Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
File: lUqTUetm2NhiTiDRafdmty9YrMA.mft (raw, json)
Hash identifier: 7EE47wtyTpODe48mB6k1zQ2ApjHY724L9nUNRONyiwU=
Subject key identifier: 3E:99:73:D3:59:64:6A:96:88:D5:11:8B:CE:BA:FB:79:9B:8C:C5:16
Authority key identifier: 95:4A:93:51:EB:66:D8:D8:62:4E:20:D1:69:F7:66:B7:2F:58:AC:C0
Certificate issuer: /CN=954a9351eb66d8d8624e20d169f766b72f58acc0
Certificate serial: 019773764054A89995EB4EF08FC09016F955
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
Manifest number: 014A
Signing time: Sun 15 Jun 2025 12:00:18 +0000
Manifest this update: Sun 15 Jun 2025 12:00:18 +0000
Manifest next update: Mon 16 Jun 2025 12:00:18 +0000
Files and hashes: 1: lUqTUetm2NhiTiDRafdmty9YrMA.crl (hash: R4wKs4Ycc9JJXMGjEApZyHybuTlHsWt4Jz7YnXnHCW0=)
2: t16PzAlvWekYsP-M8rbE-GQqrKw.roa (hash: 3vnPnuhk/OI+4T9XrhuO16OQVY7hpcxK0i/qFVmYQP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 12:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:76:40:54:a8:99:95:eb:4e:f0:8f:c0:90:16:f9:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954a9351eb66d8d8624e20d169f766b72f58acc0
Validity
Not Before: Jun 15 12:00:18 2025 GMT
Not After : Jun 16 12:00:18 2025 GMT
Subject: CN=3e9973d359646a9688d5118bcebafb799b8cc516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5c:a1:6c:87:98:db:64:88:75:74:67:36:29:
48:15:9a:34:6e:cc:ee:33:30:80:1e:d4:9a:47:0d:
e2:73:24:d9:5c:7f:2f:c0:79:2a:6c:33:08:95:c6:
29:0d:78:3a:63:67:0d:92:e9:c2:02:c0:5b:70:91:
15:b6:84:a3:f8:f4:ee:81:bd:4e:11:8b:dd:00:18:
35:38:67:34:78:62:6f:b9:c1:10:34:d0:eb:37:81:
7e:f2:b8:1e:18:22:b1:9b:d2:7d:d7:30:a2:14:00:
1f:e6:18:7f:71:2f:e1:7c:8f:4d:6e:15:73:0a:cf:
d2:c5:15:fd:48:57:20:73:65:ad:61:8a:28:b5:29:
a2:19:9e:42:01:44:9f:4c:62:65:38:64:c0:3e:b8:
e0:e7:e9:b4:82:0f:08:c7:a3:24:3a:f2:e2:95:68:
67:88:22:d5:d1:9d:42:43:b2:d0:d1:2f:11:55:5b:
f8:87:c4:14:b7:f9:8c:3a:d1:1f:93:69:8c:0c:17:
71:dc:8f:de:ef:eb:9e:d8:5a:71:16:2c:23:2d:75:
85:62:11:1c:a8:bb:c1:66:e2:94:f2:70:0e:35:6f:
93:df:d5:1e:ef:c9:fe:0b:6f:a5:d0:01:77:d7:59:
89:59:73:33:bd:56:1f:e9:56:40:b9:75:e2:d4:ab:
55:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:99:73:D3:59:64:6A:96:88:D5:11:8B:CE:BA:FB:79:9B:8C:C5:16
X509v3 Authority Key Identifier:
keyid:95:4A:93:51:EB:66:D8:D8:62:4E:20:D1:69:F7:66:B7:2F:58:AC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:bc:1f:65:43:d8:d3:3b:fe:2b:f2:ab:96:4e:57:a8:8d:f2:
44:0d:db:63:a1:c2:32:c5:a9:a7:e6:d3:08:3b:30:86:15:c5:
8a:4f:e4:b7:20:fc:01:e7:ac:38:01:ea:56:c6:f0:d5:68:b0:
ac:d8:48:55:47:c0:52:aa:d4:85:57:60:e6:c0:c4:f4:f6:a1:
9d:74:75:ac:1a:84:70:73:54:02:c3:d4:d2:e5:ec:68:1d:24:
d2:48:64:c2:13:d6:b5:a7:f0:83:61:fa:be:1d:be:0d:22:d9:
7d:89:02:2b:1a:cc:e9:a8:4c:6a:f4:08:df:3c:d5:a8:ef:7e:
44:b3:aa:fc:7f:d0:6c:5a:5e:59:c3:8a:a3:c4:9a:d8:df:03:
bc:27:45:53:c7:18:0b:71:d2:94:ed:ee:61:5f:72:12:cb:7a:
f7:ac:da:fa:64:1f:86:8d:20:70:a7:8e:36:1a:f8:96:41:60:
57:15:f8:ae:59:f0:f5:31:5c:18:ef:a9:47:12:d9:19:e4:87:
22:a3:95:d6:26:ae:71:21:9a:74:6e:b2:2a:bb:7c:58:c8:f2:
1f:c9:68:cd:71:81:5e:bc:60:99:a3:53:19:0c:f8:91:67:4f:
0a:c9:ec:13:3e:f5:40:11:a9:49:7b:73:7b:77:12:72:69:d5:
ce:09:7e:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdzdkBUqJmV607wj8CQFvlVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NGE5MzUxZWI2NmQ4ZDg2MjRlMjBkMTY5Zjc2NmI3MmY1
OGFjYzAwHhcNMjUwNjE1MTIwMDE4WhcNMjUwNjE2MTIwMDE4WjAzMTEwLwYDVQQD
EygzZTk5NzNkMzU5NjQ2YTk2ODhkNTExOGJjZWJhZmI3OTliOGNjNTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplyhbIeY22SIdXRnNilIFZo0bszu
MzCAHtSaRw3icyTZXH8vwHkqbDMIlcYpDXg6Y2cNkunCAsBbcJEVtoSj+PTugb1O
EYvdABg1OGc0eGJvucEQNNDrN4F+8rgeGCKxm9J91zCiFAAf5hh/cS/hfI9NbhVz
Cs/SxRX9SFcgc2WtYYootSmiGZ5CAUSfTGJlOGTAPrjg5+m0gg8Ix6MkOvLilWhn
iCLV0Z1CQ7LQ0S8RVVv4h8QUt/mMOtEfk2mMDBdx3I/e7+ue2FpxFiwjLXWFYhEc
qLvBZuKU8nAONW+T39Ue78n+C2+l0AF311mJWXMzvVYf6VZAuXXi1KtVIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD6Zc9NZZGqWiNURi866+3mbjMUWMB8GA1UdIwQY
MBaAFJVKk1HrZtjYYk4g0Wn3ZrcvWKzAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFVxVFVldG0yTmhpVGlEUmFmZG10eTlZck1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jZjY4M2UtNmFiZC00ZjVkLTk5NDMt
MDJmM2RkYmExOTQyLzEvbFVxVFVldG0yTmhpVGlEUmFmZG10eTlZck1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9jZjY4M2UtNmFiZC00ZjVkLTk5NDMtMDJmM2RkYmExOTQy
LzEvbFVxVFVldG0yTmhpVGlEUmFmZG10eTlZck1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk7wfZUPY
0zv+K/Krlk5XqI3yRA3bY6HCMsWpp+bTCDswhhXFik/ktyD8AeesOAHqVsbw1Wiw
rNhIVUfAUqrUhVdg5sDE9PahnXR1rBqEcHNUAsPU0uXsaB0k0khkwhPWtafwg2H6
vh2+DSLZfYkCKxrM6ahMavQI3zzVqO9+RLOq/H/QbFpeWcOKo8Sa2N8DvCdFU8cY
C3HSlO3uYV9yEst696za+mQfho0gcKeONhr4lkFgVxX4rlnw9TFcGO+pRxLZGeSH
IqOV1iaucSGadG6yKrt8WMjyH8lozXGBXrxgmaNTGQz4kWdPCsnsEz71QBGpSXtz
e3cScmnVzgl+7g==
-----END CERTIFICATE-----
Generated at Sun Jun 15 20:37:37 2025 by rpki-client