Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
File: p-LOMQlICu57P9KEbsj4ZGiFzbo.mft (raw, json)
Hash identifier: 2u0LAUOWwbdOC8R/N+XxK91dYe3HbqO+tVhk9SNl29E=
Subject key identifier: A7:F0:7C:70:EF:72:B3:EC:02:28:D8:6C:CB:AC:BB:0E:3F:71:D2:94
Authority key identifier: A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA
Certificate issuer: /CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba
Certificate serial: 01976D0672DDAABAABC1E4BA4FB426CE315F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
Manifest number: 15A2
Signing time: Sat 14 Jun 2025 06:00:28 +0000
Manifest this update: Sat 14 Jun 2025 06:00:28 +0000
Manifest next update: Sun 15 Jun 2025 06:00:28 +0000
Files and hashes: 1: 26Ql46wwxTj7VjacCW6urnh7gz4.roa (hash: 6pqobnvwdQtNKJHj/tFh8rbFEN8SHTGBGJP56mhCWI4=)
2: 6NUzhdPLOTimUoPxeMPLM0W-THw.roa (hash: c/vX6BdXl9BfZEsyAn4O1uep2mCiqK8iQj3UiTI5j9s=)
3: 9UQ3bjYFxbuQ6WDKQ2z12cmzNp4.roa (hash: utvXFHGbNyh5QD6WYroUVLQ+dfrlJs+U1O2AiYH3XWs=)
4: LLcjVKn9VpDoaDhdqIR6mgFTZtI.roa (hash: DoEtx/xv7eVuPlv74sp5O1oZZhlzZhNTbGR1DN0rf7U=)
5: UjFHvunES4zB1buoYQwOJAvtic4.roa (hash: 8JRnvC2WvvUD8xqaEPafciSNs/2Jt6gLe7JRKtz6ghA=)
6: d89-qB2QBcTVzoJ5lziZ1XEpvhw.roa (hash: EUMPFkB+dCQSnV1N7RK25hIL5dm4q/R7TQ9vyaSumYE=)
7: p-LOMQlICu57P9KEbsj4ZGiFzbo.crl (hash: bdwRzqEI2y5hb5efV1CUUDq9pWj9fF3YLBgDa1xE5EI=)
8: zaZapovTGaF9alzwHwbdxdednYo.roa (hash: HZ5qODN4P+SD3nJrNEx9yaYaCo/O8Qs+NfZMPkwo3JI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:72:dd:aa:ba:ab:c1:e4:ba:4f:b4:26:ce:31:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7e2ce3109480aee7b3fd2846ec8f8646885cdba
Validity
Not Before: Jun 14 06:00:28 2025 GMT
Not After : Jun 15 06:00:28 2025 GMT
Subject: CN=a7f07c70ef72b3ec0228d86ccbacbb0e3f71d294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:04:a0:5d:2b:04:52:94:99:1b:c8:71:2d:cc:
00:37:09:b9:f3:89:bd:3b:c2:0f:55:0c:a9:78:af:
8b:b8:40:66:78:79:43:40:4a:81:3e:27:42:47:82:
7f:1e:08:ab:7a:a6:2a:34:39:a2:c6:75:fb:8c:9c:
05:32:a8:1e:d5:94:9a:57:b0:d9:41:75:75:26:d0:
8c:e3:39:d2:88:ff:49:9c:71:eb:7f:7f:0b:f7:86:
1e:c1:01:92:7f:aa:8d:3d:3e:e2:33:2f:9a:63:51:
6e:78:0f:19:5f:a8:95:f6:4f:d3:a4:a3:b4:d4:dc:
c3:5b:43:67:bb:c1:13:9e:9b:9c:b7:c9:e6:ff:58:
0f:d7:00:68:9b:44:42:82:2d:80:18:1c:04:97:8c:
11:79:2d:7b:77:98:ee:2c:cf:88:ba:0a:73:f0:c7:
59:0d:85:cd:ce:f9:5a:da:85:5f:79:de:f3:5c:92:
d0:db:49:bd:3c:b7:87:1e:14:6c:2d:a6:08:fd:2a:
b4:04:11:0e:98:c6:2a:bf:8b:1f:c0:a0:cf:ac:3d:
5d:6b:31:0c:a5:0a:b0:f9:3d:53:c9:91:f1:51:16:
94:6e:22:6c:a2:7c:fb:59:f8:c8:99:09:e3:fa:5e:
ba:a2:f6:f9:6c:54:47:db:21:cc:88:a5:28:89:5c:
c3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F0:7C:70:EF:72:B3:EC:02:28:D8:6C:CB:AC:BB:0E:3F:71:D2:94
X509v3 Authority Key Identifier:
keyid:A7:E2:CE:31:09:48:0A:EE:7B:3F:D2:84:6E:C8:F8:64:68:85:CD:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-LOMQlICu57P9KEbsj4ZGiFzbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/b61add-32f0-42f4-a301-7818a89456cb/1/p-LOMQlICu57P9KEbsj4ZGiFzbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:7a:a4:e2:3a:69:85:a9:94:70:ab:7c:e2:bc:0f:74:d6:7f:
59:0d:0d:19:87:f5:ff:e9:94:14:0a:38:6d:21:a8:1d:db:08:
9e:09:a3:2e:ec:d8:6d:e6:ff:aa:9b:68:16:62:3b:44:f4:9a:
7e:7b:40:3c:4f:05:0f:1e:e8:b0:af:a8:d5:1f:5f:80:d0:87:
40:c9:ce:72:4b:17:7c:b8:e5:8a:3d:c7:a3:a2:53:71:8f:7a:
11:92:2f:35:96:6f:2b:46:51:b4:34:97:67:67:9f:01:b4:09:
95:00:78:a2:bd:a2:8b:2c:7c:da:99:54:4d:92:53:0d:c5:46:
1a:3c:54:ed:c9:6d:4e:88:36:8b:b0:78:c0:57:93:5d:bb:ca:
1c:15:c9:fe:1b:d4:54:23:9a:5d:17:2b:61:68:0c:23:35:66:
68:08:67:96:fc:04:1f:e2:ab:8b:6e:ad:eb:b3:cf:33:2a:fc:
67:98:14:71:53:d6:ab:64:34:cd:ae:10:0b:a0:a3:67:d2:36:
22:fa:f5:cb:bd:6f:3e:9a:c7:e0:f5:f1:a2:40:af:e2:8a:bc:
31:6a:9d:4a:5d:3a:6d:ef:8b:90:02:0b:2d:f2:e4:8f:88:7a:
36:b2:86:a5:d7:a5:97:36:a3:7b:8f:c6:9c:f4:83:cb:b5:77:
a8:34:5b:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtBnLdqrqrweS6T7QmzjFfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ZTJjZTMxMDk0ODBhZWU3YjNmZDI4NDZlYzhmODY0Njg4
NWNkYmEwHhcNMjUwNjE0MDYwMDI4WhcNMjUwNjE1MDYwMDI4WjAzMTEwLwYDVQQD
EyhhN2YwN2M3MGVmNzJiM2VjMDIyOGQ4NmNjYmFjYmIwZTNmNzFkMjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQSgXSsEUpSZG8hxLcwANwm584m9
O8IPVQypeK+LuEBmeHlDQEqBPidCR4J/HgireqYqNDmixnX7jJwFMqge1ZSaV7DZ
QXV1JtCM4znSiP9JnHHrf38L94YewQGSf6qNPT7iMy+aY1FueA8ZX6iV9k/TpKO0
1NzDW0Nnu8ETnpuct8nm/1gP1wBom0RCgi2AGBwEl4wReS17d5juLM+Iugpz8MdZ
DYXNzvla2oVfed7zXJLQ20m9PLeHHhRsLaYI/Sq0BBEOmMYqv4sfwKDPrD1dazEM
pQqw+T1TyZHxURaUbiJsonz7WfjImQnj+l66ovb5bFRH2yHMiKUoiVzDAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKfwfHDvcrPsAijYbMusuw4/cdKUMB8GA1UdIwQY
MBaAFKfizjEJSAruez/ShG7I+GRohc26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcC1MT01RbElDdTU3UDlLRWJzajRaR2lGemJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9iNjFhZGQtMzJmMC00MmY0LWEzMDEt
NzgxOGE4OTQ1NmNiLzEvcC1MT01RbElDdTU3UDlLRWJzajRaR2lGemJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9iNjFhZGQtMzJmMC00MmY0LWEzMDEtNzgxOGE4OTQ1NmNi
LzEvcC1MT01RbElDdTU3UDlLRWJzajRaR2lGemJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE3qk4jpp
hamUcKt84rwPdNZ/WQ0NGYf1/+mUFAo4bSGoHdsIngmjLuzYbeb/qptoFmI7RPSa
fntAPE8FDx7osK+o1R9fgNCHQMnOcksXfLjlij3Ho6JTcY96EZIvNZZvK0ZRtDSX
Z2efAbQJlQB4or2iiyx82plUTZJTDcVGGjxU7cltTog2i7B4wFeTXbvKHBXJ/hvU
VCOaXRcrYWgMIzVmaAhnlvwEH+Kri26t67PPMyr8Z5gUcVPWq2Q0za4QC6CjZ9I2
Ivr1y71vPprH4PXxokCv4oq8MWqdSl06be+LkAILLfLkj4h6NrKGpdellzaje4/G
nPSDy7V3qDRbow==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:19:56 2025 by rpki-client