Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
File: LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft (raw, json)
Hash identifier: pl+C9TCWe24sa1Ufqb5brt7G4SI9b+tKJ0FxfWB+jZE=
Subject key identifier: 5E:59:64:59:3B:B3:52:F1:F9:9D:0F:69:48:28:F7:4A:BB:FA:68:37
Authority key identifier: 2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44
Certificate issuer: /CN=2c83dfb24629c16779350b4a777b5b280fc59d44
Certificate serial: 01974FA0FBFEC4DCFD39BBC9E6493692C988
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 13:00:39 +0000
Manifest this update: Sun 08 Jun 2025 13:00:39 +0000
Manifest next update: Mon 09 Jun 2025 13:00:39 +0000
Files and hashes: 1: 0jE-nEfR5T_d7BILsWZTUD9dG5M.roa (hash: av9KzOnABL0S/mILNTQRWW5+TsQkQ7Bk5uNHmlLtxtc=)
2: LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl (hash: aFZ4oiJ9yF6TBhrgq3ReNOHRnnmGwBiqItyWOMvOYTk=)
3: gSdyPqr-OoyLVq-r6dULnURGpXQ.roa (hash: AJDr6l36OnIeYet8bGE+tBeIfs9sdxJq8CBSPv8HuMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:a0:fb:fe:c4:dc:fd:39:bb:c9:e6:49:36:92:c9:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c83dfb24629c16779350b4a777b5b280fc59d44
Validity
Not Before: Jun 8 13:00:39 2025 GMT
Not After : Jun 9 13:00:39 2025 GMT
Subject: CN=5e5964593bb352f1f99d0f694828f74abbfa6837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a5:39:2d:fc:e2:6b:b1:f2:7b:1c:e8:e7:8f:
31:b4:2f:8c:fb:c0:2a:ae:5b:26:6d:50:5f:de:6f:
fa:38:7d:b0:23:f1:3b:f5:30:90:e3:a7:cc:c5:a9:
a2:da:61:e9:df:ec:a2:8f:57:76:c2:73:74:a6:e6:
d1:85:ed:a6:9b:29:98:1d:69:9a:57:e7:44:77:16:
ad:98:53:23:42:39:9f:48:02:60:e7:4a:4c:9f:e6:
d6:72:e6:c3:4d:5f:12:4a:72:f5:4e:14:a9:25:9f:
a3:67:fc:f3:76:af:ae:97:7f:79:1b:c2:c9:33:ae:
e6:1e:9d:11:cd:55:fd:ad:83:53:19:c3:9f:c5:ad:
2c:2f:4a:1d:34:ea:cc:c2:92:c5:99:95:7d:5d:23:
f2:fd:8e:ae:4b:a1:72:5c:1a:90:ab:fd:e1:bd:7e:
71:a4:4f:56:76:50:55:70:18:67:4f:df:92:f7:1c:
22:4d:4d:2f:e9:a4:b7:f9:91:8d:06:d0:5d:74:7a:
6b:6b:fb:b4:46:eb:53:8e:23:b5:e5:49:db:b5:34:
2f:07:bc:42:45:76:9e:30:f5:76:b4:77:a1:49:37:
6a:7c:76:5d:ba:89:13:72:b6:8e:fe:66:8e:b5:29:
4b:93:25:aa:48:0a:5f:33:59:25:c9:0b:81:c6:3b:
4a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:59:64:59:3B:B3:52:F1:F9:9D:0F:69:48:28:F7:4A:BB:FA:68:37
X509v3 Authority Key Identifier:
keyid:2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:56:8b:60:2c:a0:e4:ac:d1:fa:89:af:db:6e:64:a0:d8:fe:
22:f4:b4:6f:67:bd:a2:26:37:4e:3e:53:60:a3:9e:45:9f:6e:
14:a1:3a:e9:c1:a8:63:4c:6b:50:b0:6d:23:be:dc:e9:eb:1d:
08:ff:e0:a7:f4:0c:3d:36:5c:7a:c7:6f:b4:47:87:84:17:3f:
d8:da:f3:e6:27:41:dd:b2:02:82:50:32:bb:9e:23:62:2e:73:
ad:df:06:66:f0:2e:33:ac:d9:52:f0:26:70:37:ba:b2:70:5e:
1c:6a:0f:02:85:2c:91:91:f9:0b:39:94:17:92:1d:ad:3a:2a:
2b:ef:b6:7d:ff:84:29:f3:4f:77:2f:1c:14:74:45:1b:ed:2d:
f2:09:96:39:c7:49:e6:e3:d7:e7:cd:b6:8e:67:08:70:23:a8:
e7:4d:55:0d:4d:c6:fa:05:bc:44:89:11:81:da:72:1e:0e:7f:
0e:0f:e3:2f:f1:73:c3:39:cb:1c:89:4e:a1:56:43:0b:63:39:
1e:1c:29:e6:2b:e0:c0:80:c3:04:a0:84:c7:b7:44:4d:16:64:
bb:16:c9:79:aa:e9:fd:ba:58:4e:29:50:92:cc:28:2f:af:6a:
27:95:7e:f6:9d:d1:08:7b:3d:bc:e0:e3:f3:82:bd:f3:9c:62:
f9:86:45:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdPoPv+xNz9ObvJ5kk2ksmIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjODNkZmIyNDYyOWMxNjc3OTM1MGI0YTc3N2I1YjI4MGZj
NTlkNDQwHhcNMjUwNjA4MTMwMDM5WhcNMjUwNjA5MTMwMDM5WjAzMTEwLwYDVQQD
Eyg1ZTU5NjQ1OTNiYjM1MmYxZjk5ZDBmNjk0ODI4Zjc0YWJiZmE2ODM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06U5Lfzia7Hyexzo548xtC+M+8Aq
rlsmbVBf3m/6OH2wI/E79TCQ46fMxami2mHp3+yij1d2wnN0pubRhe2mmymYHWma
V+dEdxatmFMjQjmfSAJg50pMn+bWcubDTV8SSnL1ThSpJZ+jZ/zzdq+ul395G8LJ
M67mHp0RzVX9rYNTGcOfxa0sL0odNOrMwpLFmZV9XSPy/Y6uS6FyXBqQq/3hvX5x
pE9WdlBVcBhnT9+S9xwiTU0v6aS3+ZGNBtBddHpra/u0RutTjiO15UnbtTQvB7xC
RXaeMPV2tHehSTdqfHZduokTcraO/maOtSlLkyWqSApfM1klyQuBxjtKnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF5ZZFk7s1Lx+Z0PaUgo90q7+mg3MB8GA1UdIwQY
MBaAFCyD37JGKcFneTULSnd7WygPxZ1EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTElQZnNrWXB3V2Q1TlF0S2QzdGJLQV9GblVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS80MjBjMTQtY2IyYy00ZTNlLTg3Yjkt
M2ZjMzk0ODc4MDdjLzEvTElQZnNrWXB3V2Q1TlF0S2QzdGJLQV9GblVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS80MjBjMTQtY2IyYy00ZTNlLTg3YjktM2ZjMzk0ODc4MDdj
LzEvTElQZnNrWXB3V2Q1TlF0S2QzdGJLQV9GblVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUFaLYCyg
5KzR+omv225koNj+IvS0b2e9oiY3Tj5TYKOeRZ9uFKE66cGoY0xrULBtI77c6esd
CP/gp/QMPTZcesdvtEeHhBc/2Nrz5idB3bICglAyu54jYi5zrd8GZvAuM6zZUvAm
cDe6snBeHGoPAoUskZH5CzmUF5IdrToqK++2ff+EKfNPdy8cFHRFG+0t8gmWOcdJ
5uPX5822jmcIcCOo501VDU3G+gW8RIkRgdpyHg5/Dg/jL/FzwznLHIlOoVZDC2M5
Hhwp5ivgwIDDBKCEx7dETRZkuxbJearp/bpYTilQkswoL69qJ5V+9p3RCHs9vODj
84K985xi+YZFLQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 18:21:26 2025 by rpki-client