Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft
File: LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft (raw, json)
Hash identifier: gQXRpLdi6oTS4IKSnW/nDacRbAuTeb5MNU+5d9ci6hw=
Subject key identifier: 2B:91:8F:F5:04:23:4E:18:31:0F:12:86:07:42:50:86:2E:0E:93:B9
Authority key identifier: 2D:5F:E0:56:F7:67:7E:43:A6:EF:1A:A1:A0:A0:5C:07:C4:B4:B6:5C
Certificate issuer: /CN=2d5fe056f7677e43a6ef1aa1a0a05c07c4b4b65c
Certificate serial: 0197B70F44D7883559DB6AF07E350565F0D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LV_gVvdnfkOm7xqhoKBcB8S0tlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft
Manifest number: 0387
Signing time: Sat 28 Jun 2025 15:02:00 +0000
Manifest this update: Sat 28 Jun 2025 15:02:00 +0000
Manifest next update: Sun 29 Jun 2025 15:02:00 +0000
Files and hashes: 1: LV_gVvdnfkOm7xqhoKBcB8S0tlw.crl (hash: GZ9TbUxTIV8er82Z83xzMzk74dfrbW4sn/392fWshGA=)
2: qnFffULuZkD3WAJFMjcSjE8KLV0.roa (hash: 3RoDeJIvhLdUQNKp3436G/+SXszr4AzKvXyWP5Iyh00=)
3: wqY_ixYVjH1acrjorGcEZywYgRk.roa (hash: XpP+SvIXR1YO15boQPEoJQXvWDeccH3hUbCAlDZexo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LV_gVvdnfkOm7xqhoKBcB8S0tlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:44:d7:88:35:59:db:6a:f0:7e:35:05:65:f0:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d5fe056f7677e43a6ef1aa1a0a05c07c4b4b65c
Validity
Not Before: Jun 28 15:02:00 2025 GMT
Not After : Jun 29 15:02:00 2025 GMT
Subject: CN=2b918ff504234e18310f1286074250862e0e93b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:67:3d:b4:e9:1d:79:03:ff:f5:9b:ed:5e:5b:
11:95:6c:24:79:ec:2e:00:31:5b:90:20:2e:04:69:
43:08:b5:12:0c:d3:ce:e4:38:8f:e4:1b:90:b1:73:
64:eb:8d:d3:7a:e2:61:4c:bb:0c:a0:f5:b4:87:55:
26:8f:b0:ee:eb:18:85:5c:7e:11:7e:e4:6d:b9:bc:
ee:91:d6:c1:46:f3:d7:35:1e:57:34:5a:09:28:03:
4b:15:73:37:79:27:d6:37:bd:79:38:28:ed:70:5c:
cf:de:f4:57:74:c0:4f:d3:a4:b5:55:7f:cd:88:35:
22:81:41:b0:cd:5c:36:b8:26:01:97:be:2d:48:aa:
b3:9b:a0:cb:24:71:15:7d:a2:50:20:e0:e3:f8:83:
fb:2c:d6:4a:f1:51:c3:c2:b2:c9:20:6f:8b:75:0f:
e6:04:11:30:59:d5:af:d3:da:3e:5c:97:aa:34:2b:
d4:53:54:f2:96:87:ef:76:33:03:48:1e:11:a9:4f:
e3:35:da:7f:f2:2a:ff:83:b9:78:08:69:c3:9d:80:
07:c0:62:17:18:de:d8:d7:b9:31:46:e6:cd:a5:61:
89:04:b9:01:db:70:36:0e:a3:67:a9:32:f8:9f:2a:
9e:d7:ed:8a:4d:bb:ec:61:1a:7b:42:c5:98:aa:92:
d2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:91:8F:F5:04:23:4E:18:31:0F:12:86:07:42:50:86:2E:0E:93:B9
X509v3 Authority Key Identifier:
keyid:2D:5F:E0:56:F7:67:7E:43:A6:EF:1A:A1:A0:A0:5C:07:C4:B4:B6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LV_gVvdnfkOm7xqhoKBcB8S0tlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c7b495-0119-4cf9-b0b2-d2060d3a4332/1/LV_gVvdnfkOm7xqhoKBcB8S0tlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:14:d2:ab:7e:62:ca:0c:ea:8a:00:31:7f:b0:ec:04:39:f2:
01:cc:e7:e2:59:42:5d:2e:82:e8:df:89:68:92:48:05:a6:04:
81:23:83:5f:7b:56:01:d2:22:74:21:e1:84:8e:40:b4:55:55:
43:9e:94:a8:69:9b:2d:cb:c7:0e:82:26:52:3d:97:4a:cb:ed:
3c:df:8b:a3:da:0a:70:6e:40:33:f2:b5:82:b8:96:1d:f3:5c:
b9:c4:56:cd:b2:c0:68:75:1c:8a:ac:f8:25:87:14:74:25:73:
c2:38:48:53:81:0d:b0:ff:f7:5e:34:da:b6:a9:4f:5d:06:0c:
19:b2:15:17:29:5e:3a:a7:e6:96:ef:d4:2c:ac:38:aa:c9:86:
19:6e:86:8b:31:18:eb:32:50:1a:35:c5:16:e5:19:23:ae:cc:
81:69:17:67:9f:05:1b:1c:46:66:49:53:5f:5b:91:51:0d:29:
eb:e3:00:85:93:cb:c9:fb:42:f7:ac:de:33:71:da:f2:72:ef:
a2:0e:b8:84:8d:bf:eb:d3:2a:69:9a:9f:55:26:74:cb:e5:22:
36:ad:96:57:1f:65:2d:c1:c4:09:c2:1b:37:22:f8:d4:91:6a:
44:03:20:c9:f5:7d:27:e8:35:98:1a:42:ca:1b:f0:fa:2b:b8:
d4:80:59:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3D0TXiDVZ22rwfjUFZfDUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNWZlMDU2Zjc2NzdlNDNhNmVmMWFhMWEwYTA1YzA3YzRi
NGI2NWMwHhcNMjUwNjI4MTUwMjAwWhcNMjUwNjI5MTUwMjAwWjAzMTEwLwYDVQQD
EygyYjkxOGZmNTA0MjM0ZTE4MzEwZjEyODYwNzQyNTA4NjJlMGU5M2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGc9tOkdeQP/9ZvtXlsRlWwkeewu
ADFbkCAuBGlDCLUSDNPO5DiP5BuQsXNk643TeuJhTLsMoPW0h1Umj7Du6xiFXH4R
fuRtubzukdbBRvPXNR5XNFoJKANLFXM3eSfWN715OCjtcFzP3vRXdMBP06S1VX/N
iDUigUGwzVw2uCYBl74tSKqzm6DLJHEVfaJQIODj+IP7LNZK8VHDwrLJIG+LdQ/m
BBEwWdWv09o+XJeqNCvUU1TylofvdjMDSB4RqU/jNdp/8ir/g7l4CGnDnYAHwGIX
GN7Y17kxRubNpWGJBLkB23A2DqNnqTL4nyqe1+2KTbvsYRp7QsWYqpLSIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCuRj/UEI04YMQ8ShgdCUIYuDpO5MB8GA1UdIwQY
MBaAFC1f4Fb3Z35Dpu8aoaCgXAfEtLZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFZfZ1Z2ZG5ma09tN3hxaG9LQmNCOFMwdGx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9jN2I0OTUtMDExOS00Y2Y5LWIwYjIt
ZDIwNjBkM2E0MzMyLzEvTFZfZ1Z2ZG5ma09tN3hxaG9LQmNCOFMwdGx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9jN2I0OTUtMDExOS00Y2Y5LWIwYjItZDIwNjBkM2E0MzMy
LzEvTFZfZ1Z2ZG5ma09tN3hxaG9LQmNCOFMwdGx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASRTSq35i
ygzqigAxf7DsBDnyAczn4llCXS6C6N+JaJJIBaYEgSODX3tWAdIidCHhhI5AtFVV
Q56UqGmbLcvHDoImUj2XSsvtPN+Lo9oKcG5AM/K1griWHfNcucRWzbLAaHUciqz4
JYcUdCVzwjhIU4ENsP/3XjTatqlPXQYMGbIVFyleOqfmlu/ULKw4qsmGGW6GizEY
6zJQGjXFFuUZI67MgWkXZ58FGxxGZklTX1uRUQ0p6+MAhZPLyftC96zeM3Ha8nLv
og64hI2/69MqaZqfVSZ0y+UiNq2WVx9lLcHECcIbNyL41JFqRAMgyfV9J+g1mBpC
yhvw+iu41IBZxg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:22:28 2025 by rpki-client