Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
File: lTrJeoHHeU5iCA41ueh7QdSxho8.mft (raw, json)
Hash identifier: T6CZhz1fp4fGMpo3RvIn5KyDArzcRPIH/ELq6T3Miec=
Subject key identifier: 88:10:FF:78:D3:60:25:9B:1A:0B:D3:50:C7:4B:22:B9:99:26:AC:FD
Authority key identifier: 95:3A:C9:7A:81:C7:79:4E:62:08:0E:35:B9:E8:7B:41:D4:B1:86:8F
Certificate issuer: /CN=953ac97a81c7794e62080e35b9e87b41d4b1868f
Certificate serial: 019752352F9D1624E174A4450BAAFA6C28F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
Manifest number: 1515
Signing time: Mon 09 Jun 2025 01:01:46 +0000
Manifest this update: Mon 09 Jun 2025 01:01:46 +0000
Manifest next update: Tue 10 Jun 2025 01:01:46 +0000
Files and hashes: 1: D7v-i2Em1A95E4k4o6lvGCl8mqk.roa (hash: xqtDWFhhoatEtwCz7HFHDZQmIK3iuhE2AzGVbExJo/4=)
2: lTrJeoHHeU5iCA41ueh7QdSxho8.crl (hash: mxXWp0KkNB+sEkTu4GjZroS9n4Rpr9fZ5oiyukpOGqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:35:2f:9d:16:24:e1:74:a4:45:0b:aa:fa:6c:28:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=953ac97a81c7794e62080e35b9e87b41d4b1868f
Validity
Not Before: Jun 9 01:01:46 2025 GMT
Not After : Jun 10 01:01:46 2025 GMT
Subject: CN=8810ff78d360259b1a0bd350c74b22b99926acfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ec:ed:62:bd:05:3b:75:46:00:0f:58:0b:9e:
56:78:83:b5:5c:f7:a1:46:0c:f5:30:5f:8a:62:83:
5b:c8:3d:b9:90:e2:50:46:ea:41:63:6b:2b:9e:1d:
81:51:64:9b:04:92:15:67:f1:33:0b:9b:dc:26:2b:
a1:05:0c:55:d3:60:6f:b1:7b:21:da:86:42:60:ff:
14:1f:7d:4b:fe:c1:58:69:55:f4:9a:33:22:cc:e8:
ea:a1:72:68:f1:e6:b2:6a:ec:f4:40:39:9f:06:06:
d1:83:78:68:ee:a2:b6:a9:0c:79:11:d2:46:e6:5d:
14:65:18:e2:5a:04:fd:52:cc:71:bc:33:c0:2f:b2:
7e:68:1c:35:b7:71:8c:2a:a9:64:a5:7f:d8:10:7f:
64:ce:ed:3c:50:6a:c9:4e:f5:39:11:4a:fe:a1:96:
c2:97:ce:90:38:87:dd:32:61:b7:db:d6:f4:51:b1:
96:6b:14:1e:0f:80:85:2d:ea:06:67:cc:54:a9:92:
d6:66:b1:2e:e3:ac:2f:2b:7c:f0:6b:3b:a3:08:75:
51:b8:5b:3a:d3:77:73:28:fd:dc:f8:14:cc:2e:0a:
69:68:15:8a:49:99:2d:c9:3e:43:37:62:d8:eb:83:
fc:7f:59:e2:5b:54:c1:0b:43:42:e6:5f:e1:a9:05:
67:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:10:FF:78:D3:60:25:9B:1A:0B:D3:50:C7:4B:22:B9:99:26:AC:FD
X509v3 Authority Key Identifier:
keyid:95:3A:C9:7A:81:C7:79:4E:62:08:0E:35:B9:E8:7B:41:D4:B1:86:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:8a:13:01:5c:6f:28:8e:da:13:4f:ef:8d:c3:27:3d:dc:0f:
56:53:74:9d:31:63:16:00:c7:4c:27:53:0f:f3:2f:1a:fd:2a:
48:1e:0b:3a:27:b1:d4:b6:6f:6e:46:ae:76:40:64:f1:3f:26:
89:d6:32:dc:3e:8a:ea:16:99:f6:f7:55:de:8a:c7:80:00:c2:
15:76:f5:ec:46:06:75:09:0b:94:50:dc:a8:62:7a:3f:18:4c:
93:b0:83:b6:f2:20:6e:00:6a:47:ac:9a:6c:31:b1:4c:dd:c5:
4e:c8:ea:d3:42:28:d5:e1:1c:66:52:ad:3a:95:dc:e4:94:e0:
91:b2:46:81:6a:f4:d4:45:b5:43:fa:a6:eb:7c:e4:c0:83:04:
14:74:05:c9:0d:31:59:5e:15:a8:7a:be:e6:7e:64:c1:54:e2:
6c:70:80:45:a2:17:63:b8:ec:8d:39:12:1e:75:d5:91:fc:94:
53:ad:e9:26:26:b5:25:fe:42:90:f1:76:6a:a8:49:ae:93:6e:
4c:c8:40:72:1f:53:c6:39:f7:1f:a9:d4:45:80:87:4c:2c:b3:
31:bf:50:ee:f5:4a:df:89:02:01:81:d4:45:84:25:65:45:c5:
84:10:04:d7:d4:4a:6c:a8:00:50:22:8a:61:ca:c9:37:64:66:
57:a6:cf:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdSNS+dFiThdKRFC6r6bCjzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1M2FjOTdhODFjNzc5NGU2MjA4MGUzNWI5ZTg3YjQxZDRi
MTg2OGYwHhcNMjUwNjA5MDEwMTQ2WhcNMjUwNjEwMDEwMTQ2WjAzMTEwLwYDVQQD
Eyg4ODEwZmY3OGQzNjAyNTliMWEwYmQzNTBjNzRiMjJiOTk5MjZhY2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuztYr0FO3VGAA9YC55WeIO1XPeh
Rgz1MF+KYoNbyD25kOJQRupBY2srnh2BUWSbBJIVZ/EzC5vcJiuhBQxV02BvsXsh
2oZCYP8UH31L/sFYaVX0mjMizOjqoXJo8eayauz0QDmfBgbRg3ho7qK2qQx5EdJG
5l0UZRjiWgT9UsxxvDPAL7J+aBw1t3GMKqlkpX/YEH9kzu08UGrJTvU5EUr+oZbC
l86QOIfdMmG329b0UbGWaxQeD4CFLeoGZ8xUqZLWZrEu46wvK3zwazujCHVRuFs6
03dzKP3c+BTMLgppaBWKSZktyT5DN2LY64P8f1niW1TBC0NC5l/hqQVnZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIgQ/3jTYCWbGgvTUMdLIrmZJqz9MB8GA1UdIwQY
MBaAFJU6yXqBx3lOYggONbnoe0HUsYaPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFRySmVvSEhlVTVpQ0E0MXVlaDdRZFN4aG84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9lZGQ5MzktZjE4YS00MTY1LWI3Mjgt
OTFhMzJlZmY2Y2NkLzEvbFRySmVvSEhlVTVpQ0E0MXVlaDdRZFN4aG84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9lZGQ5MzktZjE4YS00MTY1LWI3MjgtOTFhMzJlZmY2Y2Nk
LzEvbFRySmVvSEhlVTVpQ0E0MXVlaDdRZFN4aG84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJIoTAVxv
KI7aE0/vjcMnPdwPVlN0nTFjFgDHTCdTD/MvGv0qSB4LOiex1LZvbkaudkBk8T8m
idYy3D6K6haZ9vdV3orHgADCFXb17EYGdQkLlFDcqGJ6PxhMk7CDtvIgbgBqR6ya
bDGxTN3FTsjq00Io1eEcZlKtOpXc5JTgkbJGgWr01EW1Q/qm63zkwIMEFHQFyQ0x
WV4VqHq+5n5kwVTibHCARaIXY7jsjTkSHnXVkfyUU63pJia1Jf5CkPF2aqhJrpNu
TMhAch9Txjn3H6nURYCHTCyzMb9Q7vVK34kCAYHURYQlZUXFhBAE19RKbKgAUCKK
YcrJN2RmV6bPvQ==
-----END CERTIFICATE-----
Generated at Mon Jun 9 04:01:30 2025 by rpki-client