Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
File: lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft (raw, json)
Hash identifier: iSY4WW1BGr5QSXAWiCsRTi9YvH8wCHfdXoGyDIF+7Kk=
Subject key identifier: A9:BA:9F:E7:AD:A0:D9:F9:B6:5D:1D:71:27:50:50:FE:E0:18:2A:07
Authority key identifier: 94:BC:3C:DA:C4:64:08:C0:C8:A3:58:17:88:B5:10:D0:F0:4E:9D:1F
Certificate issuer: /CN=94bc3cdac46408c0c8a3581788b510d0f04e9d1f
Certificate serial: 0197488C24D53671D0DE5059E7E78BA6A3CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 04:00:33 +0000
Manifest this update: Sat 07 Jun 2025 04:00:33 +0000
Manifest next update: Sun 08 Jun 2025 04:00:33 +0000
Files and hashes: 1: 8sEeUpZ4L2z7RPtSPsfM7zrXG4M.roa (hash: mpcNRDaaoRvH9rywJlovNltKEUBpKG8cjm1Uf7rVmic=)
2: b0eHpcDmofhiq2yDQv5L8LhktMQ.roa (hash: n+x8ttc272B8eeajhUuy0X0SsSR7O/WsKWjyViKV6hg=)
3: lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl (hash: YhGxtDs0gPxQoyGFfYwgu7ZO+M7IfftnsxmoOLHa1tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:24:d5:36:71:d0:de:50:59:e7:e7:8b:a6:a3:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94bc3cdac46408c0c8a3581788b510d0f04e9d1f
Validity
Not Before: Jun 7 04:00:33 2025 GMT
Not After : Jun 8 04:00:33 2025 GMT
Subject: CN=a9ba9fe7ada0d9f9b65d1d71275050fee0182a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:39:16:a0:6a:11:50:f6:1b:66:cc:0d:3a:d3:
3c:ae:86:55:f6:34:07:b6:8a:bc:f6:97:0c:57:0b:
6e:6f:4c:62:9b:4b:f6:c5:44:da:1d:9a:85:0e:11:
6a:fa:aa:b5:b8:b2:06:aa:f0:7e:1f:b1:27:53:08:
cf:51:f0:51:72:86:29:08:a8:8c:7b:bd:23:c9:2e:
ac:da:7e:e9:ac:ef:ce:f1:a8:07:3b:9a:e6:6b:5f:
72:3f:fc:7f:93:04:54:27:83:b9:ce:8f:5d:e6:bb:
c5:2f:2d:a2:9f:be:fb:da:25:ee:bb:f6:14:8d:6f:
0e:28:c9:f7:c8:8c:af:a4:1a:40:a5:8a:85:4e:77:
86:60:49:20:11:86:67:15:2f:85:54:3b:43:c5:f5:
86:a2:12:3e:df:e8:7b:7a:b5:3a:88:e3:b2:e5:67:
d5:39:6a:fa:f4:97:8b:7b:b3:0a:08:88:c3:e1:21:
fd:02:01:5b:2e:c0:a0:2d:fd:1f:ca:26:d3:29:c6:
be:7f:a5:76:83:4a:d9:45:0b:66:40:63:69:12:aa:
d4:7c:de:be:8a:af:be:cd:bc:3f:75:a3:08:35:d5:
55:40:70:09:d0:bf:d6:8b:bf:6f:c5:27:e3:8d:c2:
f4:26:84:37:9d:c8:96:b2:8b:7e:be:7b:34:14:ff:
3a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:BA:9F:E7:AD:A0:D9:F9:B6:5D:1D:71:27:50:50:FE:E0:18:2A:07
X509v3 Authority Key Identifier:
keyid:94:BC:3C:DA:C4:64:08:C0:C8:A3:58:17:88:B5:10:D0:F0:4E:9D:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLw82sRkCMDIo1gXiLUQ0PBOnR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9df809-a8e8-4e12-a25a-c60472e9f717/1/lLw82sRkCMDIo1gXiLUQ0PBOnR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:4f:0d:30:ed:3d:ee:a7:67:a9:91:a8:f0:0b:41:eb:dc:19:
1a:23:4d:53:c5:41:a4:60:9e:36:54:81:5f:6e:8d:f8:b1:7a:
07:22:87:b0:7c:71:3f:69:1f:7d:04:65:8f:b3:24:72:45:ba:
10:4a:df:6b:5a:13:54:81:13:46:19:ed:71:af:6d:58:ca:9e:
7f:b0:9a:16:3c:21:f6:df:06:8a:c2:bc:e4:75:fa:67:04:ff:
97:6c:0c:c9:5b:39:0c:07:db:bb:ae:20:70:6b:b9:53:43:98:
41:d0:bf:46:8f:27:1e:80:d3:1b:fd:48:60:58:6a:0e:de:33:
43:17:aa:5a:03:40:9c:0d:cf:17:bb:4b:6a:a6:0f:73:c2:72:
c0:93:d4:41:2e:09:e5:de:28:c8:6e:ab:8d:5a:9e:a0:f9:d0:
ce:5f:3f:32:42:a6:3c:80:fe:92:ba:ae:86:f1:b2:3d:bd:a6:
12:b9:5b:a2:72:8a:2a:e3:e5:f1:7a:8b:99:ba:8a:d5:95:87:
88:03:89:9e:1a:eb:30:ff:f2:11:b9:8c:83:c2:5c:ce:ba:bc:
85:6c:f9:65:22:dc:a5:46:27:f8:11:02:5c:eb:26:53:9a:63:
74:11:42:73:0b:88:dc:b9:a4:e5:d8:e6:fc:7c:2c:44:9d:d8:
f2:cf:08:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjCTVNnHQ3lBZ5+eLpqPMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0YmMzY2RhYzQ2NDA4YzBjOGEzNTgxNzg4YjUxMGQwZjA0
ZTlkMWYwHhcNMjUwNjA3MDQwMDMzWhcNMjUwNjA4MDQwMDMzWjAzMTEwLwYDVQQD
EyhhOWJhOWZlN2FkYTBkOWY5YjY1ZDFkNzEyNzUwNTBmZWUwMTgyYTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDkWoGoRUPYbZswNOtM8roZV9jQH
toq89pcMVwtub0xim0v2xUTaHZqFDhFq+qq1uLIGqvB+H7EnUwjPUfBRcoYpCKiM
e70jyS6s2n7prO/O8agHO5rma19yP/x/kwRUJ4O5zo9d5rvFLy2in7772iXuu/YU
jW8OKMn3yIyvpBpApYqFTneGYEkgEYZnFS+FVDtDxfWGohI+3+h7erU6iOOy5WfV
OWr69JeLe7MKCIjD4SH9AgFbLsCgLf0fyibTKca+f6V2g0rZRQtmQGNpEqrUfN6+
iq++zbw/daMINdVVQHAJ0L/Wi79vxSfjjcL0JoQ3nciWsot+vns0FP86XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKm6n+etoNn5tl0dcSdQUP7gGCoHMB8GA1UdIwQY
MBaAFJS8PNrEZAjAyKNYF4i1ENDwTp0fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEx3ODJzUmtDTURJbzFnWGlMVVEwUEJPblI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS85ZGY4MDktYThlOC00ZTEyLWEyNWEt
YzYwNDcyZTlmNzE3LzEvbEx3ODJzUmtDTURJbzFnWGlMVVEwUEJPblI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS85ZGY4MDktYThlOC00ZTEyLWEyNWEtYzYwNDcyZTlmNzE3
LzEvbEx3ODJzUmtDTURJbzFnWGlMVVEwUEJPblI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABE8NMO09
7qdnqZGo8AtB69wZGiNNU8VBpGCeNlSBX26N+LF6ByKHsHxxP2kffQRlj7MkckW6
EErfa1oTVIETRhntca9tWMqef7CaFjwh9t8GisK85HX6ZwT/l2wMyVs5DAfbu64g
cGu5U0OYQdC/Ro8nHoDTG/1IYFhqDt4zQxeqWgNAnA3PF7tLaqYPc8JywJPUQS4J
5d4oyG6rjVqeoPnQzl8/MkKmPID+krquhvGyPb2mErlbonKKKuPl8XqLmbqK1ZWH
iAOJnhrrMP/yEbmMg8Jczrq8hWz5ZSLcpUYn+BECXOsmU5pjdBFCcwuI3Lmk5djm
/HwsRJ3Y8s8Icg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 11:32:22 2025 by rpki-client