Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
File: L4g71OpOPesouJSxkPjgi68G8cw.mft (raw, json)
Hash identifier: 0OERcVuJbPx202R6z3O4LaF2lUPXArKESldwfMKKJLY=
Subject key identifier: 10:89:86:82:B0:92:D5:6D:70:FB:3B:D2:E9:1B:E5:8C:94:71:59:73
Authority key identifier: 2F:88:3B:D4:EA:4E:3D:EB:28:B8:94:B1:90:F8:E0:8B:AF:06:F1:CC
Certificate issuer: /CN=2f883bd4ea4e3deb28b894b190f8e08baf06f1cc
Certificate serial: 01974B8D7C1C97994E1C673FF3F2C2D4E511
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
Manifest number: 0529
Signing time: Sat 07 Jun 2025 18:00:52 +0000
Manifest this update: Sat 07 Jun 2025 18:00:52 +0000
Manifest next update: Sun 08 Jun 2025 18:00:52 +0000
Files and hashes: 1: 72212ELi_xTfEeuyR3CUIU7otcg.roa (hash: 05TY+/FULQvb5YOeymsTjWCBkX5gY/8/tCWpzbv8PI0=)
2: L4g71OpOPesouJSxkPjgi68G8cw.crl (hash: 6NlpimOypy64G42sJ3pKLE2dZXSX5BGr2fp08vQRmhU=)
3: rKcLia0y-4QlTSWH-I5frDT77pU.roa (hash: dvn3H9WJWj8AZKwySDQ1F4qo4Fa0dQjkVokla1Xiyhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:7c:1c:97:99:4e:1c:67:3f:f3:f2:c2:d4:e5:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f883bd4ea4e3deb28b894b190f8e08baf06f1cc
Validity
Not Before: Jun 7 18:00:52 2025 GMT
Not After : Jun 8 18:00:52 2025 GMT
Subject: CN=10898682b092d56d70fb3bd2e91be58c94715973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1a:47:d6:be:09:88:74:20:8d:d4:8a:08:bf:
98:ef:a7:68:83:cd:90:3b:f5:3a:aa:5c:98:25:33:
61:18:80:87:48:f2:82:4f:69:b4:4a:c9:4c:b8:92:
96:e1:8d:eb:0c:bf:44:e7:9a:40:00:32:99:9c:fd:
fb:fa:8a:30:cf:fb:9f:52:c2:46:c5:9f:e3:b1:e8:
12:31:c5:6d:7b:18:eb:6a:8c:8c:d6:fb:df:66:98:
c7:72:61:e7:77:90:88:73:56:3d:f5:9a:b9:e6:db:
4d:f6:b2:b2:05:55:1b:10:16:ad:ff:c2:bc:eb:18:
9b:37:99:22:0c:87:a5:64:61:b5:d0:87:da:6a:72:
5d:cd:48:83:76:15:06:92:3a:99:6f:5b:22:34:d5:
4b:54:61:d8:2a:2b:bb:1c:75:67:23:fe:e3:d1:87:
53:e7:1a:4f:81:48:2e:91:18:a1:c4:c5:4b:27:37:
b7:53:48:4d:03:06:45:d3:e4:ef:cc:63:f9:fc:21:
56:25:4a:3e:75:13:f8:f5:5b:3d:53:e4:7b:77:a8:
31:10:ca:3b:52:7a:ad:2b:ce:54:1a:44:15:53:b5:
ae:25:c7:44:88:5c:45:ff:0b:15:8c:44:cd:4f:d0:
ca:3c:a9:d7:df:bb:21:ef:de:67:f7:4d:4a:1d:56:
cd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:89:86:82:B0:92:D5:6D:70:FB:3B:D2:E9:1B:E5:8C:94:71:59:73
X509v3 Authority Key Identifier:
keyid:2F:88:3B:D4:EA:4E:3D:EB:28:B8:94:B1:90:F8:E0:8B:AF:06:F1:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4g71OpOPesouJSxkPjgi68G8cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b34d6f-66dc-4498-b205-79b6733bc5e6/1/L4g71OpOPesouJSxkPjgi68G8cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:0b:7f:fe:8a:46:c8:03:02:78:2b:85:f9:de:2d:96:a5:f8:
43:0d:a2:5a:b1:44:07:69:1f:37:0d:f0:d8:f9:a2:1f:f0:ee:
89:70:90:d9:10:e5:78:f8:68:45:f8:77:16:73:d4:37:10:31:
1e:bf:24:c9:9b:c4:87:29:f9:c6:10:c7:d7:a6:9f:00:3d:88:
63:a9:dc:6c:f0:5b:49:04:28:39:e1:e0:db:3e:b3:14:90:3d:
78:58:60:1b:78:dc:e8:f3:b1:f2:30:a0:3c:4f:64:d5:14:18:
ed:a1:55:3d:88:01:3e:e9:1e:49:e7:26:6a:a2:42:f2:13:79:
e3:7d:3b:b4:71:b7:85:7a:63:bc:f3:2e:f5:6d:c5:7f:7b:fa:
c6:a8:2d:e3:f5:3e:01:6e:43:d3:9a:03:0a:0f:4a:05:0b:d9:
89:fc:f5:01:1f:12:fe:5d:f8:a2:19:54:a2:a6:fd:aa:b5:b7:
f6:bd:49:ef:47:fc:c7:9b:69:1d:b6:f1:92:b0:1e:ec:32:ad:
91:76:89:bc:45:e7:fb:c5:36:77:f6:1d:f0:7e:e0:7e:fa:16:
e4:4a:68:24:30:e9:06:87:21:6c:0b:6f:1d:a3:7b:7b:ac:b9:
57:47:54:ac:7d:b3:12:b8:39:04:55:eb:48:51:9d:80:84:bf:
f0:70:3b:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLjXwcl5lOHGc/8/LC1OURMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmODgzYmQ0ZWE0ZTNkZWIyOGI4OTRiMTkwZjhlMDhiYWYw
NmYxY2MwHhcNMjUwNjA3MTgwMDUyWhcNMjUwNjA4MTgwMDUyWjAzMTEwLwYDVQQD
EygxMDg5ODY4MmIwOTJkNTZkNzBmYjNiZDJlOTFiZTU4Yzk0NzE1OTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBpH1r4JiHQgjdSKCL+Y76dog82Q
O/U6qlyYJTNhGICHSPKCT2m0SslMuJKW4Y3rDL9E55pAADKZnP37+oowz/ufUsJG
xZ/jsegSMcVtexjraoyM1vvfZpjHcmHnd5CIc1Y99Zq55ttN9rKyBVUbEBat/8K8
6xibN5kiDIelZGG10IfaanJdzUiDdhUGkjqZb1siNNVLVGHYKiu7HHVnI/7j0YdT
5xpPgUgukRihxMVLJze3U0hNAwZF0+TvzGP5/CFWJUo+dRP49Vs9U+R7d6gxEMo7
UnqtK85UGkQVU7WuJcdEiFxF/wsVjETNT9DKPKnX37sh795n901KHVbNbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBCJhoKwktVtcPs70ukb5YyUcVlzMB8GA1UdIwQY
MBaAFC+IO9TqTj3rKLiUsZD44IuvBvHMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDRnNzFPcE9QZXNvdUpTeGtQamdpNjhHOGN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9iMzRkNmYtNjZkYy00NDk4LWIyMDUt
NzliNjczM2JjNWU2LzEvTDRnNzFPcE9QZXNvdUpTeGtQamdpNjhHOGN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9iMzRkNmYtNjZkYy00NDk4LWIyMDUtNzliNjczM2JjNWU2
LzEvTDRnNzFPcE9QZXNvdUpTeGtQamdpNjhHOGN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALQt//opG
yAMCeCuF+d4tlqX4Qw2iWrFEB2kfNw3w2PmiH/DuiXCQ2RDlePhoRfh3FnPUNxAx
Hr8kyZvEhyn5xhDH16afAD2IY6ncbPBbSQQoOeHg2z6zFJA9eFhgG3jc6POx8jCg
PE9k1RQY7aFVPYgBPukeSecmaqJC8hN54307tHG3hXpjvPMu9W3Ff3v6xqgt4/U+
AW5D05oDCg9KBQvZifz1AR8S/l34ohlUoqb9qrW39r1J70f8x5tpHbbxkrAe7DKt
kXaJvEXn+8U2d/Yd8H7gfvoW5EpoJDDpBochbAtvHaN7e6y5V0dUrH2zErg5BFXr
SFGdgIS/8HA7eA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 00:25:06 2025 by rpki-client