Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.mft
File: LpRuQzNsoql56Z31z11tXnFVgy0.mft (raw, json)
Hash identifier: PrkEaByEu9rbP3H3bAU277HpvZ5blhQTt26GMgRIas8=
Subject key identifier: 54:E5:F6:E8:46:BE:F0:82:EE:52:62:EB:95:96:60:8A:80:59:5F:F9
Authority key identifier: 2E:94:6E:43:33:6C:A2:A9:79:E9:9D:F5:CF:5D:6D:5E:71:55:83:2D
Certificate issuer: /CN=2e946e43336ca2a979e99df5cf5d6d5e7155832d
Certificate serial: 0196B5C7D850D5E7FB4F39E812CA1B43CC8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LpRuQzNsoql56Z31z11tXnFVgy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.mft
Manifest number: 07C8
Signing time: Fri 09 May 2025 16:01:35 +0000
Manifest this update: Fri 09 May 2025 16:01:35 +0000
Manifest next update: Sat 10 May 2025 16:01:35 +0000
Files and hashes: 1: LpRuQzNsoql56Z31z11tXnFVgy0.crl (hash: 6SZkE3LvPv4QPlmLAj40dRnddPCEFQuHiNqphn7hDbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LpRuQzNsoql56Z31z11tXnFVgy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 16:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:c7:d8:50:d5:e7:fb:4f:39:e8:12:ca:1b:43:cc:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e946e43336ca2a979e99df5cf5d6d5e7155832d
Validity
Not Before: May 9 16:01:35 2025 GMT
Not After : May 10 16:01:35 2025 GMT
Subject: CN=54e5f6e846bef082ee5262eb9596608a80595ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:98:41:40:bb:76:12:b2:fe:fa:04:1c:fb:bc:
45:92:f0:94:8c:cb:5b:a6:aa:66:38:fd:13:e8:c2:
a2:9d:3e:fb:f5:a6:bf:a1:57:db:32:62:ba:1b:68:
bf:e5:b9:97:36:8a:32:88:69:55:95:60:37:33:80:
2f:80:e5:67:ae:7e:08:4f:7e:16:f3:ea:96:bf:d3:
fa:b2:55:4d:22:43:5e:68:d4:b7:05:2c:31:58:fa:
78:01:2e:e6:51:da:62:d0:fe:77:f4:8e:ca:ea:48:
6b:41:de:3f:a5:bd:57:ec:21:e0:fd:49:6f:b3:08:
5b:ea:f5:e7:87:71:ec:2d:6e:2c:81:a8:5f:94:05:
c4:04:f2:29:1e:7c:be:9b:15:8c:35:24:29:fe:e0:
fa:33:65:72:bf:bf:ee:11:16:6c:75:ab:bd:bd:b7:
72:23:2f:61:1e:7d:b1:cd:b4:78:a3:a4:ed:73:c6:
c3:7a:2a:45:de:14:ee:aa:93:a1:fc:48:9f:a8:a1:
f4:aa:7b:39:d6:07:56:5a:30:e2:b1:ec:80:ed:26:
19:d0:26:1d:05:43:e2:61:26:8f:0c:33:05:c7:75:
52:66:2e:a6:4f:62:39:4d:45:d2:85:c6:10:f4:90:
dc:3e:08:5e:bf:fe:43:c5:f0:7c:a9:98:9c:0d:34:
b8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E5:F6:E8:46:BE:F0:82:EE:52:62:EB:95:96:60:8A:80:59:5F:F9
X509v3 Authority Key Identifier:
keyid:2E:94:6E:43:33:6C:A2:A9:79:E9:9D:F5:CF:5D:6D:5E:71:55:83:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LpRuQzNsoql56Z31z11tXnFVgy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:b6:51:53:8b:72:dc:24:1b:0a:3c:fd:bd:14:76:dc:f1:c2:
e1:69:c5:0e:5c:3c:a6:ed:26:d3:17:a9:e0:fd:12:6f:c4:44:
ac:1f:99:7d:25:48:8b:52:09:f8:7e:17:a0:5f:47:95:44:5c:
b1:fb:c1:8e:65:5b:57:48:1e:ca:f4:6e:a0:88:80:6f:85:c8:
92:76:21:6d:e4:9a:dc:3e:45:81:87:35:7c:85:7f:ab:87:e8:
12:4c:12:ba:01:e9:b2:74:22:d8:db:71:a3:91:49:15:fc:1a:
9f:b1:d6:5f:55:bd:08:0d:53:e2:bc:65:78:0f:9b:2a:3c:e5:
bf:37:4d:cb:e4:14:a7:63:cb:0d:25:3f:f1:69:00:58:1c:11:
86:f4:e3:79:c8:5e:56:8a:73:87:fc:a9:8b:af:33:54:85:81:
a3:fb:c1:b9:d9:30:1c:9e:c4:12:27:5f:e0:df:6c:f3:ba:07:
cf:43:ad:ec:c4:71:6a:2e:c1:65:c8:4b:ef:09:83:a9:6d:77:
60:ab:1e:2f:ca:6e:b5:ca:00:5c:af:47:9b:d2:70:28:4e:50:
d0:d4:66:6f:be:83:fd:71:5d:6d:b6:c3:83:48:26:af:3e:b8:
4f:b5:3f:8f:b6:3a:dd:32:16:be:66:b6:00:30:2a:fe:11:2a:
89:0c:42:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa1x9hQ1ef7TznoEsobQ8yKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlOTQ2ZTQzMzM2Y2EyYTk3OWU5OWRmNWNmNWQ2ZDVlNzE1
NTgzMmQwHhcNMjUwNTA5MTYwMTM1WhcNMjUwNTEwMTYwMTM1WjAzMTEwLwYDVQQD
Eyg1NGU1ZjZlODQ2YmVmMDgyZWU1MjYyZWI5NTk2NjA4YTgwNTk1ZmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJhBQLt2ErL++gQc+7xFkvCUjMtb
pqpmOP0T6MKinT779aa/oVfbMmK6G2i/5bmXNooyiGlVlWA3M4AvgOVnrn4IT34W
8+qWv9P6slVNIkNeaNS3BSwxWPp4AS7mUdpi0P539I7K6khrQd4/pb1X7CHg/Ulv
swhb6vXnh3HsLW4sgahflAXEBPIpHny+mxWMNSQp/uD6M2Vyv7/uERZsdau9vbdy
Iy9hHn2xzbR4o6Ttc8bDeipF3hTuqpOh/EifqKH0qns51gdWWjDiseyA7SYZ0CYd
BUPiYSaPDDMFx3VSZi6mT2I5TUXShcYQ9JDcPghev/5DxfB8qZicDTS4YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFTl9uhGvvCC7lJi65WWYIqAWV/5MB8GA1UdIwQY
MBaAFC6UbkMzbKKpeemd9c9dbV5xVYMtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHBSdVF6TnNvcWw1NlozMXoxMXRYbkZWZ3kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy80ZjE4NWEtM2JiNS00ZDI1LTlkYzgt
ZWUyOGY5NmNmMTI2LzEvTHBSdVF6TnNvcWw1NlozMXoxMXRYbkZWZ3kwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy80ZjE4NWEtM2JiNS00ZDI1LTlkYzgtZWUyOGY5NmNmMTI2
LzEvTHBSdVF6TnNvcWw1NlozMXoxMXRYbkZWZ3kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYLZRU4ty
3CQbCjz9vRR23PHC4WnFDlw8pu0m0xep4P0Sb8RErB+ZfSVIi1IJ+H4XoF9HlURc
sfvBjmVbV0geyvRuoIiAb4XIknYhbeSa3D5FgYc1fIV/q4foEkwSugHpsnQi2Ntx
o5FJFfwan7HWX1W9CA1T4rxleA+bKjzlvzdNy+QUp2PLDSU/8WkAWBwRhvTjeche
Vopzh/ypi68zVIWBo/vBudkwHJ7EEidf4N9s87oHz0Ot7MRxai7BZchL7wmDqW13
YKseL8putcoAXK9Hm9JwKE5Q0NRmb76D/XFdbbbDg0gmrz64T7U/j7Y63TIWvma2
ADAq/hEqiQxC0A==
-----END CERTIFICATE-----
Generated at Fri May 9 20:43:30 2025 by rpki-client