Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
File: lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft (raw, json)
Hash identifier: Bq9x6lVQxBSz6OAmE+tXLb9fShI8MGQN9sEC6hBNTMM=
Subject key identifier: 36:93:23:EB:00:45:91:D7:E7:77:9B:B0:FE:66:D8:7A:41:4F:76:21
Authority key identifier: 95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2
Certificate issuer: /CN=95461fbee1c06e3eafac0f2f95253ca8603accf2
Certificate serial: 01976DABBAB6B7E508C471517697D88ECE6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
Manifest number: 0705
Signing time: Sat 14 Jun 2025 09:01:00 +0000
Manifest this update: Sat 14 Jun 2025 09:01:00 +0000
Manifest next update: Sun 15 Jun 2025 09:01:00 +0000
Files and hashes: 1: _HX0nKUguEjDK_UXSZxDRu7j10o.roa (hash: nDwDdh/G4BS8EpikB8I09Ea4NwJkgiqchJXpY1cDAL4=)
2: lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl (hash: iqM75nThQZ9Q4AwKDS7mjMDuIXUKJKrxmojAlwPkTGE=)
3: zuaQcYGr_SOorxrrm1R8vFKkh3o.roa (hash: +Frydy4vUNiwXuYX5nBMIXixa4+W5EMNDEkn6Iy0AhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:ba:b6:b7:e5:08:c4:71:51:76:97:d8:8e:ce:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95461fbee1c06e3eafac0f2f95253ca8603accf2
Validity
Not Before: Jun 14 09:01:00 2025 GMT
Not After : Jun 15 09:01:00 2025 GMT
Subject: CN=369323eb004591d7e7779bb0fe66d87a414f7621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fa:68:cf:ab:f2:83:f2:8e:3c:6c:24:59:ab:
db:85:61:61:fb:80:ca:01:30:1a:9a:16:69:02:00:
17:65:70:cb:1c:c0:02:43:85:5c:14:e1:27:db:a2:
3f:96:e5:8c:bc:fe:3a:1a:b0:14:98:c3:e6:bd:1a:
31:68:77:43:ac:ef:98:0d:7c:f0:00:e5:78:4c:09:
c8:2d:b5:47:f9:f4:c0:21:0c:79:b5:77:9f:5f:4b:
f7:17:d9:05:70:14:49:cf:89:8e:82:ee:fd:81:8e:
a1:b7:7d:78:e9:ba:8e:6f:92:2c:34:b9:2a:c2:8d:
91:38:db:a6:69:78:b4:c2:1d:1b:3b:ca:b8:24:b4:
e9:64:43:a5:e7:ee:8f:1d:6e:1b:29:1e:7d:e9:76:
c0:f6:9c:09:70:e7:7d:7b:2a:50:6a:fc:36:03:d7:
6c:06:d4:d0:7c:2a:8b:52:03:d2:b1:d5:cb:05:42:
33:36:0b:29:5d:4a:62:97:e7:ed:02:3f:b5:e6:5a:
5e:b9:e6:da:b0:b4:7e:ca:f3:1f:e9:8b:07:48:3d:
e5:6a:0b:c2:e0:5f:84:58:8f:67:6f:1a:9f:a9:f0:
6a:ce:43:61:21:85:0a:ee:60:ce:d8:fc:0d:c0:94:
79:4f:c3:9e:9a:96:93:55:b5:20:77:76:45:15:df:
25:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:93:23:EB:00:45:91:D7:E7:77:9B:B0:FE:66:D8:7A:41:4F:76:21
X509v3 Authority Key Identifier:
keyid:95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:f9:b0:91:c1:03:28:47:0a:0f:59:59:44:39:65:00:3c:37:
98:87:ee:b1:a4:f5:df:84:e9:68:40:d7:59:68:23:1f:ef:8f:
3f:9d:e1:31:39:c8:9e:42:d1:be:07:c0:4a:f9:39:96:cf:e6:
44:e6:69:a0:8f:4a:30:fe:d3:d2:17:ba:1e:5d:45:de:c9:9f:
3c:d3:09:73:b4:d7:c3:43:4a:91:12:7d:b8:78:da:58:5d:a2:
ee:ab:e3:4a:01:5d:44:60:7f:2b:45:8c:a1:ef:1e:42:e7:7d:
ed:b9:57:31:e2:fe:c2:c1:cc:2e:52:a9:ae:66:e0:68:8f:ec:
a3:59:77:c6:ff:e4:75:8a:e8:dc:ae:44:f4:f6:6c:be:4d:0b:
4e:81:8b:23:5c:fd:38:ab:a5:d2:37:09:01:f0:18:31:07:38:
fb:e0:9b:94:1b:30:b4:4e:ed:84:43:a4:04:da:5f:48:e5:9e:
5d:60:b0:ff:40:d1:69:4e:78:eb:08:35:21:ee:8e:91:e2:81:
c6:22:c2:79:56:d4:98:6a:7b:f2:27:ac:c3:de:73:d6:b5:fb:
09:b2:d6:20:a7:30:88:34:e6:ea:4c:b9:65:49:e4:bb:74:52:
b4:b6:bd:cf:c7:f1:31:04:45:2b:e7:d0:ef:ee:4d:a9:f7:19:
93:c6:d7:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtq7q2t+UIxHFRdpfYjs5vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NDYxZmJlZTFjMDZlM2VhZmFjMGYyZjk1MjUzY2E4NjAz
YWNjZjIwHhcNMjUwNjE0MDkwMTAwWhcNMjUwNjE1MDkwMTAwWjAzMTEwLwYDVQQD
EygzNjkzMjNlYjAwNDU5MWQ3ZTc3NzliYjBmZTY2ZDg3YTQxNGY3NjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/poz6vyg/KOPGwkWavbhWFh+4DK
ATAamhZpAgAXZXDLHMACQ4VcFOEn26I/luWMvP46GrAUmMPmvRoxaHdDrO+YDXzw
AOV4TAnILbVH+fTAIQx5tXefX0v3F9kFcBRJz4mOgu79gY6ht3146bqOb5IsNLkq
wo2RONumaXi0wh0bO8q4JLTpZEOl5+6PHW4bKR596XbA9pwJcOd9eypQavw2A9ds
BtTQfCqLUgPSsdXLBUIzNgspXUpil+ftAj+15lpeuebasLR+yvMf6YsHSD3lagvC
4F+EWI9nbxqfqfBqzkNhIYUK7mDO2PwNwJR5T8OempaTVbUgd3ZFFd8lKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDaTI+sARZHX53ebsP5m2HpBT3YhMB8GA1UdIwQY
MBaAFJVGH77hwG4+r6wPL5UlPKhgOszyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFVZZnZ1SEFiajZ2ckE4dmxTVThxR0E2elBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9lNWNlOGYtNWVhMC00NzlmLTkzZTkt
ODlkNWM2MGY1MDFmLzEvbFVZZnZ1SEFiajZ2ckE4dmxTVThxR0E2elBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9lNWNlOGYtNWVhMC00NzlmLTkzZTktODlkNWM2MGY1MDFm
LzEvbFVZZnZ1SEFiajZ2ckE4dmxTVThxR0E2elBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAvmwkcED
KEcKD1lZRDllADw3mIfusaT134TpaEDXWWgjH++PP53hMTnInkLRvgfASvk5ls/m
ROZpoI9KMP7T0he6Hl1F3smfPNMJc7TXw0NKkRJ9uHjaWF2i7qvjSgFdRGB/K0WM
oe8eQud97blXMeL+wsHMLlKprmbgaI/so1l3xv/kdYro3K5E9PZsvk0LToGLI1z9
OKul0jcJAfAYMQc4++CblBswtE7thEOkBNpfSOWeXWCw/0DRaU546wg1Ie6OkeKB
xiLCeVbUmGp78iesw95z1rX7CbLWIKcwiDTm6ky5ZUnku3RStLa9z8fxMQRFK+fQ
7+5NqfcZk8bXIw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:48:03 2025 by rpki-client