
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/7929f4-ec35-4d9c-92a8-0eb45ef62d8d/1/LxW3OnwtEx7BTr2QcXGLVMP7ppI.mft
File: LxW3OnwtEx7BTr2QcXGLVMP7ppI.mft (raw, json)
Hash identifier: nQ5YLseVX99PZaNxWahjciMzcURmc5XtjAfEGfKDKf0=
Subject key identifier: 9B:47:9F:57:D8:60:CC:4A:B1:69:D9:AF:07:AE:01:28:5A:85:41:FA
Authority key identifier: 2F:15:B7:3A:7C:2D:13:1E:C1:4E:BD:90:71:71:8B:54:C3:FB:A6:92
Certificate issuer: /CN=2f15b73a7c2d131ec14ebd9071718b54c3fba692
Certificate serial: 0197469DAB0DD0003C685FC88B81FAF3D857
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxW3OnwtEx7BTr2QcXGLVMP7ppI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/7929f4-ec35-4d9c-92a8-0eb45ef62d8d/1/LxW3OnwtEx7BTr2QcXGLVMP7ppI.mft
Manifest number: 028F
Signing time: Fri 06 Jun 2025 19:00:27 +0000
Manifest this update: Fri 06 Jun 2025 19:00:27 +0000
Manifest next update: Sat 07 Jun 2025 19:00:27 +0000
Files and hashes: 1: LxW3OnwtEx7BTr2QcXGLVMP7ppI.crl (hash: fkuxBM1HlRnlMGvsJCJedgu11JaA0UxxzcuwpyU8rVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/7929f4-ec35-4d9c-92a8-0eb45ef62d8d/1/LxW3OnwtEx7BTr2QcXGLVMP7ppI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/7929f4-ec35-4d9c-92a8-0eb45ef62d8d/1/LxW3OnwtEx7BTr2QcXGLVMP7ppI.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxW3OnwtEx7BTr2QcXGLVMP7ppI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9d:ab:0d:d0:00:3c:68:5f:c8:8b:81:fa:f3:d8:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f15b73a7c2d131ec14ebd9071718b54c3fba692
Validity
Not Before: Jun 6 19:00:27 2025 GMT
Not After : Jun 7 19:00:27 2025 GMT
Subject: CN=9b479f57d860cc4ab169d9af07ae01285a8541fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:da:9c:cf:b8:34:2f:de:a0:b0:4d:27:28:58:
46:53:0d:77:f1:e3:07:41:3a:7e:4d:03:56:b9:1a:
b1:74:4b:bf:5a:03:ab:7a:82:01:57:c2:4d:da:6e:
91:2b:3a:38:67:42:9d:01:83:f8:78:9d:ae:94:82:
0f:76:7c:5b:fc:d7:f9:27:e5:e1:ff:66:a3:f0:47:
35:84:33:04:72:31:43:bf:cd:d1:c0:06:be:03:3d:
c4:39:94:74:93:cc:91:4e:01:f5:5f:cd:7b:0d:8a:
7a:7c:c3:66:68:52:6a:3d:a5:11:04:cb:9c:aa:45:
e8:0f:35:99:04:f8:2a:6b:f2:72:9e:31:7c:fb:6a:
53:c5:23:b3:e0:1f:f1:f3:88:83:28:52:56:a6:ee:
d0:7f:2f:8f:e7:7d:b1:e2:a6:61:e1:15:de:60:21:
97:5b:97:33:19:51:cc:d0:83:4b:88:bc:a9:31:42:
87:e2:57:d5:c2:6d:96:85:88:94:03:1f:6b:24:23:
5a:97:4b:0d:2c:cc:10:7c:27:17:3d:00:bf:9f:46:
9b:c5:2e:55:bc:b9:46:91:e9:56:bc:74:00:62:52:
0a:13:5c:a8:e6:9d:30:49:67:dd:c9:f2:ce:c9:bb:
8f:b5:4e:74:d4:ac:dc:bc:a6:4a:ef:ef:c3:2e:d7:
e6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:47:9F:57:D8:60:CC:4A:B1:69:D9:AF:07:AE:01:28:5A:85:41:FA
X509v3 Authority Key Identifier:
keyid:2F:15:B7:3A:7C:2D:13:1E:C1:4E:BD:90:71:71:8B:54:C3:FB:A6:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxW3OnwtEx7BTr2QcXGLVMP7ppI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7929f4-ec35-4d9c-92a8-0eb45ef62d8d/1/LxW3OnwtEx7BTr2QcXGLVMP7ppI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7929f4-ec35-4d9c-92a8-0eb45ef62d8d/1/LxW3OnwtEx7BTr2QcXGLVMP7ppI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:c9:7a:44:86:1a:b7:ab:f9:ca:4c:66:90:3e:52:1e:bc:97:
27:1d:ae:4f:f6:3b:50:2f:b2:ea:55:19:bf:0d:12:63:12:9a:
37:c8:21:1a:a6:56:05:24:be:64:28:cd:70:e3:8c:9a:06:33:
1a:ab:37:70:dc:07:ea:2f:9a:a2:ff:10:ff:8c:39:91:b7:b3:
26:3d:02:8f:11:3c:a3:ef:f3:db:b1:f7:87:16:35:18:a9:15:
af:8a:53:2d:e0:fe:1a:70:e8:35:a5:7a:c0:67:35:ee:bd:93:
24:5d:c4:0e:0c:9f:f5:ab:95:a6:e4:94:0a:93:fe:8d:01:cb:
11:ae:43:84:9c:13:46:08:f9:57:36:7f:2d:10:a1:3a:44:c8:
28:ee:02:00:ab:6b:90:a7:f5:fa:34:37:64:3c:53:7a:f7:44:
c8:77:b2:f5:d8:5f:64:ef:d3:34:77:6f:60:7b:49:62:1d:45:
7e:1c:4e:46:bd:ce:05:90:a8:f4:7e:60:98:6b:6e:4c:d2:54:
35:5f:ae:a8:79:c3:7c:a0:e2:2d:15:e5:77:cd:2d:6e:d9:c1:
57:95:9f:19:08:56:34:7b:c9:79:ab:15:0f:07:3a:cf:f0:66:
53:76:7b:44:0c:82:d3:45:68:82:69:0f:54:c6:3b:4a:09:6e:
46:5c:c4:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGnasN0AA8aF/Ii4H689hXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMTViNzNhN2MyZDEzMWVjMTRlYmQ5MDcxNzE4YjU0YzNm
YmE2OTIwHhcNMjUwNjA2MTkwMDI3WhcNMjUwNjA3MTkwMDI3WjAzMTEwLwYDVQQD
Eyg5YjQ3OWY1N2Q4NjBjYzRhYjE2OWQ5YWYwN2FlMDEyODVhODU0MWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdqcz7g0L96gsE0nKFhGUw138eMH
QTp+TQNWuRqxdEu/WgOreoIBV8JN2m6RKzo4Z0KdAYP4eJ2ulIIPdnxb/Nf5J+Xh
/2aj8Ec1hDMEcjFDv83RwAa+Az3EOZR0k8yRTgH1X817DYp6fMNmaFJqPaURBMuc
qkXoDzWZBPgqa/JynjF8+2pTxSOz4B/x84iDKFJWpu7Qfy+P532x4qZh4RXeYCGX
W5czGVHM0INLiLypMUKH4lfVwm2WhYiUAx9rJCNal0sNLMwQfCcXPQC/n0abxS5V
vLlGkelWvHQAYlIKE1yo5p0wSWfdyfLOybuPtU501KzcvKZK7+/DLtfmNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtHn1fYYMxKsWnZrweuAShahUH6MB8GA1UdIwQY
MBaAFC8Vtzp8LRMewU69kHFxi1TD+6aSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHhXM09ud3RFeDdCVHIyUWNYR0xWTVA3cHBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83OTI5ZjQtZWMzNS00ZDljLTkyYTgt
MGViNDVlZjYyZDhkLzEvTHhXM09ud3RFeDdCVHIyUWNYR0xWTVA3cHBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83OTI5ZjQtZWMzNS00ZDljLTkyYTgtMGViNDVlZjYyZDhk
LzEvTHhXM09ud3RFeDdCVHIyUWNYR0xWTVA3cHBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAsl6RIYa
t6v5ykxmkD5SHryXJx2uT/Y7UC+y6lUZvw0SYxKaN8ghGqZWBSS+ZCjNcOOMmgYz
Gqs3cNwH6i+aov8Q/4w5kbezJj0CjxE8o+/z27H3hxY1GKkVr4pTLeD+GnDoNaV6
wGc17r2TJF3EDgyf9auVpuSUCpP+jQHLEa5DhJwTRgj5VzZ/LRChOkTIKO4CAKtr
kKf1+jQ3ZDxTevdEyHey9dhfZO/TNHdvYHtJYh1FfhxORr3OBZCo9H5gmGtuTNJU
NV+uqHnDfKDiLRXld80tbtnBV5WfGQhWNHvJeasVDwc6z/BmU3Z7RAyC00VogmkP
VMY7SgluRlzEDA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 00:54:16 2025 by rpki-client