Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
File: lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft (raw, json)
Hash identifier: UJpumsccr1u+wWfap5wV+NlDHAghIx57VRhN26xzdz8=
Subject key identifier: 3A:78:A5:48:7F:56:C4:D7:E9:C8:E5:C5:94:E0:27:A7:8E:5C:7A:00
Authority key identifier: 95:32:B4:F2:B4:7B:BE:19:34:A2:24:08:1C:C3:7F:17:0D:72:48:D2
Certificate issuer: /CN=9532b4f2b47bbe1934a224081cc37f170d7248d2
Certificate serial: 01978357B7D553BD70D1866CA33FE4625A71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
Manifest number: 1599
Signing time: Wed 18 Jun 2025 14:00:53 +0000
Manifest this update: Wed 18 Jun 2025 14:00:53 +0000
Manifest next update: Thu 19 Jun 2025 14:00:53 +0000
Files and hashes: 1: GjUJtXzmRKM2Vtkil_fh95z7NdM.roa (hash: NJXWhpjg7woXcdhVu/ucxszei5ss2Dto0kjEgZT65S0=)
2: lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl (hash: ugp/WnfM5+DF9i3FHhRrnGvEHEor+Y+daANdCTOgDQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 14:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:83:57:b7:d5:53:bd:70:d1:86:6c:a3:3f:e4:62:5a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9532b4f2b47bbe1934a224081cc37f170d7248d2
Validity
Not Before: Jun 18 14:00:53 2025 GMT
Not After : Jun 19 14:00:53 2025 GMT
Subject: CN=3a78a5487f56c4d7e9c8e5c594e027a78e5c7a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b6:eb:3f:1a:82:a9:19:ff:23:7e:44:90:08:
45:bc:79:0e:7e:3c:a1:46:09:49:bd:ff:bd:62:96:
5e:09:22:21:32:5a:95:af:ed:9c:13:0e:94:9a:73:
5d:d1:5d:5d:e5:60:fd:27:b7:ac:d8:3e:cd:c3:2d:
3d:38:28:49:62:eb:07:71:42:e0:19:61:db:2c:17:
28:35:09:9e:77:ce:c4:b6:39:5c:83:79:c6:b1:a4:
ec:e1:74:1c:74:00:c1:25:ef:ea:c9:8e:8f:c3:94:
e8:6a:40:dd:a1:b7:e4:ef:fb:6d:64:fe:64:68:8b:
3a:76:0e:da:f1:60:70:f1:3d:f0:69:23:e4:65:11:
79:97:c2:fb:c7:3d:fb:e9:4c:43:5a:be:3a:63:b6:
66:0f:33:ca:65:cd:8b:48:ef:77:98:05:d2:7a:53:
dc:97:b4:76:3d:fc:69:32:6f:3a:eb:62:7e:c4:6f:
59:d6:2b:be:80:5c:c7:97:cf:d8:1b:c1:8a:b7:8a:
54:67:fc:55:fb:26:b1:23:2c:c0:8b:cb:cb:7a:b6:
c5:3b:19:96:03:49:01:f5:c9:0c:b4:aa:75:f6:bf:
88:85:fe:54:24:cb:ec:9b:c7:f2:65:b2:dd:20:13:
b3:1c:9b:eb:95:bc:0b:92:00:f8:54:4a:8e:0e:06:
be:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:78:A5:48:7F:56:C4:D7:E9:C8:E5:C5:94:E0:27:A7:8E:5C:7A:00
X509v3 Authority Key Identifier:
keyid:95:32:B4:F2:B4:7B:BE:19:34:A2:24:08:1C:C3:7F:17:0D:72:48:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTK08rR7vhk0oiQIHMN_Fw1ySNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/124dd5-cab0-46ec-be67-42040df3b6af/1/lTK08rR7vhk0oiQIHMN_Fw1ySNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:00:d5:35:71:02:1f:5c:67:9b:f8:07:40:f8:ca:5c:e0:35:
7a:80:2c:90:f3:69:1f:74:99:34:d3:b5:3f:df:db:ea:e9:ba:
0d:64:52:49:03:3e:fb:2f:81:7e:6e:88:37:f1:ac:dc:2d:02:
62:13:04:c9:39:93:a3:ff:a4:19:86:50:2e:84:fd:f4:a3:a7:
ab:ec:5b:33:92:aa:c9:ce:66:c5:28:75:ba:9f:f4:5e:c5:72:
42:b5:ba:d1:65:c8:4e:ce:a2:74:cc:1a:47:a4:4e:cb:1d:5f:
09:d8:e3:a4:7d:2f:6f:2c:79:d4:fe:47:81:70:f8:c3:bb:ed:
20:af:74:b3:ac:bd:02:c4:0d:56:7a:9e:0b:b7:d9:15:a4:ac:
11:35:f8:4a:c8:a7:90:df:77:48:dd:51:d4:ec:84:29:db:e5:
ad:d7:ae:e2:ff:d0:0b:c2:d5:e2:b9:a1:c7:12:1d:79:49:cf:
6b:24:e6:cb:da:1f:cc:3b:1c:41:e5:3d:9a:a9:37:d6:3f:fd:
e9:7a:78:4d:ea:ba:97:44:d2:9e:83:fd:17:67:8c:85:0d:30:
b6:7d:5d:29:e7:54:d4:8c:fa:18:6f:9e:0c:c8:08:a9:66:dc:
0c:37:07:18:f8:3b:8c:d8:8c:2a:29:79:3a:bb:cb:db:83:ac:
68:45:dc:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeDV7fVU71w0YZsoz/kYlpxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MzJiNGYyYjQ3YmJlMTkzNGEyMjQwODFjYzM3ZjE3MGQ3
MjQ4ZDIwHhcNMjUwNjE4MTQwMDUzWhcNMjUwNjE5MTQwMDUzWjAzMTEwLwYDVQQD
EygzYTc4YTU0ODdmNTZjNGQ3ZTljOGU1YzU5NGUwMjdhNzhlNWM3YTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubbrPxqCqRn/I35EkAhFvHkOfjyh
RglJvf+9YpZeCSIhMlqVr+2cEw6UmnNd0V1d5WD9J7es2D7Nwy09OChJYusHcULg
GWHbLBcoNQmed87Etjlcg3nGsaTs4XQcdADBJe/qyY6Pw5ToakDdobfk7/ttZP5k
aIs6dg7a8WBw8T3waSPkZRF5l8L7xz376UxDWr46Y7ZmDzPKZc2LSO93mAXSelPc
l7R2PfxpMm8662J+xG9Z1iu+gFzHl8/YG8GKt4pUZ/xV+yaxIyzAi8vLerbFOxmW
A0kB9ckMtKp19r+Ihf5UJMvsm8fyZbLdIBOzHJvrlbwLkgD4VEqODga+JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDp4pUh/VsTX6cjlxZTgJ6eOXHoAMB8GA1UdIwQY
MBaAFJUytPK0e74ZNKIkCBzDfxcNckjSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFRLMDhyUjd2aGswb2lRSUhNTl9GdzF5U05JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8xMjRkZDUtY2FiMC00NmVjLWJlNjct
NDIwNDBkZjNiNmFmLzEvbFRLMDhyUjd2aGswb2lRSUhNTl9GdzF5U05JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8xMjRkZDUtY2FiMC00NmVjLWJlNjctNDIwNDBkZjNiNmFm
LzEvbFRLMDhyUjd2aGswb2lRSUhNTl9GdzF5U05JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKwDVNXEC
H1xnm/gHQPjKXOA1eoAskPNpH3SZNNO1P9/b6um6DWRSSQM++y+Bfm6IN/Gs3C0C
YhMEyTmTo/+kGYZQLoT99KOnq+xbM5Kqyc5mxSh1up/0XsVyQrW60WXITs6idMwa
R6ROyx1fCdjjpH0vbyx51P5HgXD4w7vtIK90s6y9AsQNVnqeC7fZFaSsETX4Ssin
kN93SN1R1OyEKdvlrdeu4v/QC8LV4rmhxxIdeUnPayTmy9ofzDscQeU9mqk31j/9
6Xp4Teq6l0TSnoP9F2eMhQ0wtn1dKedU1Iz6GG+eDMgIqWbcDDcHGPg7jNiMKil5
OrvL24OsaEXcpA==
-----END CERTIFICATE-----
Generated at Wed Jun 18 18:16:04 2025 by rpki-client