Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.mft
File: lsVsXqVHj003sw82guQ7fi75DZg.mft (raw, json)
Hash identifier: MBKUi6DcWOjaCqw3oDCBTX2CGes45y7NPydu8p6eyIM=
Subject key identifier: EE:E6:6E:A8:A6:D1:7C:07:1C:DB:5A:76:62:F5:87:0A:80:B9:22:D3
Authority key identifier: 96:C5:6C:5E:A5:47:8F:4D:37:B3:0F:36:82:E4:3B:7E:2E:F9:0D:98
Certificate issuer: /CN=96c56c5ea5478f4d37b30f3682e43b7e2ef90d98
Certificate serial: 0197C3B79CED531B63A9266CFF7079FD4C9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsVsXqVHj003sw82guQ7fi75DZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.mft
Manifest number: 0A28
Signing time: Tue 01 Jul 2025 02:01:19 +0000
Manifest this update: Tue 01 Jul 2025 02:01:19 +0000
Manifest next update: Wed 02 Jul 2025 02:01:19 +0000
Files and hashes: 1: Jfp2BkUryUy6473OSd5t9xfZXek.roa (hash: /yj9OMbKiB1Ji+Udov4fFjS1PqdNa09sKJHlaeP3Vq8=)
2: lsVsXqVHj003sw82guQ7fi75DZg.crl (hash: ELjI0SefbSHARTtrx9haBxKf5d5N99YWmlDMxUZ4SrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lsVsXqVHj003sw82guQ7fi75DZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c3:b7:9c:ed:53:1b:63:a9:26:6c:ff:70:79:fd:4c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96c56c5ea5478f4d37b30f3682e43b7e2ef90d98
Validity
Not Before: Jul 1 02:01:19 2025 GMT
Not After : Jul 2 02:01:19 2025 GMT
Subject: CN=eee66ea8a6d17c071cdb5a7662f5870a80b922d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:36:e5:3b:57:20:9b:ff:92:07:14:43:a0:0e:
44:91:9d:ee:a9:e5:0a:f5:e6:58:ee:09:7b:33:95:
20:c2:6a:73:60:57:c9:df:74:9b:0a:7d:0e:a3:39:
f3:c8:3d:c2:8c:14:21:4f:b2:70:b7:92:e8:a2:d2:
28:d8:fe:58:a5:86:e0:89:85:d1:da:53:4c:37:54:
16:1f:45:c9:f2:2c:91:74:b4:8b:1a:af:50:e3:e2:
7b:7a:06:58:71:4f:ba:88:0b:82:19:57:73:94:c1:
d5:30:12:59:3f:ff:bf:57:74:8e:66:1c:4b:c8:ef:
97:17:5c:72:3c:4d:3c:67:ac:56:ac:f3:29:ee:33:
c7:f4:ed:79:ed:22:a8:01:75:a8:65:9d:29:9a:cb:
0e:47:74:14:88:94:7a:46:c0:e9:96:15:98:57:da:
af:77:d3:7e:a1:29:c9:48:27:ec:a2:c0:9f:00:8b:
80:3d:71:1b:6d:73:db:14:6e:ee:f5:c2:56:34:9c:
b4:f1:f2:d4:36:1a:df:f1:ab:e8:39:be:0a:3c:08:
f0:80:5a:7a:58:1e:ef:3b:e1:f5:20:49:d3:ff:44:
c2:88:6c:de:70:88:e6:84:d8:8e:96:ed:8c:a7:58:
23:3a:8b:08:b4:ac:1a:2e:35:64:5d:b6:17:00:6d:
0a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E6:6E:A8:A6:D1:7C:07:1C:DB:5A:76:62:F5:87:0A:80:B9:22:D3
X509v3 Authority Key Identifier:
keyid:96:C5:6C:5E:A5:47:8F:4D:37:B3:0F:36:82:E4:3B:7E:2E:F9:0D:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsVsXqVHj003sw82guQ7fi75DZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:d8:05:47:78:02:92:6d:85:c8:c6:e0:c3:29:0c:be:06:a4:
3b:39:3b:af:bc:74:f6:68:3e:1c:07:c4:2f:99:1d:0e:f9:23:
0e:16:c8:4d:26:d7:98:a2:8f:b2:d4:07:de:a3:ec:15:9c:e5:
6b:a0:4c:ed:d4:44:54:96:d3:8d:3c:41:06:c2:26:ef:f1:06:
e3:10:b9:f4:a9:e2:bd:01:93:8e:82:de:80:1e:34:9a:32:3c:
44:7a:82:2d:45:b6:1c:24:59:1a:df:af:d2:c3:f8:96:ec:05:
2d:1b:f7:2b:9f:c0:0d:0c:6e:48:c3:70:e2:62:9e:49:fd:5a:
aa:6d:20:a1:b6:68:3e:36:d0:9e:22:82:d0:d2:ee:2c:c7:1a:
2f:d8:ee:df:49:c3:88:2e:b5:20:d5:57:9f:9e:52:fa:40:39:
d1:df:58:7a:61:34:7c:f1:21:04:ac:ba:86:67:8d:20:1e:86:
a6:e3:55:b1:ee:e6:cb:55:3a:e3:e4:2e:c6:3b:0e:55:af:60:
62:04:e6:01:16:ff:01:31:5c:3d:25:66:c7:53:f0:1a:8a:2f:
b9:2f:f9:cd:37:bb:25:c2:f3:f2:62:99:06:7a:0c:dc:f8:18:
26:ef:a0:41:fb:88:f1:7f:aa:cd:e9:78:f7:29:79:d9:67:c1:
41:6a:50:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfDt5ztUxtjqSZs/3B5/UyeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2YzU2YzVlYTU0NzhmNGQzN2IzMGYzNjgyZTQzYjdlMmVm
OTBkOTgwHhcNMjUwNzAxMDIwMTE5WhcNMjUwNzAyMDIwMTE5WjAzMTEwLwYDVQQD
EyhlZWU2NmVhOGE2ZDE3YzA3MWNkYjVhNzY2MmY1ODcwYTgwYjkyMmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TblO1cgm/+SBxRDoA5EkZ3uqeUK
9eZY7gl7M5UgwmpzYFfJ33SbCn0OoznzyD3CjBQhT7Jwt5LootIo2P5YpYbgiYXR
2lNMN1QWH0XJ8iyRdLSLGq9Q4+J7egZYcU+6iAuCGVdzlMHVMBJZP/+/V3SOZhxL
yO+XF1xyPE08Z6xWrPMp7jPH9O157SKoAXWoZZ0pmssOR3QUiJR6RsDplhWYV9qv
d9N+oSnJSCfsosCfAIuAPXEbbXPbFG7u9cJWNJy08fLUNhrf8avoOb4KPAjwgFp6
WB7vO+H1IEnT/0TCiGzecIjmhNiOlu2Mp1gjOosItKwaLjVkXbYXAG0KeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO7mbqim0XwHHNtadmL1hwqAuSLTMB8GA1UdIwQY
MBaAFJbFbF6lR49NN7MPNoLkO34u+Q2YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHNWc1hxVkhqMDAzc3c4Mmd1UTdmaTc1RFpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS85OGFjYTMtMGM3Yy00ZjA1LThkMDMt
MzVjNzhlNzAxOTllLzEvbHNWc1hxVkhqMDAzc3c4Mmd1UTdmaTc1RFpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS85OGFjYTMtMGM3Yy00ZjA1LThkMDMtMzVjNzhlNzAxOTll
LzEvbHNWc1hxVkhqMDAzc3c4Mmd1UTdmaTc1RFpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEdgFR3gC
km2FyMbgwykMvgakOzk7r7x09mg+HAfEL5kdDvkjDhbITSbXmKKPstQH3qPsFZzl
a6BM7dREVJbTjTxBBsIm7/EG4xC59KnivQGTjoLegB40mjI8RHqCLUW2HCRZGt+v
0sP4luwFLRv3K5/ADQxuSMNw4mKeSf1aqm0gobZoPjbQniKC0NLuLMcaL9ju30nD
iC61INVXn55S+kA50d9YemE0fPEhBKy6hmeNIB6GpuNVse7my1U64+QuxjsOVa9g
YgTmARb/ATFcPSVmx1PwGoovuS/5zTe7JcLz8mKZBnoM3PgYJu+gQfuI8X+qzel4
9yl52WfBQWpQXQ==
-----END CERTIFICATE-----
Generated at Tue Jul 1 08:15:09 2025 by rpki-client