Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
File: lmAVV4yUjzG_dKHh__1_o-NGAgY.mft (raw, json)
Hash identifier: KZVV6MXo8G6a5g7bnFqwKvUl4iPOg/lujInsGhceQcc=
Subject key identifier: 97:4E:DC:5F:BD:B2:FB:BE:68:8B:E3:86:BB:09:3A:36:EB:D0:67:82
Authority key identifier: 96:60:15:57:8C:94:8F:31:BF:74:A1:E1:FF:FD:7F:A3:E3:46:02:06
Certificate issuer: /CN=966015578c948f31bf74a1e1fffd7fa3e3460206
Certificate serial: 01974BFB2FC7F60477837A0CAEAC67799A03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
Manifest number: 0C0A
Signing time: Sat 07 Jun 2025 20:00:42 +0000
Manifest this update: Sat 07 Jun 2025 20:00:42 +0000
Manifest next update: Sun 08 Jun 2025 20:00:42 +0000
Files and hashes: 1: OE686EGR1IVKz-bx67_ZsH11lHQ.roa (hash: S5Z4RalwztbreTYazKn4Yw+ySxhuT6+PltCXQ/y03p0=)
2: lmAVV4yUjzG_dKHh__1_o-NGAgY.crl (hash: wX/vXPiuAF+KplDKrZt/pw/WGzwQsoqewDm9ZutYVtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:2f:c7:f6:04:77:83:7a:0c:ae:ac:67:79:9a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=966015578c948f31bf74a1e1fffd7fa3e3460206
Validity
Not Before: Jun 7 20:00:42 2025 GMT
Not After : Jun 8 20:00:42 2025 GMT
Subject: CN=974edc5fbdb2fbbe688be386bb093a36ebd06782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:64:9c:a9:e2:50:22:5e:74:0d:8f:10:e9:d8:
6f:3b:1e:0d:d0:bd:22:ea:d2:ec:04:0a:16:e8:a8:
33:65:90:6b:ad:31:e2:2c:2d:a8:38:19:04:b1:9e:
58:1f:38:ae:30:2a:4b:08:ac:73:cc:33:86:2a:45:
d7:52:17:96:47:cb:08:ec:a3:74:cf:ce:49:6a:95:
0b:ec:86:60:da:a6:05:70:70:61:4a:dd:f4:dd:bc:
2e:62:39:61:e8:91:2d:db:1c:39:86:1d:8f:e0:24:
80:5d:c7:ce:97:bf:db:58:5d:77:cc:d9:d4:dd:77:
51:78:35:7c:83:d0:19:30:13:14:95:9b:a2:8a:67:
91:08:ab:9e:fc:b8:19:9d:6e:29:5d:ec:11:71:6d:
6c:2f:56:0e:7f:de:05:ce:98:83:0c:3b:a8:39:0f:
3b:aa:85:83:3b:61:ec:be:65:d5:9b:b2:e0:eb:f5:
6b:8b:bc:c0:0e:c8:0c:42:6f:be:2a:68:7c:d2:ac:
f3:ee:6b:9f:d7:dd:7d:79:d3:ac:2c:23:3b:e4:5d:
97:a1:0f:73:2f:73:0d:43:78:da:0b:6a:ad:ef:97:
77:1d:23:2e:b4:4d:fa:80:27:81:72:6b:80:ea:26:
2e:4b:bc:3e:e0:d8:35:82:c2:90:5a:c3:cd:f8:da:
3e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:4E:DC:5F:BD:B2:FB:BE:68:8B:E3:86:BB:09:3A:36:EB:D0:67:82
X509v3 Authority Key Identifier:
keyid:96:60:15:57:8C:94:8F:31:BF:74:A1:E1:FF:FD:7F:A3:E3:46:02:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:8f:76:2f:79:26:5f:09:eb:91:9c:47:e7:b9:d2:95:81:4b:
60:ee:2b:d3:81:45:ed:bd:96:02:16:85:f7:62:57:cd:52:13:
93:8a:fd:75:da:37:9b:ca:fe:71:b6:f5:1f:bf:d5:0a:85:4e:
de:66:a9:5a:a4:f5:0f:f2:71:be:2a:ee:3a:21:d8:7f:5d:67:
38:2f:8c:e9:1a:5d:89:e7:dd:2d:f6:30:bb:c6:19:11:a1:5d:
d5:2e:09:5c:5d:9f:27:5b:c2:11:16:81:f9:04:28:a9:08:c6:
d3:28:a1:c7:31:c9:d1:9b:73:90:09:38:f2:8f:35:87:74:77:
28:f0:47:a6:cc:56:39:58:7c:f2:c9:fb:66:2c:b3:31:fe:da:
81:2b:d9:cc:ec:5e:11:ca:a9:5a:e2:dc:98:3d:af:7e:10:08:
06:64:96:f0:42:92:5f:4f:91:20:9d:1a:8e:e7:9b:4e:3a:41:
f1:05:31:35:d4:a3:fa:c2:bf:9c:f7:49:ba:32:70:67:64:a4:
27:f1:f8:eb:82:29:95:52:0b:70:ba:ef:6b:57:74:13:5d:3e:
53:99:88:c4:0d:05:73:2d:e9:c7:07:3e:0a:8f:d6:57:97:f2:
3d:07:71:00:bd:58:59:06:51:ec:4b:5b:9c:a5:d4:ef:1e:6d:
76:1d:fe:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdL+y/H9gR3g3oMrqxneZoDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NjAxNTU3OGM5NDhmMzFiZjc0YTFlMWZmZmQ3ZmEzZTM0
NjAyMDYwHhcNMjUwNjA3MjAwMDQyWhcNMjUwNjA4MjAwMDQyWjAzMTEwLwYDVQQD
Eyg5NzRlZGM1ZmJkYjJmYmJlNjg4YmUzODZiYjA5M2EzNmViZDA2NzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2ScqeJQIl50DY8Q6dhvOx4N0L0i
6tLsBAoW6KgzZZBrrTHiLC2oOBkEsZ5YHziuMCpLCKxzzDOGKkXXUheWR8sI7KN0
z85JapUL7IZg2qYFcHBhSt303bwuYjlh6JEt2xw5hh2P4CSAXcfOl7/bWF13zNnU
3XdReDV8g9AZMBMUlZuiimeRCKue/LgZnW4pXewRcW1sL1YOf94FzpiDDDuoOQ87
qoWDO2HsvmXVm7Lg6/Vri7zADsgMQm++Kmh80qzz7muf1919edOsLCM75F2XoQ9z
L3MNQ3jaC2qt75d3HSMutE36gCeBcmuA6iYuS7w+4Ng1gsKQWsPN+No+ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJdO3F+9svu+aIvjhrsJOjbr0GeCMB8GA1UdIwQY
MBaAFJZgFVeMlI8xv3Sh4f/9f6PjRgIGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbG1BVlY0eVVqekdfZEtIaF9fMV9vLU5HQWdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9iNTAxMTAtMDJiMC00MjM1LTk4NGYt
MmQ4MGNiMjU1NzlhLzEvbG1BVlY0eVVqekdfZEtIaF9fMV9vLU5HQWdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9iNTAxMTAtMDJiMC00MjM1LTk4NGYtMmQ4MGNiMjU1Nzlh
LzEvbG1BVlY0eVVqekdfZEtIaF9fMV9vLU5HQWdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATo92L3km
XwnrkZxH57nSlYFLYO4r04FF7b2WAhaF92JXzVITk4r9ddo3m8r+cbb1H7/VCoVO
3mapWqT1D/JxviruOiHYf11nOC+M6RpdiefdLfYwu8YZEaFd1S4JXF2fJ1vCERaB
+QQoqQjG0yihxzHJ0ZtzkAk48o81h3R3KPBHpsxWOVh88sn7ZiyzMf7agSvZzOxe
EcqpWuLcmD2vfhAIBmSW8EKSX0+RIJ0ajuebTjpB8QUxNdSj+sK/nPdJujJwZ2Sk
J/H464IplVILcLrva1d0E10+U5mIxA0Fcy3pxwc+Co/WV5fyPQdxAL1YWQZR7Etb
nKXU7x5tdh3+DA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:25:45 2025 by rpki-client