Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
File: S-obEpfbw_S4HZEMJHbsgfw-lps.mft (raw, json)
Hash identifier: NPChdJlGTL1qbalfRbSZVrTXeA2ofo0mP2/9GR0hSm0=
Subject key identifier: 6E:1A:CF:CC:6C:F2:28:A0:C7:8F:82:9C:6D:DB:76:C4:F0:B2:41:2F
Authority key identifier: 4B:EA:1B:12:97:DB:C3:F4:B8:1D:91:0C:24:76:EC:81:FC:3E:96:9B
Certificate issuer: /CN=4bea1b1297dbc3f4b81d910c2476ec81fc3e969b
Certificate serial: 01976D3DCD73B3A30F953039A3C92EE91A63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 07:00:56 +0000
Manifest this update: Sat 14 Jun 2025 07:00:56 +0000
Manifest next update: Sun 15 Jun 2025 07:00:56 +0000
Files and hashes: 1: S-obEpfbw_S4HZEMJHbsgfw-lps.crl (hash: +YTOx1plJtppM2ZlsA5ytZZ6SVMlLqBXQCBaX6VbJB4=)
2: kjwnML0mSPBrVonITqtrTUWVW-U.roa (hash: +gir3l/WZlaa1zrGjWAyGJFwWfxqHFLzZc0IFiaqV1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:cd:73:b3:a3:0f:95:30:39:a3:c9:2e:e9:1a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bea1b1297dbc3f4b81d910c2476ec81fc3e969b
Validity
Not Before: Jun 14 07:00:56 2025 GMT
Not After : Jun 15 07:00:56 2025 GMT
Subject: CN=6e1acfcc6cf228a0c78f829c6ddb76c4f0b2412f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:55:de:92:48:3b:e3:97:54:e1:c7:58:79:9b:
0a:09:34:a3:93:d5:72:9d:85:46:82:bc:3c:85:70:
1a:86:53:57:cd:0b:ae:ab:43:c1:ce:78:ce:01:9d:
00:18:f8:41:cc:b2:9a:b8:7e:67:d9:d0:3a:6f:a8:
2e:2c:ae:7b:84:45:cd:80:90:2a:48:50:60:49:4e:
24:65:64:2a:97:62:96:a9:69:3b:df:3c:0f:19:b3:
f8:46:56:2b:c6:63:24:d9:3d:9c:49:7e:b3:17:81:
13:47:5f:c8:09:dd:e2:13:cb:a6:04:bc:ea:48:91:
87:64:a3:2e:a6:aa:0a:92:11:ec:ee:78:eb:ee:48:
18:1a:2d:02:0a:86:b4:c9:81:03:6c:ce:93:08:a7:
24:fd:4f:c3:96:42:f2:f5:e0:3a:b8:6f:c5:a3:29:
2c:4b:c5:49:52:2f:1a:47:0e:a2:68:4a:cb:59:5a:
34:55:0d:83:ea:e3:06:0e:72:56:1f:d8:17:3f:50:
e5:d2:03:08:c9:6d:c9:6b:97:55:f9:8f:c1:7b:42:
e7:e0:28:d5:d1:21:fc:0d:8b:54:1e:1c:1c:bf:92:
d5:75:35:58:55:ed:78:c7:0e:d3:61:c5:6d:db:81:
1d:cd:01:6d:02:b0:ca:08:99:45:1d:a3:33:76:67:
e4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:1A:CF:CC:6C:F2:28:A0:C7:8F:82:9C:6D:DB:76:C4:F0:B2:41:2F
X509v3 Authority Key Identifier:
keyid:4B:EA:1B:12:97:DB:C3:F4:B8:1D:91:0C:24:76:EC:81:FC:3E:96:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-obEpfbw_S4HZEMJHbsgfw-lps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5e43b0-8f0e-469c-b9b9-86f5d0a11949/1/S-obEpfbw_S4HZEMJHbsgfw-lps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:73:df:d7:9f:22:f7:c4:54:bb:3d:8a:aa:59:06:a1:d9:20:
89:6f:39:28:05:6a:44:f8:21:07:3a:a3:3c:62:88:10:d4:b1:
3d:6d:59:1f:96:63:bc:11:7b:5c:ac:09:1d:b8:2d:19:d2:8f:
b2:ae:2d:4c:dd:af:bc:96:d6:27:6c:e8:2c:b0:30:a0:14:ad:
2e:97:c8:48:73:74:a9:16:b3:83:8c:9f:b9:62:b4:9e:dd:89:
56:e1:29:3f:4c:ed:f3:3a:86:9c:e4:b8:0c:2e:c5:12:27:3a:
7a:e8:78:ec:5b:cb:67:b9:62:54:e2:45:13:51:c8:49:81:bd:
df:30:d9:ce:a3:d5:fc:d3:b2:d3:af:fe:de:98:a1:99:32:68:
36:b6:3e:e1:c7:99:a7:4e:0e:0b:5a:f2:2e:45:a0:7c:03:4a:
3a:4a:19:3f:31:1e:0e:74:46:d7:51:c2:99:ef:29:c9:94:3a:
12:e4:44:a4:6a:85:17:40:fd:58:df:0c:d7:c3:45:4f:67:10:
e6:b1:80:3d:da:e4:bf:32:ed:5c:58:70:d6:e3:81:08:5b:70:
29:e9:87:c4:66:81:8a:1f:43:1a:6a:74:c1:fd:74:93:42:e8:
bc:ec:ab:77:70:14:49:ab:c8:7f:ac:2a:50:8e:7c:49:db:83:
89:ea:85:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPc1zs6MPlTA5o8ku6RpjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZWExYjEyOTdkYmMzZjRiODFkOTEwYzI0NzZlYzgxZmMz
ZTk2OWIwHhcNMjUwNjE0MDcwMDU2WhcNMjUwNjE1MDcwMDU2WjAzMTEwLwYDVQQD
Eyg2ZTFhY2ZjYzZjZjIyOGEwYzc4ZjgyOWM2ZGRiNzZjNGYwYjI0MTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFXekkg745dU4cdYeZsKCTSjk9Vy
nYVGgrw8hXAahlNXzQuuq0PBznjOAZ0AGPhBzLKauH5n2dA6b6guLK57hEXNgJAq
SFBgSU4kZWQql2KWqWk73zwPGbP4RlYrxmMk2T2cSX6zF4ETR1/ICd3iE8umBLzq
SJGHZKMupqoKkhHs7njr7kgYGi0CCoa0yYEDbM6TCKck/U/DlkLy9eA6uG/Foyks
S8VJUi8aRw6iaErLWVo0VQ2D6uMGDnJWH9gXP1Dl0gMIyW3Ja5dV+Y/Be0Ln4CjV
0SH8DYtUHhwcv5LVdTVYVe14xw7TYcVt24EdzQFtArDKCJlFHaMzdmfkAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG4az8xs8iigx4+CnG3bdsTwskEvMB8GA1UdIwQY
MBaAFEvqGxKX28P0uB2RDCR27IH8PpabMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUy1vYkVwZmJ3X1M0SFpFTUpIYnNnZnctbHBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny81ZTQzYjAtOGYwZS00NjljLWI5Yjkt
ODZmNWQwYTExOTQ5LzEvUy1vYkVwZmJ3X1M0SFpFTUpIYnNnZnctbHBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny81ZTQzYjAtOGYwZS00NjljLWI5YjktODZmNWQwYTExOTQ5
LzEvUy1vYkVwZmJ3X1M0SFpFTUpIYnNnZnctbHBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAHPf158i
98RUuz2KqlkGodkgiW85KAVqRPghBzqjPGKIENSxPW1ZH5ZjvBF7XKwJHbgtGdKP
sq4tTN2vvJbWJ2zoLLAwoBStLpfISHN0qRazg4yfuWK0nt2JVuEpP0zt8zqGnOS4
DC7FEic6euh47FvLZ7liVOJFE1HISYG93zDZzqPV/NOy06/+3pihmTJoNrY+4ceZ
p04OC1ryLkWgfANKOkoZPzEeDnRG11HCme8pyZQ6EuREpGqFF0D9WN8M18NFT2cQ
5rGAPdrkvzLtXFhw1uOBCFtwKemHxGaBih9DGmp0wf10k0LovOyrd3AUSavIf6wq
UI58SduDieqFOA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 13:01:43 2025 by rpki-client