Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
File: lV_PknmKnbswq9K5-im_qIBCIPM.mft (raw, json)
Hash identifier: u+xiOkcg/00ZZw4SH9kZ62emdSLZtvilI9IAr1vY1LM=
Subject key identifier: EB:E8:A0:6B:9F:02:3A:EE:99:25:93:B4:82:BF:E8:78:0D:6C:37:9D
Authority key identifier: 95:5F:CF:92:79:8A:9D:BB:30:AB:D2:B9:FA:29:BF:A8:80:42:20:F3
Certificate issuer: /CN=955fcf92798a9dbb30abd2b9fa29bfa8804220f3
Certificate serial: 01984B8AB9F288801057E39DB037B9C2025F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 11:00:39 +0000
Manifest this update: Sun 27 Jul 2025 11:00:39 +0000
Manifest next update: Mon 28 Jul 2025 11:00:39 +0000
Files and hashes: 1: 6qs9s6ZANN0Vr7Mtzl0BbrvUZX0.roa (hash: pQeqqx4HL54a4q+hUpmIGa67TaWduN/H5CstOlna1UE=)
2: EoYtqT19_jZmc_n7cEwpjSGtOsU.roa (hash: hkkAotU6XOY6iCyCcpO+yZgNMC6GRacfrcfYwvynbjI=)
3: hFLTgVwi-T4tOA6wOS4qAN2FLxM.roa (hash: dz5XmeHfe6/lu7MZUkt8y4gu+wWol7zuYfpW+/5fyrM=)
4: lV_PknmKnbswq9K5-im_qIBCIPM.crl (hash: io7pUqkqB4m4AUoHPOHL9Yr4x/lA71O4j3Ur/HVse4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:8a:b9:f2:88:80:10:57:e3:9d:b0:37:b9:c2:02:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=955fcf92798a9dbb30abd2b9fa29bfa8804220f3
Validity
Not Before: Jul 27 11:00:39 2025 GMT
Not After : Jul 28 11:00:39 2025 GMT
Subject: CN=ebe8a06b9f023aee992593b482bfe8780d6c379d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7d:aa:bd:e0:7f:df:bd:8d:33:bb:46:4b:5a:
93:f4:f6:a5:a8:33:b8:bf:62:50:d1:0a:f3:47:d5:
39:b9:45:31:d1:a1:0b:21:28:e9:c8:4d:13:e2:cc:
04:75:70:45:6f:a4:d6:11:a5:5f:04:13:26:5c:98:
bf:67:de:77:37:ed:ac:ec:1f:ac:b1:29:d1:f1:7f:
6c:c5:f0:dd:66:36:74:cb:68:7b:19:a7:b5:05:cd:
a0:d8:e4:e3:b5:5b:1c:37:fd:ef:1f:58:7b:26:64:
af:6e:37:52:66:c0:6c:42:b3:ca:d8:d3:7d:b2:0f:
38:ab:fa:b4:26:45:ac:36:d8:7c:c5:82:73:df:62:
a1:c6:a1:48:59:db:d1:9e:ef:51:86:b3:c8:91:f5:
3a:6d:bd:69:65:49:99:89:4d:15:f2:31:24:89:92:
35:7f:b4:f9:8e:1f:27:2d:7b:9c:8b:bb:9b:16:d8:
39:ee:43:39:e4:4a:a6:e1:dd:93:d2:32:2b:9b:ec:
e7:6a:e6:2a:19:0e:ce:e6:0f:33:f5:dd:34:08:c1:
82:fe:41:e6:b2:8a:ab:2b:a8:c5:76:b5:75:eb:62:
d4:83:f1:e0:8c:ee:cd:95:8f:30:4c:33:3d:4c:c7:
de:d9:ec:c0:ae:ec:79:24:63:c7:15:ca:e7:a8:e3:
31:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E8:A0:6B:9F:02:3A:EE:99:25:93:B4:82:BF:E8:78:0D:6C:37:9D
X509v3 Authority Key Identifier:
keyid:95:5F:CF:92:79:8A:9D:BB:30:AB:D2:B9:FA:29:BF:A8:80:42:20:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lV_PknmKnbswq9K5-im_qIBCIPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/df140a-0ac3-4105-b83a-051886d0ed4e/1/lV_PknmKnbswq9K5-im_qIBCIPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:2b:72:70:61:a7:36:44:68:65:4e:f8:19:4f:9a:1c:d8:99:
34:1c:84:de:d0:49:1b:eb:5e:18:87:fa:39:1d:04:43:4a:a5:
a2:90:01:e6:a5:45:88:28:c7:3b:31:60:6b:44:6a:00:b8:23:
8d:69:3b:f7:d8:2c:68:81:60:8e:e7:04:8d:53:04:cf:61:94:
ff:7e:43:2a:35:d8:8e:e2:1f:8b:5d:a9:ae:5c:b3:da:b6:f7:
77:c4:b3:8b:c1:50:52:76:27:cc:37:ac:74:a3:fc:d4:19:1b:
43:15:7d:40:ca:04:27:4e:13:62:f1:6c:98:bd:37:09:d0:b7:
1d:fa:9e:ce:ab:1a:f8:71:0b:d9:b8:6b:0f:e5:5a:ac:f0:71:
83:cc:61:5c:f6:56:41:45:37:9d:30:a8:ce:d7:93:ff:a0:9f:
92:c6:73:d9:58:a4:63:21:e2:dd:b2:48:6f:04:ec:90:33:1a:
c1:f9:6f:7a:0a:cb:fa:e0:a8:48:14:3b:d2:78:f1:92:ff:30:
ab:2f:fd:16:20:41:1b:7f:8c:0f:fa:7a:41:ce:4c:35:28:0f:
a6:fb:b9:20:0d:82:b2:8b:6d:68:a9:70:3c:50:1f:2c:da:cb:
f9:47:a4:55:31:5a:2f:c7:e9:47:70:44:7a:97:84:3d:06:3b:
4a:ce:4c:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLirnyiIAQV+OdsDe5wgJfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NWZjZjkyNzk4YTlkYmIzMGFiZDJiOWZhMjliZmE4ODA0
MjIwZjMwHhcNMjUwNzI3MTEwMDM5WhcNMjUwNzI4MTEwMDM5WjAzMTEwLwYDVQQD
EyhlYmU4YTA2YjlmMDIzYWVlOTkyNTkzYjQ4MmJmZTg3ODBkNmMzNzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzH2qveB/372NM7tGS1qT9PalqDO4
v2JQ0QrzR9U5uUUx0aELISjpyE0T4swEdXBFb6TWEaVfBBMmXJi/Z953N+2s7B+s
sSnR8X9sxfDdZjZ0y2h7Gae1Bc2g2OTjtVscN/3vH1h7JmSvbjdSZsBsQrPK2NN9
sg84q/q0JkWsNth8xYJz32KhxqFIWdvRnu9RhrPIkfU6bb1pZUmZiU0V8jEkiZI1
f7T5jh8nLXuci7ubFtg57kM55Eqm4d2T0jIrm+znauYqGQ7O5g8z9d00CMGC/kHm
soqrK6jFdrV162LUg/HgjO7NlY8wTDM9TMfe2ezArux5JGPHFcrnqOMxQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOvooGufAjrumSWTtIK/6HgNbDedMB8GA1UdIwQY
MBaAFJVfz5J5ip27MKvSufopv6iAQiDzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFZfUGtubUtuYnN3cTlLNS1pbV9xSUJDSVBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9kZjE0MGEtMGFjMy00MTA1LWI4M2Et
MDUxODg2ZDBlZDRlLzEvbFZfUGtubUtuYnN3cTlLNS1pbV9xSUJDSVBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9kZjE0MGEtMGFjMy00MTA1LWI4M2EtMDUxODg2ZDBlZDRl
LzEvbFZfUGtubUtuYnN3cTlLNS1pbV9xSUJDSVBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsitycGGn
NkRoZU74GU+aHNiZNByE3tBJG+teGIf6OR0EQ0qlopAB5qVFiCjHOzFga0RqALgj
jWk799gsaIFgjucEjVMEz2GU/35DKjXYjuIfi12prlyz2rb3d8Szi8FQUnYnzDes
dKP81BkbQxV9QMoEJ04TYvFsmL03CdC3Hfqezqsa+HEL2bhrD+VarPBxg8xhXPZW
QUU3nTCozteT/6CfksZz2VikYyHi3bJIbwTskDMawflvegrL+uCoSBQ70njxkv8w
qy/9FiBBG3+MD/p6Qc5MNSgPpvu5IA2CsottaKlwPFAfLNrL+UekVTFaL8fpR3BE
epeEPQY7Ss5MOg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 13:49:14 2025 by rpki-client