Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft
File: lpblIk_vUX9NzGbBQQNSzIq_si4.mft (raw, json)
Hash identifier: b0he/Jx/MSwMGu4rQu2rtT3aKoZkTTsDzH0TKxIMe7Q=
Subject key identifier: 41:11:C5:E4:26:FC:1C:26:56:49:B7:B8:B2:79:A0:0B:44:1A:FE:C8
Authority key identifier: 96:96:E5:22:4F:EF:51:7F:4D:CC:66:C1:41:03:52:CC:8A:BF:B2:2E
Certificate issuer: /CN=9696e5224fef517f4dcc66c1410352cc8abfb22e
Certificate serial: 0198496505EE8B28F2D4530CF4325725A744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lpblIk_vUX9NzGbBQQNSzIq_si4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft
Manifest number: 158D
Signing time: Sun 27 Jul 2025 01:00:13 +0000
Manifest this update: Sun 27 Jul 2025 01:00:13 +0000
Manifest next update: Mon 28 Jul 2025 01:00:13 +0000
Files and hashes: 1: lpblIk_vUX9NzGbBQQNSzIq_si4.crl (hash: Majz6tOVrHJFz8rm9ehRoThxXqWEXOOPTizOnP4rAIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lpblIk_vUX9NzGbBQQNSzIq_si4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:05:ee:8b:28:f2:d4:53:0c:f4:32:57:25:a7:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9696e5224fef517f4dcc66c1410352cc8abfb22e
Validity
Not Before: Jul 27 01:00:13 2025 GMT
Not After : Jul 28 01:00:13 2025 GMT
Subject: CN=4111c5e426fc1c265649b7b8b279a00b441afec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b5:08:7e:65:c0:40:77:ac:42:f5:63:a3:5c:
4e:e0:da:8c:22:42:3e:a0:18:07:2e:e8:ea:bc:7d:
24:24:46:38:05:19:a0:8a:7e:f0:86:ed:7b:01:ea:
af:aa:4c:a2:ba:e6:6e:54:aa:df:2c:97:79:40:a2:
f8:f7:70:e9:af:1e:8a:b2:e3:ab:66:2f:f2:1c:32:
c2:48:aa:6c:3d:a1:77:f0:1d:e3:c3:53:39:1e:1d:
cf:48:99:51:b6:2e:77:8f:21:e8:73:0d:ec:f6:41:
8c:21:62:28:b2:e4:d0:f1:54:65:8f:b1:55:a5:ea:
0e:b1:70:f0:a2:2c:da:e4:ba:ea:67:37:7f:6b:fd:
79:a3:e8:2b:46:5e:1c:f1:30:e4:25:85:fe:7b:d1:
c5:9d:f8:ac:af:0e:64:e5:b9:bf:97:ad:bf:4f:12:
07:c2:0f:58:d5:96:e5:2f:9b:44:13:6c:db:fd:61:
fa:8b:62:e8:2d:34:9a:a9:66:1a:35:46:c8:be:99:
b8:cf:e7:70:3e:90:85:a4:b1:61:99:80:8d:d7:e3:
d9:e0:6c:e8:e9:09:61:78:56:e1:97:66:a7:ee:97:
1b:91:8f:5a:a4:26:21:99:f6:87:87:78:88:e2:20:
b6:e4:37:34:18:cb:d2:94:50:d4:70:9c:e7:bf:5d:
07:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:11:C5:E4:26:FC:1C:26:56:49:B7:B8:B2:79:A0:0B:44:1A:FE:C8
X509v3 Authority Key Identifier:
keyid:96:96:E5:22:4F:EF:51:7F:4D:CC:66:C1:41:03:52:CC:8A:BF:B2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lpblIk_vUX9NzGbBQQNSzIq_si4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/59f376-dfbe-478a-b81e-f4979d50ee22/1/lpblIk_vUX9NzGbBQQNSzIq_si4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:ee:83:dd:37:45:65:40:a9:81:a3:36:e7:85:49:d8:a2:4c:
8b:a5:ba:89:11:bd:41:13:5f:0a:d2:dd:30:e7:e7:77:fc:a9:
97:7a:b9:bb:36:4d:e0:d1:02:36:3d:fe:e6:fb:bd:e9:6a:08:
c9:d3:32:1c:e7:2a:35:3a:38:7e:3c:78:24:50:b0:7d:a8:8d:
7d:19:ce:7c:5c:07:79:16:5e:64:63:c6:39:76:27:cd:46:fa:
ff:b1:94:f9:41:9e:58:d2:64:72:a9:95:fd:4b:31:9c:37:c3:
1a:e6:34:32:77:a6:5a:9c:5c:c2:32:2e:68:0a:9b:ae:17:18:
a0:db:8c:3b:17:26:67:46:54:46:4d:61:71:7b:9d:5d:48:4c:
e4:4d:30:62:91:54:6a:f3:ac:89:3e:af:79:5b:a6:6a:ac:bf:
5d:9b:22:92:2c:2f:de:ab:8c:ae:32:46:b0:8b:a7:e6:f2:29:
54:7d:fc:5f:69:87:4c:9d:cf:cf:b6:05:87:60:13:16:54:c3:
07:d1:c5:79:63:0f:86:90:ce:b2:a6:9b:38:78:ef:58:1f:8f:
6f:13:26:ec:77:9b:b7:c7:b0:a4:ee:15:1b:da:5a:f8:bc:29:
f4:d8:c9:87:2c:02:21:9a:f2:01:ef:bb:5f:5b:87:48:d9:e4:
7c:e6:67:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZQXuiyjy1FMM9DJXJadEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2OTZlNTIyNGZlZjUxN2Y0ZGNjNjZjMTQxMDM1MmNjOGFi
ZmIyMmUwHhcNMjUwNzI3MDEwMDEzWhcNMjUwNzI4MDEwMDEzWjAzMTEwLwYDVQQD
Eyg0MTExYzVlNDI2ZmMxYzI2NTY0OWI3YjhiMjc5YTAwYjQ0MWFmZWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbUIfmXAQHesQvVjo1xO4NqMIkI+
oBgHLujqvH0kJEY4BRmgin7whu17AeqvqkyiuuZuVKrfLJd5QKL493Dprx6KsuOr
Zi/yHDLCSKpsPaF38B3jw1M5Hh3PSJlRti53jyHocw3s9kGMIWIosuTQ8VRlj7FV
peoOsXDwoiza5LrqZzd/a/15o+grRl4c8TDkJYX+e9HFnfisrw5k5bm/l62/TxIH
wg9Y1ZblL5tEE2zb/WH6i2LoLTSaqWYaNUbIvpm4z+dwPpCFpLFhmYCN1+PZ4Gzo
6QlheFbhl2an7pcbkY9apCYhmfaHh3iI4iC25Dc0GMvSlFDUcJznv10HOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEERxeQm/BwmVkm3uLJ5oAtEGv7IMB8GA1UdIwQY
MBaAFJaW5SJP71F/TcxmwUEDUsyKv7IuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHBibElrX3ZVWDlOekdiQlFRTlN6SXFfc2k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC81OWYzNzYtZGZiZS00NzhhLWI4MWUt
ZjQ5NzlkNTBlZTIyLzEvbHBibElrX3ZVWDlOekdiQlFRTlN6SXFfc2k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC81OWYzNzYtZGZiZS00NzhhLWI4MWUtZjQ5NzlkNTBlZTIy
LzEvbHBibElrX3ZVWDlOekdiQlFRTlN6SXFfc2k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuu6D3TdF
ZUCpgaM254VJ2KJMi6W6iRG9QRNfCtLdMOfnd/ypl3q5uzZN4NECNj3+5vu96WoI
ydMyHOcqNTo4fjx4JFCwfaiNfRnOfFwHeRZeZGPGOXYnzUb6/7GU+UGeWNJkcqmV
/UsxnDfDGuY0MnemWpxcwjIuaAqbrhcYoNuMOxcmZ0ZURk1hcXudXUhM5E0wYpFU
avOsiT6veVumaqy/XZsikiwv3quMrjJGsIun5vIpVH38X2mHTJ3Pz7YFh2ATFlTD
B9HFeWMPhpDOsqabOHjvWB+PbxMm7Hebt8ewpO4VG9pa+Lwp9NjJhywCIZryAe+7
X1uHSNnkfOZn4A==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:13:29 2025 by rpki-client