Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.mft
File: LswQU0wEJcv21GXoQRT_euDwsFI.mft (raw, json)
Hash identifier: Bv2rjPLxtTJw8QTkaltu7vA4Mk/nr2sXCtKTgSmcNqU=
Subject key identifier: A0:EF:88:3C:19:C6:E9:59:80:39:AB:41:F2:4D:28:09:9B:C8:76:8B
Authority key identifier: 2E:CC:10:53:4C:04:25:CB:F6:D4:65:E8:41:14:FF:7A:E0:F0:B0:52
Certificate issuer: /CN=2ecc10534c0425cbf6d465e84114ff7ae0f0b052
Certificate serial: 01975DCB85FD15FEC97D7D8CDB5AECE8CF22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LswQU0wEJcv21GXoQRT_euDwsFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.mft
Manifest number: 0606
Signing time: Wed 11 Jun 2025 07:01:48 +0000
Manifest this update: Wed 11 Jun 2025 07:01:48 +0000
Manifest next update: Thu 12 Jun 2025 07:01:48 +0000
Files and hashes: 1: LswQU0wEJcv21GXoQRT_euDwsFI.crl (hash: rGw4R+G1GJh0Krfv6gfoE0DEARRFpoUroiLCCH3Pr9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LswQU0wEJcv21GXoQRT_euDwsFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 07:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:cb:85:fd:15:fe:c9:7d:7d:8c:db:5a:ec:e8:cf:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ecc10534c0425cbf6d465e84114ff7ae0f0b052
Validity
Not Before: Jun 11 07:01:48 2025 GMT
Not After : Jun 12 07:01:48 2025 GMT
Subject: CN=a0ef883c19c6e9598039ab41f24d28099bc8768b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:46:87:bf:87:d0:7f:9f:8f:7b:e7:33:5a:50:
f4:f1:91:ca:3d:c8:73:46:36:07:82:f4:5d:f2:4d:
00:35:00:ce:3f:5a:0f:60:f0:6a:11:dd:2d:98:6a:
82:e5:24:52:a0:b5:42:ad:18:17:f2:3c:89:7b:18:
c6:6e:a1:07:5d:03:68:0d:7b:04:c6:81:9f:75:61:
d0:fd:50:cb:c9:dc:7d:75:95:b8:67:b0:94:e5:f1:
4f:29:f6:86:b0:20:b8:54:23:3b:2c:14:91:0c:03:
33:0f:15:f2:86:26:94:34:09:4c:15:2c:d4:4a:77:
ba:3c:b5:8b:a3:8f:7e:43:ab:12:f4:1f:5f:3b:a4:
4f:f6:d3:da:91:0e:8f:28:c5:4e:5d:f0:68:44:41:
79:e9:05:42:6e:b3:db:8e:10:a6:54:93:d3:0e:0c:
24:25:c4:45:f2:63:4f:a2:ad:38:4f:fb:0c:f7:73:
9e:cf:da:41:a4:48:95:26:59:99:4c:88:7a:e2:70:
9a:0a:ab:89:1d:38:05:de:07:44:c4:32:2c:04:a5:
be:dc:8f:01:9f:b0:b3:c7:64:39:8d:93:52:1f:f6:
66:ac:1e:fc:6e:0c:e1:6f:5a:cd:ea:0e:3e:3e:77:
be:62:95:a2:3d:e9:11:ab:59:7f:74:53:50:36:05:
76:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:EF:88:3C:19:C6:E9:59:80:39:AB:41:F2:4D:28:09:9B:C8:76:8B
X509v3 Authority Key Identifier:
keyid:2E:CC:10:53:4C:04:25:CB:F6:D4:65:E8:41:14:FF:7A:E0:F0:B0:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LswQU0wEJcv21GXoQRT_euDwsFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:7d:7b:88:fd:97:40:51:8d:4d:f2:86:19:76:38:54:45:2e:
d8:01:4f:ef:2b:45:74:39:d0:26:9f:25:e5:ad:85:de:ec:8a:
a9:db:b1:9c:6a:96:6a:a9:53:8b:76:27:10:d2:16:0d:98:fc:
8a:c6:4a:3b:8d:5d:9c:09:2c:10:f6:1b:ee:87:33:3e:21:82:
ed:b7:e4:2d:b9:48:f8:51:ae:4f:37:d1:04:43:f7:fe:b7:b8:
8e:6a:aa:ba:86:65:13:85:23:ac:85:00:a7:35:2d:c9:08:1c:
f5:2d:f0:4a:b3:ee:4b:06:e8:3b:1e:eb:95:23:25:04:f2:29:
d3:1f:c0:4d:14:cc:28:4e:d4:6f:00:ea:1a:56:b8:b5:44:95:
32:eb:28:27:e4:20:b1:ea:c5:4d:d6:99:6d:90:6b:dc:7e:b2:
04:81:49:c9:14:1a:c5:97:8b:99:10:a7:f0:eb:d0:07:33:a4:
fc:3f:39:c0:a1:3a:d9:e4:13:38:05:37:a8:ed:96:42:09:53:
2d:09:09:2f:ee:4e:7e:c8:e9:54:e4:43:11:12:ca:e1:05:c4:
77:f3:9e:db:c7:d5:dc:f9:b1:52:10:36:9d:d0:75:2e:82:79:
b1:01:63:90:f0:ab:dc:e0:f5:ad:b7:e2:0b:fa:a1:65:b3:1f:
56:35:1e:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZddy4X9Ff7JfX2M21rs6M8iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlY2MxMDUzNGMwNDI1Y2JmNmQ0NjVlODQxMTRmZjdhZTBm
MGIwNTIwHhcNMjUwNjExMDcwMTQ4WhcNMjUwNjEyMDcwMTQ4WjAzMTEwLwYDVQQD
EyhhMGVmODgzYzE5YzZlOTU5ODAzOWFiNDFmMjRkMjgwOTliYzg3NjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEaHv4fQf5+Pe+czWlD08ZHKPchz
RjYHgvRd8k0ANQDOP1oPYPBqEd0tmGqC5SRSoLVCrRgX8jyJexjGbqEHXQNoDXsE
xoGfdWHQ/VDLydx9dZW4Z7CU5fFPKfaGsCC4VCM7LBSRDAMzDxXyhiaUNAlMFSzU
Sne6PLWLo49+Q6sS9B9fO6RP9tPakQ6PKMVOXfBoREF56QVCbrPbjhCmVJPTDgwk
JcRF8mNPoq04T/sM93Oez9pBpEiVJlmZTIh64nCaCquJHTgF3gdExDIsBKW+3I8B
n7Czx2Q5jZNSH/ZmrB78bgzhb1rN6g4+Pne+YpWiPekRq1l/dFNQNgV2kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKDviDwZxulZgDmrQfJNKAmbyHaLMB8GA1UdIwQY
MBaAFC7MEFNMBCXL9tRl6EEU/3rg8LBSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHN3UVUwd0VKY3YyMUdYb1FSVF9ldUR3c0ZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ZmZmNGEtZjk4NC00YjFmLTliMmIt
M2Q3OTJmYjkwNWVlLzEvTHN3UVUwd0VKY3YyMUdYb1FSVF9ldUR3c0ZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC82ZmZmNGEtZjk4NC00YjFmLTliMmItM2Q3OTJmYjkwNWVl
LzEvTHN3UVUwd0VKY3YyMUdYb1FSVF9ldUR3c0ZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARH17iP2X
QFGNTfKGGXY4VEUu2AFP7ytFdDnQJp8l5a2F3uyKqduxnGqWaqlTi3YnENIWDZj8
isZKO41dnAksEPYb7oczPiGC7bfkLblI+FGuTzfRBEP3/re4jmqquoZlE4UjrIUA
pzUtyQgc9S3wSrPuSwboOx7rlSMlBPIp0x/ATRTMKE7UbwDqGla4tUSVMusoJ+Qg
serFTdaZbZBr3H6yBIFJyRQaxZeLmRCn8OvQBzOk/D85wKE62eQTOAU3qO2WQglT
LQkJL+5OfsjpVORDERLK4QXEd/Oe28fV3PmxUhA2ndB1LoJ5sQFjkPCr3OD1rbfi
C/qhZbMfVjUe2g==
-----END CERTIFICATE-----
Generated at Wed Jun 11 13:43:04 2025 by rpki-client