Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft
File: lqSbOF03Of3SQ34K798iUc1dKlE.mft (raw, json)
Hash identifier: 08E/pbby/m6nBG/ilwyhGaQlsfJ5+02AHfFtuUGHoYA=
Subject key identifier: 50:08:E0:AA:11:79:7B:71:9F:09:23:EE:60:30:42:3F:BF:39:B5:AC
Authority key identifier: 96:A4:9B:38:5D:37:39:FD:D2:43:7E:0A:EF:DF:22:51:CD:5D:2A:51
Certificate issuer: /CN=96a49b385d3739fdd2437e0aefdf2251cd5d2a51
Certificate serial: 01978661A635F02EA7886002F61258D50DA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lqSbOF03Of3SQ34K798iUc1dKlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft
Manifest number: 01DE
Signing time: Thu 19 Jun 2025 04:10:35 +0000
Manifest this update: Thu 19 Jun 2025 04:10:35 +0000
Manifest next update: Fri 20 Jun 2025 04:10:35 +0000
Files and hashes: 1: lqSbOF03Of3SQ34K798iUc1dKlE.crl (hash: /kwAvDQgHED+5Zr83AGSMC6t0g32uIiwhCwGG2NHpCg=)
2: vubvLlQ2em0JM0_rlFMoFCj2bxQ.roa (hash: zIY6VqnaaG5WqxBxNCQhDT3KHDCVyaR7TcUQuJEUhUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lqSbOF03Of3SQ34K798iUc1dKlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 04:10:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:61:a6:35:f0:2e:a7:88:60:02:f6:12:58:d5:0d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96a49b385d3739fdd2437e0aefdf2251cd5d2a51
Validity
Not Before: Jun 19 04:10:35 2025 GMT
Not After : Jun 20 04:10:35 2025 GMT
Subject: CN=5008e0aa11797b719f0923ee6030423fbf39b5ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:99:20:30:76:a9:c7:cc:aa:c7:8e:46:a7:8e:
cf:5d:44:58:35:d9:87:5b:82:f0:c2:30:56:86:bf:
c3:53:ec:ff:86:34:c4:4a:3f:6f:19:d4:76:04:dd:
fe:df:4e:20:65:85:40:64:c5:ce:1b:9a:04:40:46:
1d:fd:3d:e7:23:24:95:eb:9b:b7:7a:c9:4e:f3:fa:
1b:62:9a:50:17:2b:67:40:26:b1:92:cd:fb:c2:f3:
e1:b0:7d:8c:5c:c4:ab:09:0b:9e:8e:fb:69:43:10:
4a:81:14:18:ad:a3:89:87:cd:d1:8d:ed:b1:eb:81:
41:ea:18:1d:d1:f1:41:fe:e1:fe:ff:7d:0d:35:55:
9d:9e:a8:84:22:1e:4d:41:7b:a8:a8:6b:1c:ff:3a:
0c:fc:5b:e2:eb:be:6d:56:80:e3:13:9c:64:bb:01:
49:98:62:11:09:b6:58:09:e3:49:45:a6:95:25:47:
fb:c1:57:37:9c:24:2a:50:42:36:12:ad:a9:9e:cc:
ec:b4:73:ec:83:c9:9b:ff:2a:db:f8:66:bc:44:51:
29:9e:31:19:a9:d8:43:4b:d4:c8:ce:e0:79:2f:f5:
f3:43:39:70:a0:97:35:62:0a:09:73:34:6b:ff:dc:
ff:3e:b3:79:d6:4c:f6:16:cd:4a:3c:91:6e:97:e7:
5a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:08:E0:AA:11:79:7B:71:9F:09:23:EE:60:30:42:3F:BF:39:B5:AC
X509v3 Authority Key Identifier:
keyid:96:A4:9B:38:5D:37:39:FD:D2:43:7E:0A:EF:DF:22:51:CD:5D:2A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqSbOF03Of3SQ34K798iUc1dKlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:34:da:52:f3:b0:27:3b:4a:aa:6c:19:ee:6e:4d:5e:d5:aa:
e7:69:7d:3f:63:5b:46:24:65:42:98:a7:d4:30:2f:51:e9:ac:
1b:13:5c:79:24:05:7b:1f:8e:40:2c:35:e8:33:a4:32:49:c9:
3a:75:70:37:a0:7b:bd:0c:ac:4d:07:10:70:a3:6c:3b:04:d4:
1d:04:26:d2:d2:d0:b3:75:f3:d4:0b:08:0d:6f:ef:f5:7a:73:
73:6f:04:a2:a7:81:5f:67:13:16:2c:f5:68:c7:05:4d:c4:8d:
f6:f0:75:73:cf:a4:5f:80:d6:7b:db:64:8e:5f:78:d1:22:3b:
62:02:42:78:a9:7b:58:67:57:ee:88:03:2a:68:b3:42:19:cb:
93:65:8c:82:a5:85:94:ae:d9:76:db:57:d2:a4:a3:3d:f0:7a:
4c:ab:6b:81:a7:44:af:18:5f:3b:a3:c5:3c:fb:2b:46:0d:2f:
92:ef:35:09:e6:51:27:22:d7:18:a3:cb:7e:6b:c8:f7:04:21:
0b:27:0a:17:5b:11:a7:d8:cc:2f:3b:3b:10:e0:6f:4f:c1:ec:
fa:84:7d:21:c7:84:b5:c0:f4:33:a3:f0:23:7d:13:fd:31:4e:
f5:1f:81:ba:c4:49:10:2f:dc:13:f5:99:ad:da:10:96:24:ed:
41:bc:4f:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeGYaY18C6niGAC9hJY1Q2jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2YTQ5YjM4NWQzNzM5ZmRkMjQzN2UwYWVmZGYyMjUxY2Q1
ZDJhNTEwHhcNMjUwNjE5MDQxMDM1WhcNMjUwNjIwMDQxMDM1WjAzMTEwLwYDVQQD
Eyg1MDA4ZTBhYTExNzk3YjcxOWYwOTIzZWU2MDMwNDIzZmJmMzliNWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5kgMHapx8yqx45Gp47PXURYNdmH
W4LwwjBWhr/DU+z/hjTESj9vGdR2BN3+304gZYVAZMXOG5oEQEYd/T3nIySV65u3
eslO8/obYppQFytnQCaxks37wvPhsH2MXMSrCQuejvtpQxBKgRQYraOJh83Rje2x
64FB6hgd0fFB/uH+/30NNVWdnqiEIh5NQXuoqGsc/zoM/Fvi675tVoDjE5xkuwFJ
mGIRCbZYCeNJRaaVJUf7wVc3nCQqUEI2Eq2pnszstHPsg8mb/yrb+Ga8RFEpnjEZ
qdhDS9TIzuB5L/XzQzlwoJc1YgoJczRr/9z/PrN51kz2Fs1KPJFul+danwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFAI4KoReXtxnwkj7mAwQj+/ObWsMB8GA1UdIwQY
MBaAFJakmzhdNzn90kN+Cu/fIlHNXSpRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHFTYk9GMDNPZjNTUTM0Szc5OGlVYzFkS2xFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC85NWYxNDMtZTljZC00NDQ3LWFiZWEt
ZmI0ZWFhNTI2MmY3LzEvbHFTYk9GMDNPZjNTUTM0Szc5OGlVYzFkS2xFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC85NWYxNDMtZTljZC00NDQ3LWFiZWEtZmI0ZWFhNTI2MmY3
LzEvbHFTYk9GMDNPZjNTUTM0Szc5OGlVYzFkS2xFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALzTaUvOw
JztKqmwZ7m5NXtWq52l9P2NbRiRlQpin1DAvUemsGxNceSQFex+OQCw16DOkMknJ
OnVwN6B7vQysTQcQcKNsOwTUHQQm0tLQs3Xz1AsIDW/v9Xpzc28EoqeBX2cTFiz1
aMcFTcSN9vB1c8+kX4DWe9tkjl940SI7YgJCeKl7WGdX7ogDKmizQhnLk2WMgqWF
lK7ZdttX0qSjPfB6TKtrgadErxhfO6PFPPsrRg0vku81CeZRJyLXGKPLfmvI9wQh
CycKF1sRp9jMLzs7EOBvT8Hs+oR9IceEtcD0M6PwI30T/TFO9R+BusRJEC/cE/WZ
rdoQliTtQbxPOA==
-----END CERTIFICATE-----
Generated at Thu Jun 19 14:30:14 2025 by rpki-client