Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/7929f4-ec35-4d9c-92a8-0eb45ef62d8d/1/LxW3OnwtEx7BTr2QcXGLVMP7ppI.mft
File: LxW3OnwtEx7BTr2QcXGLVMP7ppI.mft (raw, json)
Hash identifier: eQDp6sCrMuIr8yfykD47sFDb5SPZcMEeoE17EywqJHE=
Subject key identifier: 3E:5E:1A:CE:A0:3F:71:9A:B0:F7:BA:27:94:44:FF:62:EE:09:BD:55
Authority key identifier: 2F:15:B7:3A:7C:2D:13:1E:C1:4E:BD:90:71:71:8B:54:C3:FB:A6:92
Certificate issuer: /CN=2f15b73a7c2d131ec14ebd9071718b54c3fba692
Certificate serial: 0197B6A168B81D8D518D6280474A6D75DBC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxW3OnwtEx7BTr2QcXGLVMP7ppI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/7929f4-ec35-4d9c-92a8-0eb45ef62d8d/1/LxW3OnwtEx7BTr2QcXGLVMP7ppI.mft
Manifest number: 02C9
Signing time: Sat 28 Jun 2025 13:02:00 +0000
Manifest this update: Sat 28 Jun 2025 13:02:00 +0000
Manifest next update: Sun 29 Jun 2025 13:02:00 +0000
Files and hashes: 1: LxW3OnwtEx7BTr2QcXGLVMP7ppI.crl (hash: 3g7L3lL3xquZ8wEC/0nSSCqO+6KPQUBYaQdjs3MQeyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/7929f4-ec35-4d9c-92a8-0eb45ef62d8d/1/LxW3OnwtEx7BTr2QcXGLVMP7ppI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/7929f4-ec35-4d9c-92a8-0eb45ef62d8d/1/LxW3OnwtEx7BTr2QcXGLVMP7ppI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxW3OnwtEx7BTr2QcXGLVMP7ppI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:68:b8:1d:8d:51:8d:62:80:47:4a:6d:75:db:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f15b73a7c2d131ec14ebd9071718b54c3fba692
Validity
Not Before: Jun 28 13:02:00 2025 GMT
Not After : Jun 29 13:02:00 2025 GMT
Subject: CN=3e5e1acea03f719ab0f7ba279444ff62ee09bd55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:00:20:09:e6:06:f6:f8:4a:3a:44:9c:68:a8:
1a:be:40:3c:d5:3d:a3:60:6f:b0:72:d1:b4:d1:52:
e9:b4:f9:b2:35:1f:9c:4b:0c:1c:aa:91:45:ca:32:
bd:76:bd:08:8f:a5:5c:f6:17:6e:fa:7d:76:82:7d:
57:da:0e:29:67:7f:08:43:ae:7f:34:57:dc:0d:f7:
98:50:d5:74:19:42:0e:a2:ff:50:78:24:99:ef:cd:
9b:43:bb:5d:cd:53:be:20:2c:b9:62:5c:69:d0:c6:
05:84:bd:91:f0:14:40:c9:46:91:90:37:a1:31:3e:
78:42:51:e4:a0:69:87:2d:5e:85:d5:1f:85:b4:69:
48:c3:b7:c0:87:92:cd:93:b0:a8:47:16:01:93:ec:
8a:4f:7b:da:9c:95:4e:c2:a1:3c:9b:c1:b8:bb:89:
69:49:04:1b:07:8e:02:08:62:73:ef:49:bc:37:d5:
4a:4f:6e:8c:7e:82:87:56:8c:db:a5:cd:07:03:60:
18:30:fa:3c:b6:1d:7d:97:a0:f7:39:cd:93:2a:50:
60:51:b6:d2:2b:46:6d:29:4d:49:d3:bd:ba:da:85:
ff:e5:4c:8d:5f:35:84:0b:a6:b7:d5:91:d2:57:77:
bb:89:97:c6:2b:e9:ce:e1:12:ab:00:fe:4a:6a:0c:
1b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:5E:1A:CE:A0:3F:71:9A:B0:F7:BA:27:94:44:FF:62:EE:09:BD:55
X509v3 Authority Key Identifier:
keyid:2F:15:B7:3A:7C:2D:13:1E:C1:4E:BD:90:71:71:8B:54:C3:FB:A6:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxW3OnwtEx7BTr2QcXGLVMP7ppI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7929f4-ec35-4d9c-92a8-0eb45ef62d8d/1/LxW3OnwtEx7BTr2QcXGLVMP7ppI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7929f4-ec35-4d9c-92a8-0eb45ef62d8d/1/LxW3OnwtEx7BTr2QcXGLVMP7ppI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ff:87:ac:4a:b0:b7:8f:e8:37:54:6c:81:3b:49:be:f5:3c:
fa:a6:d1:3b:9c:2a:05:0d:8c:3d:f9:61:aa:a8:28:7d:24:e3:
cd:4c:7e:80:fc:37:46:2b:77:22:da:8b:9e:b3:bd:88:e7:13:
57:5a:61:28:96:53:6d:82:4b:98:f7:3e:f4:67:f8:5e:5a:2e:
af:28:65:89:cd:b8:8e:13:17:0d:2d:2c:e8:15:ef:a3:dd:67:
28:b2:12:11:16:ed:ef:f3:16:36:f8:38:64:64:c1:cd:13:d0:
ca:9c:ea:a8:19:bd:fa:72:f1:6a:8f:26:b5:77:ff:75:c3:86:
ea:7d:15:f0:08:2f:92:34:46:3b:93:05:4d:5e:76:77:55:65:
7b:a9:e1:3b:23:3c:f4:f0:ff:df:9a:62:f1:45:6b:e2:4a:8d:
e3:11:64:30:6a:18:37:22:f6:62:a1:c1:af:32:2f:31:1f:40:
50:03:73:4f:b3:a8:b6:50:83:2f:98:a9:f6:9c:e5:36:65:ff:
d1:6a:99:cb:6c:e8:98:80:f5:51:d5:69:82:2a:fd:58:92:7b:
81:de:bb:6a:13:46:de:e7:e8:4e:44:2a:9c:e9:be:8f:fb:c2:
e5:f7:69:dd:2a:c4:63:95:6e:e2:22:fc:65:9d:fd:b8:d7:72:
c0:55:02:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oWi4HY1RjWKAR0ptddvHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMTViNzNhN2MyZDEzMWVjMTRlYmQ5MDcxNzE4YjU0YzNm
YmE2OTIwHhcNMjUwNjI4MTMwMjAwWhcNMjUwNjI5MTMwMjAwWjAzMTEwLwYDVQQD
EygzZTVlMWFjZWEwM2Y3MTlhYjBmN2JhMjc5NDQ0ZmY2MmVlMDliZDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAAgCeYG9vhKOkScaKgavkA81T2j
YG+wctG00VLptPmyNR+cSwwcqpFFyjK9dr0Ij6Vc9hdu+n12gn1X2g4pZ38IQ65/
NFfcDfeYUNV0GUIOov9QeCSZ782bQ7tdzVO+ICy5Ylxp0MYFhL2R8BRAyUaRkDeh
MT54QlHkoGmHLV6F1R+FtGlIw7fAh5LNk7CoRxYBk+yKT3vanJVOwqE8m8G4u4lp
SQQbB44CCGJz70m8N9VKT26MfoKHVozbpc0HA2AYMPo8th19l6D3Oc2TKlBgUbbS
K0ZtKU1J07262oX/5UyNXzWEC6a31ZHSV3e7iZfGK+nO4RKrAP5KagwbkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD5eGs6gP3GasPe6J5RE/2LuCb1VMB8GA1UdIwQY
MBaAFC8Vtzp8LRMewU69kHFxi1TD+6aSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHhXM09ud3RFeDdCVHIyUWNYR0xWTVA3cHBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83OTI5ZjQtZWMzNS00ZDljLTkyYTgt
MGViNDVlZjYyZDhkLzEvTHhXM09ud3RFeDdCVHIyUWNYR0xWTVA3cHBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83OTI5ZjQtZWMzNS00ZDljLTkyYTgtMGViNDVlZjYyZDhk
LzEvTHhXM09ud3RFeDdCVHIyUWNYR0xWTVA3cHBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG/+HrEqw
t4/oN1RsgTtJvvU8+qbRO5wqBQ2MPflhqqgofSTjzUx+gPw3Rit3ItqLnrO9iOcT
V1phKJZTbYJLmPc+9Gf4Xlouryhlic24jhMXDS0s6BXvo91nKLISERbt7/MWNvg4
ZGTBzRPQypzqqBm9+nLxao8mtXf/dcOG6n0V8AgvkjRGO5MFTV52d1Vle6nhOyM8
9PD/35pi8UVr4kqN4xFkMGoYNyL2YqHBrzIvMR9AUANzT7OotlCDL5ip9pzlNmX/
0WqZy2zomID1UdVpgir9WJJ7gd67ahNG3ufoTkQqnOm+j/vC5fdp3SrEY5Vu4iL8
ZZ39uNdywFUCzw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 18:54:51 2025 by rpki-client