Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft
File: LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft (raw, json)
Hash identifier: gC4nZjsHSw+tf36e/dmuVrTbhXGSIGKzydnJ/xQpCO0=
Subject key identifier: E5:C5:A1:07:CA:B4:DD:E2:F6:9E:37:D2:86:E0:05:A9:C8:59:5F:74
Authority key identifier: 2E:73:8C:F3:2E:6E:4F:94:02:20:F3:B8:28:F0:7B:77:E8:13:D0:96
Certificate issuer: /CN=2e738cf32e6e4f940220f3b828f07b77e813d096
Certificate serial: 01974A0CAECCD59541A0FDB556D538C68937
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnOM8y5uT5QCIPO4KPB7d-gT0JY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft
Manifest number: 04CB
Signing time: Sat 07 Jun 2025 11:00:34 +0000
Manifest this update: Sat 07 Jun 2025 11:00:34 +0000
Manifest next update: Sun 08 Jun 2025 11:00:34 +0000
Files and hashes: 1: 1-CqksZEngiad9GJ1laZb9kmUhDs.roa (hash: RFGoumzL1Ot9LozFC8/pBRuEEMi1Nkwj8cBdnCtnZ+Y=)
2: LnOM8y5uT5QCIPO4KPB7d-gT0JY.crl (hash: UPKyrWtFBGl7yFQjrbLBo1msWP0Mz51wiUbDC4ka+00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LnOM8y5uT5QCIPO4KPB7d-gT0JY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:ae:cc:d5:95:41:a0:fd:b5:56:d5:38:c6:89:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e738cf32e6e4f940220f3b828f07b77e813d096
Validity
Not Before: Jun 7 11:00:34 2025 GMT
Not After : Jun 8 11:00:34 2025 GMT
Subject: CN=e5c5a107cab4dde2f69e37d286e005a9c8595f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:28:a4:98:55:a6:9a:d0:5b:c4:67:76:71:5b:
50:94:05:4f:a0:07:f4:1b:d3:08:56:cc:77:df:43:
46:0b:53:31:70:84:c7:51:46:9e:75:7c:34:79:6c:
e1:9e:5c:f5:ea:f6:d8:6a:1a:8f:45:ee:ac:10:78:
ae:8d:b3:7a:15:08:fe:71:61:9b:01:c4:73:db:4a:
d9:41:d0:ac:84:05:ac:a3:8a:f0:df:42:5e:76:04:
fb:4b:c4:16:fe:ac:c0:40:a9:4d:23:49:72:b1:f1:
97:02:d1:ec:1a:16:e7:6d:76:0e:b9:17:bf:f6:cc:
bb:fa:e4:0c:fa:f9:56:cd:f7:51:ba:4c:7a:81:db:
b9:d2:ef:90:a5:60:42:99:af:0e:88:06:3a:34:49:
5a:37:bd:64:5e:79:2d:2e:39:cd:fa:5e:e5:9b:ac:
9b:7a:e2:c2:49:34:9f:04:df:da:42:30:c8:2d:f9:
d2:ec:e1:22:04:a9:09:b4:c4:12:d2:56:78:05:14:
a9:62:3d:39:ea:a4:69:c3:31:c9:95:fc:56:df:03:
7c:77:76:59:17:e1:95:e4:c9:fc:9e:07:43:3d:79:
9d:03:b6:53:ed:05:f6:f0:15:f8:03:86:bf:0f:02:
fe:4c:02:e5:52:0a:98:9f:b0:e8:81:9c:a4:53:ae:
55:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C5:A1:07:CA:B4:DD:E2:F6:9E:37:D2:86:E0:05:A9:C8:59:5F:74
X509v3 Authority Key Identifier:
keyid:2E:73:8C:F3:2E:6E:4F:94:02:20:F3:B8:28:F0:7B:77:E8:13:D0:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnOM8y5uT5QCIPO4KPB7d-gT0JY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17e9a-d3e9-43b1-a2c7-5f65103e6f70/1/LnOM8y5uT5QCIPO4KPB7d-gT0JY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:0e:31:9e:db:5a:59:8d:74:0c:4e:d6:f6:77:40:d7:c2:95:
c5:f8:7c:ec:51:5e:6d:6e:6a:56:d0:8d:69:e8:69:65:65:b5:
26:53:21:26:4e:02:d9:13:09:69:bd:5f:61:26:3f:ff:2b:bf:
83:92:30:3a:df:f4:68:b3:21:22:ff:c4:f6:b2:1d:be:bb:ff:
fc:84:29:ec:40:12:eb:87:2d:c5:df:03:d2:c0:18:90:bc:86:
c2:9b:ea:ce:48:45:65:25:a7:62:b9:66:ba:8b:cd:67:74:28:
a0:2e:4b:45:02:bc:16:66:fa:f1:d7:59:3e:8b:10:fe:06:5c:
6a:af:05:10:d9:4d:1f:1f:1b:b5:83:09:a1:e4:b7:97:e3:bf:
d1:e7:d4:a9:11:4e:af:fe:8e:c0:2b:c0:6d:8c:74:aa:5d:96:
4a:84:2a:5f:b1:87:ee:35:8f:3d:0b:07:a5:65:07:41:b1:be:
21:94:12:8e:0c:16:a3:86:af:e1:cd:ad:39:da:aa:8a:3e:45:
c0:3c:97:c6:08:9d:f0:82:d0:8a:53:89:16:a0:5d:d8:d9:73:
a0:63:77:3d:b2:28:fd:82:20:a3:d2:4f:44:ea:d8:61:e2:46:
0b:b2:5a:16:b6:63:c8:95:43:3b:29:e3:1b:c6:11:9c:31:87:
ea:68:b6:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKDK7M1ZVBoP21VtU4xok3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNzM4Y2YzMmU2ZTRmOTQwMjIwZjNiODI4ZjA3Yjc3ZTgx
M2QwOTYwHhcNMjUwNjA3MTEwMDM0WhcNMjUwNjA4MTEwMDM0WjAzMTEwLwYDVQQD
EyhlNWM1YTEwN2NhYjRkZGUyZjY5ZTM3ZDI4NmUwMDVhOWM4NTk1Zjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiikmFWmmtBbxGd2cVtQlAVPoAf0
G9MIVsx330NGC1MxcITHUUaedXw0eWzhnlz16vbYahqPRe6sEHiujbN6FQj+cWGb
AcRz20rZQdCshAWso4rw30JedgT7S8QW/qzAQKlNI0lysfGXAtHsGhbnbXYOuRe/
9sy7+uQM+vlWzfdRukx6gdu50u+QpWBCma8OiAY6NElaN71kXnktLjnN+l7lm6yb
euLCSTSfBN/aQjDILfnS7OEiBKkJtMQS0lZ4BRSpYj056qRpwzHJlfxW3wN8d3ZZ
F+GV5Mn8ngdDPXmdA7ZT7QX28BX4A4a/DwL+TALlUgqYn7DogZykU65VhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOXFoQfKtN3i9p430obgBanIWV90MB8GA1UdIwQY
MBaAFC5zjPMubk+UAiDzuCjwe3foE9CWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG5PTTh5NXVUNVFDSVBPNEtQQjdkLWdUMEpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9lMTdlOWEtZDNlOS00M2IxLWEyYzct
NWY2NTEwM2U2ZjcwLzEvTG5PTTh5NXVUNVFDSVBPNEtQQjdkLWdUMEpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9lMTdlOWEtZDNlOS00M2IxLWEyYzctNWY2NTEwM2U2Zjcw
LzEvTG5PTTh5NXVUNVFDSVBPNEtQQjdkLWdUMEpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIQ4xntta
WY10DE7W9ndA18KVxfh87FFebW5qVtCNaehpZWW1JlMhJk4C2RMJab1fYSY//yu/
g5IwOt/0aLMhIv/E9rIdvrv//IQp7EAS64ctxd8D0sAYkLyGwpvqzkhFZSWnYrlm
uovNZ3QooC5LRQK8Fmb68ddZPosQ/gZcaq8FENlNHx8btYMJoeS3l+O/0efUqRFO
r/6OwCvAbYx0ql2WSoQqX7GH7jWPPQsHpWUHQbG+IZQSjgwWo4av4c2tOdqqij5F
wDyXxgid8ILQilOJFqBd2NlzoGN3PbIo/YIgo9JPROrYYeJGC7JaFrZjyJVDOynj
G8YRnDGH6mi2HQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:44:54 2025 by rpki-client