
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
File: lvgJYTh33quHSpQB0VbbFP9NKBQ.mft (raw, json)
Hash identifier: trVFo7XqlvJfpe1DC03acvEvn1MR6vAERGjTMTE7GCQ=
Subject key identifier: 6A:14:45:03:1D:10:18:44:E2:8C:5B:D1:19:7C:90:5E:C4:43:05:E1
Authority key identifier: 96:F8:09:61:38:77:DE:AB:87:4A:94:01:D1:56:DB:14:FF:4D:28:14
Certificate issuer: /CN=96f809613877deab874a9401d156db14ff4d2814
Certificate serial: 0196BFA5E28EF44B1A704578E3E2EBBBBD6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
Manifest number: 10CE
Signing time: Sun 11 May 2025 14:00:41 +0000
Manifest this update: Sun 11 May 2025 14:00:41 +0000
Manifest next update: Mon 12 May 2025 14:00:41 +0000
Files and hashes: 1: lvgJYTh33quHSpQB0VbbFP9NKBQ.crl (hash: hQz0EKSnRyGMtt0Mxqs2c6XzDVJYVPfCUTXkKMWoVuQ=)
2: pvaPM5j3-BPWJpSuaWFE01jgVBg.roa (hash: vcFvxHEzp1YnutqV+Bq+p/f/FPwpa1xjzTG6Rie7rFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:a5:e2:8e:f4:4b:1a:70:45:78:e3:e2:eb:bb:bd:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f809613877deab874a9401d156db14ff4d2814
Validity
Not Before: May 11 14:00:41 2025 GMT
Not After : May 12 14:00:41 2025 GMT
Subject: CN=6a1445031d101844e28c5bd1197c905ec44305e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:11:6b:82:bb:33:b5:d3:eb:41:b8:bb:07:fe:
b5:46:d1:40:ea:3a:86:43:5b:16:24:87:84:c9:fe:
0c:3e:58:a2:ee:cd:53:2b:47:82:66:2b:8e:fd:42:
72:72:ca:4e:45:3d:46:ba:48:4e:d2:a1:09:24:23:
df:e0:ac:b2:14:00:b7:7f:37:93:82:d7:c6:3d:d5:
c7:a2:65:4b:71:c5:dd:05:b8:43:e4:49:0d:91:63:
98:65:60:0c:38:02:45:14:30:08:72:dd:84:fb:8c:
2f:14:a6:12:33:99:0b:a7:48:86:0a:8b:49:7c:d5:
91:6c:ed:71:25:ac:d6:b6:51:25:eb:02:9b:63:9d:
32:6d:8e:a5:e5:1c:08:f8:ee:20:ee:02:7f:e9:51:
0c:ac:22:90:e1:52:a1:c2:4e:9c:38:c7:c0:88:1c:
33:c5:61:a4:6f:7d:79:a8:d2:80:62:9b:94:5a:f5:
3e:80:5f:7f:d1:5f:c8:e7:41:c3:dd:fd:7a:21:66:
e9:be:06:5b:8f:ed:5e:cd:7e:b2:87:7b:46:a9:b0:
c9:4a:c7:73:76:ca:73:f8:f1:48:ef:3b:7c:0a:9d:
7f:a3:23:8c:d2:65:2c:47:5a:7d:53:7b:4b:80:1f:
6f:15:ea:50:a9:23:99:61:da:fd:a1:3a:7b:b9:6f:
34:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:14:45:03:1D:10:18:44:E2:8C:5B:D1:19:7C:90:5E:C4:43:05:E1
X509v3 Authority Key Identifier:
keyid:96:F8:09:61:38:77:DE:AB:87:4A:94:01:D1:56:DB:14:FF:4D:28:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:03:a0:91:a5:ec:f6:f6:b6:ef:99:7b:f3:85:44:2f:04:2f:
a4:8c:d3:5b:6f:2a:ba:3c:b8:2c:06:28:4d:2e:37:1f:ce:2a:
e4:0a:e9:5c:22:26:5b:79:61:c5:55:1b:8d:d0:61:13:38:eb:
aa:e6:7c:6b:6c:c0:4e:ce:91:fd:1b:87:4e:16:aa:75:0d:ea:
59:fb:ea:22:98:aa:28:af:05:c8:9d:3e:db:dd:63:c1:b8:5a:
5f:ab:62:c1:59:30:fd:48:19:9c:19:13:51:ae:ee:65:c3:a6:
7a:6c:ac:22:0d:b1:77:01:2a:a2:54:42:09:d9:7f:aa:54:3d:
74:d5:bd:26:e7:72:f7:0c:bf:8d:aa:fc:c4:7c:4d:00:9a:ff:
a4:66:db:30:93:32:1c:4b:d7:51:bc:53:f2:b0:ac:e3:f0:f0:
79:1e:a4:c4:e9:42:bd:47:c0:fc:d4:ae:74:95:fe:9b:f8:2c:
e9:ad:54:6f:0c:10:92:3a:54:ce:9f:da:c1:8e:e6:ee:13:e8:
a8:a5:da:64:47:93:e3:88:98:a1:b9:04:c7:b5:69:4f:06:d1:
b3:ad:24:c1:91:f1:5f:32:bc:48:32:28:25:bc:ca:93:21:63:
49:47:78:5d:e8:e8:5a:6c:a7:2a:48:98:e0:8b:37:13:6b:7f:
45:4c:7f:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/peKO9EsacEV44+Lru71rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZjgwOTYxMzg3N2RlYWI4NzRhOTQwMWQxNTZkYjE0ZmY0
ZDI4MTQwHhcNMjUwNTExMTQwMDQxWhcNMjUwNTEyMTQwMDQxWjAzMTEwLwYDVQQD
Eyg2YTE0NDUwMzFkMTAxODQ0ZTI4YzViZDExOTdjOTA1ZWM0NDMwNWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxFrgrsztdPrQbi7B/61RtFA6jqG
Q1sWJIeEyf4MPlii7s1TK0eCZiuO/UJycspORT1GukhO0qEJJCPf4KyyFAC3fzeT
gtfGPdXHomVLccXdBbhD5EkNkWOYZWAMOAJFFDAIct2E+4wvFKYSM5kLp0iGCotJ
fNWRbO1xJazWtlEl6wKbY50ybY6l5RwI+O4g7gJ/6VEMrCKQ4VKhwk6cOMfAiBwz
xWGkb315qNKAYpuUWvU+gF9/0V/I50HD3f16IWbpvgZbj+1ezX6yh3tGqbDJSsdz
dspz+PFI7zt8Cp1/oyOM0mUsR1p9U3tLgB9vFepQqSOZYdr9oTp7uW80swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGoURQMdEBhE4oxb0Rl8kF7EQwXhMB8GA1UdIwQY
MBaAFJb4CWE4d96rh0qUAdFW2xT/TSgUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHZnSllUaDMzcXVIU3BRQjBWYmJGUDlOS0JRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9hZDI3ODItZjUzYS00YmI0LWI4ZDct
NjQ2NmQ0ODM0NTljLzEvbHZnSllUaDMzcXVIU3BRQjBWYmJGUDlOS0JRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9hZDI3ODItZjUzYS00YmI0LWI4ZDctNjQ2NmQ0ODM0NTlj
LzEvbHZnSllUaDMzcXVIU3BRQjBWYmJGUDlOS0JRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXwOgkaXs
9va275l784VELwQvpIzTW28qujy4LAYoTS43H84q5ArpXCImW3lhxVUbjdBhEzjr
quZ8a2zATs6R/RuHThaqdQ3qWfvqIpiqKK8FyJ0+291jwbhaX6tiwVkw/UgZnBkT
Ua7uZcOmemysIg2xdwEqolRCCdl/qlQ9dNW9Judy9wy/jar8xHxNAJr/pGbbMJMy
HEvXUbxT8rCs4/DweR6kxOlCvUfA/NSudJX+m/gs6a1UbwwQkjpUzp/awY7m7hPo
qKXaZEeT44iYobkEx7VpTwbRs60kwZHxXzK8SDIoJbzKkyFjSUd4XejoWmynKkiY
4Is3E2t/RUx/RA==
-----END CERTIFICATE-----
Generated at Mon May 12 00:01:00 2025 by rpki-client