Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
File: lBZrcEhD09l1QJXIOpG0k4KCAKI.mft (raw, json)
Hash identifier: mPTa+NkI1JZ0XjFgi8aUDhOS7GMDXvjufJqfZSPKrmw=
Subject key identifier: DA:09:38:86:E1:85:5F:60:63:9A:48:9C:0D:EB:1F:D0:FA:F5:D1:B8
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 01987E2EA44E9C41BCFC4128EA48D9BBAFEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
Manifest number: 16D4
Signing time: Wed 06 Aug 2025 07:00:42 +0000
Manifest this update: Wed 06 Aug 2025 07:00:42 +0000
Manifest next update: Thu 07 Aug 2025 07:00:42 +0000
Files and hashes: 1: 7NOWSwr6Ix9WqMtFCauUoXq2B4E.roa (hash: 71eyC9fYC2VExHc19u8sJwP29ASsjLuAVH+CBPHOF2M=)
2: Ruw-x4zfVCc3GTiQCnnMayYLrMQ.roa (hash: VPqD7NaSAxVUR7gCvmAQcQt1SUni3lPjk7OqIt9I1TI=)
3: Z7uuC5XE4-fMCsGBtqQw7mSeH9U.roa (hash: W7maKhHagBpEQgNK15fnWc66E1ZuDuwRIn7gOriSZAo=)
4: h9d0ktI5MHIktnWrhY2zneTKIew.roa (hash: 9qkOa4Wd+V/Z+xQC2CIhkz1VoRa5qCsYXEwwfKMwhGQ=)
5: iLiQdmyWfTSKLtGAKTv8i9pD7b8.roa (hash: Kr8U4lUGZbLkZ8pUjbEG8aEkHuf+c7USfKgTZhieF7c=)
6: lBZrcEhD09l1QJXIOpG0k4KCAKI.crl (hash: gypnFuNtaDROgrySQxXnau5GZDw/JXKjsyKF3kT4Y3M=)
7: zIA6BDrr_xrDLDlzAGpw_9P6klo.roa (hash: pfzDsna4zGoCQX7v3ji49EBWdSr9XYlq27X+4n1BNgY=)
8: zRIEfiHVhkzqHiYdm3McIGPDP2Q.roa (hash: 32bioXyHcsiw84uow4i7c6KhRJSD3457u6OM44k/3vM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2e:a4:4e:9c:41:bc:fc:41:28:ea:48:d9:bb:af:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Aug 6 07:00:42 2025 GMT
Not After : Aug 7 07:00:42 2025 GMT
Subject: CN=da093886e1855f60639a489c0deb1fd0faf5d1b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2b:f6:61:5e:1c:33:a3:a3:45:e2:d9:23:92:
1a:28:84:47:80:20:a9:53:ed:22:a0:fc:f5:a9:e7:
e5:d6:ec:59:2f:dd:17:34:32:53:d6:83:76:64:ae:
29:ed:d5:fe:65:da:49:45:e8:77:68:5e:b7:dd:8a:
df:44:80:4c:b0:1b:69:d7:b6:66:10:eb:43:ad:ef:
1a:bf:5d:e8:ec:7b:1f:73:ef:96:40:03:25:75:fd:
3d:47:44:e4:01:d2:35:44:1a:3a:fc:fb:6e:3c:8e:
05:63:56:80:3c:40:43:60:b8:12:12:37:42:cb:d6:
17:c1:b7:ff:f7:d7:85:18:7d:9f:c3:bc:82:76:ea:
0a:d4:e5:f8:8f:59:e9:40:9f:15:88:3f:d2:af:6d:
77:84:c0:ed:43:8a:8c:f1:41:56:0d:50:36:9d:a0:
33:14:16:1d:05:cf:fc:bc:20:f1:6b:f1:3c:8c:be:
ff:81:8c:d1:21:77:88:4b:19:8d:6e:0a:46:c4:98:
08:9c:80:2e:be:44:0a:4a:af:ac:09:12:84:6b:f1:
9a:40:e3:a6:8b:0f:4a:cf:3c:08:3d:f2:7b:d2:b3:
49:9c:71:10:1b:28:0f:e2:b7:08:99:8f:95:23:91:
c4:b8:3a:a2:05:25:5e:6d:77:40:64:31:80:00:8b:
d8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:09:38:86:E1:85:5F:60:63:9A:48:9C:0D:EB:1F:D0:FA:F5:D1:B8
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:e2:2a:91:25:3c:3c:3f:e0:7d:7b:a2:a6:ae:50:69:23:9e:
35:fe:03:b4:9a:3a:57:0a:aa:55:94:18:01:40:72:d7:8c:9f:
33:03:f9:5c:b0:de:8d:f6:07:68:81:ec:a4:01:be:0a:35:04:
a7:bd:40:af:75:05:26:56:0d:bd:df:56:80:c7:d7:c7:17:35:
8b:7c:cf:af:b6:4a:d0:01:fe:be:46:d4:63:e6:7b:d5:72:be:
d8:51:bc:f6:fe:95:8d:f6:45:23:ac:a1:21:4e:08:c2:26:a1:
2a:ff:f7:9a:35:ff:73:aa:0e:d5:21:41:a3:89:83:e1:a6:96:
0e:06:62:fc:09:56:70:46:cf:f0:dd:5b:be:15:18:ff:74:29:
e9:6e:81:3b:7f:a6:29:ca:5d:2c:70:58:4b:30:c0:c6:da:a8:
f1:fc:ca:7c:c8:bb:bd:49:ef:b6:8f:2c:a6:2f:75:ef:b1:a6:
79:0e:69:6c:96:ca:77:66:1d:08:7d:fa:da:3c:ff:ff:22:3a:
b5:85:eb:3c:b2:d5:85:b8:4a:1a:f3:75:a9:e8:14:c7:36:cd:
c4:bd:71:96:85:4d:98:42:73:60:a4:be:fa:32:8d:6f:14:e7:
3f:ed:8e:1a:15:65:86:a7:c4:e2:fe:0f:07:92:5f:27:1c:a5:
53:17:db:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+LqROnEG8/EEo6kjZu6/rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MTY2YjcwNDg0M2QzZDk3NTQwOTVjODNhOTFiNDkzODI4
MjAwYTIwHhcNMjUwODA2MDcwMDQyWhcNMjUwODA3MDcwMDQyWjAzMTEwLwYDVQQD
EyhkYTA5Mzg4NmUxODU1ZjYwNjM5YTQ4OWMwZGViMWZkMGZhZjVkMWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyv2YV4cM6OjReLZI5IaKIRHgCCp
U+0ioPz1qefl1uxZL90XNDJT1oN2ZK4p7dX+ZdpJReh3aF633YrfRIBMsBtp17Zm
EOtDre8av13o7Hsfc++WQAMldf09R0TkAdI1RBo6/PtuPI4FY1aAPEBDYLgSEjdC
y9YXwbf/99eFGH2fw7yCduoK1OX4j1npQJ8ViD/Sr213hMDtQ4qM8UFWDVA2naAz
FBYdBc/8vCDxa/E8jL7/gYzRIXeISxmNbgpGxJgInIAuvkQKSq+sCRKEa/GaQOOm
iw9KzzwIPfJ70rNJnHEQGygP4rcImY+VI5HEuDqiBSVebXdAZDGAAIvYcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNoJOIbhhV9gY5pInA3rH9D69dG4MB8GA1UdIwQY
MBaAFJQWa3BIQ9PZdUCVyDqRtJOCggCiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYt
NGJlMThlZjEyOGI0LzEvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYtNGJlMThlZjEyOGI0
LzEvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKeIqkSU8
PD/gfXuipq5QaSOeNf4DtJo6VwqqVZQYAUBy14yfMwP5XLDejfYHaIHspAG+CjUE
p71Ar3UFJlYNvd9WgMfXxxc1i3zPr7ZK0AH+vkbUY+Z71XK+2FG89v6VjfZFI6yh
IU4IwiahKv/3mjX/c6oO1SFBo4mD4aaWDgZi/AlWcEbP8N1bvhUY/3Qp6W6BO3+m
KcpdLHBYSzDAxtqo8fzKfMi7vUnvto8spi9177GmeQ5pbJbKd2YdCH362jz//yI6
tYXrPLLVhbhKGvN1qegUxzbNxL1xloVNmEJzYKS++jKNbxTnP+2OGhVlhqfE4v4P
B5JfJxylUxfbYA==
-----END CERTIFICATE-----
Generated at Wed Aug 6 09:37:43 2025 by rpki-client