Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
File: LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft (raw, json)
Hash identifier: +AxXqHx4odzSU6nUEkdyAPr98N3IzpiJzKwIMSvsL6k=
Subject key identifier: C0:2B:24:B2:DD:24:21:4D:5A:A7:51:3A:C2:BC:38:73:C9:AF:92:58
Authority key identifier: 2E:48:19:09:55:94:80:D2:48:49:0D:8E:1D:71:C3:C0:93:B0:5F:E5
Certificate issuer: /CN=2e481909559480d248490d8e1d71c3c093b05fe5
Certificate serial: 0196BFA60D00F62860DD9A4FEEBFC07BB150
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
Manifest number: 1531
Signing time: Sun 11 May 2025 14:00:52 +0000
Manifest this update: Sun 11 May 2025 14:00:52 +0000
Manifest next update: Mon 12 May 2025 14:00:52 +0000
Files and hashes: 1: LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl (hash: 9eQWhvdFoMIv/wJLzPtQULHrKwDI2TAM/Wq5j4js910=)
2: pRiOuP5ZVMbih8_UbkXq1OLRH1c.roa (hash: TjkUGx8VVF7JIz25EEx+I/z8EyX0AiRRScQg07c6hKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:a6:0d:00:f6:28:60:dd:9a:4f:ee:bf:c0:7b:b1:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e481909559480d248490d8e1d71c3c093b05fe5
Validity
Not Before: May 11 14:00:52 2025 GMT
Not After : May 12 14:00:52 2025 GMT
Subject: CN=c02b24b2dd24214d5aa7513ac2bc3873c9af9258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6f:f2:c5:69:65:80:30:13:5f:20:ea:a4:4e:
43:e5:e4:a5:90:76:64:da:49:fd:26:74:48:32:ab:
05:3f:cc:dc:e5:6b:a1:5c:33:a6:1f:7f:f7:70:cf:
e5:43:d8:cf:c7:64:4a:a9:b9:91:d6:ff:9d:41:8f:
23:0e:65:9f:74:fb:ca:46:31:0d:1a:8f:7d:6c:db:
cb:46:a7:34:73:33:ca:e1:68:e5:ec:4e:63:42:30:
67:c3:18:72:f0:03:12:de:f6:7a:75:41:01:70:f0:
6e:9f:73:e9:cb:a4:9c:e8:61:5f:a6:55:5c:b8:73:
9e:a9:26:ad:e7:88:5e:ca:f3:ba:b5:1b:81:81:3c:
54:2c:d5:79:d2:f2:0c:80:f5:e0:16:10:1b:e9:92:
49:65:eb:86:54:c8:fa:f4:e1:71:40:d5:e9:70:de:
10:73:04:2d:cc:d9:ee:03:4c:44:aa:8c:f5:e1:a8:
28:bd:85:7c:84:09:5d:59:7d:fb:16:99:e5:da:2e:
84:83:1e:0e:99:00:89:14:ba:b1:a8:7b:c2:ce:27:
ea:b8:23:22:b6:a1:45:77:99:ad:80:a3:0f:ef:5e:
8f:51:8a:fb:64:78:3f:e5:cf:d8:8d:e5:ae:a2:cb:
9c:83:5f:ec:27:55:a4:7b:b4:b8:13:64:e5:f9:ec:
57:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:2B:24:B2:DD:24:21:4D:5A:A7:51:3A:C2:BC:38:73:C9:AF:92:58
X509v3 Authority Key Identifier:
keyid:2E:48:19:09:55:94:80:D2:48:49:0D:8E:1D:71:C3:C0:93:B0:5F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:1d:df:8f:ec:fa:ca:05:1a:0c:32:fd:5a:f5:66:e9:18:92:
05:ce:1b:3c:2f:3a:c0:a6:04:c1:64:9d:2f:4f:40:74:fe:8f:
ba:79:2d:aa:08:c1:7d:39:c7:70:63:20:bf:27:e4:c9:fa:6e:
e8:ec:f9:2f:26:e7:11:8c:45:b1:d4:cb:5a:3b:7f:b3:dd:17:
f3:a7:f5:fd:11:e7:4d:a9:ae:cd:2d:ec:0a:fa:f3:c1:a9:63:
10:84:9f:9a:91:4d:cf:9b:a8:a4:39:f9:83:dc:c0:6f:26:e1:
4f:e1:57:51:f0:30:61:f5:8f:2b:7f:a2:cd:70:6d:92:b6:7e:
39:03:00:f4:45:df:48:68:94:c2:3e:aa:f9:1e:62:f7:e6:f4:
d5:bb:f5:8f:d0:ff:e9:39:e9:9f:5b:5d:71:7c:c0:b3:b7:12:
f4:12:98:91:c6:f8:11:fa:3d:f5:af:d8:fb:3a:74:29:31:de:
d5:c9:11:97:9d:f9:ec:c1:9c:ea:ee:9c:1e:83:53:cc:22:8f:
9a:c1:78:b4:04:03:45:07:d3:db:32:42:23:fd:32:8f:a5:fe:
36:f9:83:52:4c:4f:b5:79:a8:42:e2:0f:3e:52:8f:a1:e6:7e:
c3:0f:99:21:0b:dc:1a:bb:0a:e1:8f:24:4e:f9:46:91:ea:36:
6b:7f:c0:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/pg0A9ihg3ZpP7r/Ae7FQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNDgxOTA5NTU5NDgwZDI0ODQ5MGQ4ZTFkNzFjM2MwOTNi
MDVmZTUwHhcNMjUwNTExMTQwMDUyWhcNMjUwNTEyMTQwMDUyWjAzMTEwLwYDVQQD
EyhjMDJiMjRiMmRkMjQyMTRkNWFhNzUxM2FjMmJjMzg3M2M5YWY5MjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2/yxWllgDATXyDqpE5D5eSlkHZk
2kn9JnRIMqsFP8zc5WuhXDOmH3/3cM/lQ9jPx2RKqbmR1v+dQY8jDmWfdPvKRjEN
Go99bNvLRqc0czPK4Wjl7E5jQjBnwxhy8AMS3vZ6dUEBcPBun3Ppy6Sc6GFfplVc
uHOeqSat54heyvO6tRuBgTxULNV50vIMgPXgFhAb6ZJJZeuGVMj69OFxQNXpcN4Q
cwQtzNnuA0xEqoz14agovYV8hAldWX37Fpnl2i6Egx4OmQCJFLqxqHvCzifquCMi
tqFFd5mtgKMP716PUYr7ZHg/5c/YjeWuosucg1/sJ1Wke7S4E2Tl+exXgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMArJLLdJCFNWqdROsK8OHPJr5JYMB8GA1UdIwQY
MBaAFC5IGQlVlIDSSEkNjh1xw8CTsF/lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGtnWkNWV1VnTkpJU1EyT0hYSER3Sk93WC1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83ZjE2ZWEtMjZkMy00NTdmLTkyY2It
ODdiYzU4ZjM0NjY1LzEvTGtnWkNWV1VnTkpJU1EyT0hYSER3Sk93WC1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi83ZjE2ZWEtMjZkMy00NTdmLTkyY2ItODdiYzU4ZjM0NjY1
LzEvTGtnWkNWV1VnTkpJU1EyT0hYSER3Sk93WC1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdx3fj+z6
ygUaDDL9WvVm6RiSBc4bPC86wKYEwWSdL09AdP6PunktqgjBfTnHcGMgvyfkyfpu
6Oz5LybnEYxFsdTLWjt/s90X86f1/RHnTamuzS3sCvrzwaljEISfmpFNz5uopDn5
g9zAbybhT+FXUfAwYfWPK3+izXBtkrZ+OQMA9EXfSGiUwj6q+R5i9+b01bv1j9D/
6Tnpn1tdcXzAs7cS9BKYkcb4Efo99a/Y+zp0KTHe1ckRl5357MGc6u6cHoNTzCKP
msF4tAQDRQfT2zJCI/0yj6X+NvmDUkxPtXmoQuIPPlKPoeZ+ww+ZIQvcGrsK4Y8k
TvlGkeo2a3/ACA==
-----END CERTIFICATE-----
Generated at Sun May 11 19:03:58 2025 by rpki-client