Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft
File: lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft (raw, json)
Hash identifier: Oqy4AWeb7AiF9H3f+vpqPEEFxowfIMJK8f62hEWA13Y=
Subject key identifier: 8E:62:5D:5A:B8:0B:C5:2F:1A:90:5F:FE:A5:CF:95:5F:36:D3:BB:80
Authority key identifier: 96:B8:12:1D:55:6D:F4:53:45:65:53:DC:B4:5C:41:43:F4:CD:D2:13
Certificate issuer: /CN=96b8121d556df453456553dcb45c4143f4cdd213
Certificate serial: 01974AE88F78F056488397B7D4F7A0299EA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft
Manifest number: 07FD
Signing time: Sat 07 Jun 2025 15:00:44 +0000
Manifest this update: Sat 07 Jun 2025 15:00:44 +0000
Manifest next update: Sun 08 Jun 2025 15:00:44 +0000
Files and hashes: 1: lrgSHVVt9FNFZVPctFxBQ_TN0hM.crl (hash: rFJu/Ps1opwtrbdbiuIVxDcA8jSq5XrQGIH9RBurjlk=)
2: qP3YU_S4LUHGi-PUyOS9YdXOrOg.roa (hash: 86gRYjmoaW5iHjfh3rXQG4yuY8yHQt9SBONVBj8bSuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:8f:78:f0:56:48:83:97:b7:d4:f7:a0:29:9e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96b8121d556df453456553dcb45c4143f4cdd213
Validity
Not Before: Jun 7 15:00:44 2025 GMT
Not After : Jun 8 15:00:44 2025 GMT
Subject: CN=8e625d5ab80bc52f1a905ffea5cf955f36d3bb80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4c:28:24:ca:8e:1f:ba:dd:a8:37:c0:e2:3b:
76:82:56:b1:61:9f:ce:d0:33:00:61:ca:4a:6d:82:
b8:1e:35:d2:62:a6:b1:9c:4c:b6:9a:44:05:58:e9:
4e:81:e1:e7:cb:e0:b5:2b:7e:22:a8:36:a4:7a:19:
b5:86:b3:19:ad:26:91:7b:8e:cf:9f:18:2b:dc:2f:
be:8a:35:57:c0:7c:ab:f4:a4:12:65:d3:a9:aa:51:
18:27:66:c2:8d:7f:de:38:99:d8:42:72:a3:8d:37:
3d:02:f7:ff:33:ca:8f:77:5f:5a:1e:64:bb:c0:88:
bd:5e:16:08:cc:c0:ca:fa:13:2e:f2:f8:a1:0a:5d:
26:78:b9:ef:2a:90:e7:6c:d5:5d:72:1f:2f:42:9e:
c4:c0:69:96:0d:bb:bb:a5:d4:66:13:b3:f2:bc:21:
86:3b:cb:44:93:e8:4f:9e:25:90:fb:16:21:e7:bf:
d0:b3:cb:83:88:8f:ce:09:35:ce:94:28:38:5c:a9:
99:e8:7f:82:77:57:f1:c7:ee:f0:5e:92:34:7a:7e:
6c:34:54:6b:2e:4b:47:c7:cd:50:8a:6f:5f:cc:21:
f4:4b:54:c8:8f:bb:e6:8b:55:b1:46:db:d8:9e:9e:
ce:b1:6e:b3:08:05:43:10:39:7e:b0:de:6b:97:22:
60:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:62:5D:5A:B8:0B:C5:2F:1A:90:5F:FE:A5:CF:95:5F:36:D3:BB:80
X509v3 Authority Key Identifier:
keyid:96:B8:12:1D:55:6D:F4:53:45:65:53:DC:B4:5C:41:43:F4:CD:D2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:28:cf:2c:2e:5f:c3:ca:5f:51:5c:b1:12:4a:00:9e:26:88:
b7:1d:e1:f5:4f:43:18:8e:92:e9:58:25:1a:1b:ef:a0:a9:78:
f0:1b:58:56:88:98:94:2a:be:b5:f2:24:5f:ac:63:dc:95:91:
64:9b:4e:d0:8b:7b:65:b3:07:34:84:ee:2d:04:97:00:80:c7:
fe:a8:a4:ba:c8:fd:34:b2:11:34:72:14:1c:37:64:67:7b:d6:
47:8b:45:75:be:a3:e0:c4:8e:b0:84:75:4b:79:c8:6e:65:67:
01:64:8a:27:a7:fd:4b:f5:36:47:7f:af:e1:26:50:b2:78:a2:
71:66:cb:59:87:c1:4f:bf:9e:f1:a5:54:98:7c:72:2f:b0:0d:
51:09:64:d0:ac:ab:b2:e7:df:26:ab:4e:1b:b7:c1:e4:18:29:
a7:ad:78:79:3c:65:d9:67:5f:f5:52:98:c5:ec:90:13:12:fe:
e9:51:d1:93:41:79:ad:f5:cf:46:84:d2:fe:33:01:ef:75:46:
85:73:35:e6:57:0c:a3:2e:76:c5:60:07:b0:d1:41:86:ca:a2:
6a:5f:82:68:73:1b:a8:46:30:2e:c5:24:26:f8:51:f2:c9:bb:
86:c5:c1:93:36:2a:8e:06:5d:d5:92:75:f8:86:00:27:45:a8:
4b:9e:cf:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdK6I948FZIg5e31PegKZ6mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2YjgxMjFkNTU2ZGY0NTM0NTY1NTNkY2I0NWM0MTQzZjRj
ZGQyMTMwHhcNMjUwNjA3MTUwMDQ0WhcNMjUwNjA4MTUwMDQ0WjAzMTEwLwYDVQQD
Eyg4ZTYyNWQ1YWI4MGJjNTJmMWE5MDVmZmVhNWNmOTU1ZjM2ZDNiYjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0woJMqOH7rdqDfA4jt2glaxYZ/O
0DMAYcpKbYK4HjXSYqaxnEy2mkQFWOlOgeHny+C1K34iqDakehm1hrMZrSaRe47P
nxgr3C++ijVXwHyr9KQSZdOpqlEYJ2bCjX/eOJnYQnKjjTc9Avf/M8qPd19aHmS7
wIi9XhYIzMDK+hMu8vihCl0meLnvKpDnbNVdch8vQp7EwGmWDbu7pdRmE7PyvCGG
O8tEk+hPniWQ+xYh57/Qs8uDiI/OCTXOlCg4XKmZ6H+Cd1fxx+7wXpI0en5sNFRr
LktHx81Qim9fzCH0S1TIj7vmi1WxRtvYnp7OsW6zCAVDEDl+sN5rlyJgQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5iXVq4C8UvGpBf/qXPlV8207uAMB8GA1UdIwQY
MBaAFJa4Eh1VbfRTRWVT3LRcQUP0zdITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHJnU0hWVnQ5Rk5GWlZQY3RGeEJRX1ROMGhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9kNjY1ZTYtZjk1ZC00MzQ3LTg1NjUt
ZDRmNTMxN2M1ODMwLzEvbHJnU0hWVnQ5Rk5GWlZQY3RGeEJRX1ROMGhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9kNjY1ZTYtZjk1ZC00MzQ3LTg1NjUtZDRmNTMxN2M1ODMw
LzEvbHJnU0hWVnQ5Rk5GWlZQY3RGeEJRX1ROMGhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfSjPLC5f
w8pfUVyxEkoAniaItx3h9U9DGI6S6VglGhvvoKl48BtYVoiYlCq+tfIkX6xj3JWR
ZJtO0It7ZbMHNITuLQSXAIDH/qikusj9NLIRNHIUHDdkZ3vWR4tFdb6j4MSOsIR1
S3nIbmVnAWSKJ6f9S/U2R3+v4SZQsniicWbLWYfBT7+e8aVUmHxyL7ANUQlk0Kyr
suffJqtOG7fB5Bgpp614eTxl2Wdf9VKYxeyQExL+6VHRk0F5rfXPRoTS/jMB73VG
hXM15lcMoy52xWAHsNFBhsqial+CaHMbqEYwLsUkJvhR8sm7hsXBkzYqjgZd1ZJ1
+IYAJ0WoS57PlA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 00:47:16 2025 by rpki-client