Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/edcd12-3be2-4629-a559-e72fbddb7746/1/lwVGLL_Idkd35toxtZXXzL_jgkM.mft
File: lwVGLL_Idkd35toxtZXXzL_jgkM.mft (raw, json)
Hash identifier: JDrxRMac0QDzwefhtqKhDVRRrvI35zUlNO2KRLV3/Uw=
Subject key identifier: 17:C5:06:AA:BF:E3:51:A9:91:A5:C1:8F:9E:13:B0:33:39:EF:5D:E4
Authority key identifier: 97:05:46:2C:BF:C8:76:47:77:E6:DA:31:B5:95:D7:CC:BF:E3:82:43
Certificate issuer: /CN=9705462cbfc8764777e6da31b595d7ccbfe38243
Certificate serial: 01974D0DEC8FD353A302146036CD5F7CFD60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwVGLL_Idkd35toxtZXXzL_jgkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/edcd12-3be2-4629-a559-e72fbddb7746/1/lwVGLL_Idkd35toxtZXXzL_jgkM.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 01:00:47 +0000
Manifest this update: Sun 08 Jun 2025 01:00:47 +0000
Manifest next update: Mon 09 Jun 2025 01:00:47 +0000
Files and hashes: 1: 9EmaRE56MhxkySrgldeCqIzjdb4.roa (hash: 1f+hqjqOUpzqbgERzyV2EMzT2kIlImzsUPPui1WSWLA=)
2: lwVGLL_Idkd35toxtZXXzL_jgkM.crl (hash: ARBZGJNhsIjfhIEqwoDhoLmshzefenxLt5d5DGIM1sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/edcd12-3be2-4629-a559-e72fbddb7746/1/lwVGLL_Idkd35toxtZXXzL_jgkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/edcd12-3be2-4629-a559-e72fbddb7746/1/lwVGLL_Idkd35toxtZXXzL_jgkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lwVGLL_Idkd35toxtZXXzL_jgkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0d:ec:8f:d3:53:a3:02:14:60:36:cd:5f:7c:fd:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9705462cbfc8764777e6da31b595d7ccbfe38243
Validity
Not Before: Jun 8 01:00:47 2025 GMT
Not After : Jun 9 01:00:47 2025 GMT
Subject: CN=17c506aabfe351a991a5c18f9e13b03339ef5de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:36:51:59:f0:be:39:27:a6:95:1a:ca:ea:aa:
f5:c5:5b:ce:42:ef:65:71:9a:1b:3c:02:20:9d:cb:
55:b0:4d:0e:6e:b4:53:bf:f2:20:7c:21:6b:c2:93:
fb:0e:0a:1a:cb:3e:27:6b:ff:eb:76:86:5a:a8:dd:
6d:a5:05:e7:c9:c8:0f:5b:6d:3f:13:42:ea:83:bd:
5b:45:11:ce:2c:cb:a0:e6:63:47:4b:88:e5:ac:7f:
ea:3d:f2:d0:bc:e8:1b:c6:96:78:45:df:8b:6d:55:
e0:0d:3b:a1:26:93:85:72:ce:34:53:f0:ef:53:ab:
ba:17:e3:df:f0:99:9a:8f:05:a9:fb:c3:12:ff:dc:
b2:78:c2:60:c9:a3:04:28:61:c3:97:30:9d:3b:81:
21:a6:31:3a:81:e2:a0:89:75:5e:14:f7:c7:e2:6c:
6c:d1:f6:45:b3:c1:5c:3a:2c:ef:b0:45:df:fb:20:
a0:54:f6:93:84:40:26:b4:1b:f0:c0:3f:1d:52:e6:
f9:4a:57:35:60:aa:24:cd:6f:b7:23:8c:be:f1:b8:
39:dd:f8:62:12:9f:10:60:28:89:98:35:95:93:aa:
a9:31:74:47:84:fa:0e:3e:f3:be:ca:8d:5f:e5:b6:
92:08:ec:58:ba:ff:f2:9e:b7:fc:4e:9c:44:af:19:
8f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C5:06:AA:BF:E3:51:A9:91:A5:C1:8F:9E:13:B0:33:39:EF:5D:E4
X509v3 Authority Key Identifier:
keyid:97:05:46:2C:BF:C8:76:47:77:E6:DA:31:B5:95:D7:CC:BF:E3:82:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwVGLL_Idkd35toxtZXXzL_jgkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/edcd12-3be2-4629-a559-e72fbddb7746/1/lwVGLL_Idkd35toxtZXXzL_jgkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/edcd12-3be2-4629-a559-e72fbddb7746/1/lwVGLL_Idkd35toxtZXXzL_jgkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:2d:92:c4:9a:d7:2d:52:80:68:b5:14:36:4a:55:b9:47:31:
32:65:86:8b:85:ff:34:25:c2:69:e3:2e:55:ff:f7:fb:c5:dd:
96:c4:dc:cb:f2:75:5c:c1:cf:14:59:60:a1:3f:40:e9:b2:17:
af:ab:ba:00:ed:b2:f6:b9:56:69:ff:7f:37:fe:41:05:5c:c6:
59:e9:5c:4d:fb:b2:20:cb:c1:c8:be:73:cb:bc:6a:8d:d7:07:
e1:33:42:93:32:b9:74:bb:f0:84:ea:98:42:89:ac:0b:ed:40:
5e:5e:fe:c6:91:8b:73:37:00:a5:da:0e:30:11:d6:fa:3b:a7:
26:df:70:33:9e:ec:d2:90:70:84:b2:92:07:ee:50:56:1a:60:
c3:52:66:0d:a2:5b:62:7d:71:0c:fb:91:5d:16:c3:5f:f2:f7:
75:7f:d1:37:1a:56:6d:0b:cd:81:d1:7d:8c:fa:84:53:7e:28:
4b:1b:d1:af:f3:de:92:a8:58:fa:8a:80:ab:eb:9e:a7:d1:33:
3e:be:07:c9:e0:1a:fc:7d:52:b3:21:df:95:a2:0e:d1:ad:48:
e5:60:6f:22:c5:32:58:2a:a0:ea:b0:bc:dd:bf:c8:72:7b:1c:
bc:2a:24:7f:1b:b6:82:84:8d:fb:b8:d1:9b:53:43:5b:d6:22:
d4:07:f3:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNDeyP01OjAhRgNs1ffP1gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MDU0NjJjYmZjODc2NDc3N2U2ZGEzMWI1OTVkN2NjYmZl
MzgyNDMwHhcNMjUwNjA4MDEwMDQ3WhcNMjUwNjA5MDEwMDQ3WjAzMTEwLwYDVQQD
EygxN2M1MDZhYWJmZTM1MWE5OTFhNWMxOGY5ZTEzYjAzMzM5ZWY1ZGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDZRWfC+OSemlRrK6qr1xVvOQu9l
cZobPAIgnctVsE0ObrRTv/IgfCFrwpP7Dgoayz4na//rdoZaqN1tpQXnycgPW20/
E0Lqg71bRRHOLMug5mNHS4jlrH/qPfLQvOgbxpZ4Rd+LbVXgDTuhJpOFcs40U/Dv
U6u6F+Pf8JmajwWp+8MS/9yyeMJgyaMEKGHDlzCdO4EhpjE6geKgiXVeFPfH4mxs
0fZFs8FcOizvsEXf+yCgVPaThEAmtBvwwD8dUub5Slc1YKokzW+3I4y+8bg53fhi
Ep8QYCiJmDWVk6qpMXRHhPoOPvO+yo1f5baSCOxYuv/ynrf8TpxErxmP8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBfFBqq/41GpkaXBj54TsDM5713kMB8GA1UdIwQY
MBaAFJcFRiy/yHZHd+baMbWV18y/44JDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHdWR0xMX0lka2QzNXRveHRaWFh6TF9qZ2tNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9lZGNkMTItM2JlMi00NjI5LWE1NTkt
ZTcyZmJkZGI3NzQ2LzEvbHdWR0xMX0lka2QzNXRveHRaWFh6TF9qZ2tNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9lZGNkMTItM2JlMi00NjI5LWE1NTktZTcyZmJkZGI3NzQ2
LzEvbHdWR0xMX0lka2QzNXRveHRaWFh6TF9qZ2tNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAei2SxJrX
LVKAaLUUNkpVuUcxMmWGi4X/NCXCaeMuVf/3+8XdlsTcy/J1XMHPFFlgoT9A6bIX
r6u6AO2y9rlWaf9/N/5BBVzGWelcTfuyIMvByL5zy7xqjdcH4TNCkzK5dLvwhOqY
QomsC+1AXl7+xpGLczcApdoOMBHW+junJt9wM57s0pBwhLKSB+5QVhpgw1JmDaJb
Yn1xDPuRXRbDX/L3dX/RNxpWbQvNgdF9jPqEU34oSxvRr/PekqhY+oqAq+uep9Ez
Pr4HyeAa/H1SsyHflaIO0a1I5WBvIsUyWCqg6rC83b/IcnscvCokfxu2goSN+7jR
m1NDW9Yi1Afz6Q==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:40:36 2025 by rpki-client