Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
File: LVI5glUpDjKGgNboyAzZGPhkF4Q.mft (raw, json)
Hash identifier: Zi8qeBhjkh8Y4nkLrOSjR7D2QJOcaQ96d2W6ISemQhg=
Subject key identifier: 50:4E:EE:FF:96:7C:D9:FB:D6:FC:61:1B:83:B4:25:D8:8B:2A:4A:9D
Authority key identifier: 2D:52:39:82:55:29:0E:32:86:80:D6:E8:C8:0C:D9:18:F8:64:17:84
Certificate issuer: /CN=2d52398255290e328680d6e8c80cd918f8641784
Certificate serial: 0197B77C4FD171E12901C18735454FD4A4FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
Manifest number: 12DA
Signing time: Sat 28 Jun 2025 17:01:06 +0000
Manifest this update: Sat 28 Jun 2025 17:01:06 +0000
Manifest next update: Sun 29 Jun 2025 17:01:06 +0000
Files and hashes: 1: LVI5glUpDjKGgNboyAzZGPhkF4Q.crl (hash: bORTCpr8KyBpaxzPA4COm1xIgVzGZZ1LZDETgh5+Nic=)
2: _bmYfKJFyK9blFnDt5sQ68mX470.roa (hash: /IaqLo5gnKUuY45J9bE0d2C3v3+D2fXVryN2uunSGag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:4f:d1:71:e1:29:01:c1:87:35:45:4f:d4:a4:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d52398255290e328680d6e8c80cd918f8641784
Validity
Not Before: Jun 28 17:01:06 2025 GMT
Not After : Jun 29 17:01:06 2025 GMT
Subject: CN=504eeeff967cd9fbd6fc611b83b425d88b2a4a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:15:30:19:8e:8f:b2:6b:8c:1b:0b:d0:cc:75:
a9:a7:b8:91:7c:1a:54:6f:12:f8:5a:68:f1:5a:21:
66:4f:2e:01:3b:ef:16:86:a4:9f:40:02:e3:b1:82:
cc:34:fe:28:02:ea:b5:3a:12:54:0f:c9:01:97:31:
d0:ff:53:16:5b:61:50:0b:d8:86:7a:91:6a:e6:9d:
8a:c4:bc:ef:c4:d3:74:aa:14:0c:6c:08:9b:88:ca:
65:7e:af:34:27:d8:df:94:94:3f:93:3e:8b:25:c9:
e2:2d:f5:35:29:84:c6:c7:25:48:86:a8:ba:d6:60:
08:98:da:95:5a:67:2d:2a:83:7d:28:52:36:4f:6b:
ee:08:15:1a:20:8c:19:e1:02:9f:9a:5c:34:31:23:
52:94:c6:ce:9c:fe:90:91:d5:9c:b9:50:52:3d:3e:
39:4f:d6:09:e3:79:99:3c:69:ce:c7:a0:56:d8:4b:
7d:d4:f4:a2:50:a7:75:9c:38:64:56:6e:58:44:df:
eb:32:8f:7f:5b:ee:7b:bc:d6:b3:66:0c:3c:30:d3:
c5:8b:47:be:de:a5:da:7f:44:19:86:d8:23:73:02:
c0:03:39:79:e5:1b:be:f0:18:28:37:f6:a8:0f:d2:
e7:ec:87:03:46:f4:bc:0f:52:0a:b5:24:d4:46:b7:
e6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:4E:EE:FF:96:7C:D9:FB:D6:FC:61:1B:83:B4:25:D8:8B:2A:4A:9D
X509v3 Authority Key Identifier:
keyid:2D:52:39:82:55:29:0E:32:86:80:D6:E8:C8:0C:D9:18:F8:64:17:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVI5glUpDjKGgNboyAzZGPhkF4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fcd3c3-f495-4d21-a8b0-49061fffd02a/1/LVI5glUpDjKGgNboyAzZGPhkF4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:e1:38:66:47:c8:6d:e0:14:38:91:73:32:76:5c:88:ab:15:
99:94:2f:86:63:c6:5a:ad:70:6e:10:c7:f0:17:07:ae:d4:c2:
02:bb:2b:ea:45:d4:27:17:47:72:8c:d1:63:b0:bf:7c:98:cb:
64:61:e9:cc:6e:58:21:aa:73:16:45:59:75:bf:da:4e:29:a6:
20:6e:f1:94:98:68:e6:c9:cc:7c:0f:c1:ce:20:a5:8a:b6:53:
b7:fd:bd:76:bb:c3:2b:26:d6:c3:c9:c0:b2:31:c8:c3:4d:fe:
f2:45:98:7d:79:54:1d:9b:ed:c9:06:fc:48:12:bd:7e:ab:98:
d6:03:0c:7f:db:8e:c2:44:77:72:c3:a7:d1:83:38:90:17:d2:
10:d8:56:5b:60:23:35:38:fe:ce:8d:e3:f6:d5:2b:71:4a:e9:
2c:e2:83:b3:37:b8:08:75:b5:1e:2b:8e:ee:b9:18:e4:22:c3:
86:39:04:72:45:3b:4d:85:ed:4a:42:47:48:e7:98:4e:fc:58:
bb:fe:d7:df:f6:50:d9:e3:0c:ee:52:3d:97:4e:27:2c:66:19:
09:fb:12:35:ef:0c:32:39:eb:38:c2:8e:f9:99:b5:aa:c6:21:
30:1b:ef:73:89:64:3b:1d:ea:80:dc:b3:44:7a:57:6f:e7:fb:
59:bd:32:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fE/RceEpAcGHNUVP1KT+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNTIzOTgyNTUyOTBlMzI4NjgwZDZlOGM4MGNkOTE4Zjg2
NDE3ODQwHhcNMjUwNjI4MTcwMTA2WhcNMjUwNjI5MTcwMTA2WjAzMTEwLwYDVQQD
Eyg1MDRlZWVmZjk2N2NkOWZiZDZmYzYxMWI4M2I0MjVkODhiMmE0YTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBUwGY6PsmuMGwvQzHWpp7iRfBpU
bxL4WmjxWiFmTy4BO+8WhqSfQALjsYLMNP4oAuq1OhJUD8kBlzHQ/1MWW2FQC9iG
epFq5p2KxLzvxNN0qhQMbAibiMplfq80J9jflJQ/kz6LJcniLfU1KYTGxyVIhqi6
1mAImNqVWmctKoN9KFI2T2vuCBUaIIwZ4QKfmlw0MSNSlMbOnP6QkdWcuVBSPT45
T9YJ43mZPGnOx6BW2Et91PSiUKd1nDhkVm5YRN/rMo9/W+57vNazZgw8MNPFi0e+
3qXaf0QZhtgjcwLAAzl55Ru+8BgoN/aoD9Ln7IcDRvS8D1IKtSTURrfmcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFBO7v+WfNn71vxhG4O0JdiLKkqdMB8GA1UdIwQY
MBaAFC1SOYJVKQ4yhoDW6MgM2Rj4ZBeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFZJNWdsVXBEaktHZ05ib3lBelpHUGhrRjRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9mY2QzYzMtZjQ5NS00ZDIxLWE4YjAt
NDkwNjFmZmZkMDJhLzEvTFZJNWdsVXBEaktHZ05ib3lBelpHUGhrRjRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9mY2QzYzMtZjQ5NS00ZDIxLWE4YjAtNDkwNjFmZmZkMDJh
LzEvTFZJNWdsVXBEaktHZ05ib3lBelpHUGhrRjRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARuE4ZkfI
beAUOJFzMnZciKsVmZQvhmPGWq1wbhDH8BcHrtTCArsr6kXUJxdHcozRY7C/fJjL
ZGHpzG5YIapzFkVZdb/aTimmIG7xlJho5snMfA/BziClirZTt/29drvDKybWw8nA
sjHIw03+8kWYfXlUHZvtyQb8SBK9fquY1gMMf9uOwkR3csOn0YM4kBfSENhWW2Aj
NTj+zo3j9tUrcUrpLOKDsze4CHW1HiuO7rkY5CLDhjkEckU7TYXtSkJHSOeYTvxY
u/7X3/ZQ2eMM7lI9l04nLGYZCfsSNe8MMjnrOMKO+Zm1qsYhMBvvc4lkOx3qgNyz
RHpXb+f7Wb0yfw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:50:37 2025 by rpki-client