Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.mft
File: LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.mft (raw, json)
Hash identifier: jZ3e3M+MRBswjH11bsZbdgiM5axf1HGPQg1Nq+0iTs4=
Subject key identifier: 44:1C:95:96:2D:35:4E:3B:12:84:35:1A:B2:16:8D:20:63:AC:45:3D
Authority key identifier: 2D:58:B6:BE:9C:6C:03:3B:3B:12:6F:27:7D:02:BC:05:44:99:FC:FB
Certificate issuer: /CN=2d58b6be9c6c033b3b126f277d02bc054499fcfb
Certificate serial: 0197B5C50414BF4674F6FA1F6129471031AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.mft
Manifest number: 04EA
Signing time: Sat 28 Jun 2025 09:01:17 +0000
Manifest this update: Sat 28 Jun 2025 09:01:17 +0000
Manifest next update: Sun 29 Jun 2025 09:01:17 +0000
Files and hashes: 1: LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.crl (hash: 1HsVhL0EGkpCvJMl3L77213D3ydkuK1JiPG2/WK9yE0=)
2: sL3129FsiQ9EOiD-6Y-oRWZ0HUI.roa (hash: OeP8VcF7txOpzsrTuc07O34NirN/Zqlu2vZ40ZPG7ls=)
3: vnYIdpkDdS6bRMveVXglLZHbY50.roa (hash: RbsMHBbR5PlZx+oytvnpiwybpf9Mt1fYmOVDql1MbsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c5:04:14:bf:46:74:f6:fa:1f:61:29:47:10:31:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d58b6be9c6c033b3b126f277d02bc054499fcfb
Validity
Not Before: Jun 28 09:01:17 2025 GMT
Not After : Jun 29 09:01:17 2025 GMT
Subject: CN=441c95962d354e3b1284351ab2168d2063ac453d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:50:af:1b:4c:48:1d:29:a3:5e:41:43:94:bb:
2b:9e:c8:e5:1a:e2:07:bc:86:1f:4e:bf:c3:1e:53:
47:27:09:99:b3:8f:df:02:46:99:c9:6f:fa:36:a9:
06:69:f8:d1:b2:4c:66:a0:24:35:a2:13:36:d7:18:
9c:70:13:3e:2e:9a:fc:aa:c4:1f:8b:97:90:72:8a:
c9:9e:b2:cb:56:29:52:e1:17:d2:17:ad:29:6a:7d:
f1:0a:28:73:73:57:fd:17:af:c9:4e:f7:4d:9f:4b:
fd:d5:f3:9c:0f:62:c6:0e:60:6b:34:6b:c1:da:cc:
ac:90:72:e7:b0:5f:db:4e:6a:20:38:55:70:a3:da:
77:24:37:73:34:d8:7a:7e:8a:2a:55:c2:04:f8:e7:
68:88:9e:3a:44:59:54:79:a3:5c:74:2e:ff:a1:b6:
45:83:89:08:00:10:f9:97:86:34:82:7b:03:38:14:
0f:07:6a:ce:a9:8b:80:39:72:f1:3c:33:06:8e:e0:
0f:a8:04:f4:a6:82:a2:4a:97:f7:db:97:ed:58:26:
69:b5:08:ef:dc:2b:5a:2a:f0:eb:56:0e:68:0e:df:
da:46:01:cb:52:47:45:eb:de:ef:43:e6:e5:9e:e5:
aa:0a:9b:a9:67:e7:b2:19:6c:eb:91:11:50:48:03:
57:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:1C:95:96:2D:35:4E:3B:12:84:35:1A:B2:16:8D:20:63:AC:45:3D
X509v3 Authority Key Identifier:
keyid:2D:58:B6:BE:9C:6C:03:3B:3B:12:6F:27:7D:02:BC:05:44:99:FC:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:cc:86:98:72:fc:3d:9f:1b:57:87:22:76:d6:45:97:2c:2e:
06:8d:80:f3:60:c2:e7:b9:ac:6b:12:28:9c:8e:e5:d4:61:43:
b5:0c:a8:b1:ee:42:e4:6d:63:44:6c:ec:ce:08:6d:99:99:e7:
d0:b4:ac:03:d7:52:da:f5:29:0d:99:58:7c:40:be:b7:93:63:
04:ed:23:cd:1a:d3:ef:23:2d:ec:ad:d8:b6:c2:23:b7:83:41:
8e:53:eb:2d:60:a1:b1:3d:95:db:2d:3c:27:94:ba:3b:4c:bd:
0a:5b:a1:99:0d:82:a4:84:3b:c4:73:38:cc:54:dd:20:f3:af:
5b:d6:a6:5e:6f:24:7f:aa:bb:c8:0f:41:45:58:f7:7c:c5:d2:
a6:a9:53:53:a3:8f:4f:42:7f:f6:42:37:1c:cc:c1:9f:1a:f8:
3d:1d:3a:22:e9:26:c8:9d:62:ca:9b:09:4f:8b:64:00:77:c6:
e0:a7:26:18:04:2e:e8:76:64:59:f0:22:b9:ca:18:b5:a1:d4:
0d:84:93:a6:31:0a:60:62:e6:52:68:b5:7d:49:cc:6c:d8:de:
e6:a9:03:7f:fb:e5:41:2d:4e:1b:33:70:ae:c0:7f:91:a6:0b:
2e:40:a9:95:c0:e2:d2:33:fb:97:f9:68:56:9d:86:76:56:48:
e6:18:52:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1xQQUv0Z09vofYSlHEDGqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNThiNmJlOWM2YzAzM2IzYjEyNmYyNzdkMDJiYzA1NDQ5
OWZjZmIwHhcNMjUwNjI4MDkwMTE3WhcNMjUwNjI5MDkwMTE3WjAzMTEwLwYDVQQD
Eyg0NDFjOTU5NjJkMzU0ZTNiMTI4NDM1MWFiMjE2OGQyMDYzYWM0NTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFCvG0xIHSmjXkFDlLsrnsjlGuIH
vIYfTr/DHlNHJwmZs4/fAkaZyW/6NqkGafjRskxmoCQ1ohM21xiccBM+Lpr8qsQf
i5eQcorJnrLLVilS4RfSF60pan3xCihzc1f9F6/JTvdNn0v91fOcD2LGDmBrNGvB
2syskHLnsF/bTmogOFVwo9p3JDdzNNh6fooqVcIE+OdoiJ46RFlUeaNcdC7/obZF
g4kIABD5l4Y0gnsDOBQPB2rOqYuAOXLxPDMGjuAPqAT0poKiSpf325ftWCZptQjv
3CtaKvDrVg5oDt/aRgHLUkdF697vQ+blnuWqCpupZ+eyGWzrkRFQSANXZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEQclZYtNU47EoQ1GrIWjSBjrEU9MB8GA1UdIwQY
MBaAFC1Ytr6cbAM7OxJvJ30CvAVEmfz7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFZpMnZweHNBenM3RW04bmZRSzhCVVNaX1BzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8zNzk4ZDItMjhmMi00YjE4LWExN2Mt
Y2I4NmRiMzUwOTMxLzEvTFZpMnZweHNBenM3RW04bmZRSzhCVVNaX1BzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8zNzk4ZDItMjhmMi00YjE4LWExN2MtY2I4NmRiMzUwOTMx
LzEvTFZpMnZweHNBenM3RW04bmZRSzhCVVNaX1BzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARcyGmHL8
PZ8bV4cidtZFlywuBo2A82DC57msaxIonI7l1GFDtQyose5C5G1jRGzszghtmZnn
0LSsA9dS2vUpDZlYfEC+t5NjBO0jzRrT7yMt7K3YtsIjt4NBjlPrLWChsT2V2y08
J5S6O0y9CluhmQ2CpIQ7xHM4zFTdIPOvW9amXm8kf6q7yA9BRVj3fMXSpqlTU6OP
T0J/9kI3HMzBnxr4PR06IukmyJ1iypsJT4tkAHfG4KcmGAQu6HZkWfAiucoYtaHU
DYSTpjEKYGLmUmi1fUnMbNje5qkDf/vlQS1OGzNwrsB/kaYLLkCplcDi0jP7l/lo
Vp2GdlZI5hhSAQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:01:42 2025 by rpki-client