Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.mft
File: LtxXg3JdWVAZYqostbWQxCtX314.mft (raw, json)
Hash identifier: +JHlLeLy4kAzDiu+90GFRChggAKY1tJELcFWJoG0S7w=
Subject key identifier: 83:5D:95:2C:78:1B:2C:5A:9B:B8:CD:FC:AC:CC:82:00:13:9F:3C:6B
Authority key identifier: 2E:DC:57:83:72:5D:59:50:19:62:AA:2C:B5:B5:90:C4:2B:57:DF:5E
Certificate issuer: /CN=2edc5783725d59501962aa2cb5b590c42b57df5e
Certificate serial: 01974B8D4C4F2D8593BC0DAEC3FFFC55D4E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LtxXg3JdWVAZYqostbWQxCtX314.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.mft
Manifest number: 12C8
Signing time: Sat 07 Jun 2025 18:00:40 +0000
Manifest this update: Sat 07 Jun 2025 18:00:40 +0000
Manifest next update: Sun 08 Jun 2025 18:00:40 +0000
Files and hashes: 1: LtxXg3JdWVAZYqostbWQxCtX314.crl (hash: pYjCvbl9eRD42+/HtO8IdcMROuumtFiqUwkHKF+Iv1U=)
2: r9FlEVdK2kxGPhNPo_-PFZXz5Hg.roa (hash: /9b7HSJW7nIal7/NVxztFoZrvte6gjhfTeD0u5Uqs6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.mft
rsync://rpki.ripe.net/repository/DEFAULT/LtxXg3JdWVAZYqostbWQxCtX314.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:4c:4f:2d:85:93:bc:0d:ae:c3:ff:fc:55:d4:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2edc5783725d59501962aa2cb5b590c42b57df5e
Validity
Not Before: Jun 7 18:00:40 2025 GMT
Not After : Jun 8 18:00:40 2025 GMT
Subject: CN=835d952c781b2c5a9bb8cdfcaccc8200139f3c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:dd:0f:39:ba:be:a1:4d:6f:d7:2e:b9:db:78:
b7:f7:da:5b:7e:28:61:95:95:fa:f1:c0:8e:c6:24:
14:93:95:c0:29:4e:8b:be:11:ed:77:96:72:37:6f:
df:3d:52:e0:12:7c:26:d1:41:b9:82:61:2d:e7:16:
87:ea:a9:dd:cd:97:9e:0d:21:f3:4b:63:dd:7e:fc:
f1:bc:f8:dc:fa:8c:33:d6:9d:6b:a1:1c:2f:1c:5b:
c7:c6:8a:2a:21:f0:00:b6:f9:33:99:bb:c8:2c:c8:
8e:c6:24:2f:6c:ef:04:86:58:92:c6:20:1e:21:9b:
6c:12:8f:ff:6d:76:b1:f6:9c:71:e7:0c:d2:27:e8:
ef:99:61:45:5e:fb:fe:a7:ae:dc:c7:10:12:89:ee:
a3:88:8b:cb:ab:6e:6f:ba:bb:a0:12:c9:94:38:0f:
57:42:f3:a2:55:10:2b:47:00:fc:15:c8:74:3d:cd:
5a:a1:83:44:25:00:96:96:f6:2e:0e:0f:27:0d:48:
b4:b0:ce:cf:4c:24:ad:58:5a:15:7c:37:f3:31:e6:
ba:5b:2a:08:1f:15:84:63:59:5c:e2:37:9c:bc:d4:
36:d7:0f:7c:7c:2c:b2:6f:89:c4:38:c4:38:88:68:
3c:ff:01:7d:09:f1:39:92:d2:ab:68:d7:19:d2:6a:
b0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5D:95:2C:78:1B:2C:5A:9B:B8:CD:FC:AC:CC:82:00:13:9F:3C:6B
X509v3 Authority Key Identifier:
keyid:2E:DC:57:83:72:5D:59:50:19:62:AA:2C:B5:B5:90:C4:2B:57:DF:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LtxXg3JdWVAZYqostbWQxCtX314.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e477bd-ac8b-455d-bc7f-eddac0c7a1f2/1/LtxXg3JdWVAZYqostbWQxCtX314.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:a0:54:da:8d:79:be:a2:a5:82:20:ef:42:9d:ca:37:c2:f5:
8e:07:91:1c:c5:82:32:b8:8c:89:45:95:0e:e4:38:10:90:27:
f0:dd:ab:3b:84:ca:6a:61:cd:0a:13:7b:a5:a7:39:6c:92:be:
89:90:89:27:4e:51:2f:88:e7:2a:5f:8e:93:3c:ea:ef:13:7a:
cc:ec:b1:ff:78:c7:63:8d:6d:09:1a:1c:29:15:ea:0d:1d:d3:
b6:13:31:90:e0:5f:18:ec:24:8c:6d:43:bd:8e:f7:40:78:a8:
4c:22:13:3e:5b:57:cf:74:ef:cf:fc:e6:e0:aa:d3:88:e6:4a:
08:1a:96:15:c2:78:ee:d4:ec:97:e2:47:1a:53:c4:48:14:db:
04:81:1b:94:5c:69:45:fe:e5:3f:04:08:48:e7:a2:97:be:70:
41:9b:81:bc:a3:35:4c:4d:cc:d2:ad:7e:44:df:c2:1f:a4:d3:
f7:28:9f:52:5c:df:e0:d8:b1:49:e9:8e:a1:2e:8a:f9:24:d7:
bd:37:57:63:1a:af:74:74:88:28:f8:38:e7:b2:14:1b:10:69:
46:35:28:16:ff:eb:9b:5a:51:90:92:18:b2:d0:65:6e:ef:a2:
9c:fc:92:ae:6a:00:29:71:26:6b:cf:0c:a2:4f:95:be:95:ce:
68:a6:21:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLjUxPLYWTvA2uw//8VdTjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZGM1NzgzNzI1ZDU5NTAxOTYyYWEyY2I1YjU5MGM0MmI1
N2RmNWUwHhcNMjUwNjA3MTgwMDQwWhcNMjUwNjA4MTgwMDQwWjAzMTEwLwYDVQQD
Eyg4MzVkOTUyYzc4MWIyYzVhOWJiOGNkZmNhY2NjODIwMDEzOWYzYzZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApN0PObq+oU1v1y6523i399pbfihh
lZX68cCOxiQUk5XAKU6LvhHtd5ZyN2/fPVLgEnwm0UG5gmEt5xaH6qndzZeeDSHz
S2PdfvzxvPjc+owz1p1roRwvHFvHxooqIfAAtvkzmbvILMiOxiQvbO8EhliSxiAe
IZtsEo//bXax9pxx5wzSJ+jvmWFFXvv+p67cxxASie6jiIvLq25vurugEsmUOA9X
QvOiVRArRwD8Fch0Pc1aoYNEJQCWlvYuDg8nDUi0sM7PTCStWFoVfDfzMea6WyoI
HxWEY1lc4jecvNQ21w98fCyyb4nEOMQ4iGg8/wF9CfE5ktKraNcZ0mqwvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFINdlSx4Gyxam7jN/KzMggATnzxrMB8GA1UdIwQY
MBaAFC7cV4NyXVlQGWKqLLW1kMQrV99eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHR4WGczSmRXVkFaWXFvc3RiV1F4Q3RYMzE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9lNDc3YmQtYWM4Yi00NTVkLWJjN2Yt
ZWRkYWMwYzdhMWYyLzEvTHR4WGczSmRXVkFaWXFvc3RiV1F4Q3RYMzE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9lNDc3YmQtYWM4Yi00NTVkLWJjN2YtZWRkYWMwYzdhMWYy
LzEvTHR4WGczSmRXVkFaWXFvc3RiV1F4Q3RYMzE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABaBU2o15
vqKlgiDvQp3KN8L1jgeRHMWCMriMiUWVDuQ4EJAn8N2rO4TKamHNChN7pac5bJK+
iZCJJ05RL4jnKl+Okzzq7xN6zOyx/3jHY41tCRocKRXqDR3TthMxkOBfGOwkjG1D
vY73QHioTCITPltXz3Tvz/zm4KrTiOZKCBqWFcJ47tTsl+JHGlPESBTbBIEblFxp
Rf7lPwQISOeil75wQZuBvKM1TE3M0q1+RN/CH6TT9yifUlzf4NixSemOoS6K+STX
vTdXYxqvdHSIKPg457IUGxBpRjUoFv/rm1pRkJIYstBlbu+inPySrmoAKXEma88M
ok+VvpXOaKYhEQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 01:37:56 2025 by rpki-client