Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
File: lEethLhLrsR9ViHi91Yj8-rxOWA.mft (raw, json)
Hash identifier: rbaKJzr7N8EuWjqRVxPCF9NsgE4q8cQLiY4mFijIpbA=
Subject key identifier: 3F:1C:37:CF:A6:21:84:BC:D4:0E:45:11:CE:DD:16:55:1D:2F:E9:68
Authority key identifier: 94:47:AD:84:B8:4B:AE:C4:7D:56:21:E2:F7:56:23:F3:EA:F1:39:60
Certificate issuer: /CN=9447ad84b84baec47d5621e2f75623f3eaf13960
Certificate serial: 0197703ED5866133F10D4173D42B2ED37D61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
Manifest number: 0169
Signing time: Sat 14 Jun 2025 21:00:55 +0000
Manifest this update: Sat 14 Jun 2025 21:00:55 +0000
Manifest next update: Sun 15 Jun 2025 21:00:55 +0000
Files and hashes: 1: OvZQb1hcjOkIMnQrBwzGm-WLCpQ.roa (hash: AP7pBk7gh//un0koiUryrNu346ceJkk+whaQUXPWQDs=)
2: UWt_XRc9JV9FMCdsAcTPRdiOUNo.roa (hash: cl2cUuSvySYimCpyWJxO/6NE4GT3NHF6FS5npGysPcU=)
3: lEethLhLrsR9ViHi91Yj8-rxOWA.crl (hash: 6dLstxEtUhLC/gC4ep0e7VHaK6Nlswcy4Sx4ICVRaxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:3e:d5:86:61:33:f1:0d:41:73:d4:2b:2e:d3:7d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9447ad84b84baec47d5621e2f75623f3eaf13960
Validity
Not Before: Jun 14 21:00:55 2025 GMT
Not After : Jun 15 21:00:55 2025 GMT
Subject: CN=3f1c37cfa62184bcd40e4511cedd16551d2fe968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b6:2a:1f:d5:da:5d:88:87:b1:c2:7e:51:ab:
46:b9:88:3c:67:38:70:d9:ce:5d:82:a1:1c:e1:bd:
22:f5:5c:62:1f:dc:e4:3f:d3:9c:e2:b0:cf:b5:04:
1a:ce:fe:53:5e:7d:aa:78:94:c9:f8:99:7f:7c:cc:
9f:64:5d:be:af:20:b7:0d:14:df:a8:84:b2:0f:0a:
f5:49:23:c4:18:5d:67:e9:e4:05:22:7f:82:ec:40:
54:79:a0:e7:54:2f:b8:26:40:af:d0:c7:d6:57:05:
b1:5d:69:2c:c1:1b:76:3d:5d:12:ac:3c:92:60:a0:
1d:ff:0c:1d:74:52:b9:54:fb:f9:a4:49:10:7b:dd:
3c:08:0c:92:94:47:d3:81:58:4f:03:78:2d:3f:43:
0b:f8:08:cd:f8:49:9b:bf:81:0f:b2:be:9a:59:6d:
f6:eb:50:54:02:20:07:5e:dc:80:db:5f:a3:d7:c2:
e9:40:69:80:49:9a:b5:c6:38:40:fb:4d:90:12:1e:
9a:71:cf:99:bb:49:df:61:72:d9:a0:fa:f0:ce:37:
ce:76:3d:4b:6e:d6:6b:f5:d1:57:9d:72:1b:a7:1f:
cb:aa:09:5f:6b:29:28:92:f4:85:2f:76:5f:12:3f:
68:db:f1:be:c3:e6:fe:aa:74:fc:58:4c:60:26:eb:
0c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1C:37:CF:A6:21:84:BC:D4:0E:45:11:CE:DD:16:55:1D:2F:E9:68
X509v3 Authority Key Identifier:
keyid:94:47:AD:84:B8:4B:AE:C4:7D:56:21:E2:F7:56:23:F3:EA:F1:39:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ef:d6:e0:ba:eb:22:59:ba:6a:73:c4:89:f6:ff:3d:bf:5e:
8b:55:f3:34:56:7d:f7:fe:18:2a:cf:a9:dc:b9:5b:94:0e:a9:
95:13:59:13:40:6e:22:fd:0d:a1:c2:49:e1:9b:e5:67:7b:36:
a4:fd:6c:87:35:69:a8:cf:eb:bc:2f:05:4e:93:f0:db:13:88:
4a:de:55:55:a9:06:bd:c3:75:a4:58:8b:f1:f3:48:1e:c4:46:
50:02:51:b7:03:9f:fd:c3:6a:65:1a:1f:ff:34:f6:17:86:ae:
fb:33:d0:99:ba:7f:03:12:a9:be:67:0c:1c:8b:d9:f6:67:69:
16:f3:36:22:8e:dc:eb:47:d3:1e:f1:26:6d:96:71:a0:86:55:
49:26:1b:70:9d:43:a1:63:a8:3c:47:85:6f:bd:e5:16:db:6e:
61:69:ad:a5:7a:4f:1f:7b:03:81:8c:9d:e5:b8:40:df:a5:78:
8f:8f:ba:ef:6c:cb:63:f6:74:d7:47:e4:1e:67:13:72:3b:dd:
02:51:e3:3b:6e:75:05:f0:09:b1:57:f5:45:53:ba:df:0c:9a:
9a:7f:d3:e2:cf:0a:39:b1:f6:f8:81:61:35:6e:79:fd:70:91:
74:09:77:41:c6:e2:2e:49:2e:84:ca:d7:c3:0f:54:7b:ce:75:
04:2f:2a:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwPtWGYTPxDUFz1Csu031hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NDdhZDg0Yjg0YmFlYzQ3ZDU2MjFlMmY3NTYyM2YzZWFm
MTM5NjAwHhcNMjUwNjE0MjEwMDU1WhcNMjUwNjE1MjEwMDU1WjAzMTEwLwYDVQQD
EygzZjFjMzdjZmE2MjE4NGJjZDQwZTQ1MTFjZWRkMTY1NTFkMmZlOTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LYqH9XaXYiHscJ+UatGuYg8Zzhw
2c5dgqEc4b0i9VxiH9zkP9Oc4rDPtQQazv5TXn2qeJTJ+Jl/fMyfZF2+ryC3DRTf
qISyDwr1SSPEGF1n6eQFIn+C7EBUeaDnVC+4JkCv0MfWVwWxXWkswRt2PV0SrDyS
YKAd/wwddFK5VPv5pEkQe908CAySlEfTgVhPA3gtP0ML+AjN+Embv4EPsr6aWW32
61BUAiAHXtyA21+j18LpQGmASZq1xjhA+02QEh6acc+Zu0nfYXLZoPrwzjfOdj1L
btZr9dFXnXIbpx/LqglfaykokvSFL3ZfEj9o2/G+w+b+qnT8WExgJusMywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD8cN8+mIYS81A5FEc7dFlUdL+loMB8GA1UdIwQY
MBaAFJRHrYS4S67EfVYh4vdWI/Pq8TlgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEVldGhMaExyc1I5VmlIaTkxWWo4LXJ4T1dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8yMzhjNTYtYzI1ZS00ZmQ2LWI5MTYt
NWIzMThjMzQ5OWZiLzEvbEVldGhMaExyc1I5VmlIaTkxWWo4LXJ4T1dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS8yMzhjNTYtYzI1ZS00ZmQ2LWI5MTYtNWIzMThjMzQ5OWZi
LzEvbEVldGhMaExyc1I5VmlIaTkxWWo4LXJ4T1dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiu/W4Lrr
Ilm6anPEifb/Pb9ei1XzNFZ99/4YKs+p3LlblA6plRNZE0BuIv0NocJJ4ZvlZ3s2
pP1shzVpqM/rvC8FTpPw2xOISt5VVakGvcN1pFiL8fNIHsRGUAJRtwOf/cNqZRof
/zT2F4au+zPQmbp/AxKpvmcMHIvZ9mdpFvM2Io7c60fTHvEmbZZxoIZVSSYbcJ1D
oWOoPEeFb73lFttuYWmtpXpPH3sDgYyd5bhA36V4j4+672zLY/Z010fkHmcTcjvd
AlHjO251BfAJsVf1RVO63wyamn/T4s8KObH2+IFhNW55/XCRdAl3QcbiLkkuhMrX
ww9Ue851BC8qKg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:19:10 2025 by rpki-client