Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.mft
File: _ltNUIvcIUFbR1LuvESNSqrGNdk.mft (raw, json)
Hash identifier: BU+iXESl1ZePZhvuwpC7VR0eiMDemVRCv2rkDoRAhUA=
Subject key identifier: 8D:FB:13:CB:A3:25:AC:53:59:94:44:B1:91:42:55:4A:77:6D:57:C6
Authority key identifier: FE:5B:4D:50:8B:DC:21:41:5B:47:52:EE:BC:44:8D:4A:AA:C6:35:D9
Certificate issuer: /CN=fe5b4d508bdc21415b4752eebc448d4aaac635d9
Certificate serial: 0197C98276E0B6AD22906AD3E3205513D4A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ltNUIvcIUFbR1LuvESNSqrGNdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.mft
Manifest number: 3B
Signing time: Wed 02 Jul 2025 05:00:59 +0000
Manifest this update: Wed 02 Jul 2025 05:00:59 +0000
Manifest next update: Thu 03 Jul 2025 05:00:59 +0000
Files and hashes: 1: _ltNUIvcIUFbR1LuvESNSqrGNdk.crl (hash: GLVsA9tDfwSBJZD8X19MDMclJNXKehV+o01gkLU4zFU=)
2: l_Z1ah4Z6CUki_cHx_5BaEWiOxE.roa (hash: fwZNajA2NrVuCxC49gzHtXDb0A0DV7JtszLe3wSG/eE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ltNUIvcIUFbR1LuvESNSqrGNdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:82:76:e0:b6:ad:22:90:6a:d3:e3:20:55:13:d4:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe5b4d508bdc21415b4752eebc448d4aaac635d9
Validity
Not Before: Jul 2 05:00:59 2025 GMT
Not After : Jul 3 05:00:59 2025 GMT
Subject: CN=8dfb13cba325ac53599444b19142554a776d57c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4b:14:13:d2:90:c1:b6:d5:d3:e0:8e:ac:1b:
9f:45:37:b6:18:07:7a:13:c7:43:38:23:9e:e4:04:
dc:5c:a3:db:01:3e:08:35:2d:3f:c4:ea:54:cc:8b:
51:5e:f6:94:70:c8:3a:1b:41:5e:88:c4:02:c2:8f:
b7:85:4f:02:2e:12:89:02:d1:5b:26:e7:1e:dc:ec:
0e:a7:4d:d3:a5:f4:24:b4:04:ce:47:e9:70:3f:81:
39:4d:06:17:19:ad:83:e1:60:05:26:db:67:6e:d5:
1a:1f:45:19:c9:78:f2:13:17:26:b2:cb:4b:7d:94:
21:f3:a3:b4:67:cc:2b:04:e2:3d:76:74:2e:c6:dc:
53:58:7d:81:db:bb:50:21:0a:f0:de:64:72:7f:da:
ab:cd:b3:78:83:66:12:55:c5:2d:13:a4:1d:7d:bd:
71:dd:26:91:7e:df:c7:f5:7b:2f:15:ed:50:78:e9:
8e:b5:f3:c1:e0:50:34:84:d5:04:09:9c:33:0d:9c:
d3:81:42:b0:23:76:70:2a:1f:b9:48:02:cf:9c:fb:
44:c4:9d:43:9a:67:94:cf:85:e3:5d:df:bf:de:85:
28:e1:66:f1:b5:00:da:05:fc:ec:3c:b1:6b:82:1d:
cc:07:f8:fd:aa:ec:6f:21:94:ef:55:bd:4d:37:9a:
ea:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:FB:13:CB:A3:25:AC:53:59:94:44:B1:91:42:55:4A:77:6D:57:C6
X509v3 Authority Key Identifier:
keyid:FE:5B:4D:50:8B:DC:21:41:5B:47:52:EE:BC:44:8D:4A:AA:C6:35:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ltNUIvcIUFbR1LuvESNSqrGNdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c9f7ab-3fa0-471f-bb95-00b4fbb3849d/1/_ltNUIvcIUFbR1LuvESNSqrGNdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:2a:ef:f5:64:d0:1b:a8:bd:85:42:47:eb:6c:55:6b:09:75:
1c:66:ea:1d:1e:93:2c:3c:b5:30:ae:d4:22:86:b7:35:36:06:
db:8e:77:b4:e1:1a:00:da:eb:cf:5f:a7:2d:c4:d1:99:71:d3:
1c:a0:48:1f:0e:ac:9d:d3:47:41:af:d5:ab:d5:3d:3f:91:05:
24:2d:84:e2:95:df:77:4f:a5:eb:e3:3a:f1:aa:2d:dd:65:66:
ae:a5:ff:ee:09:84:bc:69:b3:f8:7a:29:76:90:ee:d2:31:e1:
43:5e:29:44:03:fb:ed:05:34:59:15:05:99:c9:9f:0b:7b:38:
ac:ed:68:67:30:86:02:4a:01:42:7a:5b:bd:28:d9:29:a6:0e:
c5:2c:ed:1c:a6:6b:ef:24:e8:96:fa:08:ed:a3:6f:b5:e1:8a:
7d:96:29:ef:e4:6c:5c:a6:7d:81:3e:33:1a:3a:cc:ac:aa:11:
d2:13:c6:89:27:ea:d2:55:b9:1a:3f:fd:8a:5a:53:9c:f2:cd:
d3:05:56:68:fd:bf:7d:c5:59:20:2c:60:f7:83:9c:01:ba:d2:
94:a7:22:7f:bd:3b:d3:0d:aa:b5:c5:5e:37:3e:4d:3e:05:6f:
d6:32:6c:c8:7f:cb:b1:1b:5a:2d:aa:1a:0b:92:90:ee:d2:c3:
38:e1:ef:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfJgnbgtq0ikGrT4yBVE9SoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNWI0ZDUwOGJkYzIxNDE1YjQ3NTJlZWJjNDQ4ZDRhYWFj
NjM1ZDkwHhcNMjUwNzAyMDUwMDU5WhcNMjUwNzAzMDUwMDU5WjAzMTEwLwYDVQQD
Eyg4ZGZiMTNjYmEzMjVhYzUzNTk5NDQ0YjE5MTQyNTU0YTc3NmQ1N2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0sUE9KQwbbV0+COrBufRTe2GAd6
E8dDOCOe5ATcXKPbAT4INS0/xOpUzItRXvaUcMg6G0FeiMQCwo+3hU8CLhKJAtFb
Juce3OwOp03TpfQktATOR+lwP4E5TQYXGa2D4WAFJttnbtUaH0UZyXjyExcmsstL
fZQh86O0Z8wrBOI9dnQuxtxTWH2B27tQIQrw3mRyf9qrzbN4g2YSVcUtE6Qdfb1x
3SaRft/H9XsvFe1QeOmOtfPB4FA0hNUECZwzDZzTgUKwI3ZwKh+5SALPnPtExJ1D
mmeUz4XjXd+/3oUo4WbxtQDaBfzsPLFrgh3MB/j9quxvIZTvVb1NN5rquwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI37E8ujJaxTWZREsZFCVUp3bVfGMB8GA1UdIwQY
MBaAFP5bTVCL3CFBW0dS7rxEjUqqxjXZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2x0TlVJdmNJVUZiUjFMdXZFU05TcXJHTmRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9jOWY3YWItM2ZhMC00NzFmLWJiOTUt
MDBiNGZiYjM4NDlkLzEvX2x0TlVJdmNJVUZiUjFMdXZFU05TcXJHTmRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9jOWY3YWItM2ZhMC00NzFmLWJiOTUtMDBiNGZiYjM4NDlk
LzEvX2x0TlVJdmNJVUZiUjFMdXZFU05TcXJHTmRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsirv9WTQ
G6i9hUJH62xVawl1HGbqHR6TLDy1MK7UIoa3NTYG2453tOEaANrrz1+nLcTRmXHT
HKBIHw6sndNHQa/Vq9U9P5EFJC2E4pXfd0+l6+M68aot3WVmrqX/7gmEvGmz+Hop
dpDu0jHhQ14pRAP77QU0WRUFmcmfC3s4rO1oZzCGAkoBQnpbvSjZKaYOxSztHKZr
7yTolvoI7aNvteGKfZYp7+RsXKZ9gT4zGjrMrKoR0hPGiSfq0lW5Gj/9ilpTnPLN
0wVWaP2/fcVZICxg94OcAbrSlKcif7070w2qtcVeNz5NPgVv1jJsyH/LsRtaLaoa
C5KQ7tLDOOHvNw==
-----END CERTIFICATE-----
Generated at Wed Jul 2 10:43:02 2025 by rpki-client