Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
File: LwvxBgr5ORfa-1aagMzsnbCKdsU.mft (raw, json)
Hash identifier: Zs149yhuVkI8KUwX8DBVAkX/MdV7Kk+Zy46fEYs5cIQ=
Subject key identifier: 15:C0:59:68:C5:15:F5:09:EE:D2:64:D6:A9:AE:76:CA:36:A7:AB:5D
Authority key identifier: 2F:0B:F1:06:0A:F9:39:17:DA:FB:56:9A:80:CC:EC:9D:B0:8A:76:C5
Certificate issuer: /CN=2f0bf1060af93917dafb569a80ccec9db08a76c5
Certificate serial: 019845BF5165C06CC2CCA0C0C85A16CE1B04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
Manifest number: 113A
Signing time: Sat 26 Jul 2025 08:00:22 +0000
Manifest this update: Sat 26 Jul 2025 08:00:22 +0000
Manifest next update: Sun 27 Jul 2025 08:00:22 +0000
Files and hashes: 1: LwvxBgr5ORfa-1aagMzsnbCKdsU.crl (hash: K2AHfPGfv24JzmuLyxHRIVrOKCe94qq/X6/QLs4wnTE=)
2: gtQV_zwRPLHuRPfREjsm-_muUpg.roa (hash: a0Tj7X+5b5MFb1rO/5kUp09wUYkeR9dP9zow62nRTzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:bf:51:65:c0:6c:c2:cc:a0:c0:c8:5a:16:ce:1b:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f0bf1060af93917dafb569a80ccec9db08a76c5
Validity
Not Before: Jul 26 08:00:22 2025 GMT
Not After : Jul 27 08:00:22 2025 GMT
Subject: CN=15c05968c515f509eed264d6a9ae76ca36a7ab5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:59:09:17:62:58:4d:96:6d:af:a3:9e:e7:c4:
01:be:22:1e:44:ea:05:d7:62:f1:35:41:a7:8c:ed:
76:64:f2:e4:27:00:ee:6c:b7:3e:31:01:80:ca:44:
a7:17:f3:4a:6e:6b:8f:db:a2:7f:69:b3:89:d1:a7:
86:de:f2:68:2a:23:5b:52:6a:39:e1:0e:9d:5b:47:
1d:17:87:cf:c5:bc:e6:28:02:0f:ff:4d:a3:ec:f0:
f2:c5:85:bb:f0:be:22:c0:18:c1:6f:79:d6:64:0b:
01:2a:1e:47:85:88:85:32:c4:5d:84:96:cc:ac:a7:
9f:7b:a6:71:0e:80:2f:fa:37:02:15:55:77:de:e0:
c5:a6:01:6a:54:85:c5:29:57:ce:5e:0f:4e:fa:32:
36:4e:2a:4e:55:3a:4e:75:3a:32:75:50:04:35:2d:
db:5b:6a:95:46:0a:e2:34:7c:cd:40:7d:ee:70:8b:
e8:8a:9e:99:12:85:20:b0:de:cf:24:e8:64:84:99:
23:12:16:da:3f:58:a8:dd:ee:6d:3c:5b:dc:a1:32:
ca:88:34:41:20:d6:88:e3:b3:49:ed:bd:51:6d:90:
6a:b8:1f:32:85:47:70:31:6e:de:89:d1:e6:32:5f:
1c:e6:d1:1b:36:f7:09:4d:1d:bb:1c:20:c0:7d:6f:
28:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C0:59:68:C5:15:F5:09:EE:D2:64:D6:A9:AE:76:CA:36:A7:AB:5D
X509v3 Authority Key Identifier:
keyid:2F:0B:F1:06:0A:F9:39:17:DA:FB:56:9A:80:CC:EC:9D:B0:8A:76:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwvxBgr5ORfa-1aagMzsnbCKdsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/73f739-81b8-4511-81a1-b3a1680320ad/1/LwvxBgr5ORfa-1aagMzsnbCKdsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:50:92:44:ec:b9:5b:a9:d1:2b:eb:e3:24:8b:d3:00:79:dd:
15:80:0e:4d:b2:5d:33:aa:ae:d8:17:c1:e7:0a:49:e5:4e:6f:
f2:4a:f3:e3:7a:25:c8:e8:5e:54:cb:d5:ca:30:a8:15:d4:32:
bb:f2:e9:fd:d4:bf:98:8e:59:f1:c9:bb:30:90:bc:63:81:6a:
3a:72:8e:31:63:5f:29:67:a4:94:99:f2:ea:a0:6a:8b:8c:be:
06:3d:fc:37:bb:25:e8:88:40:b2:6b:18:35:77:36:a0:5e:f4:
65:4b:62:c9:2a:4f:db:5e:77:9f:f1:2d:2f:aa:05:3a:4d:54:
30:c0:65:d9:7c:02:08:11:0b:d7:85:6f:94:6d:3c:aa:84:29:
e4:c2:ce:09:3d:98:80:11:97:ec:b6:6e:a7:c6:52:6a:e1:b4:
b5:c8:04:c9:ed:fd:d8:f7:a9:a6:b0:ca:ae:cd:a8:6c:42:c9:
72:cf:01:6f:56:92:03:05:c6:df:32:42:8d:da:15:af:5f:20:
40:24:a0:a2:ad:7d:22:b7:21:67:68:4e:e1:95:62:3b:93:0e:
ba:00:3e:0b:ee:17:81:50:6f:c5:74:33:52:bd:63:d9:ad:09:
2a:b9:1a:71:fa:cd:12:6d:3b:01:9c:64:97:be:38:e3:9f:1a:
ea:a0:58:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhFv1FlwGzCzKDAyFoWzhsEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMGJmMTA2MGFmOTM5MTdkYWZiNTY5YTgwY2NlYzlkYjA4
YTc2YzUwHhcNMjUwNzI2MDgwMDIyWhcNMjUwNzI3MDgwMDIyWjAzMTEwLwYDVQQD
EygxNWMwNTk2OGM1MTVmNTA5ZWVkMjY0ZDZhOWFlNzZjYTM2YTdhYjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVkJF2JYTZZtr6Oe58QBviIeROoF
12LxNUGnjO12ZPLkJwDubLc+MQGAykSnF/NKbmuP26J/abOJ0aeG3vJoKiNbUmo5
4Q6dW0cdF4fPxbzmKAIP/02j7PDyxYW78L4iwBjBb3nWZAsBKh5HhYiFMsRdhJbM
rKefe6ZxDoAv+jcCFVV33uDFpgFqVIXFKVfOXg9O+jI2TipOVTpOdToydVAENS3b
W2qVRgriNHzNQH3ucIvoip6ZEoUgsN7PJOhkhJkjEhbaP1io3e5tPFvcoTLKiDRB
INaI47NJ7b1RbZBquB8yhUdwMW7eidHmMl8c5tEbNvcJTR27HCDAfW8oNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBXAWWjFFfUJ7tJk1qmudso2p6tdMB8GA1UdIwQY
MBaAFC8L8QYK+TkX2vtWmoDM7J2winbFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHd2eEJncjVPUmZhLTFhYWdNenNuYkNLZHNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83M2Y3MzktODFiOC00NTExLTgxYTEt
YjNhMTY4MDMyMGFkLzEvTHd2eEJncjVPUmZhLTFhYWdNenNuYkNLZHNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83M2Y3MzktODFiOC00NTExLTgxYTEtYjNhMTY4MDMyMGFk
LzEvTHd2eEJncjVPUmZhLTFhYWdNenNuYkNLZHNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOFCSROy5
W6nRK+vjJIvTAHndFYAOTbJdM6qu2BfB5wpJ5U5v8krz43olyOheVMvVyjCoFdQy
u/Lp/dS/mI5Z8cm7MJC8Y4FqOnKOMWNfKWeklJny6qBqi4y+Bj38N7sl6IhAsmsY
NXc2oF70ZUtiySpP2153n/EtL6oFOk1UMMBl2XwCCBEL14VvlG08qoQp5MLOCT2Y
gBGX7LZup8ZSauG0tcgEye392PepprDKrs2obELJcs8Bb1aSAwXG3zJCjdoVr18g
QCSgoq19IrchZ2hO4ZViO5MOugA+C+4XgVBvxXQzUr1j2a0JKrkacfrNEm07AZxk
l744458a6qBYtA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:28:10 2025 by rpki-client