Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b3c41a-492c-45e4-89d6-dcc4c45bf162/1/lsgslDmkFHsuorWXz_xRALqNMnw.mft
File: lsgslDmkFHsuorWXz_xRALqNMnw.mft (raw, json)
Hash identifier: lfUd094diGJC1PQ6fIFLQG9dAe4NNJIYP9INzoA4gaI=
Subject key identifier: F3:84:F9:FC:B1:DC:49:11:F4:9D:73:20:04:04:95:23:DC:89:E6:09
Authority key identifier: 96:C8:2C:94:39:A4:14:7B:2E:A2:B5:97:CF:FC:51:00:BA:8D:32:7C
Certificate issuer: /CN=96c82c9439a4147b2ea2b597cffc5100ba8d327c
Certificate serial: 0197B6A17B09832D51566911260EB2DD0EAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsgslDmkFHsuorWXz_xRALqNMnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b3c41a-492c-45e4-89d6-dcc4c45bf162/1/lsgslDmkFHsuorWXz_xRALqNMnw.mft
Manifest number: 1175
Signing time: Sat 28 Jun 2025 13:02:05 +0000
Manifest this update: Sat 28 Jun 2025 13:02:05 +0000
Manifest next update: Sun 29 Jun 2025 13:02:05 +0000
Files and hashes: 1: lsgslDmkFHsuorWXz_xRALqNMnw.crl (hash: qCVZqsePxX4N2yzJp9Zt/rJqQQ38+mZpzxyPZkBqPMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b3c41a-492c-45e4-89d6-dcc4c45bf162/1/lsgslDmkFHsuorWXz_xRALqNMnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/b3c41a-492c-45e4-89d6-dcc4c45bf162/1/lsgslDmkFHsuorWXz_xRALqNMnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lsgslDmkFHsuorWXz_xRALqNMnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:7b:09:83:2d:51:56:69:11:26:0e:b2:dd:0e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96c82c9439a4147b2ea2b597cffc5100ba8d327c
Validity
Not Before: Jun 28 13:02:05 2025 GMT
Not After : Jun 29 13:02:05 2025 GMT
Subject: CN=f384f9fcb1dc4911f49d732004049523dc89e609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cb:a5:28:a9:47:5c:0d:8e:fc:c9:bc:95:40:
ff:3d:7a:df:c9:2e:77:93:73:31:14:7e:5e:17:d6:
4f:79:9c:0e:07:4b:d5:ec:16:fb:e9:9c:f7:57:57:
d1:80:22:50:2b:a3:38:14:a4:92:3e:f7:b4:72:64:
22:f7:15:eb:3d:f7:7b:a4:32:aa:9e:16:c1:49:ee:
1c:d2:17:29:42:7f:aa:15:41:e1:8c:ee:bc:fc:ac:
fc:b3:f5:09:1c:53:35:d3:57:ab:ef:25:3e:3d:2c:
c4:19:cf:e3:89:e7:e8:39:80:f3:cc:eb:f5:38:96:
bc:ea:38:29:54:8e:cf:19:4c:c9:e9:e8:c9:79:74:
df:4d:66:66:ac:2f:1d:2e:e0:00:c4:7e:ba:b1:62:
88:ff:5a:2a:0f:81:55:71:99:56:b8:75:ad:1a:90:
27:c8:53:35:65:a2:8c:66:26:f1:27:f6:91:29:2d:
e3:c5:80:ba:83:cc:e6:6b:d3:95:fc:3d:bd:9b:3a:
c9:25:f7:2f:68:c7:24:f3:3d:de:84:51:be:c8:1a:
b6:94:aa:7e:ea:94:ee:7a:c0:9f:d2:f0:8a:50:7a:
94:dc:e4:80:d0:93:d2:b4:46:f5:a8:40:fc:17:f0:
d7:65:34:8e:60:92:fb:b3:73:a9:7c:5b:46:5e:a1:
35:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:84:F9:FC:B1:DC:49:11:F4:9D:73:20:04:04:95:23:DC:89:E6:09
X509v3 Authority Key Identifier:
keyid:96:C8:2C:94:39:A4:14:7B:2E:A2:B5:97:CF:FC:51:00:BA:8D:32:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsgslDmkFHsuorWXz_xRALqNMnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b3c41a-492c-45e4-89d6-dcc4c45bf162/1/lsgslDmkFHsuorWXz_xRALqNMnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b3c41a-492c-45e4-89d6-dcc4c45bf162/1/lsgslDmkFHsuorWXz_xRALqNMnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:22:6e:da:cb:1e:4a:f6:a1:e5:0d:1f:1c:58:4f:3f:d8:bb:
85:af:4a:f4:8e:8c:40:90:af:f9:76:5e:4f:b7:79:a9:28:4c:
b5:51:8d:77:5b:01:b1:7f:0d:ab:f7:59:91:b9:3d:2f:a5:67:
c4:13:95:40:0a:90:3d:80:3d:39:fc:38:3c:61:6d:64:24:c6:
bd:65:bf:e0:4f:bb:72:c0:cd:ca:58:a6:f6:4a:1b:73:d5:7c:
b8:c9:de:f3:f9:8c:63:19:3d:e6:95:a8:fa:ce:07:56:f9:6f:
16:85:1d:8c:57:82:30:ee:0b:42:8f:62:80:e4:38:d6:0d:15:
c5:ca:3a:0f:62:65:98:9f:7b:17:38:12:9b:82:c3:10:d3:e7:
b8:fa:9d:11:8b:61:0b:42:60:ad:8d:55:d3:b8:98:58:f8:cd:
91:63:57:44:cd:fa:80:89:05:02:14:2b:a8:3f:62:9e:f2:4f:
ba:8b:2a:16:bd:b7:bd:7c:82:0c:cf:47:01:97:f0:1c:1f:ee:
aa:99:b4:e8:8d:6a:1d:b6:f8:f1:e0:4f:15:f4:0e:15:0c:1c:
50:a5:d4:40:62:32:ea:07:61:7b:fc:47:f4:6c:82:a6:dd:db:
80:36:7e:78:06:cc:e2:1b:40:fe:a4:01:0b:0c:75:6e:9b:ca:
45:ca:62:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oXsJgy1RVmkRJg6y3Q6qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2YzgyYzk0MzlhNDE0N2IyZWEyYjU5N2NmZmM1MTAwYmE4
ZDMyN2MwHhcNMjUwNjI4MTMwMjA1WhcNMjUwNjI5MTMwMjA1WjAzMTEwLwYDVQQD
EyhmMzg0ZjlmY2IxZGM0OTExZjQ5ZDczMjAwNDA0OTUyM2RjODllNjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqculKKlHXA2O/Mm8lUD/PXrfyS53
k3MxFH5eF9ZPeZwOB0vV7Bb76Zz3V1fRgCJQK6M4FKSSPve0cmQi9xXrPfd7pDKq
nhbBSe4c0hcpQn+qFUHhjO68/Kz8s/UJHFM101er7yU+PSzEGc/jiefoOYDzzOv1
OJa86jgpVI7PGUzJ6ejJeXTfTWZmrC8dLuAAxH66sWKI/1oqD4FVcZlWuHWtGpAn
yFM1ZaKMZibxJ/aRKS3jxYC6g8zma9OV/D29mzrJJfcvaMck8z3ehFG+yBq2lKp+
6pTuesCf0vCKUHqU3OSA0JPStEb1qED8F/DXZTSOYJL7s3OpfFtGXqE1EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPOE+fyx3EkR9J1zIAQElSPcieYJMB8GA1UdIwQY
MBaAFJbILJQ5pBR7LqK1l8/8UQC6jTJ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHNnc2xEbWtGSHN1b3JXWHpfeFJBTHFOTW53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9iM2M0MWEtNDkyYy00NWU0LTg5ZDYt
ZGNjNGM0NWJmMTYyLzEvbHNnc2xEbWtGSHN1b3JXWHpfeFJBTHFOTW53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9iM2M0MWEtNDkyYy00NWU0LTg5ZDYtZGNjNGM0NWJmMTYy
LzEvbHNnc2xEbWtGSHN1b3JXWHpfeFJBTHFOTW53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkSJu2sse
Svah5Q0fHFhPP9i7ha9K9I6MQJCv+XZeT7d5qShMtVGNd1sBsX8Nq/dZkbk9L6Vn
xBOVQAqQPYA9Ofw4PGFtZCTGvWW/4E+7csDNylim9kobc9V8uMne8/mMYxk95pWo
+s4HVvlvFoUdjFeCMO4LQo9igOQ41g0Vxco6D2JlmJ97FzgSm4LDENPnuPqdEYth
C0JgrY1V07iYWPjNkWNXRM36gIkFAhQrqD9invJPuosqFr23vXyCDM9HAZfwHB/u
qpm06I1qHbb48eBPFfQOFQwcUKXUQGIy6gdhe/xH9GyCpt3bgDZ+eAbM4htA/qQB
Cwx1bpvKRcpitw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:56:58 2025 by rpki-client