Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
File: lTgJNefooh7DK2Wn_E7X1GgnhSE.mft (raw, json)
Hash identifier: DSWvZjLhOZw2u1l4TaEE+xtyTIn1olLXy385o3jynQo=
Subject key identifier: E7:7C:B7:13:B5:46:9A:ED:D8:5C:32:05:FE:00:CC:48:16:A2:97:6B
Authority key identifier: 95:38:09:35:E7:E8:A2:1E:C3:2B:65:A7:FC:4E:D7:D4:68:27:85:21
Certificate issuer: /CN=95380935e7e8a21ec32b65a7fc4ed7d468278521
Certificate serial: 01974EC585A4ECD7E4CB322FCE800419E46E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
Manifest number: 1520
Signing time: Sun 08 Jun 2025 09:00:57 +0000
Manifest this update: Sun 08 Jun 2025 09:00:57 +0000
Manifest next update: Mon 09 Jun 2025 09:00:57 +0000
Files and hashes: 1: lTgJNefooh7DK2Wn_E7X1GgnhSE.crl (hash: MYSB5J+gaCpXf5UHNHp89vWvNhJITX8MI+8xx28r2H0=)
2: pWYU_3rSNo7EOhyAYaHN6usNBI0.roa (hash: KeYaihRxFR7GfUW9GuvXnSgoYdgkOnmiGNfHnpBGPBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:85:a4:ec:d7:e4:cb:32:2f:ce:80:04:19:e4:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95380935e7e8a21ec32b65a7fc4ed7d468278521
Validity
Not Before: Jun 8 09:00:57 2025 GMT
Not After : Jun 9 09:00:57 2025 GMT
Subject: CN=e77cb713b5469aedd85c3205fe00cc4816a2976b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d4:73:11:45:13:6b:1e:74:61:c6:d3:bf:32:
c9:fe:25:89:e8:04:49:5c:ff:a2:d7:e9:94:aa:df:
77:2f:82:c2:67:75:8c:d1:ee:76:3c:ec:db:61:6f:
6e:e4:71:cc:aa:5a:18:59:87:1c:c0:27:71:47:e9:
91:1b:56:98:17:da:05:c1:eb:64:fc:ad:68:65:32:
02:d4:8e:f2:1b:70:f4:fb:1c:b0:e8:7b:b4:81:d6:
2a:a9:71:20:72:39:2d:5d:f4:89:68:4e:fe:81:1d:
ec:91:98:3d:d0:8c:85:ae:eb:06:62:5a:e8:e6:38:
27:16:38:84:2b:1a:5c:09:51:25:f8:9c:6c:c6:f6:
a4:de:ff:b6:a2:ed:60:a4:1a:cb:ee:7b:77:2c:05:
71:cf:9b:0f:87:e6:0b:a0:9c:bf:b3:8e:56:62:19:
0d:e8:18:b4:c5:53:16:fb:b3:4d:10:af:c6:db:ce:
41:27:02:43:f3:5e:b5:5f:93:97:1e:94:89:1e:93:
ca:ed:c2:5a:0a:8f:22:8a:5b:60:ba:83:0d:b7:da:
0a:a6:ba:5a:69:d7:4a:30:43:de:d0:c5:49:49:1f:
06:d7:7d:86:e8:1c:9a:6e:52:c0:d5:d5:78:64:c1:
3d:20:ef:20:b9:d6:82:4a:8d:98:8a:e5:f0:d9:9b:
39:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:7C:B7:13:B5:46:9A:ED:D8:5C:32:05:FE:00:CC:48:16:A2:97:6B
X509v3 Authority Key Identifier:
keyid:95:38:09:35:E7:E8:A2:1E:C3:2B:65:A7:FC:4E:D7:D4:68:27:85:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:36:6d:a5:01:d1:76:e6:11:1f:7d:c3:8d:65:66:31:54:dd:
f4:c7:fc:d7:07:da:20:b2:b8:22:d1:a5:f3:0c:97:0e:19:e6:
19:76:24:13:a2:2b:10:a9:29:4e:92:b1:60:17:15:e2:08:f4:
9e:82:31:a3:db:05:f9:17:f4:57:fc:79:65:1c:a4:fa:2b:10:
0d:6e:cf:fa:a6:1c:19:26:ce:af:e0:a0:3c:fc:1e:18:3a:d3:
58:61:37:6e:a9:d1:e3:3e:c7:82:d3:91:5d:45:66:bd:cc:e0:
90:48:71:0a:11:44:ba:03:76:b9:f3:70:5b:e0:90:d1:38:b1:
cb:a7:d9:2e:2b:a7:8f:a5:9b:ab:85:e4:8a:46:12:ab:0d:5a:
c4:9e:ea:56:d7:2b:5f:14:70:3e:02:99:ed:85:d7:e3:ee:19:
41:97:55:66:68:ae:7a:77:22:1d:c6:4e:01:b3:f2:36:80:fe:
d4:84:41:91:5c:61:f8:0d:18:89:94:aa:79:80:a0:3a:d7:8e:
f2:90:a1:be:19:0b:99:8b:4f:3c:a3:82:51:32:67:b8:ba:54:
b8:d7:8c:d4:a7:18:c8:da:4c:e9:28:3b:35:ae:d3:54:aa:7e:
80:a9:fe:da:03:f6:9e:02:ee:c8:1e:ff:0f:a6:5f:dc:99:cd:
06:91:6e:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOxYWk7NfkyzIvzoAEGeRuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MzgwOTM1ZTdlOGEyMWVjMzJiNjVhN2ZjNGVkN2Q0Njgy
Nzg1MjEwHhcNMjUwNjA4MDkwMDU3WhcNMjUwNjA5MDkwMDU3WjAzMTEwLwYDVQQD
EyhlNzdjYjcxM2I1NDY5YWVkZDg1YzMyMDVmZTAwY2M0ODE2YTI5NzZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9RzEUUTax50YcbTvzLJ/iWJ6ARJ
XP+i1+mUqt93L4LCZ3WM0e52POzbYW9u5HHMqloYWYccwCdxR+mRG1aYF9oFwetk
/K1oZTIC1I7yG3D0+xyw6Hu0gdYqqXEgcjktXfSJaE7+gR3skZg90IyFrusGYlro
5jgnFjiEKxpcCVEl+Jxsxvak3v+2ou1gpBrL7nt3LAVxz5sPh+YLoJy/s45WYhkN
6Bi0xVMW+7NNEK/G285BJwJD8161X5OXHpSJHpPK7cJaCo8iiltguoMNt9oKprpa
addKMEPe0MVJSR8G132G6ByablLA1dV4ZME9IO8gudaCSo2YiuXw2Zs5FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOd8txO1Rprt2FwyBf4AzEgWopdrMB8GA1UdIwQY
MBaAFJU4CTXn6KIewytlp/xO19RoJ4UhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFRnSk5lZm9vaDdESzJXbl9FN1gxR2duaFNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC82MjYzMWItZmRmMy00MTNmLThmMjIt
ZWNlMDg4ZjAxODI3LzEvbFRnSk5lZm9vaDdESzJXbl9FN1gxR2duaFNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC82MjYzMWItZmRmMy00MTNmLThmMjItZWNlMDg4ZjAxODI3
LzEvbFRnSk5lZm9vaDdESzJXbl9FN1gxR2duaFNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmDZtpQHR
duYRH33DjWVmMVTd9Mf81wfaILK4ItGl8wyXDhnmGXYkE6IrEKkpTpKxYBcV4gj0
noIxo9sF+Rf0V/x5ZRyk+isQDW7P+qYcGSbOr+CgPPweGDrTWGE3bqnR4z7HgtOR
XUVmvczgkEhxChFEugN2ufNwW+CQ0Tixy6fZLiunj6Wbq4XkikYSqw1axJ7qVtcr
XxRwPgKZ7YXX4+4ZQZdVZmiuenciHcZOAbPyNoD+1IRBkVxh+A0YiZSqeYCgOteO
8pChvhkLmYtPPKOCUTJnuLpUuNeM1KcYyNpM6Sg7Na7TVKp+gKn+2gP2ngLuyB7/
D6Zf3JnNBpFubw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 13:06:45 2025 by rpki-client