Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
File: LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft (raw, json)
Hash identifier: cO0JV6mEtUObefr8/DlQgFzqFmSWqLfyVsrkCHB0jrI=
Subject key identifier: 5F:FA:20:BD:EC:38:7E:AA:2E:AD:8D:17:50:93:56:B3:06:57:81:D5
Authority key identifier: 2E:48:19:09:55:94:80:D2:48:49:0D:8E:1D:71:C3:C0:93:B0:5F:E5
Certificate issuer: /CN=2e481909559480d248490d8e1d71c3c093b05fe5
Certificate serial: 0196594B544798B033F5962FD04E8BD14590
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
Manifest number: 14FC
Signing time: Mon 21 Apr 2025 17:00:31 +0000
Manifest this update: Mon 21 Apr 2025 17:00:31 +0000
Manifest next update: Tue 22 Apr 2025 17:00:31 +0000
Files and hashes: 1: LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl (hash: koeR9gawNd0ToUHUHI0Nxm9F/5WMjCNkqM6lV2slvdU=)
2: pRiOuP5ZVMbih8_UbkXq1OLRH1c.roa (hash: TjkUGx8VVF7JIz25EEx+I/z8EyX0AiRRScQg07c6hKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 17:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:4b:54:47:98:b0:33:f5:96:2f:d0:4e:8b:d1:45:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e481909559480d248490d8e1d71c3c093b05fe5
Validity
Not Before: Apr 21 17:00:31 2025 GMT
Not After : Apr 22 17:00:31 2025 GMT
Subject: CN=5ffa20bdec387eaa2ead8d17509356b3065781d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:86:79:22:bb:4a:cb:46:0d:69:b2:04:07:9a:
be:c8:41:20:d6:b4:48:63:f9:2d:cc:ac:14:ec:d4:
9b:27:ae:57:e6:24:6d:da:fa:70:68:8c:4f:4d:71:
67:34:89:7d:9e:83:d1:4c:5b:c4:02:e4:3a:fe:4e:
1c:22:84:ed:82:b3:d7:82:3f:64:e9:96:55:78:f3:
89:da:ac:ed:19:18:f2:6b:18:ae:e4:07:e3:d0:b2:
11:40:59:71:35:46:b1:7d:76:db:9c:e6:98:df:18:
e6:e3:14:88:e7:e1:9a:4d:5f:44:d3:4f:ee:28:72:
da:97:be:50:30:56:2d:7a:ed:1a:d9:ce:b7:9b:cd:
91:af:3e:ef:97:01:f0:e3:9f:a4:1a:7a:e9:48:d1:
a3:a3:0f:cd:d0:a6:9f:cd:fb:99:54:fb:57:3e:69:
03:61:b7:21:bf:11:2b:8e:4a:16:de:0b:5e:b5:a6:
86:a8:60:f8:a3:99:4f:d3:ed:e7:4e:a1:c3:7d:54:
ec:f1:df:6c:77:0c:6f:07:a3:54:d3:f6:a6:1d:22:
e3:0c:f2:73:4a:84:84:7a:21:88:21:a7:62:aa:41:
86:c6:d5:0c:46:11:8a:ee:e1:fb:f6:c2:bd:ec:ba:
b2:1c:d0:a1:01:23:ea:4e:14:9f:8b:38:8d:9a:fb:
13:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:FA:20:BD:EC:38:7E:AA:2E:AD:8D:17:50:93:56:B3:06:57:81:D5
X509v3 Authority Key Identifier:
keyid:2E:48:19:09:55:94:80:D2:48:49:0D:8E:1D:71:C3:C0:93:B0:5F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkgZCVWUgNJISQ2OHXHDwJOwX-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7f16ea-26d3-457f-92cb-87bc58f34665/1/LkgZCVWUgNJISQ2OHXHDwJOwX-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:9f:f6:ff:ce:45:b0:95:70:64:f5:77:e4:4a:f0:6b:ff:e2:
9e:ee:85:a1:7c:63:e7:3e:42:5a:e5:4b:6b:08:70:17:b5:fc:
cb:93:bf:13:1e:0d:75:7e:78:f0:1a:bc:83:73:ed:5a:ac:af:
41:e3:16:a5:de:e7:ae:cb:ce:ea:08:bf:c8:98:2f:49:4a:e5:
37:35:86:48:71:4b:f3:2f:d5:ab:90:77:da:16:b8:8b:34:25:
87:b0:a5:55:71:e0:3e:77:be:26:8b:d8:06:4b:97:fb:49:17:
a2:d5:c1:0b:19:c8:79:97:04:3a:a0:de:97:2c:7b:ac:60:43:
74:5f:20:c8:ed:c8:e9:8b:37:62:e1:aa:9a:d8:69:74:56:3e:
93:ec:03:e5:f3:8f:cd:cc:46:c2:8f:03:0f:3e:c7:d4:96:d6:
b5:20:7d:ca:60:02:ab:d4:7e:d6:3d:69:8c:c9:07:db:a6:8a:
02:c6:3d:45:32:e0:36:06:d5:ff:1f:b1:82:a2:29:ff:80:a0:
5e:10:82:0e:4c:7e:60:39:96:72:20:e5:54:cd:7d:e3:5a:ae:
6b:68:92:95:be:fb:34:e5:0c:93:49:fb:37:1c:dd:18:48:10:
b4:6c:94:d4:46:42:c2:6c:96:35:3f:fc:97:a0:1f:26:45:23:
5c:c4:2d:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZS1RHmLAz9ZYv0E6L0UWQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNDgxOTA5NTU5NDgwZDI0ODQ5MGQ4ZTFkNzFjM2MwOTNi
MDVmZTUwHhcNMjUwNDIxMTcwMDMxWhcNMjUwNDIyMTcwMDMxWjAzMTEwLwYDVQQD
Eyg1ZmZhMjBiZGVjMzg3ZWFhMmVhZDhkMTc1MDkzNTZiMzA2NTc4MWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYZ5IrtKy0YNabIEB5q+yEEg1rRI
Y/ktzKwU7NSbJ65X5iRt2vpwaIxPTXFnNIl9noPRTFvEAuQ6/k4cIoTtgrPXgj9k
6ZZVePOJ2qztGRjyaxiu5Afj0LIRQFlxNUaxfXbbnOaY3xjm4xSI5+GaTV9E00/u
KHLal75QMFYteu0a2c63m82Rrz7vlwHw45+kGnrpSNGjow/N0KafzfuZVPtXPmkD
YbchvxErjkoW3gtetaaGqGD4o5lP0+3nTqHDfVTs8d9sdwxvB6NU0/amHSLjDPJz
SoSEeiGIIadiqkGGxtUMRhGK7uH79sK97LqyHNChASPqThSfiziNmvsT8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF/6IL3sOH6qLq2NF1CTVrMGV4HVMB8GA1UdIwQY
MBaAFC5IGQlVlIDSSEkNjh1xw8CTsF/lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGtnWkNWV1VnTkpJU1EyT0hYSER3Sk93WC1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83ZjE2ZWEtMjZkMy00NTdmLTkyY2It
ODdiYzU4ZjM0NjY1LzEvTGtnWkNWV1VnTkpJU1EyT0hYSER3Sk93WC1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi83ZjE2ZWEtMjZkMy00NTdmLTkyY2ItODdiYzU4ZjM0NjY1
LzEvTGtnWkNWV1VnTkpJU1EyT0hYSER3Sk93WC1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmJ/2/85F
sJVwZPV35Erwa//inu6FoXxj5z5CWuVLawhwF7X8y5O/Ex4NdX548Bq8g3PtWqyv
QeMWpd7nrsvO6gi/yJgvSUrlNzWGSHFL8y/Vq5B32ha4izQlh7ClVXHgPne+JovY
BkuX+0kXotXBCxnIeZcEOqDelyx7rGBDdF8gyO3I6Ys3YuGqmthpdFY+k+wD5fOP
zcxGwo8DDz7H1JbWtSB9ymACq9R+1j1pjMkH26aKAsY9RTLgNgbV/x+xgqIp/4Cg
XhCCDkx+YDmWciDlVM1941qua2iSlb77NOUMk0n7NxzdGEgQtGyU1EZCwmyWNT/8
l6AfJkUjXMQtNA==
-----END CERTIFICATE-----
Generated at Tue Apr 22 03:37:53 2025 by rpki-client