Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
File: LkFFfaHqbHmxtr6lLGSnobXylkg.mft (raw, json)
Hash identifier: iO23uUu8PMSR0YiRpH2ySdp3rQ4wrp7htG8X4x/G4DE=
Subject key identifier: 32:BC:0E:A5:5C:1B:0E:EF:60:AA:F9:7E:FB:F6:67:9E:73:70:EC:52
Authority key identifier: 2E:41:45:7D:A1:EA:6C:79:B1:B6:BE:A5:2C:64:A7:A1:B5:F2:96:48
Certificate issuer: /CN=2e41457da1ea6c79b1b6bea52c64a7a1b5f29648
Certificate serial: 0197B6A140BC446B368430E83F1C277D27E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 13:01:50 +0000
Manifest this update: Sat 28 Jun 2025 13:01:50 +0000
Manifest next update: Sun 29 Jun 2025 13:01:50 +0000
Files and hashes: 1: LkFFfaHqbHmxtr6lLGSnobXylkg.crl (hash: oajPAcm6m03AZ6cK5XWqw6DssS/NBARpsWPVURLiSLc=)
2: RIRzVPPhcE8vA4XvF5JriP-fYwY.roa (hash: WtatU7VzUfyqgkJxN/FnJMt83P40z2B19888ZIjTAHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:40:bc:44:6b:36:84:30:e8:3f:1c:27:7d:27:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e41457da1ea6c79b1b6bea52c64a7a1b5f29648
Validity
Not Before: Jun 28 13:01:50 2025 GMT
Not After : Jun 29 13:01:50 2025 GMT
Subject: CN=32bc0ea55c1b0eef60aaf97efbf6679e7370ec52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0d:3b:87:cb:ce:b6:06:5e:49:fd:58:36:9a:
31:58:1c:47:06:a5:86:02:d5:42:c6:9a:05:0f:80:
8d:29:3c:56:de:02:f2:24:c8:b4:7a:cf:4d:9e:c7:
55:85:c6:3f:57:d6:3e:d3:11:c6:cf:a3:2e:f2:4a:
23:bb:c2:a0:96:0c:eb:ac:14:08:7b:7a:5f:f3:11:
90:d4:6b:fc:bf:23:c3:3a:f5:89:3c:cb:7a:cb:89:
d2:f4:28:3e:40:48:5a:84:b0:11:3a:db:28:4a:ad:
fc:30:57:ea:d1:2a:11:ae:f9:e9:33:98:49:42:b3:
3f:90:a0:e0:bd:a7:cf:31:af:63:0f:bb:77:f2:07:
7d:e1:53:97:d5:52:ff:7e:15:16:a3:3a:81:40:1e:
59:8d:4c:23:5e:97:1a:21:37:58:58:6f:df:3c:60:
ad:3c:26:b6:58:88:d5:29:79:07:08:81:44:eb:34:
75:cf:17:59:a7:dc:1b:bd:97:26:c5:04:e2:d0:69:
30:32:cd:1a:9f:41:46:1d:a3:4b:03:98:0d:9d:4d:
26:cc:d1:77:29:15:51:bf:7e:62:70:c6:99:fd:d5:
35:94:5e:33:20:46:ec:97:d4:ad:ce:ad:11:77:ee:
84:3b:24:8e:45:8a:53:8a:e1:50:4e:88:92:92:94:
83:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:BC:0E:A5:5C:1B:0E:EF:60:AA:F9:7E:FB:F6:67:9E:73:70:EC:52
X509v3 Authority Key Identifier:
keyid:2E:41:45:7D:A1:EA:6C:79:B1:B6:BE:A5:2C:64:A7:A1:B5:F2:96:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f7:f1:cc:01:21:41:78:f0:94:2b:17:ef:dc:f4:84:8b:ea:
02:1b:0d:6e:26:7b:00:20:8f:b9:74:1e:b5:fe:46:5c:b4:b1:
c4:2c:c7:17:56:2a:48:b5:90:b3:9e:e8:77:17:15:71:a1:b3:
78:c7:58:25:62:eb:88:4e:ad:6b:12:22:9d:1d:56:11:77:5e:
00:85:12:b6:92:db:c7:a1:e8:fc:70:32:61:a5:08:22:8a:eb:
43:b1:3f:ec:07:90:ec:ea:63:c8:34:39:fe:76:ef:46:ad:d7:
1f:ad:74:6e:0d:05:36:86:53:e0:b2:d5:f9:9b:cb:48:48:ff:
43:c7:e7:7e:27:8f:61:10:f8:c7:d3:9c:81:dd:6d:ce:90:c5:
fd:80:b8:ee:0a:8e:dd:e8:ad:c0:6d:1b:6e:9e:00:a8:a9:65:
f4:41:86:d7:0e:ec:51:9c:3f:32:d9:f2:5b:d5:dc:c7:a4:36:
9e:fc:fa:d4:97:12:eb:c7:c1:c8:d2:cf:c2:80:70:72:5b:10:
b4:c3:30:5f:e7:06:49:d0:24:42:1c:95:1f:66:91:e0:a8:1b:
98:dc:dc:86:7b:a0:c8:7b:b9:12:2a:ea:27:14:de:f8:17:b8:
73:f9:47:55:78:b0:b9:7a:bd:b8:e2:a0:96:ad:e4:f7:ce:66:
93:9b:d5:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oUC8RGs2hDDoPxwnfSfkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNDE0NTdkYTFlYTZjNzliMWI2YmVhNTJjNjRhN2ExYjVm
Mjk2NDgwHhcNMjUwNjI4MTMwMTUwWhcNMjUwNjI5MTMwMTUwWjAzMTEwLwYDVQQD
EygzMmJjMGVhNTVjMWIwZWVmNjBhYWY5N2VmYmY2Njc5ZTczNzBlYzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwg07h8vOtgZeSf1YNpoxWBxHBqWG
AtVCxpoFD4CNKTxW3gLyJMi0es9NnsdVhcY/V9Y+0xHGz6Mu8koju8KglgzrrBQI
e3pf8xGQ1Gv8vyPDOvWJPMt6y4nS9Cg+QEhahLAROtsoSq38MFfq0SoRrvnpM5hJ
QrM/kKDgvafPMa9jD7t38gd94VOX1VL/fhUWozqBQB5ZjUwjXpcaITdYWG/fPGCt
PCa2WIjVKXkHCIFE6zR1zxdZp9wbvZcmxQTi0GkwMs0an0FGHaNLA5gNnU0mzNF3
KRVRv35icMaZ/dU1lF4zIEbsl9Stzq0Rd+6EOySORYpTiuFQToiSkpSDZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDK8DqVcGw7vYKr5fvv2Z55zcOxSMB8GA1UdIwQY
MBaAFC5BRX2h6mx5sba+pSxkp6G18pZIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGtGRmZhSHFiSG14dHI2bExHU25vYlh5bGtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84ZmFkOGItYTAzMy00NDg0LTg4NWUt
ZTAyODcyZDFkYjAxLzEvTGtGRmZhSHFiSG14dHI2bExHU25vYlh5bGtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC84ZmFkOGItYTAzMy00NDg0LTg4NWUtZTAyODcyZDFkYjAx
LzEvTGtGRmZhSHFiSG14dHI2bExHU25vYlh5bGtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARPfxzAEh
QXjwlCsX79z0hIvqAhsNbiZ7ACCPuXQetf5GXLSxxCzHF1YqSLWQs57odxcVcaGz
eMdYJWLriE6taxIinR1WEXdeAIUStpLbx6Ho/HAyYaUIIorrQ7E/7AeQ7OpjyDQ5
/nbvRq3XH610bg0FNoZT4LLV+ZvLSEj/Q8fnfiePYRD4x9Ocgd1tzpDF/YC47gqO
3eitwG0bbp4AqKll9EGG1w7sUZw/MtnyW9Xcx6Q2nvz61JcS68fByNLPwoBwclsQ
tMMwX+cGSdAkQhyVH2aR4KgbmNzchnugyHu5EirqJxTe+Be4c/lHVXiwuXq9uOKg
lq3k985mk5vVmA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:37:11 2025 by rpki-client