Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
File: LoOL9dPe_8At-hhOTw6FEVNeUX0.mft (raw, json)
Hash identifier: 3CMYqTJgVzanqdwMOb8RTr8GXIOGa7eE7E1SuAM6j00=
Subject key identifier: 0D:92:B3:D7:D8:CC:C2:9C:59:F0:E1:83:E7:FE:B6:FE:FA:FD:30:F2
Authority key identifier: 2E:83:8B:F5:D3:DE:FF:C0:2D:FA:18:4E:4F:0E:85:11:53:5E:51:7D
Certificate issuer: /CN=2e838bf5d3deffc02dfa184e4f0e8511535e517d
Certificate serial: 0197481E365F39C5EF038C9649771196E1CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
Manifest number: 0561
Signing time: Sat 07 Jun 2025 02:00:28 +0000
Manifest this update: Sat 07 Jun 2025 02:00:28 +0000
Manifest next update: Sun 08 Jun 2025 02:00:28 +0000
Files and hashes: 1: LoOL9dPe_8At-hhOTw6FEVNeUX0.crl (hash: oxUEAgd8Q1MdzGV8uHIktC83E0rZKz+gnzOd+xTcBSM=)
2: S8Gv615Ih2EECVB1a2b3J3u_PZw.roa (hash: QLn7xaZ0/yy3B92jWZmiyfhzxbYSpkw1Q0HqcssnojQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:36:5f:39:c5:ef:03:8c:96:49:77:11:96:e1:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e838bf5d3deffc02dfa184e4f0e8511535e517d
Validity
Not Before: Jun 7 02:00:28 2025 GMT
Not After : Jun 8 02:00:28 2025 GMT
Subject: CN=0d92b3d7d8ccc29c59f0e183e7feb6fefafd30f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:26:f3:ed:52:98:cf:be:cb:9e:52:d2:40:53:
23:c3:c8:0b:75:e2:74:4d:a4:1d:54:be:7b:b2:a2:
cc:db:94:ed:1a:31:8a:16:a8:7b:c0:31:d6:f8:89:
f1:f0:fa:8f:1b:e8:54:77:4b:d2:b4:9f:ff:2c:49:
d7:5e:5d:c7:48:c9:ac:fb:79:51:b7:bd:b1:60:cf:
6b:98:ef:29:0c:ab:c6:89:25:e7:e8:95:30:c7:d5:
0d:77:64:66:4d:41:73:87:a2:5c:5c:70:84:38:1e:
c1:d7:b6:69:fc:67:17:7d:d3:66:5b:43:30:77:8d:
23:51:65:3d:e3:11:72:18:4b:55:46:f0:03:a6:92:
09:ac:cd:dd:89:10:91:a2:37:a0:d1:94:3d:2e:76:
70:6a:e2:ed:9f:f3:a5:39:5c:08:92:b9:f9:07:6c:
01:9f:81:b2:bd:dd:24:4f:2e:a6:4e:98:04:0c:ec:
6e:9c:7a:93:64:1e:48:4b:0f:1a:cb:d9:48:a8:0c:
f3:29:3a:76:2c:10:47:e4:32:77:a6:c4:5c:c1:66:
7c:5e:a8:6c:e9:bc:73:09:cb:78:7d:ea:ba:99:51:
0a:28:3b:d7:4a:48:a4:18:6c:7d:49:07:d9:72:12:
f2:58:24:ba:10:f9:20:52:c2:d0:11:f2:24:bc:de:
ea:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:92:B3:D7:D8:CC:C2:9C:59:F0:E1:83:E7:FE:B6:FE:FA:FD:30:F2
X509v3 Authority Key Identifier:
keyid:2E:83:8B:F5:D3:DE:FF:C0:2D:FA:18:4E:4F:0E:85:11:53:5E:51:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoOL9dPe_8At-hhOTw6FEVNeUX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c44389-81b5-455c-85ac-4cd80308171a/1/LoOL9dPe_8At-hhOTw6FEVNeUX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:9f:0e:dd:8b:27:8d:a7:53:53:23:b4:eb:bf:df:cc:84:65:
23:b9:b8:02:df:d6:5c:6a:78:5d:71:0f:86:1a:31:e8:7f:79:
bd:8e:d4:ed:8e:bd:2e:df:84:76:c4:17:c8:0e:fc:61:70:53:
d1:1a:9d:b6:89:40:9c:c7:7e:64:fc:81:e9:97:b1:ef:86:75:
6e:0a:c1:e9:65:2d:cc:db:1d:ec:cd:62:bf:18:ee:72:d5:bc:
68:72:1a:97:82:63:6d:d2:d8:1a:3e:bd:27:a8:04:84:b1:2d:
8c:0a:1a:19:aa:e0:aa:81:5e:b1:2e:a1:8d:cb:54:37:a4:9a:
8c:b4:56:54:e4:bc:bc:10:53:10:c7:33:2c:e7:e9:24:71:07:
25:59:ec:ba:10:b3:d0:6a:ee:9d:a8:30:12:84:57:ab:ff:aa:
07:c3:7b:4f:28:60:53:47:aa:75:1c:00:98:51:15:05:4e:69:
40:e8:d7:a8:a4:4f:c8:df:6a:2a:79:ef:1b:42:64:55:27:51:
ca:d6:33:f1:06:c3:6d:42:ae:66:91:7f:18:ab:d0:f3:8d:1b:
7d:a3:26:95:35:21:8a:ce:d8:c2:87:dc:37:07:76:58:bd:8f:
ab:4a:e5:4f:d8:55:69:88:f0:df:66:46:58:30:a4:cb:59:94:
7a:af:2f:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIHjZfOcXvA4yWSXcRluHNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlODM4YmY1ZDNkZWZmYzAyZGZhMTg0ZTRmMGU4NTExNTM1
ZTUxN2QwHhcNMjUwNjA3MDIwMDI4WhcNMjUwNjA4MDIwMDI4WjAzMTEwLwYDVQQD
EygwZDkyYjNkN2Q4Y2NjMjljNTlmMGUxODNlN2ZlYjZmZWZhZmQzMGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCbz7VKYz77LnlLSQFMjw8gLdeJ0
TaQdVL57sqLM25TtGjGKFqh7wDHW+Inx8PqPG+hUd0vStJ//LEnXXl3HSMms+3lR
t72xYM9rmO8pDKvGiSXn6JUwx9UNd2RmTUFzh6JcXHCEOB7B17Zp/GcXfdNmW0Mw
d40jUWU94xFyGEtVRvADppIJrM3diRCRojeg0ZQ9LnZwauLtn/OlOVwIkrn5B2wB
n4Gyvd0kTy6mTpgEDOxunHqTZB5ISw8ay9lIqAzzKTp2LBBH5DJ3psRcwWZ8Xqhs
6bxzCct4feq6mVEKKDvXSkikGGx9SQfZchLyWCS6EPkgUsLQEfIkvN7qCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA2Ss9fYzMKcWfDhg+f+tv76/TDyMB8GA1UdIwQY
MBaAFC6Di/XT3v/ALfoYTk8OhRFTXlF9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG9PTDlkUGVfOEF0LWhoT1R3NkZFVk5lVVgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9jNDQzODktODFiNS00NTVjLTg1YWMt
NGNkODAzMDgxNzFhLzEvTG9PTDlkUGVfOEF0LWhoT1R3NkZFVk5lVVgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9jNDQzODktODFiNS00NTVjLTg1YWMtNGNkODAzMDgxNzFh
LzEvTG9PTDlkUGVfOEF0LWhoT1R3NkZFVk5lVVgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX58O3Ysn
jadTUyO067/fzIRlI7m4At/WXGp4XXEPhhox6H95vY7U7Y69Lt+EdsQXyA78YXBT
0RqdtolAnMd+ZPyB6Zex74Z1bgrB6WUtzNsd7M1ivxjuctW8aHIal4JjbdLYGj69
J6gEhLEtjAoaGargqoFesS6hjctUN6SajLRWVOS8vBBTEMczLOfpJHEHJVnsuhCz
0GrunagwEoRXq/+qB8N7TyhgU0eqdRwAmFEVBU5pQOjXqKRPyN9qKnnvG0JkVSdR
ytYz8QbDbUKuZpF/GKvQ840bfaMmlTUhis7YwofcNwd2WL2Pq0rlT9hVaYjw32ZG
WDCky1mUeq8v1A==
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:13:29 2025 by rpki-client