Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
File: lQCCqFlGcix_wchk8PvYDcVNzSk.mft (raw, json)
Hash identifier: DehfqAynsr7RgZsqaNKH4ikwBoOPs/q/RFzlvEZm7g0=
Subject key identifier: F0:05:00:EF:14:49:F8:36:99:6B:F7:F1:17:98:66:4C:6D:D6:39:03
Authority key identifier: 95:00:82:A8:59:46:72:2C:7F:C1:C8:64:F0:FB:D8:0D:C5:4D:CD:29
Certificate issuer: /CN=950082a85946722c7fc1c864f0fbd80dc54dcd29
Certificate serial: 0197B70EE8A8AC23073744FC8937E6F8023B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
Manifest number: 07F5
Signing time: Sat 28 Jun 2025 15:01:36 +0000
Manifest this update: Sat 28 Jun 2025 15:01:36 +0000
Manifest next update: Sun 29 Jun 2025 15:01:36 +0000
Files and hashes: 1: W0dMAnO6aF0Yx6O8KQpDYw42KzU.roa (hash: hYKeaXsd87cAB8WiR9boDz94K2aYD6Hd49egFLgXH3M=)
2: aC_hdK5CbbWAdY5r2a47t0lmkv0.roa (hash: OC741thwNdbktYi4ltIPLb7G2UMVurZWZKeSAWhRUXM=)
3: lQCCqFlGcix_wchk8PvYDcVNzSk.crl (hash: avcf9UBpwoCPomzbYuvQ01y7Defl0tu6ercIwGjy3U4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:e8:a8:ac:23:07:37:44:fc:89:37:e6:f8:02:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=950082a85946722c7fc1c864f0fbd80dc54dcd29
Validity
Not Before: Jun 28 15:01:36 2025 GMT
Not After : Jun 29 15:01:36 2025 GMT
Subject: CN=f00500ef1449f836996bf7f11798664c6dd63903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:16:25:b6:68:81:33:b6:f8:8c:94:5d:8c:09:
2d:31:ce:5b:63:d0:95:03:5b:22:80:65:d0:0d:c6:
a9:84:3d:db:84:d9:69:25:a8:7b:ec:e8:bf:58:62:
96:28:b6:3f:f1:29:d6:8d:26:1c:95:09:ab:39:d7:
45:5b:5e:b2:d1:a2:ae:2c:6e:44:82:cf:5b:32:ea:
99:5a:04:3f:df:e4:87:51:c8:a1:63:b9:42:62:e6:
9d:8b:53:e4:86:c6:38:4f:23:5c:67:43:6c:04:d4:
4c:6c:8d:b2:66:59:b8:80:fa:1b:0d:f6:27:92:16:
8c:f8:54:09:b5:0e:5b:ec:28:82:50:3b:26:44:23:
e5:aa:ce:00:9f:23:75:63:79:4d:d6:9a:d3:dd:63:
1a:57:fc:59:42:c4:b1:70:1a:4d:63:f3:af:2d:2f:
0a:bb:39:18:cb:0a:1c:48:a7:67:78:e5:ad:a0:11:
9c:a4:cc:24:23:38:5f:27:70:72:9d:40:93:22:14:
e5:2b:c7:d2:df:ce:72:be:b9:e7:1b:7a:d7:87:7a:
47:11:11:ad:14:1c:09:3d:fd:60:54:d4:e2:04:ad:
4a:af:b6:0b:ab:ce:63:0c:11:6b:7f:7d:97:08:5f:
de:97:d8:b1:7f:82:fb:be:8a:e8:a7:6e:48:95:b8:
c1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:05:00:EF:14:49:F8:36:99:6B:F7:F1:17:98:66:4C:6D:D6:39:03
X509v3 Authority Key Identifier:
keyid:95:00:82:A8:59:46:72:2C:7F:C1:C8:64:F0:FB:D8:0D:C5:4D:CD:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:c2:2e:91:ca:95:61:ce:60:a8:c7:ce:a9:eb:29:61:ce:c5:
34:6d:97:81:16:ea:cd:b0:15:59:44:d6:67:d7:4e:a3:15:ad:
30:5f:4a:a2:dc:01:f5:2f:2b:0e:b2:ce:43:ce:d2:90:e5:88:
2f:72:f7:fc:cb:4c:3c:00:f2:a4:1e:51:49:dc:b4:70:45:0a:
4f:71:38:c1:92:e9:a7:64:82:e6:0b:47:54:5f:c8:c8:9d:b5:
7c:61:7f:b6:55:0b:b0:43:0c:c1:c3:05:6d:e2:49:a4:ce:80:
77:7e:8a:d2:50:1b:4e:34:cc:37:03:0e:ee:21:94:61:42:9e:
57:b2:c5:df:08:3a:59:86:3b:c2:e3:7a:b5:4a:3a:2c:d1:1e:
69:f8:c7:1b:94:cb:6e:15:70:c0:e6:dc:d3:28:2c:90:2e:d7:
7d:39:52:a6:3d:cf:9a:59:b1:5a:91:d5:66:12:82:c4:44:76:
c2:e9:df:ec:1f:05:68:4a:15:6d:a3:4e:81:28:ba:95:61:15:
eb:4d:06:10:03:d3:42:b3:69:a8:f2:d9:7e:75:09:90:f5:73:
7f:b8:89:91:8b:14:00:c1:0f:71:f4:d7:3f:e0:c9:be:be:4a:
a8:57:55:9c:7b:d7:f5:23:83:0d:f7:9b:57:5f:bc:59:21:92:
f9:63:74:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DuiorCMHN0T8iTfm+AI7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MDA4MmE4NTk0NjcyMmM3ZmMxYzg2NGYwZmJkODBkYzU0
ZGNkMjkwHhcNMjUwNjI4MTUwMTM2WhcNMjUwNjI5MTUwMTM2WjAzMTEwLwYDVQQD
EyhmMDA1MDBlZjE0NDlmODM2OTk2YmY3ZjExNzk4NjY0YzZkZDYzOTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBYltmiBM7b4jJRdjAktMc5bY9CV
A1sigGXQDcaphD3bhNlpJah77Oi/WGKWKLY/8SnWjSYclQmrOddFW16y0aKuLG5E
gs9bMuqZWgQ/3+SHUcihY7lCYuadi1PkhsY4TyNcZ0NsBNRMbI2yZlm4gPobDfYn
khaM+FQJtQ5b7CiCUDsmRCPlqs4AnyN1Y3lN1prT3WMaV/xZQsSxcBpNY/OvLS8K
uzkYywocSKdneOWtoBGcpMwkIzhfJ3BynUCTIhTlK8fS385yvrnnG3rXh3pHERGt
FBwJPf1gVNTiBK1Kr7YLq85jDBFrf32XCF/el9ixf4L7vorop25IlbjBYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPAFAO8USfg2mWv38ReYZkxt1jkDMB8GA1UdIwQY
MBaAFJUAgqhZRnIsf8HIZPD72A3FTc0pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFFDQ3FGbEdjaXhfd2NoazhQdllEY1ZOelNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8zNGU0MGYtZTFkMi00ZDI5LTg5YzUt
YzY5YTdmMDNlMThmLzEvbFFDQ3FGbEdjaXhfd2NoazhQdllEY1ZOelNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8zNGU0MGYtZTFkMi00ZDI5LTg5YzUtYzY5YTdmMDNlMThm
LzEvbFFDQ3FGbEdjaXhfd2NoazhQdllEY1ZOelNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgMIukcqV
Yc5gqMfOqespYc7FNG2XgRbqzbAVWUTWZ9dOoxWtMF9KotwB9S8rDrLOQ87SkOWI
L3L3/MtMPADypB5RSdy0cEUKT3E4wZLpp2SC5gtHVF/IyJ21fGF/tlULsEMMwcMF
beJJpM6Ad36K0lAbTjTMNwMO7iGUYUKeV7LF3wg6WYY7wuN6tUo6LNEeafjHG5TL
bhVwwObc0ygskC7XfTlSpj3PmlmxWpHVZhKCxER2wunf7B8FaEoVbaNOgSi6lWEV
600GEAPTQrNpqPLZfnUJkPVzf7iJkYsUAMEPcfTXP+DJvr5KqFdVnHvX9SODDfeb
V1+8WSGS+WN0uQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:31:17 2025 by rpki-client