Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
File: lw69BGmlxpwQmJccqrNv4DLs4xE.mft (raw, json)
Hash identifier: X20y1SpQhJVwOxJgtVx1f7g12EdyHIcj/ck7plGxUjI=
Subject key identifier: 0A:A6:E0:6A:93:D3:FE:91:3B:9A:E0:10:F9:B0:BC:8E:B3:F8:00:AF
Authority key identifier: 97:0E:BD:04:69:A5:C6:9C:10:98:97:1C:AA:B3:6F:E0:32:EC:E3:11
Certificate issuer: /CN=970ebd0469a5c69c1098971caab36fe032ece311
Certificate serial: 01974A7AAC92FC2536CF398790D7F19023AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
Manifest number: 1580
Signing time: Sat 07 Jun 2025 13:00:42 +0000
Manifest this update: Sat 07 Jun 2025 13:00:42 +0000
Manifest next update: Sun 08 Jun 2025 13:00:42 +0000
Files and hashes: 1: aRRMx2LpXrXzb91tfKNbEYwqTy4.roa (hash: u9ed+0pIjkL2kAKw6TtOQkn9W9RbAQ792y7vYcRd71M=)
2: eV3A69o5dbmXhkcbRscNdwCcmUw.roa (hash: 1+RfsWC1iIY4uoQdBg4VWebMYcz8BpqPe7dmv43mNg4=)
3: lw69BGmlxpwQmJccqrNv4DLs4xE.crl (hash: mmQDo4NyJcQx59gvUWMjIW9us6t2XaH0H0mFvIdIcrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:ac:92:fc:25:36:cf:39:87:90:d7:f1:90:23:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=970ebd0469a5c69c1098971caab36fe032ece311
Validity
Not Before: Jun 7 13:00:42 2025 GMT
Not After : Jun 8 13:00:42 2025 GMT
Subject: CN=0aa6e06a93d3fe913b9ae010f9b0bc8eb3f800af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:dd:88:cb:4a:b7:b0:6a:b3:98:50:cb:2f:0d:
a1:fe:3c:3c:19:30:d1:de:9e:bf:2d:cb:7d:cf:91:
80:e6:0e:66:80:58:9d:4b:7e:6d:ca:cb:7e:83:83:
a4:dd:91:d7:5e:82:b0:c1:ad:34:64:7d:ca:69:35:
65:75:63:e6:5c:36:a7:51:3c:09:4c:b8:d6:78:fb:
33:98:a7:8e:16:41:45:8c:cf:9a:68:d7:af:29:f2:
e1:25:37:32:92:66:2c:8b:41:9f:5c:cc:bb:9a:16:
56:67:56:88:58:4b:5d:fe:c6:02:7f:a3:18:c0:df:
2f:41:e0:5e:5e:00:72:da:fd:fc:13:13:57:08:05:
10:e2:f3:f1:1d:70:3a:1f:fc:45:3b:a8:3c:95:af:
d2:c1:9b:6e:2f:d4:f8:8e:b5:e4:68:eb:08:f6:c2:
e4:cb:2e:35:83:8c:07:12:bd:f3:26:34:a0:cd:04:
3b:f7:77:d4:28:56:8f:bb:b1:7a:1d:78:3d:70:ca:
44:88:49:19:b1:d4:33:0d:27:58:e6:c8:39:ad:2d:
ec:11:85:ca:da:da:5e:f3:fa:93:79:43:ac:05:79:
f2:0d:94:e2:38:b8:af:4b:75:79:20:ba:0c:93:e6:
9b:db:2e:df:f2:a4:42:0f:43:13:60:72:8e:c7:26:
81:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A6:E0:6A:93:D3:FE:91:3B:9A:E0:10:F9:B0:BC:8E:B3:F8:00:AF
X509v3 Authority Key Identifier:
keyid:97:0E:BD:04:69:A5:C6:9C:10:98:97:1C:AA:B3:6F:E0:32:EC:E3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:85:a9:0c:bb:06:73:43:86:34:cf:ef:ce:8b:30:2e:e0:35:
7c:b6:d7:d2:cc:b3:e1:33:ec:a2:7f:a4:6a:db:5b:ba:6b:26:
08:b7:e5:ee:41:ee:e1:30:28:4f:c0:ef:e0:54:e0:dd:39:c2:
82:bd:04:22:60:61:70:cc:ea:c1:a8:de:87:50:a5:e6:c2:56:
33:8e:8b:5e:09:93:8f:2c:bd:bb:d4:85:81:b6:7b:c8:2e:3e:
92:30:e6:06:9f:b6:58:c3:cb:08:7b:38:f8:c9:0f:55:a5:30:
09:4d:c7:6a:3f:e7:5d:ea:f1:4b:a8:f3:c3:a9:be:9a:c4:b3:
56:e3:6c:3e:27:e5:15:df:30:e8:3d:4e:29:22:29:cc:29:6b:
69:e8:7c:53:4f:1a:06:c6:8c:b5:ae:49:92:83:f7:cb:60:e0:
39:e3:88:94:e5:67:a7:9f:57:6e:bd:bb:a5:29:7b:6c:07:39:
ec:1e:51:d6:75:61:e3:6a:f0:36:65:ac:43:7d:ca:af:13:b9:
ae:29:41:85:94:c2:1c:80:35:80:c0:ed:5b:b0:99:ea:4e:31:
68:20:c7:6a:94:ea:87:f5:ef:77:1f:7d:0b:1c:05:15:fb:f1:
ca:e9:39:d3:59:b3:4d:d7:9e:b4:fe:cb:71:9e:5a:3e:69:32:
d1:3e:57:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKeqyS/CU2zzmHkNfxkCOrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MGViZDA0NjlhNWM2OWMxMDk4OTcxY2FhYjM2ZmUwMzJl
Y2UzMTEwHhcNMjUwNjA3MTMwMDQyWhcNMjUwNjA4MTMwMDQyWjAzMTEwLwYDVQQD
EygwYWE2ZTA2YTkzZDNmZTkxM2I5YWUwMTBmOWIwYmM4ZWIzZjgwMGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw92Iy0q3sGqzmFDLLw2h/jw8GTDR
3p6/Lct9z5GA5g5mgFidS35tyst+g4Ok3ZHXXoKwwa00ZH3KaTVldWPmXDanUTwJ
TLjWePszmKeOFkFFjM+aaNevKfLhJTcykmYsi0GfXMy7mhZWZ1aIWEtd/sYCf6MY
wN8vQeBeXgBy2v38ExNXCAUQ4vPxHXA6H/xFO6g8la/SwZtuL9T4jrXkaOsI9sLk
yy41g4wHEr3zJjSgzQQ793fUKFaPu7F6HXg9cMpEiEkZsdQzDSdY5sg5rS3sEYXK
2tpe8/qTeUOsBXnyDZTiOLivS3V5ILoMk+ab2y7f8qRCD0MTYHKOxyaBwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAqm4GqT0/6RO5rgEPmwvI6z+ACvMB8GA1UdIwQY
MBaAFJcOvQRppcacEJiXHKqzb+Ay7OMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHc2OUJHbWx4cHdRbUpjY3FyTnY0RExzNHhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS82MjAwMWEtYTMxMy00ZTMzLWJiMDQt
OTE0YjRiMzRmOTgxLzEvbHc2OUJHbWx4cHdRbUpjY3FyTnY0RExzNHhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS82MjAwMWEtYTMxMy00ZTMzLWJiMDQtOTE0YjRiMzRmOTgx
LzEvbHc2OUJHbWx4cHdRbUpjY3FyTnY0RExzNHhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALoWpDLsG
c0OGNM/vzoswLuA1fLbX0syz4TPson+kattbumsmCLfl7kHu4TAoT8Dv4FTg3TnC
gr0EImBhcMzqwajeh1Cl5sJWM46LXgmTjyy9u9SFgbZ7yC4+kjDmBp+2WMPLCHs4
+MkPVaUwCU3Haj/nXerxS6jzw6m+msSzVuNsPiflFd8w6D1OKSIpzClraeh8U08a
BsaMta5JkoP3y2DgOeOIlOVnp59Xbr27pSl7bAc57B5R1nVh42rwNmWsQ33KrxO5
rilBhZTCHIA1gMDtW7CZ6k4xaCDHapTqh/Xvdx99CxwFFfvxyuk501mzTdeetP7L
cZ5aPmky0T5X9w==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:21:17 2025 by rpki-client