Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.mft
File: LIjbgf377M7nX0qfaYo8GzqEYm4.mft (raw, json)
Hash identifier: 5QxyNJX4foSjDNEeBqPCvmenFTMGLeb/acU2Z97lLAQ=
Subject key identifier: F5:44:C8:FE:DE:59:B3:93:B9:53:AB:DA:9B:5B:8F:29:79:BD:56:50
Authority key identifier: 2C:88:DB:81:FD:FB:EC:CE:E7:5F:4A:9F:69:8A:3C:1B:3A:84:62:6E
Certificate issuer: /CN=2c88db81fdfbeccee75f4a9f698a3c1b3a84626e
Certificate serial: 019779E6CFED0E3F6B1CE869E829D0608493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIjbgf377M7nX0qfaYo8GzqEYm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.mft
Manifest number: 12DE
Signing time: Mon 16 Jun 2025 18:00:59 +0000
Manifest this update: Mon 16 Jun 2025 18:00:59 +0000
Manifest next update: Tue 17 Jun 2025 18:00:59 +0000
Files and hashes: 1: LIjbgf377M7nX0qfaYo8GzqEYm4.crl (hash: RD1U3xOlaUl0UPlKDwbki9FsPub1RfQo+HjNTM5T/o8=)
2: PP9bgdUS-fVj1MX8DGYePZt8TkE.roa (hash: ostFORLB1aqakHZ76u6KB5do/0qYMVa/6OoMMSfXFeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LIjbgf377M7nX0qfaYo8GzqEYm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:e6:cf:ed:0e:3f:6b:1c:e8:69:e8:29:d0:60:84:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c88db81fdfbeccee75f4a9f698a3c1b3a84626e
Validity
Not Before: Jun 16 18:00:59 2025 GMT
Not After : Jun 17 18:00:59 2025 GMT
Subject: CN=f544c8fede59b393b953abda9b5b8f2979bd5650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:da:9b:bc:bd:a3:4a:88:99:e4:3c:6b:77:a5:
45:dc:c8:1a:75:3f:36:bf:0c:f1:16:f6:a2:40:12:
8d:ad:16:33:26:5c:4f:ac:78:cd:f1:ca:f5:1f:5e:
d4:be:73:81:f5:fd:9d:c2:b2:ca:5e:2d:68:ee:a2:
2b:3c:ad:c9:ba:8d:0b:b4:79:56:ec:16:9f:9b:0b:
6a:c3:e1:19:31:e9:8b:75:2b:fe:be:44:2f:ce:0f:
d2:32:c6:b9:28:46:d8:0f:db:f2:25:06:eb:7b:33:
e2:5d:60:6d:ac:04:b3:ad:07:50:17:60:6a:33:ac:
a5:ec:18:f9:0e:82:5e:b7:ce:e3:95:a2:d6:e3:67:
47:ce:38:25:f1:8b:44:d2:6e:4a:1d:b0:86:89:6a:
37:4f:56:cd:82:45:b5:02:1f:62:f7:c4:21:ee:c7:
35:88:09:e1:ed:3e:8e:3c:7f:f9:c4:89:1d:57:3f:
96:1f:4d:8b:9f:e7:93:60:0d:0d:07:91:86:56:a4:
10:72:4d:2a:d2:c5:2c:72:66:27:36:1b:a8:6b:ff:
9c:da:d0:db:75:74:63:b1:65:aa:0b:e4:76:c1:45:
da:e9:b6:49:51:88:43:80:18:34:41:a3:72:d8:65:
b8:82:6f:86:2f:e0:f6:65:ff:49:76:20:4d:fd:ea:
27:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:44:C8:FE:DE:59:B3:93:B9:53:AB:DA:9B:5B:8F:29:79:BD:56:50
X509v3 Authority Key Identifier:
keyid:2C:88:DB:81:FD:FB:EC:CE:E7:5F:4A:9F:69:8A:3C:1B:3A:84:62:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIjbgf377M7nX0qfaYo8GzqEYm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:e5:21:83:66:56:4b:ee:51:90:a9:cb:b9:50:a9:a3:d9:44:
d2:d4:0c:20:33:ea:de:7d:56:54:88:1c:01:ae:9e:ba:00:e8:
3a:40:67:c2:30:15:21:d6:e3:08:03:87:4a:1d:51:1c:29:b4:
6a:cd:b5:39:14:08:11:ca:8d:39:0d:29:ad:dc:df:22:84:1c:
ee:07:11:89:f7:ca:3f:12:dc:c8:94:40:9c:1a:44:3e:a4:24:
5b:29:91:1a:78:16:90:08:eb:86:53:3b:16:3c:e8:82:c4:71:
37:ce:3f:0c:6f:2e:11:0d:56:27:cd:a6:c7:57:6d:42:68:bd:
bc:f4:d5:48:e9:fc:54:99:c5:73:4c:40:35:62:62:55:09:d4:
4a:b3:db:43:3a:de:10:18:37:b1:f7:dc:d6:ae:55:62:6b:6a:
16:87:7f:b9:13:e3:1b:cb:2d:96:72:8c:4c:93:74:9c:40:3a:
c5:e5:f9:72:c0:db:72:3c:ec:de:f5:d2:91:6c:38:76:6a:17:
9f:15:93:a0:19:df:2d:15:34:ed:af:35:80:e9:f6:76:e0:a6:
f5:02:d7:67:52:6c:9c:a1:64:c1:e4:f6:00:3b:75:3c:3a:ed:
07:2d:fa:7d:d6:e8:f0:b0:60:16:67:74:59:65:00:d0:06:15:
3c:95:7e:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd55s/tDj9rHOhp6CnQYISTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjODhkYjgxZmRmYmVjY2VlNzVmNGE5ZjY5OGEzYzFiM2E4
NDYyNmUwHhcNMjUwNjE2MTgwMDU5WhcNMjUwNjE3MTgwMDU5WjAzMTEwLwYDVQQD
EyhmNTQ0YzhmZWRlNTliMzkzYjk1M2FiZGE5YjViOGYyOTc5YmQ1NjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutqbvL2jSoiZ5Dxrd6VF3MgadT82
vwzxFvaiQBKNrRYzJlxPrHjN8cr1H17UvnOB9f2dwrLKXi1o7qIrPK3Juo0LtHlW
7Bafmwtqw+EZMemLdSv+vkQvzg/SMsa5KEbYD9vyJQbrezPiXWBtrASzrQdQF2Bq
M6yl7Bj5DoJet87jlaLW42dHzjgl8YtE0m5KHbCGiWo3T1bNgkW1Ah9i98Qh7sc1
iAnh7T6OPH/5xIkdVz+WH02Ln+eTYA0NB5GGVqQQck0q0sUscmYnNhuoa/+c2tDb
dXRjsWWqC+R2wUXa6bZJUYhDgBg0QaNy2GW4gm+GL+D2Zf9JdiBN/eon8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPVEyP7eWbOTuVOr2ptbjyl5vVZQMB8GA1UdIwQY
MBaAFCyI24H9++zO519Kn2mKPBs6hGJuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTElqYmdmMzc3TTduWDBxZmFZbzhHenFFWW00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9hOGUwNGItMGRiYS00MGVjLWIxMjYt
ZjQ1N2Q0MDRhZTJmLzEvTElqYmdmMzc3TTduWDBxZmFZbzhHenFFWW00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9hOGUwNGItMGRiYS00MGVjLWIxMjYtZjQ1N2Q0MDRhZTJm
LzEvTElqYmdmMzc3TTduWDBxZmFZbzhHenFFWW00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh+Uhg2ZW
S+5RkKnLuVCpo9lE0tQMIDPq3n1WVIgcAa6eugDoOkBnwjAVIdbjCAOHSh1RHCm0
as21ORQIEcqNOQ0prdzfIoQc7gcRiffKPxLcyJRAnBpEPqQkWymRGngWkAjrhlM7
FjzogsRxN84/DG8uEQ1WJ82mx1dtQmi9vPTVSOn8VJnFc0xANWJiVQnUSrPbQzre
EBg3sffc1q5VYmtqFod/uRPjG8stlnKMTJN0nEA6xeX5csDbcjzs3vXSkWw4dmoX
nxWToBnfLRU07a81gOn2duCm9QLXZ1JsnKFkweT2ADt1PDrtBy36fdbo8LBgFmd0
WWUA0AYVPJV+jw==
-----END CERTIFICATE-----
Generated at Mon Jun 16 20:52:46 2025 by rpki-client