Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/34d94d-2cc6-409d-95f3-949b91e9f48d/1/lpMmVir3Dnnz1RJIjikOkkMtWgE.mft
File: lpMmVir3Dnnz1RJIjikOkkMtWgE.mft (raw, json)
Hash identifier: 7YFVOUPOMlW8RNH39JsnBTpDwIe0fhq8GJIyNuoA5C4=
Subject key identifier: 14:8F:09:3B:A2:7E:DA:C9:C9:BF:21:2D:8C:68:FB:DD:5B:3F:92:35
Authority key identifier: 96:93:26:56:2A:F7:0E:79:F3:D5:12:48:8E:29:0E:92:43:2D:5A:01
Certificate issuer: /CN=969326562af70e79f3d512488e290e92432d5a01
Certificate serial: 01974F6A9AE0FC9558BD0A84875CCA5DB83F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lpMmVir3Dnnz1RJIjikOkkMtWgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/34d94d-2cc6-409d-95f3-949b91e9f48d/1/lpMmVir3Dnnz1RJIjikOkkMtWgE.mft
Manifest number: 1229
Signing time: Sun 08 Jun 2025 12:01:15 +0000
Manifest this update: Sun 08 Jun 2025 12:01:15 +0000
Manifest next update: Mon 09 Jun 2025 12:01:15 +0000
Files and hashes: 1: _zRJudFm9-SwIj8WqpSjxqhsHho.roa (hash: yl1VlGdcj3D0SfYe9bEEDXwIlAfQxRhpjuP7t/iSfW0=)
2: lpMmVir3Dnnz1RJIjikOkkMtWgE.crl (hash: 4sbyI75fpgsr/kwxz+17LHUloxT1hXUkRi+KriIv9Us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/34d94d-2cc6-409d-95f3-949b91e9f48d/1/lpMmVir3Dnnz1RJIjikOkkMtWgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/34d94d-2cc6-409d-95f3-949b91e9f48d/1/lpMmVir3Dnnz1RJIjikOkkMtWgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lpMmVir3Dnnz1RJIjikOkkMtWgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:6a:9a:e0:fc:95:58:bd:0a:84:87:5c:ca:5d:b8:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969326562af70e79f3d512488e290e92432d5a01
Validity
Not Before: Jun 8 12:01:15 2025 GMT
Not After : Jun 9 12:01:15 2025 GMT
Subject: CN=148f093ba27edac9c9bf212d8c68fbdd5b3f9235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ab:13:86:ca:35:1f:4d:d9:b3:27:7f:70:d8:
4b:b2:36:29:83:f6:7d:3b:37:d3:e6:6b:3d:87:11:
5f:29:4b:4d:4d:08:03:84:bb:38:30:33:e0:09:bd:
5c:b4:ab:1b:ce:14:46:a1:b6:ed:85:72:47:d9:fa:
a9:27:3e:42:7a:1b:a7:52:7d:92:64:78:63:e7:90:
69:2e:b4:31:b6:ba:2d:11:93:43:d5:5e:78:18:12:
65:b2:d1:b3:f9:02:f8:a4:30:3b:45:13:ea:9c:55:
e8:79:a1:40:70:ad:13:21:a3:51:2d:68:fb:6d:6b:
b1:53:08:4b:b1:af:f4:e4:6e:63:c6:58:40:38:cd:
f8:fb:46:c1:f8:1a:89:f3:5c:5f:a7:05:8b:b7:9d:
52:2b:0a:82:d0:b6:67:74:07:93:64:77:83:c3:a9:
98:12:e9:d1:e9:91:a5:d7:83:21:a7:37:da:64:79:
53:f7:b2:49:67:bd:14:ad:7c:fb:fd:19:fb:09:85:
a8:fb:1b:d6:fa:f3:00:82:c3:89:d4:34:cc:8f:7b:
50:94:3d:68:ac:90:2f:93:5c:d7:54:44:cf:fc:36:
b5:9f:d7:a1:64:d2:56:53:cd:b1:4b:b0:c0:9a:8e:
54:20:6b:bb:63:41:58:a1:1a:31:60:19:79:99:2c:
08:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:8F:09:3B:A2:7E:DA:C9:C9:BF:21:2D:8C:68:FB:DD:5B:3F:92:35
X509v3 Authority Key Identifier:
keyid:96:93:26:56:2A:F7:0E:79:F3:D5:12:48:8E:29:0E:92:43:2D:5A:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lpMmVir3Dnnz1RJIjikOkkMtWgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/34d94d-2cc6-409d-95f3-949b91e9f48d/1/lpMmVir3Dnnz1RJIjikOkkMtWgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/34d94d-2cc6-409d-95f3-949b91e9f48d/1/lpMmVir3Dnnz1RJIjikOkkMtWgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:5b:3a:6b:7b:1c:5d:b2:f1:ff:6f:eb:2b:39:69:b1:f5:79:
a2:34:51:a2:09:14:5d:9e:ac:ab:ab:66:de:2e:68:e9:7d:47:
56:fa:ac:40:44:7a:b3:61:62:f4:0d:b6:cc:5e:b7:21:cf:00:
89:d6:3d:5a:80:ef:af:f3:7a:f9:5c:23:eb:57:9c:20:3a:4f:
e8:28:7a:10:2f:ac:42:d0:ba:7a:99:93:52:4b:97:28:03:f1:
83:0e:ae:bb:cc:33:d6:b3:c7:8a:c6:fa:d8:ac:91:16:ee:54:
7f:e2:32:57:c8:45:ee:e7:35:3e:4d:82:21:a9:1b:fa:24:12:
0f:5e:1f:b7:de:25:64:95:32:c6:6d:f6:9a:89:78:75:d4:a8:
c6:04:83:a6:6b:39:82:fb:4c:3c:8d:b4:87:0c:77:d5:aa:44:
73:63:59:78:0d:55:ba:30:14:81:90:6e:8e:de:21:15:b7:47:
2b:49:67:6d:6a:5c:ef:43:81:36:38:0b:d1:f3:c2:df:f3:98:
1e:f5:66:74:75:e5:29:c9:79:a9:bc:3f:a8:21:a2:23:d6:aa:
ec:10:f0:44:71:03:55:9c:41:b8:09:d0:6e:b2:25:d0:c8:69:
c3:07:18:ef:91:78:38:dc:7e:a1:3b:63:7f:40:50:e9:ea:e8:
43:ae:c2:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdPaprg/JVYvQqEh1zKXbg/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2OTMyNjU2MmFmNzBlNzlmM2Q1MTI0ODhlMjkwZTkyNDMy
ZDVhMDEwHhcNMjUwNjA4MTIwMTE1WhcNMjUwNjA5MTIwMTE1WjAzMTEwLwYDVQQD
EygxNDhmMDkzYmEyN2VkYWM5YzliZjIxMmQ4YzY4ZmJkZDViM2Y5MjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArasThso1H03Zsyd/cNhLsjYpg/Z9
OzfT5ms9hxFfKUtNTQgDhLs4MDPgCb1ctKsbzhRGobbthXJH2fqpJz5CehunUn2S
ZHhj55BpLrQxtrotEZND1V54GBJlstGz+QL4pDA7RRPqnFXoeaFAcK0TIaNRLWj7
bWuxUwhLsa/05G5jxlhAOM34+0bB+BqJ81xfpwWLt51SKwqC0LZndAeTZHeDw6mY
EunR6ZGl14MhpzfaZHlT97JJZ70UrXz7/Rn7CYWo+xvW+vMAgsOJ1DTMj3tQlD1o
rJAvk1zXVETP/Da1n9ehZNJWU82xS7DAmo5UIGu7Y0FYoRoxYBl5mSwIMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBSPCTuiftrJyb8hLYxo+91bP5I1MB8GA1UdIwQY
MBaAFJaTJlYq9w5589USSI4pDpJDLVoBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHBNbVZpcjNEbm56MVJKSWppa09ra010V2dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8zNGQ5NGQtMmNjNi00MDlkLTk1ZjMt
OTQ5YjkxZTlmNDhkLzEvbHBNbVZpcjNEbm56MVJKSWppa09ra010V2dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi8zNGQ5NGQtMmNjNi00MDlkLTk1ZjMtOTQ5YjkxZTlmNDhk
LzEvbHBNbVZpcjNEbm56MVJKSWppa09ra010V2dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWFs6a3sc
XbLx/2/rKzlpsfV5ojRRogkUXZ6sq6tm3i5o6X1HVvqsQER6s2Fi9A22zF63Ic8A
idY9WoDvr/N6+Vwj61ecIDpP6Ch6EC+sQtC6epmTUkuXKAPxgw6uu8wz1rPHisb6
2KyRFu5Uf+IyV8hF7uc1Pk2CIakb+iQSD14ft94lZJUyxm32mol4ddSoxgSDpms5
gvtMPI20hwx31apEc2NZeA1VujAUgZBujt4hFbdHK0lnbWpc70OBNjgL0fPC3/OY
HvVmdHXlKcl5qbw/qCGiI9aq7BDwRHEDVZxBuAnQbrIl0MhpwwcY75F4ONx+oTtj
f0BQ6eroQ67CUA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 16:44:16 2025 by rpki-client