Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
File: lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft (raw, json)
Hash identifier: kMGQ6lPRkx+D9ghgVuYR8p2E0h/indldrmUftAjYKSc=
Subject key identifier: C3:3B:47:79:74:81:9E:8F:DC:99:F6:B1:78:6A:D8:59:5B:A7:82:A1
Authority key identifier: 94:9F:F4:08:31:CA:66:F9:96:C7:6E:A4:66:AF:49:47:6F:EC:D1:FF
Certificate issuer: /CN=949ff40831ca66f996c76ea466af49476fecd1ff
Certificate serial: 0197808E222C920EBB774ACDE2AAB6E03CC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
Manifest number: 1377
Signing time: Wed 18 Jun 2025 01:01:27 +0000
Manifest this update: Wed 18 Jun 2025 01:01:27 +0000
Manifest next update: Thu 19 Jun 2025 01:01:27 +0000
Files and hashes: 1: 79fBoxetqM8W78-kGmHTvjPW7Uw.roa (hash: pMW1Mp2B+qXHZp51RoJRa8NJEQ1rG2VsgYraYBKPRXE=)
2: 8J0Lc2AsJQgnkJG9_qri1EHFctE.roa (hash: C4HlyCH6kbwI3fK9kG+XOoCsicg+/qe888AdIQka/S0=)
3: lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl (hash: RW3GSM2PDm1xcYZqER4ojinveOoAj2/jILohqV3DBeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:80:8e:22:2c:92:0e:bb:77:4a:cd:e2:aa:b6:e0:3c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=949ff40831ca66f996c76ea466af49476fecd1ff
Validity
Not Before: Jun 18 01:01:27 2025 GMT
Not After : Jun 19 01:01:27 2025 GMT
Subject: CN=c33b477974819e8fdc99f6b1786ad8595ba782a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:db:d6:1a:49:9e:f4:29:fb:44:a6:7d:2b:4d:
2c:59:41:c0:d0:79:62:d0:c7:1f:17:12:42:19:b2:
2d:8e:4d:d7:5e:5f:c2:da:a7:4a:75:f3:c6:c2:60:
13:1f:80:e3:d9:e6:13:6c:86:9f:32:eb:e7:7a:31:
7b:ac:66:b7:b3:ef:04:29:8e:8f:6f:cc:89:3f:b8:
50:66:1d:5d:57:b4:d3:b8:90:08:db:23:39:84:c5:
4e:17:cc:ad:c9:98:d5:fb:a2:91:1a:5f:fa:3b:e8:
9f:59:8b:75:78:d9:e4:1d:90:d1:07:07:a7:a0:03:
cd:6b:29:0a:7e:7e:7d:7f:87:74:32:7d:b4:e0:76:
7a:6a:36:25:b6:56:7a:a0:68:cf:45:1f:f2:15:52:
9a:d1:20:cf:3b:4f:7c:75:c0:4d:6c:9a:3b:36:32:
14:ca:4c:a0:f1:c0:4b:66:5e:bf:ba:fd:fd:bd:9e:
46:aa:0d:79:b0:ec:ab:a5:fb:4f:25:4d:46:0d:a7:
41:da:c8:60:56:c1:82:e6:56:2f:ca:df:ea:f2:57:
ba:57:d9:cd:04:d5:c8:7b:40:69:a8:3e:96:38:cb:
a7:ec:e9:ba:4d:f9:2f:09:fd:3f:6e:f4:78:5a:04:
f3:1c:00:c8:19:de:31:50:ae:ae:9d:e0:d9:8c:c0:
ef:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3B:47:79:74:81:9E:8F:DC:99:F6:B1:78:6A:D8:59:5B:A7:82:A1
X509v3 Authority Key Identifier:
keyid:94:9F:F4:08:31:CA:66:F9:96:C7:6E:A4:66:AF:49:47:6F:EC:D1:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:bc:d4:9e:55:89:ae:a5:a2:dc:38:c2:4e:f4:ae:dc:58:34:
e9:33:3f:27:d2:f0:c4:67:f4:1f:40:e8:6c:f0:61:43:07:87:
c9:6c:7a:d0:be:35:d7:a5:b1:22:c6:17:60:f5:fa:3d:5e:73:
b4:bf:2d:b7:01:9f:25:d1:8a:6f:b7:9a:f0:27:19:81:69:de:
4d:fe:37:0c:90:d2:6c:3f:c0:a0:5a:81:5a:06:f6:f9:00:cf:
71:60:a7:2c:33:53:8b:76:26:32:9e:dd:8f:0e:6e:ad:4c:92:
e1:3e:0c:a4:46:b2:dd:ef:cd:e7:fc:82:bb:9f:eb:05:d1:4c:
a9:ba:95:e0:78:dc:d0:bd:4e:a7:6a:0f:e5:ae:08:e0:e1:f0:
20:db:12:43:9c:27:af:79:21:69:aa:0a:17:c9:81:8b:91:e9:
f0:24:e3:94:43:d7:97:d8:97:c3:96:be:1e:07:b7:14:ac:f4:
f7:0a:14:e5:32:d2:3f:01:13:2d:a7:e4:b8:f4:6f:b0:94:45:
50:58:39:3a:46:8e:3d:9f:34:9e:a7:5a:d0:ba:70:0b:ea:de:
b6:78:12:17:c5:73:d3:00:67:0d:32:bc:2b:4b:31:e1:f0:5d:
96:15:ef:9d:2e:1d:70:d0:48:34:90:c2:d2:72:16:31:f2:ff:
8c:55:2b:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeAjiIskg67d0rN4qq24DzJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0OWZmNDA4MzFjYTY2Zjk5NmM3NmVhNDY2YWY0OTQ3NmZl
Y2QxZmYwHhcNMjUwNjE4MDEwMTI3WhcNMjUwNjE5MDEwMTI3WjAzMTEwLwYDVQQD
EyhjMzNiNDc3OTc0ODE5ZThmZGM5OWY2YjE3ODZhZDg1OTViYTc4MmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29vWGkme9Cn7RKZ9K00sWUHA0Hli
0McfFxJCGbItjk3XXl/C2qdKdfPGwmATH4Dj2eYTbIafMuvnejF7rGa3s+8EKY6P
b8yJP7hQZh1dV7TTuJAI2yM5hMVOF8ytyZjV+6KRGl/6O+ifWYt1eNnkHZDRBwen
oAPNaykKfn59f4d0Mn204HZ6ajYltlZ6oGjPRR/yFVKa0SDPO098dcBNbJo7NjIU
ykyg8cBLZl6/uv39vZ5Gqg15sOyrpftPJU1GDadB2shgVsGC5lYvyt/q8le6V9nN
BNXIe0BpqD6WOMun7Om6TfkvCf0/bvR4WgTzHADIGd4xUK6uneDZjMDvDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMM7R3l0gZ6P3Jn2sXhq2Flbp4KhMB8GA1UdIwQY
MBaAFJSf9Agxymb5lsdupGavSUdv7NH/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEpfMENESEtadm1XeDI2a1pxOUpSMl9zMGY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81NWQxMGQtYjQ0OC00YjQ3LWJhNTgt
MTQ3YWRjOTBjYTBmLzEvbEpfMENESEtadm1XeDI2a1pxOUpSMl9zMGY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS81NWQxMGQtYjQ0OC00YjQ3LWJhNTgtMTQ3YWRjOTBjYTBm
LzEvbEpfMENESEtadm1XeDI2a1pxOUpSMl9zMGY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeLzUnlWJ
rqWi3DjCTvSu3Fg06TM/J9LwxGf0H0DobPBhQweHyWx60L4116WxIsYXYPX6PV5z
tL8ttwGfJdGKb7ea8CcZgWneTf43DJDSbD/AoFqBWgb2+QDPcWCnLDNTi3YmMp7d
jw5urUyS4T4MpEay3e/N5/yCu5/rBdFMqbqV4Hjc0L1Op2oP5a4I4OHwINsSQ5wn
r3khaaoKF8mBi5Hp8CTjlEPXl9iXw5a+Hge3FKz09woU5TLSPwETLafkuPRvsJRF
UFg5OkaOPZ80nqda0LpwC+retngSF8Vz0wBnDTK8K0sx4fBdlhXvnS4dcNBINJDC
0nIWMfL/jFUrQg==
-----END CERTIFICATE-----
Generated at Wed Jun 18 03:08:17 2025 by rpki-client