Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft
File: lqKMzDCRW1xzEoCowcpn_mAJVO4.mft (raw, json)
Hash identifier: /5K21aGMtNJLjUOgXiMijBnwsuxW6MW8qWlITr867Yw=
Subject key identifier: 7D:57:A7:87:5B:40:5B:83:1B:9C:87:2A:76:39:36:34:B1:A9:6B:47
Authority key identifier: 96:A2:8C:CC:30:91:5B:5C:73:12:80:A8:C1:CA:67:FE:60:09:54:EE
Certificate issuer: /CN=96a28ccc30915b5c731280a8c1ca67fe600954ee
Certificate serial: 01974CD70CE3CD7F399D5C26E3F0377063F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lqKMzDCRW1xzEoCowcpn_mAJVO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft
Manifest number: 05FA
Signing time: Sun 08 Jun 2025 00:00:51 +0000
Manifest this update: Sun 08 Jun 2025 00:00:51 +0000
Manifest next update: Mon 09 Jun 2025 00:00:51 +0000
Files and hashes: 1: P0vR8NFOqzUM0n5-PTdZVFTAC8Q.roa (hash: A8zEAcViYD9RWk/au7+yPQfR19Sh9DoooPV1RyNftPE=)
2: lqKMzDCRW1xzEoCowcpn_mAJVO4.crl (hash: 0nvOBxgXVMULagFUG8waHKkmHyxDsG18Ea+fs1gN2BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lqKMzDCRW1xzEoCowcpn_mAJVO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 00:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d7:0c:e3:cd:7f:39:9d:5c:26:e3:f0:37:70:63:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96a28ccc30915b5c731280a8c1ca67fe600954ee
Validity
Not Before: Jun 8 00:00:51 2025 GMT
Not After : Jun 9 00:00:51 2025 GMT
Subject: CN=7d57a7875b405b831b9c872a76393634b1a96b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ab:8c:d9:2c:19:97:e8:11:c9:3c:88:12:c5:
b9:6b:41:f9:91:7c:00:c7:b4:b9:db:74:e5:26:1e:
66:6e:a8:6b:55:f4:34:af:6b:f8:dc:83:92:dc:a7:
4d:7b:e2:74:57:4a:00:ef:cd:43:92:a3:39:07:8d:
ba:d4:d0:18:33:ef:bd:46:ce:6e:36:e9:77:88:0f:
a8:66:bb:d2:47:3b:91:e6:08:86:8b:5f:4a:f4:68:
a8:0c:cc:f4:73:d6:a4:a3:b1:fa:ed:e5:ff:38:7e:
6c:bf:5e:19:81:8d:a5:1e:22:b3:d1:df:bb:9f:58:
62:63:53:55:1f:16:e5:60:e4:bc:c4:7c:66:42:d8:
30:0a:d6:0e:a9:72:82:26:5a:8c:86:76:18:48:f7:
5e:07:b0:95:ec:5e:11:9e:01:d3:54:21:df:57:2c:
0b:eb:af:b1:10:c0:8a:4a:ef:ca:ae:31:cd:4f:7d:
2b:80:75:a5:cb:10:77:37:03:bf:50:a4:d5:43:aa:
07:02:cf:15:b3:1f:9c:7c:72:c9:a4:a9:cf:f5:0d:
5f:61:2b:4e:48:7d:27:34:79:66:7a:fc:cb:da:7e:
cb:05:de:00:0d:44:40:f9:26:cc:5d:e9:e1:16:9b:
23:d1:10:23:b6:70:e0:bc:58:d3:71:f0:cc:07:a7:
03:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:57:A7:87:5B:40:5B:83:1B:9C:87:2A:76:39:36:34:B1:A9:6B:47
X509v3 Authority Key Identifier:
keyid:96:A2:8C:CC:30:91:5B:5C:73:12:80:A8:C1:CA:67:FE:60:09:54:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqKMzDCRW1xzEoCowcpn_mAJVO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:fa:9f:9a:df:7d:da:90:07:46:8c:a5:b1:99:94:76:13:dc:
dd:d5:08:de:10:bc:1d:63:15:6c:bd:fa:49:32:5a:e0:89:c3:
99:5a:4d:2e:5f:9a:28:92:bf:6d:7d:c8:aa:a6:7a:30:f3:22:
13:de:92:76:1a:f9:1a:a4:68:65:6e:88:73:d7:99:85:a1:b0:
d9:f0:76:6b:75:c2:1c:bc:ff:30:3b:50:bc:42:b0:b7:05:4d:
55:4a:e8:af:b0:85:20:11:e1:db:fb:33:b1:35:3c:82:da:3b:
d6:c3:63:50:2c:24:88:c4:30:2c:61:6b:11:5e:71:04:37:3c:
58:2b:db:7c:67:bd:ae:a8:60:6f:31:cb:2e:96:e7:dc:09:49:
2c:bd:bb:37:e1:e5:15:c5:b1:47:d8:06:cc:b9:c7:52:36:7a:
72:2d:f9:40:77:99:69:3a:d8:36:40:5e:3a:b8:e4:2e:dd:52:
83:d1:65:e2:0c:9e:75:30:fe:99:a7:18:94:53:4d:69:1d:47:
07:43:9e:b9:0e:38:68:69:07:ff:cf:3b:46:d5:bf:21:d4:ca:
ae:b5:2d:07:2d:88:0e:d2:8a:fe:59:74:16:66:92:fd:ec:d7:
15:0b:44:fd:02:ff:ad:4e:6e:e5:df:46:15:ec:78:5c:a9:cf:
62:58:7d:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdM1wzjzX85nVwm4/A3cGP3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2YTI4Y2NjMzA5MTViNWM3MzEyODBhOGMxY2E2N2ZlNjAw
OTU0ZWUwHhcNMjUwNjA4MDAwMDUxWhcNMjUwNjA5MDAwMDUxWjAzMTEwLwYDVQQD
Eyg3ZDU3YTc4NzViNDA1YjgzMWI5Yzg3MmE3NjM5MzYzNGIxYTk2YjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArauM2SwZl+gRyTyIEsW5a0H5kXwA
x7S523TlJh5mbqhrVfQ0r2v43IOS3KdNe+J0V0oA781DkqM5B4261NAYM++9Rs5u
Nul3iA+oZrvSRzuR5giGi19K9GioDMz0c9ako7H67eX/OH5sv14ZgY2lHiKz0d+7
n1hiY1NVHxblYOS8xHxmQtgwCtYOqXKCJlqMhnYYSPdeB7CV7F4RngHTVCHfVywL
66+xEMCKSu/KrjHNT30rgHWlyxB3NwO/UKTVQ6oHAs8Vsx+cfHLJpKnP9Q1fYStO
SH0nNHlmevzL2n7LBd4ADURA+SbMXenhFpsj0RAjtnDgvFjTcfDMB6cDrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH1Xp4dbQFuDG5yHKnY5NjSxqWtHMB8GA1UdIwQY
MBaAFJaijMwwkVtccxKAqMHKZ/5gCVTuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHFLTXpEQ1JXMXh6RW9Db3djcG5fbUFKVk80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82YTJhYTktMGVhMS00MGQ2LWI4YTct
NjUxYjcxN2Y4YTlhLzEvbHFLTXpEQ1JXMXh6RW9Db3djcG5fbUFKVk80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS82YTJhYTktMGVhMS00MGQ2LWI4YTctNjUxYjcxN2Y4YTlh
LzEvbHFLTXpEQ1JXMXh6RW9Db3djcG5fbUFKVk80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfPqfmt99
2pAHRoylsZmUdhPc3dUI3hC8HWMVbL36STJa4InDmVpNLl+aKJK/bX3IqqZ6MPMi
E96Sdhr5GqRoZW6Ic9eZhaGw2fB2a3XCHLz/MDtQvEKwtwVNVUror7CFIBHh2/sz
sTU8gto71sNjUCwkiMQwLGFrEV5xBDc8WCvbfGe9rqhgbzHLLpbn3AlJLL27N+Hl
FcWxR9gGzLnHUjZ6ci35QHeZaTrYNkBeOrjkLt1Sg9Fl4gyedTD+macYlFNNaR1H
B0OeuQ44aGkH/887RtW/IdTKrrUtBy2IDtKK/ll0FmaS/ezXFQtE/QL/rU5u5d9G
Fex4XKnPYlh9sA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 09:02:59 2025 by rpki-client