Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/6b0dc9-c1b9-4fae-acd9-6bff1c0e68ae/1/lkyqlAOgjTc7kLcQpW0-roE5T_A.mft
File: lkyqlAOgjTc7kLcQpW0-roE5T_A.mft (raw, json)
Hash identifier: KAC1cx6CzpIK+abMGwLQJNF7pRVoLRkS1eYWCsS2/3E=
Subject key identifier: E2:0F:44:2E:5A:EA:1F:22:CC:C8:66:9C:8A:30:92:14:4E:B0:54:24
Authority key identifier: 96:4C:AA:94:03:A0:8D:37:3B:90:B7:10:A5:6D:3E:AE:81:39:4F:F0
Certificate issuer: /CN=964caa9403a08d373b90b710a56d3eae81394ff0
Certificate serial: 01974EC522C7793FB775C923A2AB153D6F1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkyqlAOgjTc7kLcQpW0-roE5T_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/6b0dc9-c1b9-4fae-acd9-6bff1c0e68ae/1/lkyqlAOgjTc7kLcQpW0-roE5T_A.mft
Manifest number: 150C
Signing time: Sun 08 Jun 2025 09:00:31 +0000
Manifest this update: Sun 08 Jun 2025 09:00:31 +0000
Manifest next update: Mon 09 Jun 2025 09:00:31 +0000
Files and hashes: 1: lkyqlAOgjTc7kLcQpW0-roE5T_A.crl (hash: cxeK2cMBN0lpNUK4uSRS06iT/uGSJ8jszjPpLWAW1yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/6b0dc9-c1b9-4fae-acd9-6bff1c0e68ae/1/lkyqlAOgjTc7kLcQpW0-roE5T_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/6b0dc9-c1b9-4fae-acd9-6bff1c0e68ae/1/lkyqlAOgjTc7kLcQpW0-roE5T_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/lkyqlAOgjTc7kLcQpW0-roE5T_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 09:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:22:c7:79:3f:b7:75:c9:23:a2:ab:15:3d:6f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=964caa9403a08d373b90b710a56d3eae81394ff0
Validity
Not Before: Jun 8 09:00:31 2025 GMT
Not After : Jun 9 09:00:31 2025 GMT
Subject: CN=e20f442e5aea1f22ccc8669c8a3092144eb05424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fd:5f:96:9a:9a:42:69:7d:70:4d:e2:9d:d8:
5c:90:b7:1f:40:87:bb:3b:3d:02:f7:e1:fc:9d:2d:
5d:ee:35:67:4a:67:d4:12:8b:77:38:d7:12:9d:57:
b5:23:4e:c3:38:2c:41:e4:0c:cc:ed:3f:43:21:3b:
25:53:83:84:70:71:ee:55:8a:94:a8:7d:10:c7:3f:
5a:9c:65:14:57:b3:55:79:37:ff:25:da:32:d9:a1:
13:b2:e3:dc:08:5c:a9:89:1c:2b:ae:b8:a0:55:bc:
ab:c0:2c:ea:c7:15:67:88:ce:a6:c6:26:8d:5b:55:
b9:2c:66:44:62:54:50:c4:ec:b4:14:1a:52:73:89:
69:ae:34:c8:50:a6:d4:72:63:a9:bc:e0:9b:f6:e5:
6f:fc:6c:8d:9e:aa:f0:2b:6a:8c:a5:aa:23:28:bc:
83:35:b4:19:94:69:9c:41:c0:de:d1:e8:20:b6:cf:
b3:bb:97:7f:a5:26:55:e7:44:90:9d:78:04:8a:ea:
c8:fb:3a:81:f1:1f:27:8c:3c:30:45:b4:79:24:fe:
bc:3b:6f:f0:ed:7e:f3:55:77:82:5e:5e:60:77:25:
74:d1:1a:52:aa:f2:bf:f7:77:88:db:dc:78:2b:25:
9d:70:07:e7:df:73:aa:80:1e:7e:6e:f3:9d:bb:d4:
bc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:0F:44:2E:5A:EA:1F:22:CC:C8:66:9C:8A:30:92:14:4E:B0:54:24
X509v3 Authority Key Identifier:
keyid:96:4C:AA:94:03:A0:8D:37:3B:90:B7:10:A5:6D:3E:AE:81:39:4F:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkyqlAOgjTc7kLcQpW0-roE5T_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6b0dc9-c1b9-4fae-acd9-6bff1c0e68ae/1/lkyqlAOgjTc7kLcQpW0-roE5T_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6b0dc9-c1b9-4fae-acd9-6bff1c0e68ae/1/lkyqlAOgjTc7kLcQpW0-roE5T_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:5f:c1:a1:24:90:c2:b2:33:e4:7e:18:25:a3:e8:59:e9:91:
09:62:fb:2a:6c:92:ad:15:a2:e3:a7:a1:47:b7:3b:2d:e8:ac:
84:3e:57:6c:fe:e7:94:63:9b:a5:40:84:bd:6f:2c:72:e2:ea:
57:93:d7:9a:a9:d4:0c:c2:71:af:5d:7b:6d:34:35:41:f4:f1:
34:96:d5:0f:d2:03:6f:2a:6e:ca:76:d2:5a:98:0d:0c:0e:ce:
a5:2d:0d:44:d8:82:27:f4:89:fd:14:6b:6b:55:d6:c2:69:a5:
d5:1c:3a:b7:37:b1:da:3a:3d:df:36:14:2e:1c:a5:48:01:d3:
15:90:a2:47:21:4a:c8:2b:e7:f0:47:07:fd:b3:67:86:fc:84:
b0:93:98:b7:f9:70:f4:34:0f:8f:a7:59:9c:07:04:84:11:3b:
96:46:05:7b:08:b7:43:bb:5b:08:17:28:48:3c:73:04:6a:d1:
c5:5c:37:df:74:30:f4:a7:ae:67:02:04:46:2d:f7:26:71:42:
d5:81:48:d5:7b:6e:08:cd:3c:7c:e9:9a:2b:05:27:b5:74:9f:
3d:f2:d4:11:1e:c0:aa:27:8a:ef:eb:92:0e:88:f3:7b:21:67:
25:94:74:2b:36:46:d9:a9:a9:13:31:35:28:40:16:32:f2:0c:
08:3d:0e:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOxSLHeT+3dckjoqsVPW8dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NGNhYTk0MDNhMDhkMzczYjkwYjcxMGE1NmQzZWFlODEz
OTRmZjAwHhcNMjUwNjA4MDkwMDMxWhcNMjUwNjA5MDkwMDMxWjAzMTEwLwYDVQQD
EyhlMjBmNDQyZTVhZWExZjIyY2NjODY2OWM4YTMwOTIxNDRlYjA1NDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/1flpqaQml9cE3indhckLcfQIe7
Oz0C9+H8nS1d7jVnSmfUEot3ONcSnVe1I07DOCxB5AzM7T9DITslU4OEcHHuVYqU
qH0Qxz9anGUUV7NVeTf/Jdoy2aETsuPcCFypiRwrrrigVbyrwCzqxxVniM6mxiaN
W1W5LGZEYlRQxOy0FBpSc4lprjTIUKbUcmOpvOCb9uVv/GyNnqrwK2qMpaojKLyD
NbQZlGmcQcDe0eggts+zu5d/pSZV50SQnXgEiurI+zqB8R8njDwwRbR5JP68O2/w
7X7zVXeCXl5gdyV00RpSqvK/93eI29x4KyWdcAfn33OqgB5+bvOdu9S8GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOIPRC5a6h8izMhmnIowkhROsFQkMB8GA1UdIwQY
MBaAFJZMqpQDoI03O5C3EKVtPq6BOU/wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGt5cWxBT2dqVGM3a0xjUXBXMC1yb0U1VF9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS82YjBkYzktYzFiOS00ZmFlLWFjZDkt
NmJmZjFjMGU2OGFlLzEvbGt5cWxBT2dqVGM3a0xjUXBXMC1yb0U1VF9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS82YjBkYzktYzFiOS00ZmFlLWFjZDktNmJmZjFjMGU2OGFl
LzEvbGt5cWxBT2dqVGM3a0xjUXBXMC1yb0U1VF9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV1/BoSSQ
wrIz5H4YJaPoWemRCWL7KmySrRWi46ehR7c7LeishD5XbP7nlGObpUCEvW8scuLq
V5PXmqnUDMJxr117bTQ1QfTxNJbVD9IDbypuynbSWpgNDA7OpS0NRNiCJ/SJ/RRr
a1XWwmml1Rw6tzex2jo93zYULhylSAHTFZCiRyFKyCvn8EcH/bNnhvyEsJOYt/lw
9DQPj6dZnAcEhBE7lkYFewi3Q7tbCBcoSDxzBGrRxVw333Qw9KeuZwIERi33JnFC
1YFI1XtuCM08fOmaKwUntXSfPfLUER7AqieK7+uSDojzeyFnJZR0KzZG2ampEzE1
KEAWMvIMCD0OFQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 15:37:37 2025 by rpki-client