Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.mft
File: lf0DtfNbMXtNMv8aSywXuzdsIeE.mft (raw, json)
Hash identifier: pGh3XqnghQmdoEUE/bLB4AXszC6LxHTe9qOGTA9LocI=
Subject key identifier: 3B:4F:6D:4B:7F:6A:40:36:26:D4:00:09:5F:7F:D0:6D:A2:47:92:EB
Authority key identifier: 95:FD:03:B5:F3:5B:31:7B:4D:32:FF:1A:4B:2C:17:BB:37:6C:21:E1
Certificate issuer: /CN=95fd03b5f35b317b4d32ff1a4b2c17bb376c21e1
Certificate serial: 01976EF52B2724251A8D952D8B52AAECB214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lf0DtfNbMXtNMv8aSywXuzdsIeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.mft
Manifest number: 119D
Signing time: Sat 14 Jun 2025 15:00:50 +0000
Manifest this update: Sat 14 Jun 2025 15:00:50 +0000
Manifest next update: Sun 15 Jun 2025 15:00:50 +0000
Files and hashes: 1: LZt4gb-xWjsUFFEJJlr5snAnfj4.roa (hash: iVanuwhOVMx/ABZHooPm82UQY207412XKo2wvn51IRE=)
2: lf0DtfNbMXtNMv8aSywXuzdsIeE.crl (hash: AK5+PLSx9DHeO/OQE6NUnW6t+5yeLvoP/fBNQOx4vbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lf0DtfNbMXtNMv8aSywXuzdsIeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 15:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f5:2b:27:24:25:1a:8d:95:2d:8b:52:aa:ec:b2:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95fd03b5f35b317b4d32ff1a4b2c17bb376c21e1
Validity
Not Before: Jun 14 15:00:50 2025 GMT
Not After : Jun 15 15:00:50 2025 GMT
Subject: CN=3b4f6d4b7f6a403626d400095f7fd06da24792eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:38:dd:9a:06:bf:d3:bd:e0:7e:40:c2:cc:ac:
6f:5a:98:d2:ae:77:df:3d:fa:f8:02:5f:24:53:f7:
56:b2:38:f5:6b:d5:10:11:9c:5a:c4:44:59:3a:30:
82:83:c3:01:06:4c:00:74:c5:3f:ea:17:64:17:1a:
c0:34:8e:ce:11:07:55:24:ee:c8:bf:4e:63:6d:a0:
26:4b:b6:bf:08:26:3e:20:25:7b:04:27:0c:01:20:
83:30:c6:09:72:ce:c1:03:66:73:1d:29:3e:9b:6c:
d5:5f:88:c3:5d:be:38:37:ec:1a:d9:68:f9:6c:ee:
80:21:41:49:ab:c5:3a:4e:ac:4a:79:dc:81:45:4d:
48:06:3d:93:65:b6:a6:77:9a:86:2e:0f:f2:04:1b:
13:a0:2e:be:09:0d:48:68:f9:5c:bd:55:7d:84:9e:
74:ad:09:4f:a2:f9:ce:96:ef:c9:82:53:55:e6:71:
ac:66:d4:48:3f:45:63:cd:60:79:62:25:68:d6:be:
52:61:6a:a5:a1:f1:3e:97:3d:d8:f2:8d:dd:f0:0c:
72:9c:72:2d:b8:60:fd:19:be:66:cf:3a:bb:ca:a8:
fb:67:40:8d:34:ca:90:2a:bd:c4:47:7c:c0:d5:63:
04:0c:2a:5c:52:8f:6d:2a:f3:63:b0:84:bc:43:ce:
e2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:4F:6D:4B:7F:6A:40:36:26:D4:00:09:5F:7F:D0:6D:A2:47:92:EB
X509v3 Authority Key Identifier:
keyid:95:FD:03:B5:F3:5B:31:7B:4D:32:FF:1A:4B:2C:17:BB:37:6C:21:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lf0DtfNbMXtNMv8aSywXuzdsIeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f9d0e9-bda4-42b2-8e7a-d60f44a934b1/1/lf0DtfNbMXtNMv8aSywXuzdsIeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:72:6f:c8:a3:71:cb:2c:68:a9:82:4c:bd:4c:93:14:88:f7:
de:b5:30:fe:78:f5:e9:e2:0c:8b:01:59:9b:72:9c:4a:a0:53:
f7:be:30:97:04:e7:a2:6e:cc:34:29:ec:e6:44:08:c2:a6:fa:
25:cd:47:b6:35:11:32:fb:ba:e9:fb:d2:12:60:c9:6d:ac:75:
74:63:4b:ee:36:3e:07:6e:23:b6:f0:fd:c7:1f:70:cd:cb:c2:
eb:c0:e5:0d:7b:2a:11:d1:c7:8a:de:3a:4e:5d:c7:ec:b0:f1:
d0:3d:72:a9:1f:b3:11:26:97:8f:23:f3:ad:87:2e:ab:c4:fe:
6f:d9:78:40:53:06:5b:0d:28:af:16:7d:82:71:91:42:c3:9a:
6d:45:f9:f2:0e:dd:f8:ae:02:5b:a1:1f:d5:b0:b2:26:6d:99:
ce:18:32:bd:48:66:93:45:c9:78:29:b0:49:22:a8:58:94:d4:
fa:38:f2:e7:76:af:f2:72:bc:a9:74:cf:30:05:b7:ea:87:df:
74:e9:20:e3:f6:44:cd:05:b8:f1:83:2b:d8:6a:d4:ba:86:6c:
fb:f1:f0:7a:48:1c:0d:35:7d:4b:2a:f5:e3:84:e2:8e:38:39:
ec:47:ea:5e:fd:cc:58:01:f2:c5:05:a4:17:07:4b:4e:b0:c4:
4f:df:b4:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdu9SsnJCUajZUti1Kq7LIUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1ZmQwM2I1ZjM1YjMxN2I0ZDMyZmYxYTRiMmMxN2JiMzc2
YzIxZTEwHhcNMjUwNjE0MTUwMDUwWhcNMjUwNjE1MTUwMDUwWjAzMTEwLwYDVQQD
EygzYjRmNmQ0YjdmNmE0MDM2MjZkNDAwMDk1ZjdmZDA2ZGEyNDc5MmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjjdmga/073gfkDCzKxvWpjSrnff
Pfr4Al8kU/dWsjj1a9UQEZxaxERZOjCCg8MBBkwAdMU/6hdkFxrANI7OEQdVJO7I
v05jbaAmS7a/CCY+ICV7BCcMASCDMMYJcs7BA2ZzHSk+m2zVX4jDXb44N+wa2Wj5
bO6AIUFJq8U6TqxKedyBRU1IBj2TZbamd5qGLg/yBBsToC6+CQ1IaPlcvVV9hJ50
rQlPovnOlu/JglNV5nGsZtRIP0VjzWB5YiVo1r5SYWqlofE+lz3Y8o3d8AxynHIt
uGD9Gb5mzzq7yqj7Z0CNNMqQKr3ER3zA1WMEDCpcUo9tKvNjsIS8Q87iDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDtPbUt/akA2JtQACV9/0G2iR5LrMB8GA1UdIwQY
MBaAFJX9A7XzWzF7TTL/GkssF7s3bCHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGYwRHRmTmJNWHROTXY4YVN5d1h1emRzSWVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9mOWQwZTktYmRhNC00MmIyLThlN2Et
ZDYwZjQ0YTkzNGIxLzEvbGYwRHRmTmJNWHROTXY4YVN5d1h1emRzSWVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9mOWQwZTktYmRhNC00MmIyLThlN2EtZDYwZjQ0YTkzNGIx
LzEvbGYwRHRmTmJNWHROTXY4YVN5d1h1emRzSWVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAnJvyKNx
yyxoqYJMvUyTFIj33rUw/nj16eIMiwFZm3KcSqBT974wlwTnom7MNCns5kQIwqb6
Jc1HtjURMvu66fvSEmDJbax1dGNL7jY+B24jtvD9xx9wzcvC68DlDXsqEdHHit46
Tl3H7LDx0D1yqR+zESaXjyPzrYcuq8T+b9l4QFMGWw0orxZ9gnGRQsOabUX58g7d
+K4CW6Ef1bCyJm2ZzhgyvUhmk0XJeCmwSSKoWJTU+jjy53av8nK8qXTPMAW36off
dOkg4/ZEzQW48YMr2GrUuoZs+/HwekgcDTV9Syr144Tijjg57EfqXv3MWAHyxQWk
FwdLTrDET9+0gA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 00:01:21 2025 by rpki-client