Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft
File: LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft (raw, json)
Hash identifier: VabnYFOouTGZQwSzgyJaIX9/kJ/Gi19mLlg65U4iQCM=
Subject key identifier: A0:C1:0A:26:09:D5:7E:1D:37:B8:DE:76:8C:36:32:85:94:69:D7:27
Authority key identifier: 2F:10:28:15:D2:7E:65:11:74:6D:4A:3E:9F:D1:35:9C:D9:82:A8:66
Certificate issuer: /CN=2f102815d27e6511746d4a3e9fd1359cd982a866
Certificate serial: 01976C98800FD4B4E7CBF521F9839C6A2738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft
Manifest number: 0A0C
Signing time: Sat 14 Jun 2025 04:00:22 +0000
Manifest this update: Sat 14 Jun 2025 04:00:22 +0000
Manifest next update: Sun 15 Jun 2025 04:00:22 +0000
Files and hashes: 1: LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.crl (hash: iMxBeNYiO+14u2yoXrQVvav3h391rTKZovt4tFIrRFE=)
2: lT88CqOH5vwMoi8VUrMFaxJU8J4.roa (hash: S4Errm7narViCee9k3oJgV4xcS7HzGtYGoc+vP+G/zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:80:0f:d4:b4:e7:cb:f5:21:f9:83:9c:6a:27:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f102815d27e6511746d4a3e9fd1359cd982a866
Validity
Not Before: Jun 14 04:00:22 2025 GMT
Not After : Jun 15 04:00:22 2025 GMT
Subject: CN=a0c10a2609d57e1d37b8de768c3632859469d727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:09:64:7b:72:c5:b4:9d:41:c5:ac:53:33:53:
ab:40:30:b3:26:7c:82:3c:5f:b3:3b:45:85:19:c7:
b4:5b:f5:88:d6:b7:7c:8c:bc:58:c6:ea:3d:0d:58:
ba:c4:48:25:53:da:28:e8:cd:88:f9:67:94:78:85:
9d:f2:5f:04:26:a5:c0:fd:2c:b4:9d:e6:1e:09:f9:
5a:8f:ee:00:93:dc:8c:c6:7c:8a:1c:dd:01:28:e7:
cf:08:f7:50:91:51:87:38:32:38:72:7f:1f:b7:ee:
37:53:a5:ca:ea:43:0a:d9:e1:e7:89:60:cc:6c:4c:
ee:b2:83:89:ed:5f:4e:b8:c6:99:cf:1d:35:06:c0:
bd:27:7f:e4:2a:29:ef:a0:99:3b:de:5d:f0:00:37:
a6:46:22:ea:10:89:9c:df:fb:f0:9e:03:19:43:3d:
ed:04:e0:69:cb:a6:cc:89:95:c0:76:f9:e3:75:5a:
c0:fd:1b:17:f8:9e:a7:6b:41:6b:df:08:3b:78:b0:
56:52:29:42:c2:eb:4a:b4:05:9f:0a:9d:a8:0e:97:
01:6a:8d:4b:45:d0:75:77:e7:db:25:07:fa:9c:b1:
c1:5d:2d:1d:c5:0d:bb:9a:10:f1:48:9a:25:31:a3:
da:9e:04:54:aa:1c:d3:96:c4:8b:ac:3f:1a:8e:55:
e8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C1:0A:26:09:D5:7E:1D:37:B8:DE:76:8C:36:32:85:94:69:D7:27
X509v3 Authority Key Identifier:
keyid:2F:10:28:15:D2:7E:65:11:74:6D:4A:3E:9F:D1:35:9C:D9:82:A8:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:0d:56:b1:3c:09:aa:db:9d:e6:3f:e9:3b:4b:bb:26:fd:3f:
2c:be:0f:2b:1a:72:0d:ea:54:9b:4a:87:a2:c3:0a:09:29:c9:
91:28:34:a9:26:6a:32:c1:ce:f9:9f:3e:6c:03:a4:c9:d9:8d:
bc:db:68:50:65:53:59:0e:c2:e9:74:32:53:6b:4f:7b:96:27:
d4:3b:4a:01:41:7f:82:f1:6f:01:c5:c7:be:56:9f:9a:22:89:
4c:b2:9f:50:e1:2b:7b:06:06:cd:2f:6f:f5:76:26:c4:2a:9e:
b4:4a:cb:61:a8:9c:a4:7a:6f:24:91:da:7c:63:54:12:0d:54:
cb:7d:d0:cf:78:8c:6b:31:b1:ea:d8:26:79:00:a6:ca:64:08:
8f:95:3e:45:05:62:32:e9:55:a9:e6:c3:61:a4:07:6c:48:61:
19:21:55:1b:cd:f5:21:26:29:b2:37:f8:6c:75:80:3f:6a:b0:
88:9e:b1:45:87:d8:4e:d3:d2:92:c5:92:8e:12:0a:6a:fc:20:
c7:8f:85:ab:52:f8:cb:20:f3:19:d5:66:32:3c:0c:c9:20:1c:
6e:90:45:f7:b9:d4:87:05:d5:c3:57:35:92:c7:b2:19:0b:56:
f0:bf:b3:52:ef:a0:99:94:50:a6:78:cf:21:0d:8f:cb:cb:84:
b3:ad:76:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsmIAP1LTny/Uh+YOcaic4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMTAyODE1ZDI3ZTY1MTE3NDZkNGEzZTlmZDEzNTljZDk4
MmE4NjYwHhcNMjUwNjE0MDQwMDIyWhcNMjUwNjE1MDQwMDIyWjAzMTEwLwYDVQQD
EyhhMGMxMGEyNjA5ZDU3ZTFkMzdiOGRlNzY4YzM2MzI4NTk0NjlkNzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Alke3LFtJ1BxaxTM1OrQDCzJnyC
PF+zO0WFGce0W/WI1rd8jLxYxuo9DVi6xEglU9oo6M2I+WeUeIWd8l8EJqXA/Sy0
neYeCflaj+4Ak9yMxnyKHN0BKOfPCPdQkVGHODI4cn8ft+43U6XK6kMK2eHniWDM
bEzusoOJ7V9OuMaZzx01BsC9J3/kKinvoJk73l3wADemRiLqEImc3/vwngMZQz3t
BOBpy6bMiZXAdvnjdVrA/RsX+J6na0Fr3wg7eLBWUilCwutKtAWfCp2oDpcBao1L
RdB1d+fbJQf6nLHBXS0dxQ27mhDxSJolMaPangRUqhzTlsSLrD8ajlXoywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKDBCiYJ1X4dN7jedow2MoWUadcnMB8GA1UdIwQY
MBaAFC8QKBXSfmURdG1KPp/RNZzZgqhmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHhBb0ZkSi1aUkYwYlVvLW45RTFuTm1DcUdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9hMzNmOWEtOWJjMy00MzBkLWJiN2Mt
NWVjNzk0YjBlNjljLzEvTHhBb0ZkSi1aUkYwYlVvLW45RTFuTm1DcUdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9hMzNmOWEtOWJjMy00MzBkLWJiN2MtNWVjNzk0YjBlNjlj
LzEvTHhBb0ZkSi1aUkYwYlVvLW45RTFuTm1DcUdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXQ1WsTwJ
qtud5j/pO0u7Jv0/LL4PKxpyDepUm0qHosMKCSnJkSg0qSZqMsHO+Z8+bAOkydmN
vNtoUGVTWQ7C6XQyU2tPe5Yn1DtKAUF/gvFvAcXHvlafmiKJTLKfUOErewYGzS9v
9XYmxCqetErLYaicpHpvJJHafGNUEg1Uy33Qz3iMazGx6tgmeQCmymQIj5U+RQVi
MulVqebDYaQHbEhhGSFVG831ISYpsjf4bHWAP2qwiJ6xRYfYTtPSksWSjhIKavwg
x4+Fq1L4yyDzGdVmMjwMySAcbpBF97nUhwXVw1c1kseyGQtW8L+zUu+gmZRQpnjP
IQ2Py8uEs612Gg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:33:02 2025 by rpki-client