Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/edc41e-352e-412b-9ae6-a0951ef7dfcd/1/lkptHqRrxAuqMavE9ByQZn7-Nu0.mft
File: lkptHqRrxAuqMavE9ByQZn7-Nu0.mft (raw, json)
Hash identifier: x8+ZrbJkJ59gOnu5YDNjiP4e3FR8tHMpZX4JJxAK6TM=
Subject key identifier: B4:67:0E:7C:A2:97:8B:96:45:49:4A:E4:7C:B1:67:FF:2E:FA:0E:BC
Authority key identifier: 96:4A:6D:1E:A4:6B:C4:0B:AA:31:AB:C4:F4:1C:90:66:7E:FE:36:ED
Certificate issuer: /CN=964a6d1ea46bc40baa31abc4f41c90667efe36ed
Certificate serial: 01974A7A5B4B185E794C3C9B40B05F7872A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkptHqRrxAuqMavE9ByQZn7-Nu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/edc41e-352e-412b-9ae6-a0951ef7dfcd/1/lkptHqRrxAuqMavE9ByQZn7-Nu0.mft
Manifest number: 0649
Signing time: Sat 07 Jun 2025 13:00:22 +0000
Manifest this update: Sat 07 Jun 2025 13:00:22 +0000
Manifest next update: Sun 08 Jun 2025 13:00:22 +0000
Files and hashes: 1: lkptHqRrxAuqMavE9ByQZn7-Nu0.crl (hash: zYL0DHEecVeI7YvRcv3nAVGBytYDv50aorfLhXbPwCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/edc41e-352e-412b-9ae6-a0951ef7dfcd/1/lkptHqRrxAuqMavE9ByQZn7-Nu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/edc41e-352e-412b-9ae6-a0951ef7dfcd/1/lkptHqRrxAuqMavE9ByQZn7-Nu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lkptHqRrxAuqMavE9ByQZn7-Nu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:5b:4b:18:5e:79:4c:3c:9b:40:b0:5f:78:72:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=964a6d1ea46bc40baa31abc4f41c90667efe36ed
Validity
Not Before: Jun 7 13:00:22 2025 GMT
Not After : Jun 8 13:00:22 2025 GMT
Subject: CN=b4670e7ca2978b9645494ae47cb167ff2efa0ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3b:bd:43:7f:26:75:4d:3a:5a:f8:db:87:6c:
ca:95:7d:59:ec:b2:0b:54:21:1c:f9:34:14:05:d5:
fa:b7:57:fe:42:54:71:25:9b:f4:6b:c2:d1:87:31:
b1:3c:91:45:82:a5:f9:41:5b:ce:80:fd:cb:0c:e0:
0f:a7:b5:e4:a1:02:f9:02:04:7e:5d:71:c3:79:75:
44:cc:b1:ea:bf:66:3c:81:89:8d:f1:62:3a:7b:2c:
75:00:23:39:93:13:11:bf:db:92:86:7e:f1:01:fc:
8d:bb:51:fd:f4:28:15:fb:06:6a:f6:9e:d9:46:74:
25:d0:cd:6f:b0:f6:d6:5d:af:e5:5b:11:16:d7:81:
4a:8b:eb:fb:5b:ef:9d:dd:3c:4b:db:38:0f:88:d9:
a0:7f:47:f3:9f:81:e5:93:2c:98:43:7a:b1:f4:2b:
d0:eb:c1:11:13:c8:79:2d:20:93:bd:bd:a7:9c:84:
e6:69:6f:33:5c:37:d6:b7:24:43:8f:d0:67:08:63:
c2:2c:3b:4e:24:53:da:b2:d4:99:f5:16:55:bd:2b:
bb:5c:d8:44:90:e1:0b:5c:fb:a8:0b:96:68:52:09:
df:13:c3:ed:5b:84:6c:d7:29:4d:dc:5a:f8:e6:af:
0b:57:a8:f0:8b:53:c5:a3:d2:55:41:24:9f:14:11:
98:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:67:0E:7C:A2:97:8B:96:45:49:4A:E4:7C:B1:67:FF:2E:FA:0E:BC
X509v3 Authority Key Identifier:
keyid:96:4A:6D:1E:A4:6B:C4:0B:AA:31:AB:C4:F4:1C:90:66:7E:FE:36:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkptHqRrxAuqMavE9ByQZn7-Nu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/edc41e-352e-412b-9ae6-a0951ef7dfcd/1/lkptHqRrxAuqMavE9ByQZn7-Nu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/edc41e-352e-412b-9ae6-a0951ef7dfcd/1/lkptHqRrxAuqMavE9ByQZn7-Nu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:90:74:d2:33:74:a4:df:b1:b0:28:07:0e:9d:99:e4:d2:a5:
97:04:d3:e2:68:38:72:59:74:ed:8b:71:4b:3b:28:7d:a5:81:
59:62:bf:eb:36:e7:05:96:f6:ae:6e:15:b6:a8:da:07:3c:27:
b4:1b:19:8d:0c:d6:a7:90:67:76:00:79:b8:87:f9:36:97:8a:
ba:ec:b2:07:64:8c:01:46:a8:33:62:39:cf:82:e4:09:e1:2c:
61:30:22:a4:f0:d1:ca:98:e3:ff:bb:4f:a4:f7:1c:0f:40:c9:
d5:ce:d7:4c:43:7f:98:0e:26:77:79:ca:02:39:37:af:cd:f3:
0d:77:6d:01:bf:11:d1:d0:99:60:ef:71:9b:72:b0:4f:b3:bd:
b8:fe:89:d5:0b:72:7b:b6:f7:db:94:8e:a0:57:82:08:b8:3f:
00:e8:b9:b5:64:5d:1b:a6:16:3f:10:2b:6d:84:2b:4b:52:a6:
68:32:aa:59:4c:b9:fd:99:fd:57:78:3d:29:d3:19:f3:5c:35:
78:dc:db:89:7c:1b:6c:9c:df:a3:22:9c:84:72:8c:a1:bf:0a:
35:84:6d:6f:d0:91:fd:a7:e3:de:ba:37:01:12:42:37:93:77:
61:7a:aa:ec:d1:7b:e2:52:b5:47:52:50:ac:b8:d2:8d:04:bf:
42:56:bd:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKeltLGF55TDybQLBfeHKnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NGE2ZDFlYTQ2YmM0MGJhYTMxYWJjNGY0MWM5MDY2N2Vm
ZTM2ZWQwHhcNMjUwNjA3MTMwMDIyWhcNMjUwNjA4MTMwMDIyWjAzMTEwLwYDVQQD
EyhiNDY3MGU3Y2EyOTc4Yjk2NDU0OTRhZTQ3Y2IxNjdmZjJlZmEwZWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDu9Q38mdU06Wvjbh2zKlX1Z7LIL
VCEc+TQUBdX6t1f+QlRxJZv0a8LRhzGxPJFFgqX5QVvOgP3LDOAPp7XkoQL5AgR+
XXHDeXVEzLHqv2Y8gYmN8WI6eyx1ACM5kxMRv9uShn7xAfyNu1H99CgV+wZq9p7Z
RnQl0M1vsPbWXa/lWxEW14FKi+v7W++d3TxL2zgPiNmgf0fzn4HlkyyYQ3qx9CvQ
68ERE8h5LSCTvb2nnITmaW8zXDfWtyRDj9BnCGPCLDtOJFPastSZ9RZVvSu7XNhE
kOELXPuoC5ZoUgnfE8PtW4Rs1ylN3Fr45q8LV6jwi1PFo9JVQSSfFBGYBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLRnDnyil4uWRUlK5HyxZ/8u+g68MB8GA1UdIwQY
MBaAFJZKbR6ka8QLqjGrxPQckGZ+/jbtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGtwdEhxUnJ4QXVxTWF2RTlCeVFabjctTnUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lZGM0MWUtMzUyZS00MTJiLTlhZTYt
YTA5NTFlZjdkZmNkLzEvbGtwdEhxUnJ4QXVxTWF2RTlCeVFabjctTnUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9lZGM0MWUtMzUyZS00MTJiLTlhZTYtYTA5NTFlZjdkZmNk
LzEvbGtwdEhxUnJ4QXVxTWF2RTlCeVFabjctTnUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABpB00jN0
pN+xsCgHDp2Z5NKllwTT4mg4cll07YtxSzsofaWBWWK/6zbnBZb2rm4VtqjaBzwn
tBsZjQzWp5BndgB5uIf5NpeKuuyyB2SMAUaoM2I5z4LkCeEsYTAipPDRypjj/7tP
pPccD0DJ1c7XTEN/mA4md3nKAjk3r83zDXdtAb8R0dCZYO9xm3KwT7O9uP6J1Qty
e7b325SOoFeCCLg/AOi5tWRdG6YWPxArbYQrS1KmaDKqWUy5/Zn9V3g9KdMZ81w1
eNzbiXwbbJzfoyKchHKMob8KNYRtb9CR/afj3ro3ARJCN5N3YXqq7NF74lK1R1JQ
rLjSjQS/Qla9Xw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:33:33 2025 by rpki-client