Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
File: L4g71OpOPesouJSxkPjgi68G8cw.mft (raw, json)
Hash identifier: 88mUwJKYFLLGdpZw4GCjj6hMpbpIwTJl+o8SjN5wULE=
Subject key identifier: 0B:6F:3B:43:E4:A0:DA:31:63:81:9E:F3:F7:49:53:47:93:CB:A5:98
Authority key identifier: 2F:88:3B:D4:EA:4E:3D:EB:28:B8:94:B1:90:F8:E0:8B:AF:06:F1:CC
Certificate issuer: /CN=2f883bd4ea4e3deb28b894b190f8e08baf06f1cc
Certificate serial: 0198541FB4D33AE91DE9907EB9C8D7572D8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
Manifest number: 05B2
Signing time: Tue 29 Jul 2025 03:00:20 +0000
Manifest this update: Tue 29 Jul 2025 03:00:20 +0000
Manifest next update: Wed 30 Jul 2025 03:00:20 +0000
Files and hashes: 1: 72212ELi_xTfEeuyR3CUIU7otcg.roa (hash: 05TY+/FULQvb5YOeymsTjWCBkX5gY/8/tCWpzbv8PI0=)
2: L4g71OpOPesouJSxkPjgi68G8cw.crl (hash: p40E7M8xlNDg4PV4J6jt5A1wsa1602YxoFiOsoLRObc=)
3: rKcLia0y-4QlTSWH-I5frDT77pU.roa (hash: dvn3H9WJWj8AZKwySDQ1F4qo4Fa0dQjkVokla1Xiyhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:1f:b4:d3:3a:e9:1d:e9:90:7e:b9:c8:d7:57:2d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f883bd4ea4e3deb28b894b190f8e08baf06f1cc
Validity
Not Before: Jul 29 03:00:20 2025 GMT
Not After : Jul 30 03:00:20 2025 GMT
Subject: CN=0b6f3b43e4a0da3163819ef3f749534793cba598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:49:8b:88:99:da:f3:28:9a:93:45:53:84:90:
a7:09:a0:d5:e2:cf:34:f8:1e:b0:bb:f2:70:87:83:
5e:a5:19:c2:ff:ba:ca:4e:79:68:55:75:a5:1d:d5:
a7:77:c6:7c:6b:dc:ea:0c:ab:ce:fd:e4:35:b1:ab:
b2:86:63:cc:5b:72:d4:ed:15:9b:58:12:f3:54:14:
fd:51:cc:14:24:78:54:a3:8f:92:5b:54:07:76:34:
00:c8:5b:e3:cd:cf:4b:4d:7e:44:11:cb:33:55:70:
04:5b:a1:28:5b:69:97:b9:85:3b:9d:22:bb:a7:59:
b7:f5:71:9e:07:d8:af:22:01:90:c1:33:36:d2:ad:
ff:4c:e8:08:30:5d:bb:bf:87:2a:0c:36:cc:51:42:
0c:f5:d2:a5:3b:1c:66:80:fc:37:63:eb:05:e3:2d:
28:93:50:b1:11:a1:c6:4f:b7:84:a4:d9:98:1f:3c:
58:49:e3:f2:15:34:99:2d:d5:f7:d5:79:fb:d5:87:
c5:46:6d:37:e9:11:0c:bb:a1:ba:4c:3d:e8:39:24:
55:cd:3a:6b:7d:25:d2:8a:8f:4e:0c:22:a1:5f:d8:
4c:db:43:67:5a:07:18:24:08:13:a1:4f:f7:4f:08:
29:9f:c0:cd:e7:dd:cb:a3:28:7a:86:c5:6b:da:34:
6d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:6F:3B:43:E4:A0:DA:31:63:81:9E:F3:F7:49:53:47:93:CB:A5:98
X509v3 Authority Key Identifier:
keyid:2F:88:3B:D4:EA:4E:3D:EB:28:B8:94:B1:90:F8:E0:8B:AF:06:F1:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:4c:33:9f:3e:8e:17:cc:54:71:9e:68:bc:ac:1d:90:51:7b:
f8:6e:d0:f7:3f:ea:e8:15:72:7e:64:01:5d:27:c4:45:9d:3b:
1a:1a:65:5d:91:cf:ce:5a:69:30:14:34:12:1b:0d:cb:7f:10:
77:d9:1b:f8:c6:ab:71:61:80:03:95:bb:19:f8:49:94:80:25:
e5:ce:db:c2:17:48:c2:53:9f:71:01:54:9d:6b:2b:d6:2d:fa:
ee:ec:a6:a9:ae:5f:1d:d8:25:e4:0f:54:41:44:d0:a6:a5:48:
58:f0:f1:b1:03:9a:b6:d1:c3:7d:e8:f8:e9:00:a2:0a:3a:5a:
e8:bb:b9:a5:4c:be:10:3b:35:a0:40:79:98:cc:93:c1:93:47:
63:b3:3e:0f:a1:5d:58:d1:7f:7e:83:1e:62:f8:98:12:3b:89:
18:88:7c:6d:45:b5:26:f6:69:9c:8a:d4:e8:9f:a8:31:54:f5:
80:11:72:dd:ca:b0:b7:08:1f:9e:d6:f2:32:c3:53:b0:e2:4e:
23:1e:07:ce:d9:43:e7:b8:4d:a9:00:e9:48:e3:82:7d:03:4c:
bc:a0:88:68:12:47:2f:cf:10:bd:84:88:6b:b3:f2:88:5e:e9:
e7:24:c3:0f:85:84:dc:31:c5:47:87:9a:be:ca:22:ef:4c:2e:
4f:50:e5:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhUH7TTOukd6ZB+ucjXVy2PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmODgzYmQ0ZWE0ZTNkZWIyOGI4OTRiMTkwZjhlMDhiYWYw
NmYxY2MwHhcNMjUwNzI5MDMwMDIwWhcNMjUwNzMwMDMwMDIwWjAzMTEwLwYDVQQD
EygwYjZmM2I0M2U0YTBkYTMxNjM4MTllZjNmNzQ5NTM0NzkzY2JhNTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kmLiJna8yiak0VThJCnCaDV4s80
+B6wu/Jwh4NepRnC/7rKTnloVXWlHdWnd8Z8a9zqDKvO/eQ1sauyhmPMW3LU7RWb
WBLzVBT9UcwUJHhUo4+SW1QHdjQAyFvjzc9LTX5EEcszVXAEW6EoW2mXuYU7nSK7
p1m39XGeB9ivIgGQwTM20q3/TOgIMF27v4cqDDbMUUIM9dKlOxxmgPw3Y+sF4y0o
k1CxEaHGT7eEpNmYHzxYSePyFTSZLdX31Xn71YfFRm036REMu6G6TD3oOSRVzTpr
fSXSio9ODCKhX9hM20NnWgcYJAgToU/3Twgpn8DN593Loyh6hsVr2jRtgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAtvO0PkoNoxY4Ge8/dJU0eTy6WYMB8GA1UdIwQY
MBaAFC+IO9TqTj3rKLiUsZD44IuvBvHMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDRnNzFPcE9QZXNvdUpTeGtQamdpNjhHOGN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9iMzRkNmYtNjZkYy00NDk4LWIyMDUt
NzliNjczM2JjNWU2LzEvTDRnNzFPcE9QZXNvdUpTeGtQamdpNjhHOGN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9iMzRkNmYtNjZkYy00NDk4LWIyMDUtNzliNjczM2JjNWU2
LzEvTDRnNzFPcE9QZXNvdUpTeGtQamdpNjhHOGN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZEwznz6O
F8xUcZ5ovKwdkFF7+G7Q9z/q6BVyfmQBXSfERZ07GhplXZHPzlppMBQ0EhsNy38Q
d9kb+MarcWGAA5W7GfhJlIAl5c7bwhdIwlOfcQFUnWsr1i367uymqa5fHdgl5A9U
QUTQpqVIWPDxsQOattHDfej46QCiCjpa6Lu5pUy+EDs1oEB5mMyTwZNHY7M+D6Fd
WNF/foMeYviYEjuJGIh8bUW1JvZpnIrU6J+oMVT1gBFy3cqwtwgfntbyMsNTsOJO
Ix4HztlD57hNqQDpSOOCfQNMvKCIaBJHL88QvYSIa7PyiF7p5yTDD4WE3DHFR4ea
vsoi70wuT1DlhA==
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:36:49 2025 by rpki-client