Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft
File: lDbagFrtoKOlD_xmJR3L-0Lw814.mft (raw, json)
Hash identifier: so2b2PXf081wycXm1zCLo72W+uH+DlTWPGTHjtqBS6k=
Subject key identifier: BF:0C:4B:2B:25:65:51:AF:A9:D8:BC:77:D2:AF:34:BA:1F:0A:5B:23
Authority key identifier: 94:36:DA:80:5A:ED:A0:A3:A5:0F:FC:66:25:1D:CB:FB:42:F0:F3:5E
Certificate issuer: /CN=9436da805aeda0a3a50ffc66251dcbfb42f0f35e
Certificate serial: 019769608680EEF64307E665C7D2276784B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDbagFrtoKOlD_xmJR3L-0Lw814.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft
Manifest number: 158C
Signing time: Fri 13 Jun 2025 13:00:22 +0000
Manifest this update: Fri 13 Jun 2025 13:00:22 +0000
Manifest next update: Sat 14 Jun 2025 13:00:22 +0000
Files and hashes: 1: lDbagFrtoKOlD_xmJR3L-0Lw814.crl (hash: KTMNkWEnmNRhfaZO/PkecmUy9DB35KONSokMDSI0MWA=)
2: ucXy2KSNHkyj0NVTw1_Sgr3N0zY.roa (hash: rz/2Fi1HgmzQcvvjW5gJ3z/pWlF+IsIu5pUPW6A7j2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDbagFrtoKOlD_xmJR3L-0Lw814.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:86:80:ee:f6:43:07:e6:65:c7:d2:27:67:84:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9436da805aeda0a3a50ffc66251dcbfb42f0f35e
Validity
Not Before: Jun 13 13:00:22 2025 GMT
Not After : Jun 14 13:00:22 2025 GMT
Subject: CN=bf0c4b2b256551afa9d8bc77d2af34ba1f0a5b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:66:87:f4:5d:39:9f:33:fe:55:5f:4a:1f:db:
b9:cb:10:78:2a:ac:66:9d:a1:de:0d:71:a7:f0:00:
f0:37:45:e5:29:af:37:a0:9c:0d:bc:f8:ab:5e:dc:
2b:b0:c0:80:a3:e7:e3:9a:f4:b7:b4:27:26:ec:82:
4f:fa:32:3e:13:db:02:74:d9:d8:a4:2a:b4:87:29:
1c:d2:0e:1a:30:c6:1a:98:bc:0e:e2:eb:b3:f2:6e:
3f:b9:54:3a:ce:57:66:3c:da:b0:5b:64:27:4c:94:
dd:3a:ba:04:89:52:30:9e:57:92:12:59:02:35:6d:
5b:71:c4:37:18:ad:12:9a:c1:ab:f7:75:e5:77:6c:
e0:2f:2f:fd:35:f8:9e:df:bb:e9:07:9c:78:83:58:
9c:97:4b:83:df:1e:b2:7c:c5:d4:ad:9a:b8:90:28:
c1:6f:af:ee:d5:f5:af:51:b6:b5:c5:b7:89:4b:ba:
5d:47:53:a0:09:65:eb:21:e1:54:17:06:27:9a:f9:
cc:25:e4:91:10:07:4c:5b:9d:e2:3a:eb:94:a2:40:
b0:4d:fd:a5:19:c8:f5:ac:42:45:b9:c5:4e:7d:79:
0d:55:4e:1c:e0:ac:25:8f:31:c7:87:36:a2:11:b3:
21:4c:f3:e6:da:89:ff:d5:9b:ca:c8:47:13:85:08:
70:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:0C:4B:2B:25:65:51:AF:A9:D8:BC:77:D2:AF:34:BA:1F:0A:5B:23
X509v3 Authority Key Identifier:
keyid:94:36:DA:80:5A:ED:A0:A3:A5:0F:FC:66:25:1D:CB:FB:42:F0:F3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDbagFrtoKOlD_xmJR3L-0Lw814.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:ea:63:1a:03:21:f7:ab:02:b7:b0:60:63:aa:6a:33:14:d4:
d9:ee:07:3e:9a:45:f6:76:27:48:6f:56:ad:99:9c:3f:b1:e1:
b5:93:e7:80:f2:a1:4b:3a:fe:f8:91:9a:da:d6:ac:f3:39:a7:
f1:72:d5:0a:54:8f:b9:90:f9:93:99:6f:39:3f:15:19:52:92:
cf:ae:9f:ca:ac:bc:07:5a:80:6e:ea:0b:c3:af:e3:6a:0a:0c:
eb:7e:66:6a:b0:72:90:c6:b0:33:62:25:52:76:99:84:6d:d1:
56:58:1d:09:02:24:1b:2d:d5:b8:4e:1b:2a:42:26:b2:3d:0f:
00:de:e3:b4:fe:dc:1a:10:c1:79:66:57:be:c0:9e:9c:d7:77:
26:49:b9:f3:10:be:00:87:ef:d9:a3:b1:93:3e:87:bd:2a:92:
ac:b8:d0:48:9c:3a:ff:75:66:a7:58:c6:d6:0d:fb:44:a1:97:
27:ab:05:a4:ac:ac:de:9f:61:5e:89:8a:7f:7b:87:16:8d:21:
66:38:62:bc:bb:1a:41:87:c0:ed:34:ae:60:61:31:75:b8:93:
2d:d7:b6:6a:5e:02:43:b2:c9:f3:36:66:05:64:1a:d5:13:15:
be:fe:ee:40:56:4e:ea:bb:4c:89:7d:9a:fa:5e:48:e8:82:0c:
b0:03:27:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpYIaA7vZDB+Zlx9InZ4S4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MzZkYTgwNWFlZGEwYTNhNTBmZmM2NjI1MWRjYmZiNDJm
MGYzNWUwHhcNMjUwNjEzMTMwMDIyWhcNMjUwNjE0MTMwMDIyWjAzMTEwLwYDVQQD
EyhiZjBjNGIyYjI1NjU1MWFmYTlkOGJjNzdkMmFmMzRiYTFmMGE1YjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGaH9F05nzP+VV9KH9u5yxB4Kqxm
naHeDXGn8ADwN0XlKa83oJwNvPirXtwrsMCAo+fjmvS3tCcm7IJP+jI+E9sCdNnY
pCq0hykc0g4aMMYamLwO4uuz8m4/uVQ6zldmPNqwW2QnTJTdOroEiVIwnleSElkC
NW1bccQ3GK0SmsGr93Xld2zgLy/9Nfie37vpB5x4g1icl0uD3x6yfMXUrZq4kCjB
b6/u1fWvUba1xbeJS7pdR1OgCWXrIeFUFwYnmvnMJeSREAdMW53iOuuUokCwTf2l
Gcj1rEJFucVOfXkNVU4c4KwljzHHhzaiEbMhTPPm2on/1ZvKyEcThQhw4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL8MSyslZVGvqdi8d9KvNLofClsjMB8GA1UdIwQY
MBaAFJQ22oBa7aCjpQ/8ZiUdy/tC8PNeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbERiYWdGcnRvS09sRF94bUpSM0wtMEx3ODE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wZTYyNTAtNTQyMC00MzE4LTkyODQt
MmMyNzcxZThlMTc3LzEvbERiYWdGcnRvS09sRF94bUpSM0wtMEx3ODE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8wZTYyNTAtNTQyMC00MzE4LTkyODQtMmMyNzcxZThlMTc3
LzEvbERiYWdGcnRvS09sRF94bUpSM0wtMEx3ODE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy+pjGgMh
96sCt7BgY6pqMxTU2e4HPppF9nYnSG9WrZmcP7HhtZPngPKhSzr++JGa2tas8zmn
8XLVClSPuZD5k5lvOT8VGVKSz66fyqy8B1qAbuoLw6/jagoM635marBykMawM2Il
UnaZhG3RVlgdCQIkGy3VuE4bKkImsj0PAN7jtP7cGhDBeWZXvsCenNd3Jkm58xC+
AIfv2aOxkz6HvSqSrLjQSJw6/3Vmp1jG1g37RKGXJ6sFpKys3p9hXomKf3uHFo0h
ZjhivLsaQYfA7TSuYGExdbiTLde2al4CQ7LJ8zZmBWQa1RMVvv7uQFZO6rtMiX2a
+l5I6IIMsAMnew==
-----END CERTIFICATE-----
Generated at Fri Jun 13 22:59:39 2025 by rpki-client