Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.mft
File: LswQU0wEJcv21GXoQRT_euDwsFI.mft (raw, json)
Hash identifier: GGGAo2PAvKR0dpGtC17n0cI9b9RqnbsCMCyyj6qqlag=
Subject key identifier: 25:0B:0E:1F:56:BA:6A:19:0F:2E:E5:5C:F9:71:DB:CB:12:78:53:BE
Authority key identifier: 2E:CC:10:53:4C:04:25:CB:F6:D4:65:E8:41:14:FF:7A:E0:F0:B0:52
Certificate issuer: /CN=2ecc10534c0425cbf6d465e84114ff7ae0f0b052
Certificate serial: 01975BDCE9AEB47F1259A166A9B1D3276A7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LswQU0wEJcv21GXoQRT_euDwsFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.mft
Manifest number: 0605
Signing time: Tue 10 Jun 2025 22:01:33 +0000
Manifest this update: Tue 10 Jun 2025 22:01:33 +0000
Manifest next update: Wed 11 Jun 2025 22:01:33 +0000
Files and hashes: 1: LswQU0wEJcv21GXoQRT_euDwsFI.crl (hash: I1iYC+1HMYCn7z++XzFcyjpid/bunkmX22ySKc60dlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LswQU0wEJcv21GXoQRT_euDwsFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:dc:e9:ae:b4:7f:12:59:a1:66:a9:b1:d3:27:6a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ecc10534c0425cbf6d465e84114ff7ae0f0b052
Validity
Not Before: Jun 10 22:01:33 2025 GMT
Not After : Jun 11 22:01:33 2025 GMT
Subject: CN=250b0e1f56ba6a190f2ee55cf971dbcb127853be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:4d:60:99:47:85:9d:ce:57:54:7a:ca:fd:cf:
a3:bf:18:18:6a:09:65:68:ba:a6:9b:cb:ea:9a:42:
49:8d:bd:a4:ab:af:20:93:1e:3b:d7:6b:a1:eb:84:
4a:25:36:2c:18:43:4e:8f:d8:69:01:19:98:51:92:
0b:db:2e:7c:75:9a:86:88:e2:b5:57:80:46:e4:b7:
bd:33:12:08:20:ea:b7:4b:0a:5b:1e:66:a0:bc:fa:
fc:44:55:95:c2:03:f8:68:87:95:d7:ce:11:75:3a:
a0:b8:1f:e2:cd:00:a6:55:10:3a:23:fa:5c:52:1c:
81:58:e1:3a:7c:10:8d:cb:ca:30:f1:90:2d:2b:67:
48:08:35:55:72:c0:e2:39:f7:d3:0a:eb:3a:15:2e:
93:3a:98:cb:e6:fe:bc:b3:88:33:6c:0b:5a:9c:56:
f3:4d:5f:e6:ae:a1:e6:02:48:62:68:e1:c8:56:97:
80:66:15:d6:20:83:29:e6:93:5d:0c:2f:02:37:0d:
50:72:4d:a4:fe:79:3c:b2:75:2d:05:66:a6:db:25:
53:7f:c9:c6:9d:84:60:f8:eb:70:01:e5:86:e9:71:
a6:98:f8:65:63:53:de:b9:e8:25:88:a9:84:d2:14:
4d:b1:9f:aa:2c:a4:96:98:4a:36:b1:90:ed:ec:dc:
08:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0B:0E:1F:56:BA:6A:19:0F:2E:E5:5C:F9:71:DB:CB:12:78:53:BE
X509v3 Authority Key Identifier:
keyid:2E:CC:10:53:4C:04:25:CB:F6:D4:65:E8:41:14:FF:7A:E0:F0:B0:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LswQU0wEJcv21GXoQRT_euDwsFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fff4a-f984-4b1f-9b2b-3d792fb905ee/1/LswQU0wEJcv21GXoQRT_euDwsFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:d4:ec:13:39:c5:80:ce:3b:fa:4a:3a:88:73:b7:39:c8:d4:
5c:df:18:5b:93:6a:03:bc:a9:6f:49:b1:79:2f:2d:79:fb:d5:
5e:65:aa:5f:78:36:43:d2:80:b3:c6:05:a9:c6:90:60:20:6c:
e5:02:cc:6e:ad:9c:6c:4a:27:25:8d:f0:74:c1:c1:97:20:bf:
4d:ac:85:d1:1e:42:f2:51:ce:eb:07:a4:6b:44:36:84:4e:6e:
0a:11:67:f5:9b:2a:5d:65:51:33:4e:48:ab:a0:eb:38:b9:6f:
78:f5:29:76:c3:3b:50:19:a3:98:26:49:4d:0a:20:4b:07:c6:
5b:db:ce:53:4e:bc:66:5a:02:c3:bf:ba:24:75:f6:3d:1c:2b:
24:3e:e4:59:07:d5:21:81:f6:db:d7:42:9d:a7:20:00:17:a1:
98:b3:f4:82:40:9a:92:5a:11:3a:2e:74:fc:9b:fe:3d:80:7b:
4e:41:23:ee:f7:5d:c5:c0:58:a1:c4:11:15:7a:de:06:50:7a:
0a:14:14:12:81:03:4a:3f:e8:55:48:d7:d8:30:1a:64:dd:3a:
b1:31:ff:bd:f1:4a:07:ba:dd:e7:a2:79:6b:b8:b4:c4:07:51:
ff:7d:5f:5b:0b:7e:1b:15:1a:f0:1f:8d:a8:88:2f:3f:8f:ad:
c4:3a:f1:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdb3OmutH8SWaFmqbHTJ2p+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlY2MxMDUzNGMwNDI1Y2JmNmQ0NjVlODQxMTRmZjdhZTBm
MGIwNTIwHhcNMjUwNjEwMjIwMTMzWhcNMjUwNjExMjIwMTMzWjAzMTEwLwYDVQQD
EygyNTBiMGUxZjU2YmE2YTE5MGYyZWU1NWNmOTcxZGJjYjEyNzg1M2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6k1gmUeFnc5XVHrK/c+jvxgYagll
aLqmm8vqmkJJjb2kq68gkx4712uh64RKJTYsGENOj9hpARmYUZIL2y58dZqGiOK1
V4BG5Le9MxIIIOq3SwpbHmagvPr8RFWVwgP4aIeV184RdTqguB/izQCmVRA6I/pc
UhyBWOE6fBCNy8ow8ZAtK2dICDVVcsDiOffTCus6FS6TOpjL5v68s4gzbAtanFbz
TV/mrqHmAkhiaOHIVpeAZhXWIIMp5pNdDC8CNw1Qck2k/nk8snUtBWam2yVTf8nG
nYRg+OtwAeWG6XGmmPhlY1PeuegliKmE0hRNsZ+qLKSWmEo2sZDt7NwIVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCULDh9WumoZDy7lXPlx28sSeFO+MB8GA1UdIwQY
MBaAFC7MEFNMBCXL9tRl6EEU/3rg8LBSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHN3UVUwd0VKY3YyMUdYb1FSVF9ldUR3c0ZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ZmZmNGEtZjk4NC00YjFmLTliMmIt
M2Q3OTJmYjkwNWVlLzEvTHN3UVUwd0VKY3YyMUdYb1FSVF9ldUR3c0ZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC82ZmZmNGEtZjk4NC00YjFmLTliMmItM2Q3OTJmYjkwNWVl
LzEvTHN3UVUwd0VKY3YyMUdYb1FSVF9ldUR3c0ZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkNTsEznF
gM47+ko6iHO3OcjUXN8YW5NqA7ypb0mxeS8tefvVXmWqX3g2Q9KAs8YFqcaQYCBs
5QLMbq2cbEonJY3wdMHBlyC/TayF0R5C8lHO6weka0Q2hE5uChFn9ZsqXWVRM05I
q6DrOLlvePUpdsM7UBmjmCZJTQogSwfGW9vOU068ZloCw7+6JHX2PRwrJD7kWQfV
IYH229dCnacgABehmLP0gkCakloROi50/Jv+PYB7TkEj7vddxcBYocQRFXreBlB6
ChQUEoEDSj/oVUjX2DAaZN06sTH/vfFKB7rd56J5a7i0xAdR/31fWwt+GxUa8B+N
qIgvP4+txDrxIA==
-----END CERTIFICATE-----
Generated at Wed Jun 11 03:04:00 2025 by rpki-client