Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
File: lOxdPU2xSEp34sh2PXSgvXxDTak.mft (raw, json)
Hash identifier: FG4TiwACTP5bVcyTiZkos/JTjnzvNg9JV3akJW1MiFU=
Subject key identifier: D7:FC:E8:4D:83:3A:85:CF:DD:D0:F7:B0:22:72:76:EC:E4:EE:09:4F
Authority key identifier: 94:EC:5D:3D:4D:B1:48:4A:77:E2:C8:76:3D:74:A0:BD:7C:43:4D:A9
Certificate issuer: /CN=94ec5d3d4db1484a77e2c8763d74a0bd7c434da9
Certificate serial: 01977E30FD288D7304D7112E726882CF99EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
Manifest number: 0C8C
Signing time: Tue 17 Jun 2025 14:00:28 +0000
Manifest this update: Tue 17 Jun 2025 14:00:28 +0000
Manifest next update: Wed 18 Jun 2025 14:00:28 +0000
Files and hashes: 1: 50o06An3k3A8kOiunWV55W1-Ajg.roa (hash: AcFz8bkfqTGlKpcv2q2Ys5Hm4t2OZ+46UtANIMDmoyM=)
2: lOxdPU2xSEp34sh2PXSgvXxDTak.crl (hash: kfCK+dV2H17tkCHj3cetsXOeKwchiEh1qc1a6baZJGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:30:fd:28:8d:73:04:d7:11:2e:72:68:82:cf:99:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94ec5d3d4db1484a77e2c8763d74a0bd7c434da9
Validity
Not Before: Jun 17 14:00:28 2025 GMT
Not After : Jun 18 14:00:28 2025 GMT
Subject: CN=d7fce84d833a85cfddd0f7b0227276ece4ee094f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:36:68:32:ce:9c:f8:f5:ee:c2:a7:64:1a:7f:
12:1d:4c:9b:a1:63:fc:75:08:99:b6:49:14:e3:a7:
b0:e4:18:48:f5:15:fe:05:5f:d2:da:4a:f0:a8:90:
0f:a0:f1:a9:a0:ed:e1:37:4d:cd:ae:45:38:0f:74:
d6:f9:df:0d:7c:1d:73:02:28:8a:58:08:49:86:1c:
52:cf:68:05:70:79:ea:de:e6:5e:85:7a:97:93:c2:
70:39:48:5c:d2:63:21:59:ee:1a:c6:6e:ab:d6:6a:
85:3e:a7:d2:c2:e3:bf:1d:00:7b:a3:c9:bc:0d:35:
53:3f:69:48:c7:04:45:8e:60:c4:2f:95:3f:c3:74:
51:9a:57:f8:1a:45:bd:c6:6c:94:32:ea:d9:a1:bc:
63:1b:4d:86:07:89:fb:b4:04:48:7a:93:17:75:50:
ca:02:2b:31:10:24:0b:69:56:f3:b2:6d:cb:e0:77:
d6:6d:47:33:41:c6:93:1c:a2:2c:a1:6f:6d:23:e0:
d3:44:37:00:40:37:cc:c9:9c:01:6b:df:95:ef:6a:
e9:a8:0f:e3:fc:b8:e3:6b:d8:2d:41:56:ac:51:f4:
07:bf:dc:a3:8b:38:98:62:15:7d:38:50:7a:c5:a1:
b5:2f:bc:fb:8f:8b:f6:20:00:01:a3:27:a4:0b:41:
f7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:FC:E8:4D:83:3A:85:CF:DD:D0:F7:B0:22:72:76:EC:E4:EE:09:4F
X509v3 Authority Key Identifier:
keyid:94:EC:5D:3D:4D:B1:48:4A:77:E2:C8:76:3D:74:A0:BD:7C:43:4D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:71:e7:e3:04:cc:18:92:d1:8b:d7:b9:c1:8c:02:4c:ca:be:
44:4d:d7:69:2f:e5:93:b0:ca:58:ed:07:0f:11:33:ad:9e:90:
5d:56:68:e0:f8:f3:3b:46:31:14:f0:86:0b:06:1c:b4:c9:b1:
10:49:f6:77:ec:e9:2a:da:00:e6:c4:f6:c9:5c:a7:af:f8:a2:
fe:96:32:61:14:78:96:c7:8e:af:f3:58:0e:14:b2:7c:ad:b1:
0c:86:d8:6c:23:7a:fc:12:f3:a0:f7:3e:67:fc:25:8a:3d:e9:
a6:69:67:1b:76:fe:15:e7:6b:5a:ae:3d:bf:9a:1a:17:25:a0:
05:8c:45:db:b2:51:60:b0:6c:53:05:58:16:06:66:52:d5:60:
2f:f3:50:0a:31:c5:02:0d:0c:f7:f9:28:68:3d:b7:d3:0f:c6:
e2:89:99:e6:35:d0:62:f0:6f:48:d2:3d:b9:55:5e:76:9e:40:
ad:46:d9:82:41:a3:4c:98:eb:b7:03:a8:fa:35:53:52:f0:a5:
3e:78:39:91:87:f0:05:ef:d5:b6:41:fe:39:20:c7:cd:98:ba:
b1:ca:26:3f:15:83:e4:c0:a3:6e:f0:95:2c:c4:80:0c:a5:02:
d6:d0:4b:30:93:32:02:29:de:a1:49:4f:90:64:96:e8:da:8c:
7d:09:bb:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd+MP0ojXME1xEucmiCz5nsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ZWM1ZDNkNGRiMTQ4NGE3N2UyYzg3NjNkNzRhMGJkN2M0
MzRkYTkwHhcNMjUwNjE3MTQwMDI4WhcNMjUwNjE4MTQwMDI4WjAzMTEwLwYDVQQD
EyhkN2ZjZTg0ZDgzM2E4NWNmZGRkMGY3YjAyMjcyNzZlY2U0ZWUwOTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDZoMs6c+PXuwqdkGn8SHUyboWP8
dQiZtkkU46ew5BhI9RX+BV/S2krwqJAPoPGpoO3hN03NrkU4D3TW+d8NfB1zAiiK
WAhJhhxSz2gFcHnq3uZehXqXk8JwOUhc0mMhWe4axm6r1mqFPqfSwuO/HQB7o8m8
DTVTP2lIxwRFjmDEL5U/w3RRmlf4GkW9xmyUMurZobxjG02GB4n7tARIepMXdVDK
AisxECQLaVbzsm3L4HfWbUczQcaTHKIsoW9tI+DTRDcAQDfMyZwBa9+V72rpqA/j
/Ljja9gtQVasUfQHv9yjiziYYhV9OFB6xaG1L7z7j4v2IAABoyekC0H3XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNf86E2DOoXP3dD3sCJyduzk7glPMB8GA1UdIwQY
MBaAFJTsXT1NsUhKd+LIdj10oL18Q02pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbE94ZFBVMnhTRXAzNHNoMlBYU2d2WHhEVGFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC84YjEwODktYWEzNy00MjM2LWJiMWUt
NGYzZWU4MzY1ZDhmLzEvbE94ZFBVMnhTRXAzNHNoMlBYU2d2WHhEVGFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC84YjEwODktYWEzNy00MjM2LWJiMWUtNGYzZWU4MzY1ZDhm
LzEvbE94ZFBVMnhTRXAzNHNoMlBYU2d2WHhEVGFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAanHn4wTM
GJLRi9e5wYwCTMq+RE3XaS/lk7DKWO0HDxEzrZ6QXVZo4PjzO0YxFPCGCwYctMmx
EEn2d+zpKtoA5sT2yVynr/ii/pYyYRR4lseOr/NYDhSyfK2xDIbYbCN6/BLzoPc+
Z/wlij3ppmlnG3b+FedrWq49v5oaFyWgBYxF27JRYLBsUwVYFgZmUtVgL/NQCjHF
Ag0M9/koaD230w/G4omZ5jXQYvBvSNI9uVVedp5ArUbZgkGjTJjrtwOo+jVTUvCl
Png5kYfwBe/VtkH+OSDHzZi6scomPxWD5MCjbvCVLMSADKUC1tBLMJMyAineoUlP
kGSW6NqMfQm7Eg==
-----END CERTIFICATE-----
Generated at Tue Jun 17 16:46:00 2025 by rpki-client