Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
File: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft (raw, json)
Hash identifier: KqR5VWqzo5O8O/bcUZa4hgOGBBGvxxI3nwqCeM9zFL4=
Subject key identifier: 67:7F:E0:16:91:5C:3B:E3:52:63:41:50:9F:F9:A0:84:74:E6:8A:4A
Authority key identifier: 95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C
Certificate issuer: /CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c
Certificate serial: 0198481BC07DEC485DB39AEA7B2207E01CB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
Manifest number: 04F6
Signing time: Sat 26 Jul 2025 19:00:34 +0000
Manifest this update: Sat 26 Jul 2025 19:00:34 +0000
Manifest next update: Sun 27 Jul 2025 19:00:34 +0000
Files and hashes: 1: 3lPRro5fMsXxYuW-hKXrt5HlTo4.roa (hash: DuXt+VcN5cXAHGtGx0Qm+zdCVxsi9h5/RSKUTcxydqs=)
2: Eg4zth0ANX0mkRnAh6suVOeAzdk.roa (hash: zASvpGNGcNFQXQ8M9IjuKp7MbbcQqn5NoJLmUtGca/I=)
3: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl (hash: pvFkcvv42rBSDGICxSW504TQqmUV8yuplQBa5A7/dJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:c0:7d:ec:48:5d:b3:9a:ea:7b:22:07:e0:1c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c
Validity
Not Before: Jul 26 19:00:34 2025 GMT
Not After : Jul 27 19:00:34 2025 GMT
Subject: CN=677fe016915c3be3526341509ff9a08474e68a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4d:ab:b8:44:5b:aa:74:f7:6a:47:2d:b7:18:
cd:17:c2:0b:66:c3:77:a8:00:8f:22:8d:8d:91:20:
6b:16:b4:b2:0c:57:f1:72:87:18:04:1f:cc:98:1d:
4b:3d:80:52:50:1f:73:1a:2b:84:fe:7c:eb:e5:6f:
b2:d5:43:bf:71:1c:46:47:42:0e:46:a5:e5:07:e8:
ab:f6:c3:c2:3a:dc:75:a3:84:63:ae:18:aa:3c:c8:
7d:e3:3e:2c:56:4b:6f:5e:01:46:9a:cd:1b:88:b8:
cd:67:72:a5:ef:2b:32:5d:cc:67:91:6c:cb:6c:95:
d0:b6:f5:38:a4:bb:b1:61:a5:5c:63:94:2d:cb:3b:
f3:a2:25:b0:a3:8c:f3:5e:fd:72:4d:03:13:b8:05:
28:d5:09:c1:0d:79:fb:04:75:32:40:66:e3:21:db:
d3:79:8e:1c:9c:94:39:bc:9e:d3:90:44:fc:11:42:
d1:b4:21:ca:78:f3:ae:9c:94:c9:05:af:9f:fb:e7:
18:07:cd:7f:dc:9f:18:e0:1f:3e:eb:87:a7:f1:53:
5b:fa:c3:7d:1f:43:29:d9:ec:16:15:c6:7c:1d:a6:
15:6a:c5:a7:f3:66:49:47:8c:69:23:36:0c:86:c1:
2a:e5:11:8e:e2:de:69:64:17:15:ce:80:79:d3:28:
a3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:7F:E0:16:91:5C:3B:E3:52:63:41:50:9F:F9:A0:84:74:E6:8A:4A
X509v3 Authority Key Identifier:
keyid:95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:dc:c4:02:83:cf:21:a6:dc:45:e2:62:39:10:77:61:c1:a0:
12:f4:d2:18:e1:03:34:6e:68:85:9d:06:22:69:52:54:83:d2:
f3:de:82:d3:61:8d:63:67:81:8e:f8:cd:c2:d1:fa:83:19:14:
0f:44:bb:c9:1d:1e:c1:8c:58:cd:29:f0:f9:be:26:4a:33:43:
ff:5c:9c:28:3e:ff:f4:c9:fc:6b:b4:cc:78:3d:ad:c7:f1:24:
2d:f1:fe:8c:03:6d:89:23:51:7b:aa:0f:43:ab:14:51:78:ee:
04:51:3c:b0:3b:54:b2:30:c4:78:db:5e:a3:91:a0:04:df:e7:
73:7a:58:db:55:07:6c:a2:f4:ed:dd:ea:d8:a9:db:5a:39:8f:
9d:42:df:1f:c3:1d:ad:da:33:05:69:74:84:be:b4:c9:57:a4:
f3:a4:6e:cd:8c:80:99:d9:68:79:32:d5:b5:e6:13:78:81:21:
8b:b6:ee:6b:3e:ec:d9:1d:1d:23:82:5d:39:90:37:25:2a:f4:
b5:63:b8:53:03:ed:a0:a3:ef:f0:41:c2:dd:e4:5e:dc:ab:50:
38:20:85:29:62:f6:6a:e7:6e:cb:d8:76:f3:cf:dd:46:6e:f9:
ee:f2:df:c5:28:39:c9:4e:06:48:36:b1:a0:53:34:dc:93:84:
40:d9:1b:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIG8B97Ehds5rqeyIH4By4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NjhjNjAwNWIyODQwYWI3YmY4YTNhZDcyYTE3NTFkMGRi
MjliOWMwHhcNMjUwNzI2MTkwMDM0WhcNMjUwNzI3MTkwMDM0WjAzMTEwLwYDVQQD
Eyg2NzdmZTAxNjkxNWMzYmUzNTI2MzQxNTA5ZmY5YTA4NDc0ZTY4YTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1U2ruERbqnT3akcttxjNF8ILZsN3
qACPIo2NkSBrFrSyDFfxcocYBB/MmB1LPYBSUB9zGiuE/nzr5W+y1UO/cRxGR0IO
RqXlB+ir9sPCOtx1o4RjrhiqPMh94z4sVktvXgFGms0biLjNZ3Kl7ysyXcxnkWzL
bJXQtvU4pLuxYaVcY5QtyzvzoiWwo4zzXv1yTQMTuAUo1QnBDXn7BHUyQGbjIdvT
eY4cnJQ5vJ7TkET8EULRtCHKePOunJTJBa+f++cYB81/3J8Y4B8+64en8VNb+sN9
H0Mp2ewWFcZ8HaYVasWn82ZJR4xpIzYMhsEq5RGO4t5pZBcVzoB50yijrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGd/4BaRXDvjUmNBUJ/5oIR05opKMB8GA1UdIwQY
MBaAFJVoxgBbKECre/ijrXKhdR0NspucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFdqR0FGc29RS3Q3LUtPdGNxRjFIUTJ5bTV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yYjk4MGEtMWViNi00ODA4LThhZmEt
M2E1ZTE4ZDAwZGRjLzEvbFdqR0FGc29RS3Q3LUtPdGNxRjFIUTJ5bTV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8yYjk4MGEtMWViNi00ODA4LThhZmEtM2E1ZTE4ZDAwZGRj
LzEvbFdqR0FGc29RS3Q3LUtPdGNxRjFIUTJ5bTV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAptzEAoPP
IabcReJiORB3YcGgEvTSGOEDNG5ohZ0GImlSVIPS896C02GNY2eBjvjNwtH6gxkU
D0S7yR0ewYxYzSnw+b4mSjND/1ycKD7/9Mn8a7TMeD2tx/EkLfH+jANtiSNRe6oP
Q6sUUXjuBFE8sDtUsjDEeNteo5GgBN/nc3pY21UHbKL07d3q2KnbWjmPnULfH8Md
rdozBWl0hL60yVek86RuzYyAmdloeTLVteYTeIEhi7buaz7s2R0dI4JdOZA3JSr0
tWO4UwPtoKPv8EHC3eRe3KtQOCCFKWL2auduy9h288/dRm757vLfxSg5yU4GSDax
oFM03JOEQNkb5Q==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:18:44 2025 by rpki-client