Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/37fd9d-61e6-4df3-9c07-6b6ad0456b65/1/LphQiZ2cq14AM9C-lyKn6zBdfGA.mft
File: LphQiZ2cq14AM9C-lyKn6zBdfGA.mft (raw, json)
Hash identifier: 3siDBVYHfRIRueCWR+YzacYD8PrCSRrEah3eKEWN+54=
Subject key identifier: 55:18:64:0E:05:17:63:81:39:CB:6E:A1:BC:04:86:98:C7:BF:66:0A
Authority key identifier: 2E:98:50:89:9D:9C:AB:5E:00:33:D0:BE:97:22:A7:EB:30:5D:7C:60
Certificate issuer: /CN=2e9850899d9cab5e0033d0be9722a7eb305d7c60
Certificate serial: 0197B6A18F847F00E84CD7D66EC61CCD2889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LphQiZ2cq14AM9C-lyKn6zBdfGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/37fd9d-61e6-4df3-9c07-6b6ad0456b65/1/LphQiZ2cq14AM9C-lyKn6zBdfGA.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 13:02:10 +0000
Manifest this update: Sat 28 Jun 2025 13:02:10 +0000
Manifest next update: Sun 29 Jun 2025 13:02:10 +0000
Files and hashes: 1: LphQiZ2cq14AM9C-lyKn6zBdfGA.crl (hash: YSqA74d6mgN/MZNqr4v7RCuQoOytOUAN2mCiFe9Y1+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/37fd9d-61e6-4df3-9c07-6b6ad0456b65/1/LphQiZ2cq14AM9C-lyKn6zBdfGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/37fd9d-61e6-4df3-9c07-6b6ad0456b65/1/LphQiZ2cq14AM9C-lyKn6zBdfGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LphQiZ2cq14AM9C-lyKn6zBdfGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:8f:84:7f:00:e8:4c:d7:d6:6e:c6:1c:cd:28:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e9850899d9cab5e0033d0be9722a7eb305d7c60
Validity
Not Before: Jun 28 13:02:10 2025 GMT
Not After : Jun 29 13:02:10 2025 GMT
Subject: CN=5518640e0517638139cb6ea1bc048698c7bf660a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:14:82:d0:ba:e7:85:68:3b:b7:15:d3:3e:71:
68:da:19:90:bc:7e:c8:fe:6c:c6:59:98:d1:a9:f2:
e2:58:74:e3:64:d4:7a:75:27:b9:0f:bd:ab:54:bf:
6e:e2:23:e0:72:f6:b5:0f:41:35:34:1b:a0:99:c7:
24:65:34:1a:31:24:fb:ed:20:18:a9:08:c4:f8:61:
db:e2:b0:40:57:68:19:3b:6f:23:87:4b:14:23:b5:
c4:c5:e3:82:0d:c3:10:7e:8d:2c:d3:08:96:65:ce:
43:83:c6:0e:01:26:09:8c:06:01:c2:b5:2f:b9:50:
d6:d5:4a:5d:3c:95:b9:6e:69:7b:7e:ab:1f:38:db:
1f:93:3f:a2:af:53:40:78:3e:e0:ea:d7:c6:e2:fb:
04:fe:ea:2e:9d:ac:7a:1c:47:de:da:49:de:c3:92:
99:1e:96:83:a6:77:6e:a6:38:03:28:55:49:c3:79:
5f:fc:14:9e:7e:5d:94:b9:f8:e3:7c:67:99:46:11:
40:a6:82:c9:20:d8:57:a6:8a:8e:71:a8:12:b3:70:
4d:a5:9c:08:62:5c:65:53:c2:5b:91:d7:b9:97:ec:
77:33:00:0d:11:e7:e5:70:02:93:96:1d:42:67:06:
3a:51:cb:50:12:e9:16:f1:8e:55:fd:31:8e:40:2f:
12:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:18:64:0E:05:17:63:81:39:CB:6E:A1:BC:04:86:98:C7:BF:66:0A
X509v3 Authority Key Identifier:
keyid:2E:98:50:89:9D:9C:AB:5E:00:33:D0:BE:97:22:A7:EB:30:5D:7C:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LphQiZ2cq14AM9C-lyKn6zBdfGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/37fd9d-61e6-4df3-9c07-6b6ad0456b65/1/LphQiZ2cq14AM9C-lyKn6zBdfGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/37fd9d-61e6-4df3-9c07-6b6ad0456b65/1/LphQiZ2cq14AM9C-lyKn6zBdfGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:94:66:81:4e:99:8e:fc:1e:00:c8:94:9b:1f:70:d1:60:05:
dd:ec:69:b2:d0:fa:f8:ec:b8:aa:75:1f:29:c7:cb:65:0c:f8:
08:cb:97:3d:3c:27:bb:c6:b0:96:a2:ff:09:8a:56:71:34:88:
ef:9e:2a:24:49:8d:dd:a1:40:67:ba:ea:13:d5:07:eb:0c:86:
b8:54:ea:a1:9f:7a:a4:1c:2b:d0:e4:57:95:5b:63:57:85:ae:
cb:4b:fb:11:a1:d8:62:c5:62:e4:f9:78:1b:f2:2e:b9:f3:65:
8d:6a:28:0b:ef:8c:cd:cd:03:c6:e1:72:c8:1a:fb:f9:73:af:
4b:43:46:bd:4b:e1:a6:0c:ea:65:7a:71:31:61:77:c7:56:f9:
a5:26:ec:71:ba:26:23:28:43:55:ef:32:4c:48:72:8e:20:bf:
98:cb:8b:8f:99:a5:80:5e:92:29:49:2e:b4:3d:e3:1e:45:1d:
4a:e5:8f:2c:65:7f:30:0e:35:70:cb:29:7b:5f:f6:39:aa:c1:
f5:62:d6:1c:c0:73:18:f6:82:ae:d5:eb:46:d1:2f:c3:f7:e6:
7b:67:30:ef:e0:b0:90:62:af:22:f3:83:2d:7d:bd:cb:92:52:
aa:70:d2:35:e8:79:28:af:2e:1f:f8:e0:b2:d7:c5:52:d7:e6:
74:34:87:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oY+EfwDoTNfWbsYczSiJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlOTg1MDg5OWQ5Y2FiNWUwMDMzZDBiZTk3MjJhN2ViMzA1
ZDdjNjAwHhcNMjUwNjI4MTMwMjEwWhcNMjUwNjI5MTMwMjEwWjAzMTEwLwYDVQQD
Eyg1NTE4NjQwZTA1MTc2MzgxMzljYjZlYTFiYzA0ODY5OGM3YmY2NjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxSC0LrnhWg7txXTPnFo2hmQvH7I
/mzGWZjRqfLiWHTjZNR6dSe5D72rVL9u4iPgcva1D0E1NBugmcckZTQaMST77SAY
qQjE+GHb4rBAV2gZO28jh0sUI7XExeOCDcMQfo0s0wiWZc5Dg8YOASYJjAYBwrUv
uVDW1UpdPJW5bml7fqsfONsfkz+ir1NAeD7g6tfG4vsE/uounax6HEfe2knew5KZ
HpaDpndupjgDKFVJw3lf/BSefl2UufjjfGeZRhFApoLJINhXpoqOcagSs3BNpZwI
YlxlU8Jbkde5l+x3MwANEeflcAKTlh1CZwY6UctQEukW8Y5V/TGOQC8SuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFUYZA4FF2OBOctuobwEhpjHv2YKMB8GA1UdIwQY
MBaAFC6YUImdnKteADPQvpcip+swXXxgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHBoUWlaMmNxMTRBTTlDLWx5S242ekJkZkdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zN2ZkOWQtNjFlNi00ZGYzLTljMDct
NmI2YWQwNDU2YjY1LzEvTHBoUWlaMmNxMTRBTTlDLWx5S242ekJkZkdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8zN2ZkOWQtNjFlNi00ZGYzLTljMDctNmI2YWQwNDU2YjY1
LzEvTHBoUWlaMmNxMTRBTTlDLWx5S242ekJkZkdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeZRmgU6Z
jvweAMiUmx9w0WAF3expstD6+Oy4qnUfKcfLZQz4CMuXPTwnu8awlqL/CYpWcTSI
754qJEmN3aFAZ7rqE9UH6wyGuFTqoZ96pBwr0ORXlVtjV4Wuy0v7EaHYYsVi5Pl4
G/IuufNljWooC++Mzc0DxuFyyBr7+XOvS0NGvUvhpgzqZXpxMWF3x1b5pSbscbom
IyhDVe8yTEhyjiC/mMuLj5mlgF6SKUkutD3jHkUdSuWPLGV/MA41cMspe1/2OarB
9WLWHMBzGPaCrtXrRtEvw/fme2cw7+CwkGKvIvODLX29y5JSqnDSNeh5KK8uH/jg
stfFUtfmdDSH7A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:12:12 2025 by rpki-client