Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
File: lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft (raw, json)
Hash identifier: HnIaKH0IDoL7hykcH1iWW0Sf6mlL47Rhc/QpZV6gGms=
Subject key identifier: 15:4A:51:F8:13:0C:62:5A:6E:73:6F:20:BF:AF:15:42:E9:EB:02:35
Authority key identifier: 95:21:56:C8:84:7F:24:D0:9D:A6:0D:5F:5B:10:54:2B:2E:CF:90:16
Certificate issuer: /CN=952156c8847f24d09da60d5f5b10542b2ecf9016
Certificate serial: 01976D3D4524C6CE0AD43A84A1122E7543EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 07:00:21 +0000
Manifest this update: Sat 14 Jun 2025 07:00:21 +0000
Manifest next update: Sun 15 Jun 2025 07:00:21 +0000
Files and hashes: 1: __MYyid4GtIkDzQxVkfCnSU_9K0.roa (hash: wGfHIHi66rHTs2wGskl+w+/VWjBeUlcRI6guMD/KMNQ=)
2: lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl (hash: DG2jDwV9t2NlxneexXaPmMwmiwN5ElIQuzqhZOauDCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:45:24:c6:ce:0a:d4:3a:84:a1:12:2e:75:43:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952156c8847f24d09da60d5f5b10542b2ecf9016
Validity
Not Before: Jun 14 07:00:21 2025 GMT
Not After : Jun 15 07:00:21 2025 GMT
Subject: CN=154a51f8130c625a6e736f20bfaf1542e9eb0235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a7:e0:f4:4f:dd:2c:04:c4:db:6d:ec:0f:74:
f1:47:ce:fe:b5:86:0a:20:86:f2:5e:64:6d:c5:15:
7e:d2:cf:9e:22:df:b8:20:30:cf:3f:b2:95:02:74:
7c:eb:94:e9:73:8f:5f:c4:d0:aa:b7:ef:04:74:43:
2c:bf:10:50:75:4e:2e:eb:4d:c2:56:2a:26:1e:fa:
52:7b:d8:f3:74:c6:a8:d3:a7:a3:7f:03:2d:4c:0c:
15:ee:ff:c1:ce:bc:9a:93:86:47:75:9b:7a:d3:29:
06:34:df:9f:72:44:f3:6a:8f:73:d8:e9:7e:c9:29:
5b:bb:ee:95:8a:55:9e:da:1f:50:4d:90:ae:08:9d:
25:82:24:6d:e1:f8:e7:cb:be:e6:9f:43:8c:b8:49:
5a:7a:6a:3e:34:45:4b:29:8a:39:64:88:2d:3c:c8:
d0:1e:3d:87:c1:f4:49:99:ef:1d:86:1d:5f:d6:bd:
d3:53:9c:b8:cc:e5:b2:c8:54:e7:ae:ce:16:cd:0d:
d1:a6:bb:f6:ca:ad:2f:d8:e8:b5:4c:c7:fa:ff:e8:
c3:c6:2d:7e:ed:6e:e0:f9:eb:a6:4c:ea:ce:ae:26:
5e:ce:41:45:f2:ed:c0:76:85:0f:40:93:a2:0d:d9:
dc:9b:1f:7a:2b:b2:14:11:ae:f8:8d:ca:bd:1a:9b:
21:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4A:51:F8:13:0C:62:5A:6E:73:6F:20:BF:AF:15:42:E9:EB:02:35
X509v3 Authority Key Identifier:
keyid:95:21:56:C8:84:7F:24:D0:9D:A6:0D:5F:5B:10:54:2B:2E:CF:90:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:68:64:05:f3:b0:de:2d:b8:6c:4b:2c:ff:1d:01:ae:9c:eb:
0e:d2:cc:f0:84:de:be:6f:b2:40:f4:89:3a:ae:f5:27:1f:08:
09:05:34:bd:b2:c8:61:6d:2e:b6:85:27:86:55:2f:ef:c8:0f:
63:01:8c:c4:a9:40:e4:29:67:bf:97:21:ca:d4:d0:a6:9b:b8:
91:04:f2:8a:de:1d:d5:ca:f1:0b:81:89:e1:53:14:03:4f:56:
69:7d:74:85:4f:99:1c:b5:92:1e:dd:b1:1a:fa:7a:f1:0a:ff:
2a:0f:d9:54:bc:f5:09:b8:ab:a0:f0:58:e9:1c:92:dc:07:1e:
2f:4d:5a:4a:20:cc:f8:52:89:2a:0e:df:50:16:b4:e3:11:7f:
91:24:11:a2:d5:67:ef:31:c7:5e:cb:96:13:ba:3b:b1:dd:8e:
82:95:0b:e5:48:c0:59:6d:b4:9f:58:91:7c:69:4b:ff:ab:00:
1b:54:91:91:73:b0:37:42:20:54:b4:91:d8:a3:af:1a:47:8b:
9d:42:be:37:8b:49:07:2c:11:75:30:75:90:ca:c1:99:0c:d6:
ca:f3:ac:f0:88:fe:1b:d6:9e:3f:50:c8:92:b8:8e:e0:fb:34:
53:20:d9:2d:cf:87:fb:10:bc:4b:34:69:23:d2:ab:1d:9b:c9:
75:8b:44:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPUUkxs4K1DqEoRIudUPuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MjE1NmM4ODQ3ZjI0ZDA5ZGE2MGQ1ZjViMTA1NDJiMmVj
ZjkwMTYwHhcNMjUwNjE0MDcwMDIxWhcNMjUwNjE1MDcwMDIxWjAzMTEwLwYDVQQD
EygxNTRhNTFmODEzMGM2MjVhNmU3MzZmMjBiZmFmMTU0MmU5ZWIwMjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoafg9E/dLATE223sD3TxR87+tYYK
IIbyXmRtxRV+0s+eIt+4IDDPP7KVAnR865Tpc49fxNCqt+8EdEMsvxBQdU4u603C
ViomHvpSe9jzdMao06ejfwMtTAwV7v/Bzryak4ZHdZt60ykGNN+fckTzao9z2Ol+
ySlbu+6VilWe2h9QTZCuCJ0lgiRt4fjny77mn0OMuElaemo+NEVLKYo5ZIgtPMjQ
Hj2HwfRJme8dhh1f1r3TU5y4zOWyyFTnrs4WzQ3Rprv2yq0v2Oi1TMf6/+jDxi1+
7W7g+eumTOrOriZezkFF8u3AdoUPQJOiDdncmx96K7IUEa74jcq9GpshCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBVKUfgTDGJabnNvIL+vFULp6wI1MB8GA1UdIwQY
MBaAFJUhVsiEfyTQnaYNX1sQVCsuz5AWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFNGV3lJUl9KTkNkcGcxZld4QlVLeTdQa0JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9jNDNkNGYtZjUyYy00Mzg3LTkzNjIt
YjNjMDFkMWE2Yzg1LzEvbFNGV3lJUl9KTkNkcGcxZld4QlVLeTdQa0JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9jNDNkNGYtZjUyYy00Mzg3LTkzNjItYjNjMDFkMWE2Yzg1
LzEvbFNGV3lJUl9KTkNkcGcxZld4QlVLeTdQa0JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaGhkBfOw
3i24bEss/x0BrpzrDtLM8ITevm+yQPSJOq71Jx8ICQU0vbLIYW0utoUnhlUv78gP
YwGMxKlA5Clnv5chytTQppu4kQTyit4d1crxC4GJ4VMUA09WaX10hU+ZHLWSHt2x
Gvp68Qr/Kg/ZVLz1CbiroPBY6RyS3AceL01aSiDM+FKJKg7fUBa04xF/kSQRotVn
7zHHXsuWE7o7sd2OgpUL5UjAWW20n1iRfGlL/6sAG1SRkXOwN0IgVLSR2KOvGkeL
nUK+N4tJBywRdTB1kMrBmQzWyvOs8Ij+G9aeP1DIkriO4Ps0UyDZLc+H+xC8SzRp
I9KrHZvJdYtEzA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:58:36 2025 by rpki-client