Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
File: LWmLr5_z7uvmYoSIn79onU5oPIE.mft (raw, json)
Hash identifier: adDs6bYlPp+72hDoKtfIRLb6ygUoQiq8C40hCB/fQmo=
Subject key identifier: CA:FE:C7:FB:3C:4D:8E:B3:3D:DC:99:B5:C2:FF:D6:01:D1:03:DC:B0
Authority key identifier: 2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81
Certificate issuer: /CN=2d698baf9ff3eeebe66284889fbf689d4e683c81
Certificate serial: 019768F2F1E5FB5AD92523766F41FDBDE380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
Manifest number: 0E16
Signing time: Fri 13 Jun 2025 11:00:41 +0000
Manifest this update: Fri 13 Jun 2025 11:00:41 +0000
Manifest next update: Sat 14 Jun 2025 11:00:41 +0000
Files and hashes: 1: LWmLr5_z7uvmYoSIn79onU5oPIE.crl (hash: 0nQtOouk9XAn1R3tBgo2iTOJuEmxjAMUu9KaCHBI9Zg=)
2: k4aTxBF_DmBio83fOwNHIHkeyiA.roa (hash: IVVbmDsKyhVLGaHbxiyIMsj1K/TNy+QiBpkicXXI0O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:f1:e5:fb:5a:d9:25:23:76:6f:41:fd:bd:e3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d698baf9ff3eeebe66284889fbf689d4e683c81
Validity
Not Before: Jun 13 11:00:41 2025 GMT
Not After : Jun 14 11:00:41 2025 GMT
Subject: CN=cafec7fb3c4d8eb33ddc99b5c2ffd601d103dcb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:44:94:cc:38:6f:66:24:a0:fb:85:ff:9d:66:
58:3e:e0:6c:a0:4f:29:9c:7f:03:64:69:85:ce:67:
cc:a5:8c:31:ef:d5:c2:7d:40:61:c5:50:54:1b:5a:
4c:74:17:ed:f3:59:4f:95:e4:b4:6f:8b:ee:2f:3b:
ad:16:32:28:37:e1:6a:8b:62:ee:0d:f7:83:8e:16:
1f:34:c3:53:9e:56:c2:25:58:f0:44:56:c2:8b:f1:
72:57:69:b6:f1:de:50:ed:32:0c:ba:ee:fb:6c:c1:
8b:be:e6:fb:8c:70:99:d2:50:f1:cd:19:71:4e:30:
88:44:5c:20:71:0b:b9:17:fc:87:36:20:c6:f5:f7:
5c:b2:ed:02:24:a2:58:c3:54:d1:6c:48:bd:5f:25:
b1:fc:03:d3:79:f9:79:b4:f4:47:f8:6e:b5:30:84:
fd:ee:dc:b5:4b:c4:02:3e:ed:0e:9f:87:89:0b:5e:
0e:87:87:6d:25:9a:67:55:3e:61:c3:78:17:ee:2e:
12:b5:df:a8:27:76:76:b6:f0:2f:0d:a1:43:1c:4c:
57:e8:de:18:6d:fb:d8:b8:d5:4d:eb:d7:f2:2d:b1:
98:23:69:67:94:63:e1:3e:62:91:1a:73:50:d8:af:
fb:04:e1:34:c4:04:bc:15:5d:aa:1a:a2:f4:3d:08:
dc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:FE:C7:FB:3C:4D:8E:B3:3D:DC:99:B5:C2:FF:D6:01:D1:03:DC:B0
X509v3 Authority Key Identifier:
keyid:2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:f8:7e:88:62:53:c2:3a:b4:d3:d7:b4:cb:b5:93:bd:cf:4a:
f3:d2:11:4d:3c:be:6a:4d:c4:d9:06:58:d3:cf:a6:f7:87:eb:
66:87:2e:eb:ed:91:77:d5:37:e2:dc:47:0c:58:b8:c4:d4:6f:
6a:9c:a8:13:08:87:6f:4d:2a:9b:53:65:a7:f4:cf:05:27:67:
f8:a2:eb:3d:62:85:c6:c5:e7:c2:a1:54:b7:fa:ff:8b:9a:8b:
f1:db:96:09:98:71:5e:83:9f:b9:93:4c:e2:06:9a:50:59:2e:
11:3d:80:45:84:89:5f:c9:69:d8:3f:02:bb:ac:c1:56:3d:67:
be:ac:5b:fe:39:23:a7:1a:39:36:f1:88:24:d1:73:17:36:ba:
d8:bc:5b:55:83:47:29:2f:b0:67:39:31:e4:fb:6e:ec:52:44:
24:bf:95:94:79:7d:5e:27:54:03:8f:2c:b0:5d:54:73:e6:db:
50:27:9e:aa:e5:72:68:19:dd:81:8d:60:4a:1a:0e:73:c4:9b:
d7:7c:df:2a:6f:c4:d7:31:85:07:99:f2:92:c7:95:f5:73:7a:
9b:27:0b:c9:bf:65:ad:00:bb:8b:21:19:d4:20:c9:3f:05:c1:
30:de:d7:84:56:56:12:be:fd:5f:86:64:c4:f8:43:8d:e0:62:
56:53:a5:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdo8vHl+1rZJSN2b0H9veOAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNjk4YmFmOWZmM2VlZWJlNjYyODQ4ODlmYmY2ODlkNGU2
ODNjODEwHhcNMjUwNjEzMTEwMDQxWhcNMjUwNjE0MTEwMDQxWjAzMTEwLwYDVQQD
EyhjYWZlYzdmYjNjNGQ4ZWIzM2RkYzk5YjVjMmZmZDYwMWQxMDNkY2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUSUzDhvZiSg+4X/nWZYPuBsoE8p
nH8DZGmFzmfMpYwx79XCfUBhxVBUG1pMdBft81lPleS0b4vuLzutFjIoN+Fqi2Lu
DfeDjhYfNMNTnlbCJVjwRFbCi/FyV2m28d5Q7TIMuu77bMGLvub7jHCZ0lDxzRlx
TjCIRFwgcQu5F/yHNiDG9fdcsu0CJKJYw1TRbEi9XyWx/APTefl5tPRH+G61MIT9
7ty1S8QCPu0On4eJC14Oh4dtJZpnVT5hw3gX7i4Std+oJ3Z2tvAvDaFDHExX6N4Y
bfvYuNVN69fyLbGYI2lnlGPhPmKRGnNQ2K/7BOE0xAS8FV2qGqL0PQjc3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMr+x/s8TY6zPdyZtcL/1gHRA9ywMB8GA1UdIwQY
MBaAFC1pi6+f8+7r5mKEiJ+/aJ1OaDyBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFdtTHI1X3o3dXZtWW9TSW43OW9uVTVvUElFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS81NzJhOTgtM2JiNy00Mjc2LTlkMzkt
ZGZmNWEwOWE4MmNiLzEvTFdtTHI1X3o3dXZtWW9TSW43OW9uVTVvUElFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS81NzJhOTgtM2JiNy00Mjc2LTlkMzktZGZmNWEwOWE4MmNi
LzEvTFdtTHI1X3o3dXZtWW9TSW43OW9uVTVvUElFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAfh+iGJT
wjq009e0y7WTvc9K89IRTTy+ak3E2QZY08+m94frZocu6+2Rd9U34txHDFi4xNRv
apyoEwiHb00qm1Nlp/TPBSdn+KLrPWKFxsXnwqFUt/r/i5qL8duWCZhxXoOfuZNM
4gaaUFkuET2ARYSJX8lp2D8Cu6zBVj1nvqxb/jkjpxo5NvGIJNFzFza62LxbVYNH
KS+wZzkx5Ptu7FJEJL+VlHl9XidUA48ssF1Uc+bbUCeequVyaBndgY1gShoOc8Sb
13zfKm/E1zGFB5nykseV9XN6mycLyb9lrQC7iyEZ1CDJPwXBMN7XhFZWEr79X4Zk
xPhDjeBiVlOl2g==
-----END CERTIFICATE-----
Generated at Fri Jun 13 18:56:17 2025 by rpki-client