Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
File: LwvxBgr5ORfa-1aagMzsnbCKdsU.mft (raw, json)
Hash identifier: LL9FSVyslzbevEvd3DgAL8tqTI6LNZ90Isxepq9VSvA=
Subject key identifier: 1E:16:B5:03:04:D2:B2:BE:13:3B:39:A2:CF:0F:4F:A9:EB:E4:8F:E7
Authority key identifier: 2F:0B:F1:06:0A:F9:39:17:DA:FB:56:9A:80:CC:EC:9D:B0:8A:76:C5
Certificate issuer: /CN=2f0bf1060af93917dafb569a80ccec9db08a76c5
Certificate serial: 0196A68A9688229045E6887ED23EB8FE841C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
Manifest number: 1063
Signing time: Tue 06 May 2025 17:00:22 +0000
Manifest this update: Tue 06 May 2025 17:00:22 +0000
Manifest next update: Wed 07 May 2025 17:00:22 +0000
Files and hashes: 1: LwvxBgr5ORfa-1aagMzsnbCKdsU.crl (hash: SvT6MCkMihtN9EKsPyY+71JBxcizsFxIOBt9jEnv+6c=)
2: gtQV_zwRPLHuRPfREjsm-_muUpg.roa (hash: a0Tj7X+5b5MFb1rO/5kUp09wUYkeR9dP9zow62nRTzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:8a:96:88:22:90:45:e6:88:7e:d2:3e:b8:fe:84:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f0bf1060af93917dafb569a80ccec9db08a76c5
Validity
Not Before: May 6 17:00:22 2025 GMT
Not After : May 7 17:00:22 2025 GMT
Subject: CN=1e16b50304d2b2be133b39a2cf0f4fa9ebe48fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7d:15:c8:8c:14:b0:82:5d:32:ad:9c:8c:b6:
7f:e4:05:ce:da:70:4a:b8:7a:28:ef:d7:37:3f:81:
22:cb:81:62:cf:56:8e:e5:b2:c0:fd:1b:11:b3:ac:
b0:74:24:0c:5c:d4:72:7f:1e:7f:d8:eb:dd:1a:2c:
d2:06:39:56:b9:52:0d:f6:e6:c2:df:7a:8a:da:5d:
a3:33:56:f3:ae:78:47:b3:1a:84:a2:48:b5:71:09:
e5:13:dc:b0:05:2c:b6:6f:7d:c8:61:f3:50:fb:14:
f9:f9:57:55:d5:f3:25:5c:1e:06:43:b0:fe:b1:4b:
e2:29:ee:ec:e7:41:9d:45:88:4b:4b:d3:ef:5d:3f:
c8:5f:8c:c3:4e:f2:68:75:9f:3b:83:18:ef:b5:ec:
4f:b4:9f:69:5a:f5:71:f6:ee:0a:f1:3f:5f:4d:09:
35:06:1a:44:50:57:04:79:bb:3e:81:32:5a:d0:73:
7b:3c:65:67:96:e0:4c:22:3e:f4:34:ec:e2:92:8d:
87:9d:41:90:cc:14:be:7a:01:0b:17:77:de:54:bc:
5b:30:e9:d5:24:a9:83:aa:92:67:51:89:cc:c1:88:
3e:9d:84:14:e8:32:fb:7a:46:c4:ec:ed:7a:bb:44:
63:0b:41:91:7a:3d:e8:b7:01:ab:31:41:d0:40:2d:
20:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:16:B5:03:04:D2:B2:BE:13:3B:39:A2:CF:0F:4F:A9:EB:E4:8F:E7
X509v3 Authority Key Identifier:
keyid:2F:0B:F1:06:0A:F9:39:17:DA:FB:56:9A:80:CC:EC:9D:B0:8A:76:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:0d:da:3d:71:43:f9:f4:38:a0:65:43:78:b6:30:69:cc:df:
a0:cd:0e:b7:40:69:0e:f1:5d:ef:9c:6f:d7:f7:3b:c5:38:06:
49:e9:46:db:45:ad:63:7d:df:0b:29:55:95:28:07:55:2e:0e:
eb:99:4b:47:cb:5f:6b:85:9f:89:87:a4:c0:d2:5b:ee:f8:32:
0e:10:0a:71:88:f1:e5:ad:f8:65:f8:5c:f0:a2:7d:64:c2:1d:
60:ac:ae:cc:86:e6:d0:54:e6:96:46:d0:f5:e7:4e:3a:66:70:
f5:f9:49:b1:19:61:99:4b:41:eb:95:43:21:a5:8c:70:10:cd:
43:af:17:52:7a:f4:86:3f:08:f7:79:d7:bf:db:f5:0a:f8:82:
3a:fc:12:01:d2:0d:55:07:9f:80:e0:64:7d:d3:d5:12:93:a0:
86:57:34:a0:9d:d4:69:78:14:af:2d:a7:43:65:5c:77:8c:25:
b1:80:be:b4:bb:18:b5:9c:2c:fc:53:1f:b9:2c:e2:7b:3c:5e:
81:d7:d7:26:28:67:0a:e9:21:c2:73:5e:32:0d:54:39:8c:b9:
4f:54:53:c0:57:56:ec:0c:6f:19:9d:e3:92:9f:35:05:b1:da:
c6:c8:45:0e:fd:06:c8:9d:2b:78:11:68:5e:b7:9f:bb:cb:17:
c4:d1:f2:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZamipaIIpBF5oh+0j64/oQcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMGJmMTA2MGFmOTM5MTdkYWZiNTY5YTgwY2NlYzlkYjA4
YTc2YzUwHhcNMjUwNTA2MTcwMDIyWhcNMjUwNTA3MTcwMDIyWjAzMTEwLwYDVQQD
EygxZTE2YjUwMzA0ZDJiMmJlMTMzYjM5YTJjZjBmNGZhOWViZTQ4ZmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjn0VyIwUsIJdMq2cjLZ/5AXO2nBK
uHoo79c3P4Eiy4Fiz1aO5bLA/RsRs6ywdCQMXNRyfx5/2OvdGizSBjlWuVIN9ubC
33qK2l2jM1bzrnhHsxqEoki1cQnlE9ywBSy2b33IYfNQ+xT5+VdV1fMlXB4GQ7D+
sUviKe7s50GdRYhLS9PvXT/IX4zDTvJodZ87gxjvtexPtJ9pWvVx9u4K8T9fTQk1
BhpEUFcEebs+gTJa0HN7PGVnluBMIj70NOziko2HnUGQzBS+egELF3feVLxbMOnV
JKmDqpJnUYnMwYg+nYQU6DL7ekbE7O16u0RjC0GRej3otwGrMUHQQC0g7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB4WtQME0rK+Ezs5os8PT6nr5I/nMB8GA1UdIwQY
MBaAFC8L8QYK+TkX2vtWmoDM7J2winbFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHd2eEJncjVPUmZhLTFhYWdNenNuYkNLZHNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83M2Y3MzktODFiOC00NTExLTgxYTEt
YjNhMTY4MDMyMGFkLzEvTHd2eEJncjVPUmZhLTFhYWdNenNuYkNLZHNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83M2Y3MzktODFiOC00NTExLTgxYTEtYjNhMTY4MDMyMGFk
LzEvTHd2eEJncjVPUmZhLTFhYWdNenNuYkNLZHNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaQ3aPXFD
+fQ4oGVDeLYwaczfoM0Ot0BpDvFd75xv1/c7xTgGSelG20WtY33fCylVlSgHVS4O
65lLR8tfa4WfiYekwNJb7vgyDhAKcYjx5a34Zfhc8KJ9ZMIdYKyuzIbm0FTmlkbQ
9edOOmZw9flJsRlhmUtB65VDIaWMcBDNQ68XUnr0hj8I93nXv9v1CviCOvwSAdIN
VQefgOBkfdPVEpOghlc0oJ3UaXgUry2nQ2Vcd4wlsYC+tLsYtZws/FMfuSziezxe
gdfXJihnCukhwnNeMg1UOYy5T1RTwFdW7AxvGZ3jkp81BbHaxshFDv0GyJ0reBFo
Xrefu8sXxNHyVg==
-----END CERTIFICATE-----
Generated at Tue May 6 22:44:01 2025 by rpki-client