Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
File: LkJv6Qhstq8B85H_T2nACDZNbu0.mft (raw, json)
Hash identifier: uVSbE4G6/VyYT5fmoP++BfkAZm7RzsSY0kWx7E/DplI=
Subject key identifier: 6C:A7:3C:E7:12:98:3B:2C:F8:92:AE:34:5F:53:EF:16:C0:70:F5:E1
Authority key identifier: 2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED
Certificate issuer: /CN=2e426fe9086cb6af01f391ff4f69c008364d6eed
Certificate serial: 0197B7455C3345144D717977F88B5D238EB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
Manifest number: 154B
Signing time: Sat 28 Jun 2025 16:01:05 +0000
Manifest this update: Sat 28 Jun 2025 16:01:05 +0000
Manifest next update: Sun 29 Jun 2025 16:01:05 +0000
Files and hashes: 1: LkJv6Qhstq8B85H_T2nACDZNbu0.crl (hash: IrUieHv66qV4SX3UnxkEKPkeG9ZqOruApOI7jFJuiyE=)
2: jS_G6el4wEcgi8my5R0XT21ut5Q.roa (hash: Q5lJn0D9zs18LOmkVI8eROdi6ECwhGDbp8byuxpzAUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:5c:33:45:14:4d:71:79:77:f8:8b:5d:23:8e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e426fe9086cb6af01f391ff4f69c008364d6eed
Validity
Not Before: Jun 28 16:01:05 2025 GMT
Not After : Jun 29 16:01:05 2025 GMT
Subject: CN=6ca73ce712983b2cf892ae345f53ef16c070f5e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:3d:a7:d0:21:a2:81:c5:79:69:60:24:ab:44:
8d:7e:5f:06:79:03:81:31:f2:3a:e8:4f:a3:4b:34:
e6:bf:2d:55:4f:6d:6b:d5:95:c9:16:5f:da:c2:7f:
5a:59:18:18:3b:71:ef:fd:7b:a1:1a:40:47:dd:2e:
86:44:0b:30:0f:f5:c8:b1:a8:0a:37:58:ea:87:b7:
8a:06:a6:67:8b:a5:60:54:15:42:45:c9:02:05:e2:
fe:52:09:52:53:3d:5d:e0:83:c6:ca:e5:15:45:ba:
08:f6:59:51:42:4d:79:3b:b2:2d:80:fe:2e:47:93:
72:1f:76:eb:25:b1:32:1b:6e:74:8a:13:e9:0a:6e:
70:8b:d7:f6:8b:b3:a1:4d:19:75:ba:1b:9d:0c:9b:
89:9e:c1:14:7f:03:59:dd:b2:36:5b:9d:d2:5f:a6:
e2:e3:ac:e1:e1:58:5f:f9:88:d5:21:2c:d7:ab:95:
7a:f1:11:71:58:33:4b:ae:8b:bb:76:25:26:a5:99:
e6:f1:7f:12:c4:ef:c5:d1:76:05:05:98:bd:3a:ef:
77:73:62:43:ec:8c:1a:e4:88:9c:be:ad:7f:ef:44:
54:8a:2d:29:c7:8f:2b:76:35:23:b6:6c:0b:a1:09:
6d:99:32:2f:ca:83:e6:7f:ae:54:50:35:3d:50:7a:
d9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A7:3C:E7:12:98:3B:2C:F8:92:AE:34:5F:53:EF:16:C0:70:F5:E1
X509v3 Authority Key Identifier:
keyid:2E:42:6F:E9:08:6C:B6:AF:01:F3:91:FF:4F:69:C0:08:36:4D:6E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkJv6Qhstq8B85H_T2nACDZNbu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ae7101-e4fa-450c-a301-68ad3bdbd39b/1/LkJv6Qhstq8B85H_T2nACDZNbu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:6e:fb:a7:a3:ed:65:e5:22:b0:98:36:78:6e:5c:2a:22:84:
dc:ca:cf:ef:07:20:31:dc:32:66:08:ec:f5:ca:9d:67:4c:e7:
29:1a:95:50:27:1f:b2:a9:79:e6:a5:c3:4b:9b:e3:ef:c7:57:
81:45:82:89:0f:66:f9:c5:20:2e:26:3c:1a:2a:61:1a:c2:d0:
77:fa:21:3c:d0:24:1a:2c:8a:64:b1:3e:6f:df:70:82:fd:66:
5f:03:f9:30:c6:cd:5e:a3:52:b1:cc:d7:f3:8f:b5:b7:fa:ff:
a8:cd:be:c1:f7:02:a0:9c:5f:79:91:fc:e0:82:6b:a6:53:48:
4c:50:3f:ed:10:75:0d:cc:f9:73:2b:37:c6:cf:c2:db:75:2e:
93:fd:ce:1e:42:cb:fa:93:0f:ef:38:de:57:65:d5:ac:c9:ae:
e5:63:7a:d1:c1:4d:1f:45:03:80:ae:f2:d1:f0:a0:36:6e:8e:
79:7e:e9:39:a3:c7:7a:35:69:c2:b3:c3:94:c3:e5:2d:b1:df:
5f:1f:64:f4:f9:71:73:14:f9:35:ab:cd:f7:e1:62:f9:8f:d2:
24:f9:03:55:53:06:5c:af:fb:8b:78:9b:96:bd:45:f7:4d:5a:
40:36:91:9a:c4:d3:a6:e3:b1:f3:1e:66:9f:08:cf:39:f1:cc:
3a:ff:73:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RVwzRRRNcXl3+ItdI46wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNDI2ZmU5MDg2Y2I2YWYwMWYzOTFmZjRmNjljMDA4MzY0
ZDZlZWQwHhcNMjUwNjI4MTYwMTA1WhcNMjUwNjI5MTYwMTA1WjAzMTEwLwYDVQQD
Eyg2Y2E3M2NlNzEyOTgzYjJjZjg5MmFlMzQ1ZjUzZWYxNmMwNzBmNWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8j2n0CGigcV5aWAkq0SNfl8GeQOB
MfI66E+jSzTmvy1VT21r1ZXJFl/awn9aWRgYO3Hv/XuhGkBH3S6GRAswD/XIsagK
N1jqh7eKBqZni6VgVBVCRckCBeL+UglSUz1d4IPGyuUVRboI9llRQk15O7ItgP4u
R5NyH3brJbEyG250ihPpCm5wi9f2i7OhTRl1uhudDJuJnsEUfwNZ3bI2W53SX6bi
46zh4Vhf+YjVISzXq5V68RFxWDNLrou7diUmpZnm8X8SxO/F0XYFBZi9Ou93c2JD
7Iwa5Iicvq1/70RUii0px48rdjUjtmwLoQltmTIvyoPmf65UUDU9UHrZ1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGynPOcSmDss+JKuNF9T7xbAcPXhMB8GA1UdIwQY
MBaAFC5Cb+kIbLavAfOR/09pwAg2TW7tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGtKdjZRaHN0cThCODVIX1QybkFDRFpOYnUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hZTcxMDEtZTRmYS00NTBjLWEzMDEt
NjhhZDNiZGJkMzliLzEvTGtKdjZRaHN0cThCODVIX1QybkFDRFpOYnUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9hZTcxMDEtZTRmYS00NTBjLWEzMDEtNjhhZDNiZGJkMzli
LzEvTGtKdjZRaHN0cThCODVIX1QybkFDRFpOYnUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVG77p6Pt
ZeUisJg2eG5cKiKE3MrP7wcgMdwyZgjs9cqdZ0znKRqVUCcfsql55qXDS5vj78dX
gUWCiQ9m+cUgLiY8GiphGsLQd/ohPNAkGiyKZLE+b99wgv1mXwP5MMbNXqNSsczX
84+1t/r/qM2+wfcCoJxfeZH84IJrplNITFA/7RB1Dcz5cys3xs/C23Uuk/3OHkLL
+pMP7zjeV2XVrMmu5WN60cFNH0UDgK7y0fCgNm6OeX7pOaPHejVpwrPDlMPlLbHf
Xx9k9PlxcxT5NavN9+Fi+Y/SJPkDVVMGXK/7i3iblr1F901aQDaRmsTTpuOx8x5m
nwjPOfHMOv9z1g==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:37:08 2025 by rpki-client