Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.mft
File: LqdibWANr3WTdqZQfh1oQ4aZLTE.mft (raw, json)
Hash identifier: fYx2lo3b0UCTKALnvcWHfIOCDd6wUsmcnUzuD1FEeGc=
Subject key identifier: 49:7D:A4:C7:0B:4F:73:92:13:A9:63:5D:E0:A7:D4:2F:5E:97:35:AB
Authority key identifier: 2E:A7:62:6D:60:0D:AF:75:93:76:A6:50:7E:1D:68:43:86:99:2D:31
Certificate issuer: /CN=2ea7626d600daf759376a6507e1d684386992d31
Certificate serial: 019777539B8EB4934BF2234E542A783648B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LqdibWANr3WTdqZQfh1oQ4aZLTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.mft
Manifest number: 0BB0
Signing time: Mon 16 Jun 2025 06:00:57 +0000
Manifest this update: Mon 16 Jun 2025 06:00:57 +0000
Manifest next update: Tue 17 Jun 2025 06:00:57 +0000
Files and hashes: 1: LqdibWANr3WTdqZQfh1oQ4aZLTE.crl (hash: z0hQJCiyTk26d5nIVsdP3b82ZX8MhrEF6MD8vy/IeBY=)
2: RnQqeSwt7hN3ORL3uVQS5JgLuZs.roa (hash: PSsACPr2ZZlu/VcCkGWefI0lMsTEK4kuZI31GIxteCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LqdibWANr3WTdqZQfh1oQ4aZLTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:53:9b:8e:b4:93:4b:f2:23:4e:54:2a:78:36:48:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ea7626d600daf759376a6507e1d684386992d31
Validity
Not Before: Jun 16 06:00:57 2025 GMT
Not After : Jun 17 06:00:57 2025 GMT
Subject: CN=497da4c70b4f739213a9635de0a7d42f5e9735ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:84:1e:68:90:c9:3b:09:29:b5:11:7a:6e:6e:
0b:7e:07:2f:09:74:11:44:4d:0f:68:06:7c:1a:37:
2b:8c:eb:4d:f3:a8:2b:00:5c:d7:60:17:cf:e8:30:
7e:66:5d:28:cc:7e:2b:ec:61:01:91:b5:e0:0f:bc:
03:c0:aa:4b:f7:04:5e:9a:3c:b6:05:c4:7c:3d:46:
ca:c5:2a:b1:1b:f0:f2:82:9d:5d:8c:8a:96:df:d1:
38:9a:5c:ae:42:6e:6a:9e:bb:40:0f:f1:68:84:3e:
f3:62:8f:fb:6c:fc:4e:48:22:48:d5:0a:1e:d5:21:
df:97:c0:ad:ba:f0:4b:6f:c0:f0:a7:ac:67:8f:96:
8f:bf:eb:04:f9:a9:cd:81:c9:29:64:3d:85:d2:0c:
d4:5b:12:39:9c:ed:25:0f:7a:e7:7e:a5:12:1b:88:
82:38:ee:37:b6:8f:d3:9a:f0:57:e8:55:4c:d0:d5:
96:ae:25:a8:41:43:66:70:94:74:6b:9d:1a:5f:ef:
38:96:a7:4c:55:fe:d7:71:88:82:e4:5e:b9:7d:e9:
41:5d:de:40:27:3b:4e:f3:a3:fc:4c:cc:e6:11:2a:
8a:02:f9:65:84:13:88:12:3e:ca:f2:8d:73:1a:9b:
6d:b4:2f:71:b0:05:2d:3d:d9:91:03:85:81:a9:a2:
2b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7D:A4:C7:0B:4F:73:92:13:A9:63:5D:E0:A7:D4:2F:5E:97:35:AB
X509v3 Authority Key Identifier:
keyid:2E:A7:62:6D:60:0D:AF:75:93:76:A6:50:7E:1D:68:43:86:99:2D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LqdibWANr3WTdqZQfh1oQ4aZLTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:00:8b:75:45:9d:6e:4a:62:94:08:0e:d4:3e:e0:5a:c5:7a:
ff:aa:ee:04:0d:77:1e:e0:eb:9e:19:76:10:3d:c9:24:14:b6:
33:d1:16:ac:36:06:d2:f4:bb:dc:89:e4:98:96:0d:82:90:25:
de:7f:cc:05:4e:20:6b:38:81:98:61:5f:41:cb:d7:64:69:7d:
2a:8e:f7:ab:c8:88:a3:e6:17:e5:1a:ac:81:0b:07:eb:78:01:
74:5c:22:9c:9c:33:a3:b4:9c:ff:d6:ac:25:c4:7b:85:f7:06:
dd:eb:7b:f4:35:91:f0:1a:45:1e:21:8c:04:d0:6e:f7:0e:7b:
ad:3f:24:8f:ee:c2:71:c2:e0:cc:e4:9d:1a:2e:79:8c:2b:91:
da:0c:60:eb:79:03:f8:cc:aa:79:18:7b:f2:0d:0b:51:ba:6b:
37:c2:82:f7:d4:0a:9f:72:0d:45:c7:b1:0f:45:a6:de:bd:76:
e5:f4:59:ad:f2:86:4a:89:f8:88:44:c3:b1:8d:5f:e3:d6:2f:
5f:ab:5d:88:b5:50:a2:8a:6b:24:81:37:8b:35:45:1f:23:8a:
22:af:a5:37:a9:f0:51:cb:c9:5a:2d:e9:f1:6d:a2:a6:a3:7c:
6a:2b:bf:eb:31:63:32:d7:66:15:1c:d7:b0:cc:ec:14:ec:7d:
1c:dc:c6:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd3U5uOtJNL8iNOVCp4NkixMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlYTc2MjZkNjAwZGFmNzU5Mzc2YTY1MDdlMWQ2ODQzODY5
OTJkMzEwHhcNMjUwNjE2MDYwMDU3WhcNMjUwNjE3MDYwMDU3WjAzMTEwLwYDVQQD
Eyg0OTdkYTRjNzBiNGY3MzkyMTNhOTYzNWRlMGE3ZDQyZjVlOTczNWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4QeaJDJOwkptRF6bm4LfgcvCXQR
RE0PaAZ8GjcrjOtN86grAFzXYBfP6DB+Zl0ozH4r7GEBkbXgD7wDwKpL9wRemjy2
BcR8PUbKxSqxG/Dygp1djIqW39E4mlyuQm5qnrtAD/FohD7zYo/7bPxOSCJI1Qoe
1SHfl8CtuvBLb8Dwp6xnj5aPv+sE+anNgckpZD2F0gzUWxI5nO0lD3rnfqUSG4iC
OO43to/TmvBX6FVM0NWWriWoQUNmcJR0a50aX+84lqdMVf7XcYiC5F65felBXd5A
JztO86P8TMzmESqKAvllhBOIEj7K8o1zGptttC9xsAUtPdmRA4WBqaIr3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEl9pMcLT3OSE6ljXeCn1C9elzWrMB8GA1UdIwQY
MBaAFC6nYm1gDa91k3amUH4daEOGmS0xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHFkaWJXQU5yM1dUZHFaUWZoMW9RNGFaTFRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8wZDZiNDctODE5MS00MWUyLTgxMTMt
NmU1NjIxMmNkZjVjLzEvTHFkaWJXQU5yM1dUZHFaUWZoMW9RNGFaTFRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8wZDZiNDctODE5MS00MWUyLTgxMTMtNmU1NjIxMmNkZjVj
LzEvTHFkaWJXQU5yM1dUZHFaUWZoMW9RNGFaTFRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbQCLdUWd
bkpilAgO1D7gWsV6/6ruBA13HuDrnhl2ED3JJBS2M9EWrDYG0vS73InkmJYNgpAl
3n/MBU4gaziBmGFfQcvXZGl9Ko73q8iIo+YX5RqsgQsH63gBdFwinJwzo7Sc/9as
JcR7hfcG3et79DWR8BpFHiGMBNBu9w57rT8kj+7CccLgzOSdGi55jCuR2gxg63kD
+MyqeRh78g0LUbprN8KC99QKn3INRcexD0Wm3r125fRZrfKGSon4iETDsY1f49Yv
X6tdiLVQooprJIE3izVFHyOKIq+lN6nwUcvJWi3p8W2ipqN8aiu/6zFjMtdmFRzX
sMzsFOx9HNzGBg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 08:47:44 2025 by rpki-client