Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
File: LnKImCrdg2QvgaPeuo-FbxTgmQo.mft (raw, json)
Hash identifier: Xb53iYTjN79GISa8zx1jcoxPrxtsI1DupUAmkLLoOCs=
Subject key identifier: 81:94:62:D6:60:8D:87:9B:BA:D8:11:1E:03:24:25:3F:AF:72:A3:D6
Authority key identifier: 2E:72:88:98:2A:DD:83:64:2F:81:A3:DE:BA:8F:85:6F:14:E0:99:0A
Certificate issuer: /CN=2e7288982add83642f81a3deba8f856f14e0990a
Certificate serial: 0197B88F0E833077CB5D7BD301650D8591C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
Manifest number: 1187
Signing time: Sat 28 Jun 2025 22:01:12 +0000
Manifest this update: Sat 28 Jun 2025 22:01:12 +0000
Manifest next update: Sun 29 Jun 2025 22:01:12 +0000
Files and hashes: 1: LnKImCrdg2QvgaPeuo-FbxTgmQo.crl (hash: SzRhp61adqAuJXKxERfs3Y5AWB2Qviv6VqQhW2EYX88=)
2: ssRyWeDCXopCvGWiQY8ruW0oDiQ.roa (hash: 2AZtRMi6nv+D2sxR4SnvHBIVqRBNOJ+vabvqkW1Wzsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:0e:83:30:77:cb:5d:7b:d3:01:65:0d:85:91:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e7288982add83642f81a3deba8f856f14e0990a
Validity
Not Before: Jun 28 22:01:12 2025 GMT
Not After : Jun 29 22:01:12 2025 GMT
Subject: CN=819462d6608d879bbad8111e0324253faf72a3d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8a:da:f6:31:64:19:61:86:2c:26:5a:ac:85:
20:80:11:9a:84:ed:c2:fc:77:38:06:b2:03:d1:98:
39:b9:d5:e6:dc:12:f2:20:f3:89:1c:05:a0:cd:61:
ad:e6:b9:b5:36:ba:48:75:15:82:5f:f4:7a:ce:47:
df:d6:5e:2b:db:cb:68:10:19:a8:b8:94:8d:48:4f:
a6:48:36:80:14:fb:3f:48:2d:e9:fe:3c:0c:fc:5c:
4c:d0:5a:e4:b7:7b:67:c3:1e:62:e3:8a:14:dc:60:
cb:1e:e3:22:91:89:1e:72:38:25:b0:be:7a:b8:38:
a8:a8:2c:b0:7d:16:79:d0:7a:ce:c5:ce:f3:ad:63:
d2:b9:09:b4:46:45:9b:cc:39:a4:4b:34:78:bb:b9:
47:1d:1b:ff:7e:7f:da:5c:f3:d2:6c:ce:e4:66:af:
fd:5a:f9:ac:92:3e:3a:62:fa:1c:74:69:46:5b:36:
40:c4:3e:00:02:6b:d0:02:01:1b:8f:c1:4e:ff:76:
40:21:be:60:56:b7:d0:10:96:c9:a0:b8:24:4c:59:
2c:fe:5d:45:d9:b7:ce:02:d2:ef:7e:74:5d:13:fa:
14:5d:78:05:2e:04:bd:d1:71:9b:a8:38:e3:59:48:
3f:1a:79:d0:a4:c7:05:fd:d5:b7:42:a8:1e:c3:df:
0c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:94:62:D6:60:8D:87:9B:BA:D8:11:1E:03:24:25:3F:AF:72:A3:D6
X509v3 Authority Key Identifier:
keyid:2E:72:88:98:2A:DD:83:64:2F:81:A3:DE:BA:8F:85:6F:14:E0:99:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnKImCrdg2QvgaPeuo-FbxTgmQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d5c45a-8448-47b8-b577-af9d695e940f/1/LnKImCrdg2QvgaPeuo-FbxTgmQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:9b:08:f6:f1:75:0f:33:5f:07:6d:61:32:76:bc:4a:2d:9d:
5c:01:d9:1e:e7:38:45:13:a5:55:06:49:a7:17:69:86:67:b0:
5f:87:f3:f6:63:fc:bf:4c:6a:c7:5a:96:73:48:a5:00:2d:be:
33:22:13:12:18:86:41:79:c2:e8:79:fc:f0:09:0f:e1:8f:9b:
35:f6:30:75:a0:e8:e5:24:63:31:f3:8d:a3:47:6e:44:66:e8:
5c:b8:9e:a5:f1:28:1b:f5:e9:b2:e8:c7:65:7e:4b:54:bb:a2:
0c:b8:52:2b:33:78:73:aa:b0:73:61:e4:79:c9:25:05:e1:57:
b1:87:f5:a5:67:8d:f4:6e:1e:85:75:92:87:eb:1c:13:da:b9:
1f:b9:06:92:66:af:b7:d8:64:c6:04:81:2d:b2:02:f8:36:1e:
32:2a:0a:9d:cf:89:5a:fb:3d:fb:97:44:8b:99:71:77:e0:d7:
b4:6d:ff:ab:56:d6:8b:81:50:0a:10:2a:b1:6a:48:ae:02:1a:
ea:a8:96:73:31:ef:e7:c7:e8:36:63:93:89:2b:76:2c:5a:15:
9d:c6:f3:80:14:50:2f:9f:fc:d0:c9:ac:e1:aa:25:ab:cc:35:
74:e6:d1:9b:c0:de:8e:d3:3c:46:28:93:b5:f5:3f:28:f8:4f:
15:fd:a6:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4jw6DMHfLXXvTAWUNhZHCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNzI4ODk4MmFkZDgzNjQyZjgxYTNkZWJhOGY4NTZmMTRl
MDk5MGEwHhcNMjUwNjI4MjIwMTEyWhcNMjUwNjI5MjIwMTEyWjAzMTEwLwYDVQQD
Eyg4MTk0NjJkNjYwOGQ4NzliYmFkODExMWUwMzI0MjUzZmFmNzJhM2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ira9jFkGWGGLCZarIUggBGahO3C
/Hc4BrID0Zg5udXm3BLyIPOJHAWgzWGt5rm1NrpIdRWCX/R6zkff1l4r28toEBmo
uJSNSE+mSDaAFPs/SC3p/jwM/FxM0Frkt3tnwx5i44oU3GDLHuMikYkecjglsL56
uDioqCywfRZ50HrOxc7zrWPSuQm0RkWbzDmkSzR4u7lHHRv/fn/aXPPSbM7kZq/9
Wvmskj46YvocdGlGWzZAxD4AAmvQAgEbj8FO/3ZAIb5gVrfQEJbJoLgkTFks/l1F
2bfOAtLvfnRdE/oUXXgFLgS90XGbqDjjWUg/GnnQpMcF/dW3Qqgew98M9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIGUYtZgjYebutgRHgMkJT+vcqPWMB8GA1UdIwQY
MBaAFC5yiJgq3YNkL4Gj3rqPhW8U4JkKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG5LSW1DcmRnMlF2Z2FQZXVvLUZieFRnbVFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kNWM0NWEtODQ0OC00N2I4LWI1Nzct
YWY5ZDY5NWU5NDBmLzEvTG5LSW1DcmRnMlF2Z2FQZXVvLUZieFRnbVFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kNWM0NWEtODQ0OC00N2I4LWI1NzctYWY5ZDY5NWU5NDBm
LzEvTG5LSW1DcmRnMlF2Z2FQZXVvLUZieFRnbVFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfZsI9vF1
DzNfB21hMna8Si2dXAHZHuc4RROlVQZJpxdphmewX4fz9mP8v0xqx1qWc0ilAC2+
MyITEhiGQXnC6Hn88AkP4Y+bNfYwdaDo5SRjMfONo0duRGboXLiepfEoG/XpsujH
ZX5LVLuiDLhSKzN4c6qwc2HkecklBeFXsYf1pWeN9G4ehXWSh+scE9q5H7kGkmav
t9hkxgSBLbIC+DYeMioKnc+JWvs9+5dEi5lxd+DXtG3/q1bWi4FQChAqsWpIrgIa
6qiWczHv58foNmOTiSt2LFoVncbzgBRQL5/80Mms4aolq8w1dObRm8DejtM8RiiT
tfU/KPhPFf2m4Q==
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:47:33 2025 by rpki-client