Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft
File: lpblIk_vUX9NzGbBQQNSzIq_si4.mft (raw, json)
Hash identifier: dc7H3sya5uvCc9CDNvd7C5peyBf5yTCtUmM+oC/i4lU=
Subject key identifier: D1:49:96:DC:E2:C5:53:07:07:84:8A:3D:8C:29:E9:FF:6F:95:A1:E1
Authority key identifier: 96:96:E5:22:4F:EF:51:7F:4D:CC:66:C1:41:03:52:CC:8A:BF:B2:2E
Certificate issuer: /CN=9696e5224fef517f4dcc66c1410352cc8abfb22e
Certificate serial: 0197B6A19FB5E9F3994FEB639229996E763E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lpblIk_vUX9NzGbBQQNSzIq_si4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft
Manifest number: 1541
Signing time: Sat 28 Jun 2025 13:02:14 +0000
Manifest this update: Sat 28 Jun 2025 13:02:14 +0000
Manifest next update: Sun 29 Jun 2025 13:02:14 +0000
Files and hashes: 1: lpblIk_vUX9NzGbBQQNSzIq_si4.crl (hash: P11Vv+RWgWVsL9MM6TrOIkntreJwq3X0fEJ9bSYtl1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lpblIk_vUX9NzGbBQQNSzIq_si4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:9f:b5:e9:f3:99:4f:eb:63:92:29:99:6e:76:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9696e5224fef517f4dcc66c1410352cc8abfb22e
Validity
Not Before: Jun 28 13:02:14 2025 GMT
Not After : Jun 29 13:02:14 2025 GMT
Subject: CN=d14996dce2c5530707848a3d8c29e9ff6f95a1e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:45:b3:a3:5b:a1:3c:54:7e:63:a1:3f:2a:6c:
34:9b:2f:0b:0e:8a:74:06:69:56:18:4c:c6:7a:af:
e9:cc:a6:b6:53:58:20:2f:80:ae:93:bf:bb:f1:a6:
ed:e5:5a:bf:08:75:54:83:66:b0:69:9a:09:19:47:
9b:df:84:ac:09:89:44:54:c8:58:b8:43:de:13:d4:
6f:ea:96:c8:46:d2:cb:9d:55:ae:68:98:f5:0b:2d:
76:bf:c8:9b:44:71:b2:f3:f5:1a:e5:0b:85:c8:95:
9c:af:d1:d2:e1:07:0d:ab:e0:69:69:55:75:b6:0c:
74:b4:ec:ef:c4:e3:1e:09:29:12:f7:66:b0:a2:b5:
65:1d:66:bb:ef:93:02:51:da:ce:f5:f6:38:57:67:
75:52:31:b9:8d:cd:3c:4f:57:42:3d:53:2f:15:78:
00:60:66:8d:af:46:d3:18:a6:36:c0:4a:bd:62:0a:
61:dc:21:fe:f1:fd:06:ad:51:3e:4e:cb:05:12:04:
90:7f:42:d0:24:6e:4a:0f:91:57:6d:16:c7:8f:6b:
a1:12:09:b7:c6:aa:8c:06:e3:62:30:c7:8b:2d:07:
e9:dd:f6:74:87:67:d8:24:40:cd:7d:ad:98:ee:55:
47:09:db:65:c9:47:e3:2d:85:26:d2:bb:29:d2:5c:
35:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:49:96:DC:E2:C5:53:07:07:84:8A:3D:8C:29:E9:FF:6F:95:A1:E1
X509v3 Authority Key Identifier:
keyid:96:96:E5:22:4F:EF:51:7F:4D:CC:66:C1:41:03:52:CC:8A:BF:B2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lpblIk_vUX9NzGbBQQNSzIq_si4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:89:2a:92:1a:c4:d6:70:d9:12:5c:94:4a:a0:40:c8:23:89:
61:cb:20:15:74:29:a8:a2:fc:51:1a:b7:99:5a:f4:e1:ca:f6:
65:1b:48:58:cd:2d:45:58:80:a3:60:d4:bd:34:d2:9c:f3:e3:
bf:e2:03:b9:d3:b2:3a:78:4c:24:a3:41:29:6b:87:4b:55:75:
e6:25:46:51:67:4b:c4:78:72:4f:2b:47:7f:82:47:c9:4a:04:
20:b0:27:ad:94:0a:3a:eb:99:3e:62:a4:9b:78:34:cf:6d:f6:
a9:76:fa:3b:98:c5:45:07:37:98:ab:e0:bb:8b:51:4e:e8:be:
3b:58:fc:a2:d8:8f:0b:ea:2f:16:f8:3c:4e:c6:cc:6a:0a:f3:
67:9d:0a:7e:7f:26:33:7d:e4:15:30:30:3d:3c:76:8d:dd:9c:
35:8b:41:3c:cb:c5:dd:23:6f:73:c7:dc:6f:26:df:b9:b0:6f:
4e:be:0d:f7:f6:2f:83:2a:9d:dc:33:2e:02:eb:af:08:3f:87:
74:fd:62:d8:5e:74:35:4e:8d:25:62:1b:cb:76:15:4b:a4:da:
cd:cf:75:f6:b9:67:a5:65:e7:d2:15:d1:68:92:68:21:ff:46:
3d:2b:b0:53:ae:c1:38:44:8b:72:9b:69:e3:8a:d1:97:43:65:
96:0a:fb:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oZ+16fOZT+tjkimZbnY+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2OTZlNTIyNGZlZjUxN2Y0ZGNjNjZjMTQxMDM1MmNjOGFi
ZmIyMmUwHhcNMjUwNjI4MTMwMjE0WhcNMjUwNjI5MTMwMjE0WjAzMTEwLwYDVQQD
EyhkMTQ5OTZkY2UyYzU1MzA3MDc4NDhhM2Q4YzI5ZTlmZjZmOTVhMWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0Wzo1uhPFR+Y6E/Kmw0my8LDop0
BmlWGEzGeq/pzKa2U1ggL4Cuk7+78abt5Vq/CHVUg2awaZoJGUeb34SsCYlEVMhY
uEPeE9Rv6pbIRtLLnVWuaJj1Cy12v8ibRHGy8/Ua5QuFyJWcr9HS4QcNq+BpaVV1
tgx0tOzvxOMeCSkS92aworVlHWa775MCUdrO9fY4V2d1UjG5jc08T1dCPVMvFXgA
YGaNr0bTGKY2wEq9Ygph3CH+8f0GrVE+TssFEgSQf0LQJG5KD5FXbRbHj2uhEgm3
xqqMBuNiMMeLLQfp3fZ0h2fYJEDNfa2Y7lVHCdtlyUfjLYUm0rsp0lw1MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNFJltzixVMHB4SKPYwp6f9vlaHhMB8GA1UdIwQY
MBaAFJaW5SJP71F/TcxmwUEDUsyKv7IuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHBibElrX3ZVWDlOekdiQlFRTlN6SXFfc2k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC81OWYzNzYtZGZiZS00NzhhLWI4MWUt
ZjQ5NzlkNTBlZTIyLzEvbHBibElrX3ZVWDlOekdiQlFRTlN6SXFfc2k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC81OWYzNzYtZGZiZS00NzhhLWI4MWUtZjQ5NzlkNTBlZTIy
LzEvbHBibElrX3ZVWDlOekdiQlFRTlN6SXFfc2k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApokqkhrE
1nDZElyUSqBAyCOJYcsgFXQpqKL8URq3mVr04cr2ZRtIWM0tRViAo2DUvTTSnPPj
v+IDudOyOnhMJKNBKWuHS1V15iVGUWdLxHhyTytHf4JHyUoEILAnrZQKOuuZPmKk
m3g0z232qXb6O5jFRQc3mKvgu4tRTui+O1j8otiPC+ovFvg8TsbMagrzZ50Kfn8m
M33kFTAwPTx2jd2cNYtBPMvF3SNvc8fcbybfubBvTr4N9/Yvgyqd3DMuAuuvCD+H
dP1i2F50NU6NJWIby3YVS6Tazc919rlnpWXn0hXRaJJoIf9GPSuwU67BOESLcptp
44rRl0Nllgr7ZQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:06:07 2025 by rpki-client