7:5c:78:11:98:dd:a7:e4:dc:
ef:fb:4f:ac:2d:ad:58:8a:97:27:58:23:a1:c0:78:08:70:e2:
38:40:ca:4a:eb:0d:35:b8:64:c2:0c:38:a1:67:e4:b5:26:99:
cf:1c:1a:e0:50:d0:f7:0f:12:45:2c:e8:dc:0b:cc:57:af:4a:
04:84:c8:59:d7:19:47:12:f4:a8:7d:b3:b2:95:f6:da:6a:2d:
1e:47:49:d1:88:f5:23:7c:7d:a4:2d:81:78:0a:e9:41:22:cd:
f0:fd:bc:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3D0A/xXWA+33uHnAaO8+jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MTZkOGUwMmI1YTFhNzU4NTlmNjRhMDVjNWE4ZDc3Yzg0
YzUwZjEwHhcNMjUwNjI4MTUwMTU5WhcNMjUwNjI5MTUwMTU5WjAzMTEwLwYDVQQD
EyhkNzc5Zjg2MGZjNDdkYWFhMjU0MzliYjk4ZDJjODU0YzhhMDBkZTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMuxqYT++VbHHpP3313KxQaoCkqq
MGWSvCupPJnExIE8BaYZVYvF8rJs857mJMTL0XMWqBor4XDdqPlOZ1KjHwfknDbU
8XbNJKj7Jm1saaMx6EJNUkSiNBBoz6uoZChuSaXMC48uuUhVioFGKFuuaH8LZbE4
INuq6wcktlHv4ZPk8TNqhLvLytjR7s5WyGeJLB9WBk71W2Wh6+HyUDM6USGHSMr0
Tnyh/GzyooQFJXRGX/LO9loDrWjhG+BdTP5zs0qCWMyB8qlX9IbKdi8ZCq6gjzj9
7LHWUlounkecBHmsRIIlUyGJjcP8ENHNtVS3Z2C78QSTkaPnvpQXAGPbBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNd5+GD8R9qqJUObuY0shUyKAN59MB8GA1UdIwQY
MBaAFJQW2OArWhp1hZ9koFxajXfITFDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEJiWTRDdGFHbldGbjJTZ1hGcU5kOGhNVVBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wMTNjOTktN2Q3YS00ODJiLWJiNTEt
ZWI0ZTEzYmU1MDZhLzEvbEJiWTRDdGFHbldGbjJTZ1hGcU5kOGhNVVBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8wMTNjOTktN2Q3YS00ODJiLWJiNTEtZWI0ZTEzYmU1MDZh
LzEvbEJiWTRDdGFHbldGbjJTZ1hGcU5kOGhNVVBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC6z2NgLk
8xbVGNwj7MYNMLBFPF7QizQ6UWnpKNaQoFFmc2mEAXzDhYURx3tWfEi/ad0sRB+r
ZNy4CtRUb8viSLeJGe0dmvlc7tTZLgYLFZq9e+1dZl42oy6sQHwKSv86VtJJZkAX
MoPwYphrRTQ7eIgYKaXKFzjAZislEEGTzUc/QjGbu411gLrrgSDXmEQlVz456qpD
dTrbt1x4EZjdp+Tc7/tPrC2tWIqXJ1gjocB4CHDiOEDKSusNNbhkwgw4oWfktSaZ
zxwa4FDQ9w8SRSzo3AvMV69KBITIWdcZRxL0qH2zspX22motHkdJ0Yj1I3x9pC2B
eArpQSLN8P28JQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:21:56 2025 by rpki-client