Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
File: Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft (raw, json)
Hash identifier: o3Qc9KPQtqm/6VFtTwbsO1bQNMeb5znVo+uZKsrH2Uw=
Subject key identifier: 53:CB:D7:32:83:0F:A2:3D:15:6F:42:86:93:A7:CB:63:29:83:69:FD
Authority key identifier: 2D:BD:B8:9F:B4:11:8F:FA:55:FA:FD:BF:45:E1:92:82:BE:0E:7A:CF
Certificate issuer: /CN=2dbdb89fb4118ffa55fafdbf45e19282be0e7acf
Certificate serial: 01976DAB7F662F9E1BEF0382B7994E647501
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lb24n7QRj_pV-v2_ReGSgr4Oes8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 09:00:45 +0000
Manifest this update: Sat 14 Jun 2025 09:00:45 +0000
Manifest next update: Sun 15 Jun 2025 09:00:45 +0000
Files and hashes: 1: 1-zaXNM8IjBevuapBNy17UgtMDPI.roa (hash: qqGCZZPHpyNcqi3nXwcUIZYDresP/fXUbRojoE1EMpQ=)
2: Lb24n7QRj_pV-v2_ReGSgr4Oes8.crl (hash: vFxzacRZUBzEGZ0jxGlyK+LUf13vqEULMVmeU6e36qA=)
3: jV6ZfPR6YwqVEX_jWrfo-E3Ut1A.roa (hash: aKYc4lH7d/oqBFxJQA9n8W63icM0UlQYroSqqHHtI28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lb24n7QRj_pV-v2_ReGSgr4Oes8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:7f:66:2f:9e:1b:ef:03:82:b7:99:4e:64:75:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dbdb89fb4118ffa55fafdbf45e19282be0e7acf
Validity
Not Before: Jun 14 09:00:45 2025 GMT
Not After : Jun 15 09:00:45 2025 GMT
Subject: CN=53cbd732830fa23d156f428693a7cb63298369fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a7:f3:64:46:6a:5b:e7:bd:5e:2f:35:cb:43:
e4:d0:db:71:a6:9f:de:ec:51:02:d9:d8:b6:c3:4d:
26:be:e6:d2:ed:fe:bd:25:28:c7:21:2d:88:50:47:
79:fa:b2:34:74:f6:8a:5e:3e:3f:3e:8c:54:ac:cb:
3d:fb:56:2c:df:a9:8d:39:6d:c8:db:0e:fa:01:54:
25:04:39:2b:c4:de:63:55:62:e7:8d:c4:60:22:db:
34:a3:32:7a:76:bd:69:02:8b:60:d9:7b:af:1f:a1:
cf:e0:83:c5:2d:5d:a6:a8:0e:11:93:aa:80:39:1f:
a3:f0:98:06:50:d3:73:91:a5:2e:45:26:f9:f5:ef:
d4:47:67:15:2e:2e:7c:49:d6:67:7a:fe:3c:f7:a7:
90:11:54:0a:33:06:4e:ab:a6:88:21:22:fe:80:2e:
02:cf:7b:dd:43:67:27:ca:41:dc:1a:6f:6e:a4:c0:
d6:99:71:25:b7:f3:32:45:d1:50:ba:fb:75:cf:35:
91:b0:69:5a:b5:a7:92:0a:5d:4a:31:4d:b1:e0:4d:
37:50:1b:a4:29:ca:4c:43:48:56:2d:1d:61:f2:78:
61:97:42:2e:9c:06:a5:e2:b5:8a:63:05:53:5d:23:
1e:71:2e:9f:a8:ff:a6:0b:20:18:53:41:b1:58:44:
57:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:CB:D7:32:83:0F:A2:3D:15:6F:42:86:93:A7:CB:63:29:83:69:FD
X509v3 Authority Key Identifier:
keyid:2D:BD:B8:9F:B4:11:8F:FA:55:FA:FD:BF:45:E1:92:82:BE:0E:7A:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lb24n7QRj_pV-v2_ReGSgr4Oes8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:c7:d0:3d:66:16:fa:92:60:0f:87:8a:9b:40:31:31:55:3f:
d3:2b:7c:aa:31:bb:8a:dd:0b:86:b8:a3:bf:2f:bb:0f:f2:af:
eb:54:c3:b7:e0:02:d1:54:42:11:24:1f:fc:9b:5e:82:8a:c1:
e2:86:2d:c3:63:3d:ae:2a:59:19:42:a6:1a:03:2b:85:d9:6f:
61:82:df:97:b3:ae:2e:f8:41:95:8b:e5:96:c8:e2:16:34:80:
22:75:1e:6a:3f:f5:87:4b:2e:25:5e:f5:fa:d3:f9:5f:0a:00:
5f:b7:91:53:dd:e2:e8:26:fe:ea:13:5d:e6:16:1b:3d:a4:35:
f3:6b:3b:c9:79:3d:c9:c4:ee:23:e8:61:6b:43:79:77:f7:aa:
b4:e0:93:63:bf:6e:d5:33:27:98:e0:a8:e4:30:0a:d4:2a:74:
6b:d6:2e:0f:a6:c1:c0:36:43:8d:d6:74:d9:2a:56:c0:07:0f:
80:17:96:91:48:e3:d4:09:6f:74:9d:5e:68:38:4f:0d:9e:7a:
3d:b8:6e:f6:c7:8e:ed:98:48:73:87:61:0f:24:cc:71:b6:69:
30:4c:d3:39:38:e8:19:04:55:84:3d:74:a4:c1:e4:cf:00:2b:
7a:23:a5:4b:a7:29:90:78:26:b0:f9:66:c1:f6:a4:d5:4e:94:
fd:59:88:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtq39mL54b7wOCt5lOZHUBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkYmRiODlmYjQxMThmZmE1NWZhZmRiZjQ1ZTE5MjgyYmUw
ZTdhY2YwHhcNMjUwNjE0MDkwMDQ1WhcNMjUwNjE1MDkwMDQ1WjAzMTEwLwYDVQQD
Eyg1M2NiZDczMjgzMGZhMjNkMTU2ZjQyODY5M2E3Y2I2MzI5ODM2OWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0afzZEZqW+e9Xi81y0Pk0Ntxpp/e
7FEC2di2w00mvubS7f69JSjHIS2IUEd5+rI0dPaKXj4/PoxUrMs9+1Ys36mNOW3I
2w76AVQlBDkrxN5jVWLnjcRgIts0ozJ6dr1pAotg2XuvH6HP4IPFLV2mqA4Rk6qA
OR+j8JgGUNNzkaUuRSb59e/UR2cVLi58SdZnev4896eQEVQKMwZOq6aIISL+gC4C
z3vdQ2cnykHcGm9upMDWmXElt/MyRdFQuvt1zzWRsGlataeSCl1KMU2x4E03UBuk
KcpMQ0hWLR1h8nhhl0IunAal4rWKYwVTXSMecS6fqP+mCyAYU0GxWERXzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFPL1zKDD6I9FW9ChpOny2Mpg2n9MB8GA1UdIwQY
MBaAFC29uJ+0EY/6Vfr9v0XhkoK+DnrPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGIyNG43UVJqX3BWLXYyX1JlR1NncjRPZXM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mMDBjY2MtZWMzZi00MGRmLWE5ZmMt
N2NjNzk5MTczMDBhLzEvTGIyNG43UVJqX3BWLXYyX1JlR1NncjRPZXM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9mMDBjY2MtZWMzZi00MGRmLWE5ZmMtN2NjNzk5MTczMDBh
LzEvTGIyNG43UVJqX3BWLXYyX1JlR1NncjRPZXM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq8fQPWYW
+pJgD4eKm0AxMVU/0yt8qjG7it0Lhrijvy+7D/Kv61TDt+AC0VRCESQf/JtegorB
4oYtw2M9ripZGUKmGgMrhdlvYYLfl7OuLvhBlYvllsjiFjSAInUeaj/1h0suJV71
+tP5XwoAX7eRU93i6Cb+6hNd5hYbPaQ182s7yXk9ycTuI+hha0N5d/eqtOCTY79u
1TMnmOCo5DAK1Cp0a9YuD6bBwDZDjdZ02SpWwAcPgBeWkUjj1AlvdJ1eaDhPDZ56
Pbhu9seO7ZhIc4dhDyTMcbZpMEzTOTjoGQRVhD10pMHkzwAreiOlS6cpkHgmsPlm
wfak1U6U/VmIHw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:35:05 2025 by rpki-client