Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft
File: LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft (raw, json)
Hash identifier: FHuRn5H87Sut9y4l2iuDOBjT4WM7nn01X1Vd4THSBVo=
Subject key identifier: BA:53:19:ED:18:E8:FB:16:BD:C5:38:70:63:25:B8:C7:8E:99:7A:A5
Authority key identifier: 2C:6D:66:12:43:62:88:0F:5E:4C:54:85:2F:83:76:D2:B9:D1:37:F4
Certificate issuer: /CN=2c6d66124362880f5e4c54852f8376d2b9d137f4
Certificate serial: 01974968160460ABA7F1545EA8CA209D5946
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LG1mEkNiiA9eTFSFL4N20rnRN_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft
Manifest number: 1580
Signing time: Sat 07 Jun 2025 08:00:47 +0000
Manifest this update: Sat 07 Jun 2025 08:00:47 +0000
Manifest next update: Sun 08 Jun 2025 08:00:47 +0000
Files and hashes: 1: C33FXqC7uQt2qAUvryfzquScd9A.roa (hash: KJa1Z8kamyRIOQx92UokNml/luCMeTJPuGt2M/e0fCo=)
2: LG1mEkNiiA9eTFSFL4N20rnRN_Q.crl (hash: k0xBkO0MKJ0Iplj8Qtcz3Z2EhCgj8YluFimoERemJO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/LG1mEkNiiA9eTFSFL4N20rnRN_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:16:04:60:ab:a7:f1:54:5e:a8:ca:20:9d:59:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c6d66124362880f5e4c54852f8376d2b9d137f4
Validity
Not Before: Jun 7 08:00:47 2025 GMT
Not After : Jun 8 08:00:47 2025 GMT
Subject: CN=ba5319ed18e8fb16bdc538706325b8c78e997aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bd:0f:af:13:f8:e5:48:62:dc:c4:1c:cd:bf:
e7:95:a2:8e:e9:f0:40:64:af:51:e6:4c:15:e5:73:
b9:96:54:cf:b4:e9:00:61:6b:12:54:53:ae:4c:19:
4e:af:bf:9c:60:83:94:f5:1b:20:95:96:d4:76:a5:
ba:75:86:43:18:ce:ea:0f:b0:53:a8:dd:1c:02:82:
de:42:2e:54:2c:db:91:e5:c5:45:89:fe:4e:7e:be:
15:33:99:49:f2:28:7b:8a:0b:87:0e:59:5a:17:07:
00:d2:f4:5c:32:59:6e:d6:6d:3a:2c:24:dc:65:5d:
fc:1c:18:b2:1b:ab:c7:92:54:e3:68:04:31:01:6c:
80:3e:ed:a6:9e:bb:d6:b1:55:96:06:1a:b5:9c:df:
14:a6:0c:68:60:f4:67:8b:f3:c4:1a:e5:6b:d8:f3:
52:ca:bf:c8:d2:a3:f4:39:8d:79:ea:54:74:0e:53:
5c:23:0c:2c:dc:07:7a:09:56:1e:4e:1b:a9:f5:5e:
b4:ba:02:2c:2a:a8:bc:11:66:f5:1f:af:4c:68:09:
e4:b6:26:44:02:45:b2:ae:3c:0b:c6:b9:db:91:3d:
dc:5f:ca:b5:80:63:9f:36:10:cf:dc:6b:8c:ca:04:
6c:d7:53:8c:81:50:6a:a8:9e:dc:97:81:5c:87:01:
dc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:53:19:ED:18:E8:FB:16:BD:C5:38:70:63:25:B8:C7:8E:99:7A:A5
X509v3 Authority Key Identifier:
keyid:2C:6D:66:12:43:62:88:0F:5E:4C:54:85:2F:83:76:D2:B9:D1:37:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LG1mEkNiiA9eTFSFL4N20rnRN_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:7d:4c:74:77:36:16:1f:e7:54:19:f0:63:ed:ee:cd:ee:05:
b4:4d:af:e1:42:83:1a:49:d6:88:f3:f3:c7:af:16:18:a9:b1:
fd:49:f0:f5:bd:28:aa:97:6d:7e:3b:c3:d9:e2:a3:9b:a1:ce:
3e:cb:2a:5b:f4:14:0f:6c:2b:3c:93:16:f0:65:e3:80:fc:92:
af:e7:56:3f:96:64:2a:ac:54:92:b2:93:33:c9:45:41:6a:81:
ae:c8:40:c6:e3:c3:77:68:53:bc:98:5f:71:bb:ba:f8:92:b3:
1f:f1:dc:73:58:14:a3:aa:e5:8e:14:f2:3f:86:f7:cd:58:62:
a4:c5:5b:2f:32:98:28:a2:e6:bb:cb:b9:fc:4b:ed:0e:22:69:
6f:c0:02:b8:d5:0c:85:ea:c2:73:85:89:e6:32:2d:e9:7d:e9:
3e:a2:e6:55:eb:59:37:c1:29:0d:de:ba:14:f7:88:06:9a:82:
a9:46:05:c4:17:96:d9:95:60:e0:b6:45:b2:b7:59:4f:ed:04:
ba:22:e1:57:4c:93:f4:36:9c:78:74:6d:b9:2e:e3:2b:06:77:
61:5d:dd:52:d9:9e:84:27:15:0a:64:54:21:ff:67:e9:2b:1d:
ec:bf:9c:d8:45:57:b2:53:91:8b:7a:31:e1:31:43:c3:b6:2b:
12:20:04:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJaBYEYKun8VReqMognVlGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjNmQ2NjEyNDM2Mjg4MGY1ZTRjNTQ4NTJmODM3NmQyYjlk
MTM3ZjQwHhcNMjUwNjA3MDgwMDQ3WhcNMjUwNjA4MDgwMDQ3WjAzMTEwLwYDVQQD
EyhiYTUzMTllZDE4ZThmYjE2YmRjNTM4NzA2MzI1YjhjNzhlOTk3YWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur0PrxP45Uhi3MQczb/nlaKO6fBA
ZK9R5kwV5XO5llTPtOkAYWsSVFOuTBlOr7+cYIOU9RsglZbUdqW6dYZDGM7qD7BT
qN0cAoLeQi5ULNuR5cVFif5Ofr4VM5lJ8ih7iguHDllaFwcA0vRcMllu1m06LCTc
ZV38HBiyG6vHklTjaAQxAWyAPu2mnrvWsVWWBhq1nN8UpgxoYPRni/PEGuVr2PNS
yr/I0qP0OY156lR0DlNcIwws3Ad6CVYeThup9V60ugIsKqi8EWb1H69MaAnktiZE
AkWyrjwLxrnbkT3cX8q1gGOfNhDP3GuMygRs11OMgVBqqJ7cl4FchwHcRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLpTGe0Y6PsWvcU4cGMluMeOmXqlMB8GA1UdIwQY
MBaAFCxtZhJDYogPXkxUhS+DdtK50Tf0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEcxbUVrTmlpQTllVEZTRkw0TjIwcm5STl9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS83MWZlYTEtMzkxOS00MmY3LTllMDMt
ZTQwMzBmYTFiMDRhLzEvTEcxbUVrTmlpQTllVEZTRkw0TjIwcm5STl9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS83MWZlYTEtMzkxOS00MmY3LTllMDMtZTQwMzBmYTFiMDRh
LzEvTEcxbUVrTmlpQTllVEZTRkw0TjIwcm5STl9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR31MdHc2
Fh/nVBnwY+3uze4FtE2v4UKDGknWiPPzx68WGKmx/Unw9b0oqpdtfjvD2eKjm6HO
PssqW/QUD2wrPJMW8GXjgPySr+dWP5ZkKqxUkrKTM8lFQWqBrshAxuPDd2hTvJhf
cbu6+JKzH/Hcc1gUo6rljhTyP4b3zVhipMVbLzKYKKLmu8u5/EvtDiJpb8ACuNUM
herCc4WJ5jIt6X3pPqLmVetZN8EpDd66FPeIBpqCqUYFxBeW2ZVg4LZFsrdZT+0E
uiLhV0yT9DaceHRtuS7jKwZ3YV3dUtmehCcVCmRUIf9n6Ssd7L+c2EVXslORi3ox
4TFDw7YrEiAEFw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:32:37 2025 by rpki-client