
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
File: lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft (raw, json)
Hash identifier: EO/tmTTGlMJhxOFUMwG2qNeVew361EcSrSINhH1rwzU=
Subject key identifier: 2F:76:BF:82:12:4E:07:14:BD:18:F4:5D:6D:57:FD:6E:EC:CD:A1:EB
Authority key identifier: 94:F5:19:C4:EC:F1:5F:5F:C1:E0:6E:AA:6E:03:F9:CB:03:95:6C:AA
Certificate issuer: /CN=94f519c4ecf15f5fc1e06eaa6e03f9cb03956caa
Certificate serial: 019851557DA91AF363CE28EFC3B13915CC3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
Manifest number: 05BE
Signing time: Mon 28 Jul 2025 14:00:13 +0000
Manifest this update: Mon 28 Jul 2025 14:00:13 +0000
Manifest next update: Tue 29 Jul 2025 14:00:13 +0000
Files and hashes: 1: AlvpwmlHKsdZ888v6OW9e2qX7Cs.roa (hash: 0uWxwNIZbut6gct98ZOv80/LRPh9PRZxkpCS9vIEkzY=)
2: lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl (hash: NiFoRbF+hitcqMkXJlOLAEi9bu0OpFyzUdeFSfoMuaM=)
3: mhy_PjfAH7Am8DYx1tO3WTSt-G0.roa (hash: I3P915hVSsXgQ5UO/istQ1xrxwtkn+jwbAOJufOB6ts=)
4: oGXIgL4XeGgFsoOzE_plr2AX24g.roa (hash: h9S8MEgqkl0Mx1T5bmYSQIXTjB58xAGkLJVMidxjJTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 14:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:55:7d:a9:1a:f3:63:ce:28:ef:c3:b1:39:15:cc:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f519c4ecf15f5fc1e06eaa6e03f9cb03956caa
Validity
Not Before: Jul 28 14:00:13 2025 GMT
Not After : Jul 29 14:00:13 2025 GMT
Subject: CN=2f76bf82124e0714bd18f45d6d57fd6eeccda1eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:14:4f:d0:ef:35:eb:20:13:54:cd:08:cf:55:
d5:dc:10:03:54:28:c1:b8:f4:4b:fb:d1:62:c9:e9:
8a:ab:8b:f4:bf:64:f9:fb:ad:11:8f:45:8b:b3:0c:
2d:42:8e:75:46:17:6d:1d:ce:4b:f8:63:c5:fe:26:
ef:7f:55:d8:88:59:9a:37:e7:05:08:80:3b:e7:89:
e7:12:5a:fb:f3:55:99:19:8e:4a:47:89:e0:a1:de:
70:f5:5d:f5:78:8b:72:77:6c:84:5c:61:12:25:fd:
00:65:9c:83:fa:96:5a:95:f7:f7:3c:98:12:22:19:
bf:8d:1d:a5:16:85:b9:de:91:64:a3:52:7b:79:b3:
55:6b:1e:09:b3:b5:eb:77:23:96:5c:6e:4c:6a:fb:
1d:3f:b2:70:b5:3c:5b:f4:e9:ca:e4:53:1e:3c:b8:
e1:e8:e2:49:59:6c:01:35:d0:34:13:ed:0c:1f:bc:
1a:a7:2a:e7:de:3d:62:68:7b:b7:22:a8:5b:f1:8e:
de:a1:85:85:3f:0e:f0:84:a5:89:e0:ed:c4:83:7c:
d9:95:77:7d:8c:a8:d7:67:30:8b:c1:8e:68:fa:24:
56:82:92:5c:d5:61:15:fd:08:38:a4:54:de:1a:7f:
54:a7:e7:dd:f9:0e:11:2a:31:7b:c5:9a:83:52:6d:
5e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:76:BF:82:12:4E:07:14:BD:18:F4:5D:6D:57:FD:6E:EC:CD:A1:EB
X509v3 Authority Key Identifier:
keyid:94:F5:19:C4:EC:F1:5F:5F:C1:E0:6E:AA:6E:03:F9:CB:03:95:6C:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:61:73:94:2d:c3:87:9d:bd:19:9b:99:95:0c:ad:50:bd:59:
8f:12:40:6a:b3:81:de:ff:a2:52:2a:73:15:94:80:dc:65:d2:
d4:7f:89:5f:e1:5f:4f:77:ed:1c:08:14:07:0e:85:82:a4:bf:
93:b8:8f:74:29:ce:1d:99:11:8d:bc:cf:bc:23:58:bd:2b:c1:
de:27:ef:2b:14:be:7d:51:d3:0f:fe:12:79:3a:e2:b0:be:29:
7c:79:47:3d:58:1f:44:e3:6c:ef:e5:d0:ab:b2:0e:61:77:c8:
92:b2:58:e6:a0:4d:1d:67:bf:6e:b6:b6:16:3c:48:ad:20:62:
18:bb:73:40:7a:cb:db:50:ed:6f:75:cb:62:51:19:d1:b2:5f:
1a:59:89:40:3a:75:12:29:5c:a3:da:d7:d2:6e:78:05:10:8e:
dc:f6:75:70:ca:54:3a:74:5d:d8:ac:c6:c6:00:82:3b:d6:df:
19:45:b8:b9:97:46:17:21:f7:39:0e:c5:81:0d:09:a6:23:68:
b3:08:10:00:31:da:b4:cf:6e:ee:25:62:09:6d:d5:1e:0a:14:
69:63:28:f8:7f:47:91:0d:ee:c2:98:03:25:50:6e:b3:00:a1:
46:06:2b:4a:27:56:f1:b3:0f:0c:80:97:01:27:c2:f0:54:89:
b2:97:a4:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhRVX2pGvNjzijvw7E5Fcw/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ZjUxOWM0ZWNmMTVmNWZjMWUwNmVhYTZlMDNmOWNiMDM5
NTZjYWEwHhcNMjUwNzI4MTQwMDEzWhcNMjUwNzI5MTQwMDEzWjAzMTEwLwYDVQQD
EygyZjc2YmY4MjEyNGUwNzE0YmQxOGY0NWQ2ZDU3ZmQ2ZWVjY2RhMWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxRP0O816yATVM0Iz1XV3BADVCjB
uPRL+9FiyemKq4v0v2T5+60Rj0WLswwtQo51RhdtHc5L+GPF/ibvf1XYiFmaN+cF
CIA754nnElr781WZGY5KR4ngod5w9V31eItyd2yEXGESJf0AZZyD+pZalff3PJgS
Ihm/jR2lFoW53pFko1J7ebNVax4Js7XrdyOWXG5MavsdP7JwtTxb9OnK5FMePLjh
6OJJWWwBNdA0E+0MH7wapyrn3j1iaHu3Iqhb8Y7eoYWFPw7whKWJ4O3Eg3zZlXd9
jKjXZzCLwY5o+iRWgpJc1WEV/Qg4pFTeGn9Up+fd+Q4RKjF7xZqDUm1ebQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC92v4ISTgcUvRj0XW1X/W7szaHrMB8GA1UdIwQY
MBaAFJT1GcTs8V9fweBuqm4D+csDlWyqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFBVWnhPenhYMV9CNEc2cWJnUDV5d09WYktvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8xMDg5NjctNjg2YS00MzIyLTg1YjMt
NTE2ZWFjNDY5MDUzLzEvbFBVWnhPenhYMV9CNEc2cWJnUDV5d09WYktvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8xMDg5NjctNjg2YS00MzIyLTg1YjMtNTE2ZWFjNDY5MDUz
LzEvbFBVWnhPenhYMV9CNEc2cWJnUDV5d09WYktvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH2FzlC3D
h529GZuZlQytUL1ZjxJAarOB3v+iUipzFZSA3GXS1H+JX+FfT3ftHAgUBw6FgqS/
k7iPdCnOHZkRjbzPvCNYvSvB3ifvKxS+fVHTD/4SeTrisL4pfHlHPVgfRONs7+XQ
q7IOYXfIkrJY5qBNHWe/bra2FjxIrSBiGLtzQHrL21Dtb3XLYlEZ0bJfGlmJQDp1
Eilco9rX0m54BRCO3PZ1cMpUOnRd2KzGxgCCO9bfGUW4uZdGFyH3OQ7FgQ0JpiNo
swgQADHatM9u7iViCW3VHgoUaWMo+H9HkQ3uwpgDJVBuswChRgYrSidW8bMPDICX
ASfC8FSJspekUw==
-----END CERTIFICATE-----
Generated at Mon Jul 28 16:59:53 2025 by rpki-client