Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
File: lsvPLpV8qNlCRyp7AEQoWybbayI.mft (raw, json)
Hash identifier: iDudA183eR7NwlZD2xxe2/9ARN4LDcbvyc5LciBzs5M=
Subject key identifier: 09:18:BA:EB:F4:75:00:A2:C8:85:3D:26:B0:E0:28:50:7A:1E:5D:C3
Authority key identifier: 96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22
Certificate issuer: /CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
Certificate serial: 0197B6A0CC1C06A5F08E6759F04D4B2C7588
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 13:01:20 +0000
Manifest this update: Sat 28 Jun 2025 13:01:20 +0000
Manifest next update: Sun 29 Jun 2025 13:01:20 +0000
Files and hashes: 1: L7Ga4vuHYQeZfIto9Yq8tgXI9O0.roa (hash: teLoUEZvE4nl+9Xvo/9jLeTnZ41UIdxLpAcgTrbJ4sA=)
2: lsvPLpV8qNlCRyp7AEQoWybbayI.crl (hash: iVCN/eaX1G0NH6BXQS+IENk5StHzwx1USn5BcWeTalo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:cc:1c:06:a5:f0:8e:67:59:f0:4d:4b:2c:75:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
Validity
Not Before: Jun 28 13:01:20 2025 GMT
Not After : Jun 29 13:01:20 2025 GMT
Subject: CN=0918baebf47500a2c8853d26b0e028507a1e5dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6c:03:0a:11:76:c7:bd:7b:f8:ef:5f:3c:e0:
a7:5c:bb:a8:ab:d9:ed:f5:11:32:68:49:73:59:be:
e6:4d:1d:92:a6:60:b4:cf:05:f8:7d:1b:e1:43:fb:
ff:0e:48:30:12:d3:ed:5c:a9:d2:8f:63:62:8e:f6:
36:e7:0e:c5:e0:c9:aa:a1:b4:29:68:87:5c:c2:af:
ad:67:c1:66:b0:68:dd:0c:cc:dd:51:0c:26:b8:f0:
bd:50:f0:01:dc:d4:cb:b7:b5:7f:fe:cb:fc:26:7d:
43:47:7a:79:e3:41:bb:95:17:55:fa:ec:ff:93:57:
13:a8:f3:46:c6:8f:dd:b6:14:44:62:af:f0:ce:d0:
cb:f2:f5:12:ad:cb:d4:98:c0:c2:52:e9:8d:a8:07:
85:79:1d:2a:d2:5b:71:ca:f7:35:a6:57:aa:69:9a:
8d:73:47:e7:72:01:87:92:91:7a:c7:4d:10:f4:c0:
22:f4:08:5c:4a:30:6b:fd:2c:8f:49:d2:16:71:58:
c9:ac:87:b8:c4:81:bf:93:63:77:f5:42:06:be:37:
a9:0c:b0:78:30:82:c3:41:fc:84:31:ee:d3:ce:9d:
5d:8c:1b:da:8d:4d:ae:36:17:b8:e7:5d:8b:d4:19:
1c:b4:b4:33:da:be:b2:14:18:02:8e:02:39:52:bb:
69:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:18:BA:EB:F4:75:00:A2:C8:85:3D:26:B0:E0:28:50:7A:1E:5D:C3
X509v3 Authority Key Identifier:
keyid:96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:c7:02:3b:88:90:31:51:51:d0:d4:6b:fc:1b:8d:af:fd:6f:
f8:21:ce:55:3e:73:f6:87:bf:86:b5:e7:b7:f2:fa:8c:6c:12:
cb:56:bb:f3:51:a3:e8:9c:a9:4e:db:71:f7:73:3e:75:45:be:
be:9c:28:c0:5a:bf:0e:8c:26:3e:8f:a0:d2:74:32:68:e2:cc:
67:ea:1e:44:9f:33:e0:24:e1:83:7d:bb:4d:e1:38:6a:f8:98:
4b:5c:88:3e:88:b0:16:00:a1:a3:ad:dc:d2:7d:a6:52:41:3d:
61:f2:c8:0e:ac:ce:5b:db:41:38:04:70:06:1a:5c:35:28:d9:
33:ac:a7:3c:7f:64:06:65:d5:09:d9:b8:a7:e8:7c:93:7a:9f:
3d:a8:fb:a5:23:4f:df:da:20:d5:88:eb:36:c6:6f:b1:dd:07:
07:bb:de:9d:f4:05:5b:98:1a:6b:c5:16:d8:bc:1f:09:19:5b:
c7:ab:6c:1d:df:5f:38:36:cc:b2:4e:ed:99:c0:09:51:07:d5:
97:d7:c0:28:79:25:49:6c:12:00:bf:8f:a9:74:b4:23:14:8b:
c3:10:47:b1:35:53:2d:4d:21:a7:6b:03:21:bb:60:b6:82:a7:
71:d4:ae:5c:92:7b:04:7b:97:de:d6:84:a2:6a:f4:06:af:42:
09:8a:80:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oMwcBqXwjmdZ8E1LLHWIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2Y2JjZjJlOTU3Y2E4ZDk0MjQ3MmE3YjAwNDQyODViMjZk
YjZiMjIwHhcNMjUwNjI4MTMwMTIwWhcNMjUwNjI5MTMwMTIwWjAzMTEwLwYDVQQD
EygwOTE4YmFlYmY0NzUwMGEyYzg4NTNkMjZiMGUwMjg1MDdhMWU1ZGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2wDChF2x717+O9fPOCnXLuoq9nt
9REyaElzWb7mTR2SpmC0zwX4fRvhQ/v/DkgwEtPtXKnSj2NijvY25w7F4MmqobQp
aIdcwq+tZ8FmsGjdDMzdUQwmuPC9UPAB3NTLt7V//sv8Jn1DR3p540G7lRdV+uz/
k1cTqPNGxo/dthREYq/wztDL8vUSrcvUmMDCUumNqAeFeR0q0ltxyvc1pleqaZqN
c0fncgGHkpF6x00Q9MAi9AhcSjBr/SyPSdIWcVjJrIe4xIG/k2N39UIGvjepDLB4
MILDQfyEMe7Tzp1djBvajU2uNhe4512L1BkctLQz2r6yFBgCjgI5UrtpAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAkYuuv0dQCiyIU9JrDgKFB6Hl3DMB8GA1UdIwQY
MBaAFJbLzy6VfKjZQkcqewBEKFsm22siMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHN2UExwVjhxTmxDUnlwN0FFUW9XeWJiYXlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xYjYwZTktYjZlMC00ODkwLTlkZTEt
MTNiNDMxMzQyYWI4LzEvbHN2UExwVjhxTmxDUnlwN0FFUW9XeWJiYXlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8xYjYwZTktYjZlMC00ODkwLTlkZTEtMTNiNDMxMzQyYWI4
LzEvbHN2UExwVjhxTmxDUnlwN0FFUW9XeWJiYXlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARccCO4iQ
MVFR0NRr/BuNr/1v+CHOVT5z9oe/hrXnt/L6jGwSy1a781Gj6JypTttx93M+dUW+
vpwowFq/DowmPo+g0nQyaOLMZ+oeRJ8z4CThg327TeE4aviYS1yIPoiwFgCho63c
0n2mUkE9YfLIDqzOW9tBOARwBhpcNSjZM6ynPH9kBmXVCdm4p+h8k3qfPaj7pSNP
39og1YjrNsZvsd0HB7venfQFW5gaa8UW2LwfCRlbx6tsHd9fODbMsk7tmcAJUQfV
l9fAKHklSWwSAL+PqXS0IxSLwxBHsTVTLU0hp2sDIbtgtoKncdSuXJJ7BHuX3taE
omr0Bq9CCYqAjg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:42:56 2025 by rpki-client