Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
File: LkFFfaHqbHmxtr6lLGSnobXylkg.mft (raw, json)
Hash identifier: /VQ7JGJBD9bDz/Y14P7aTTCPaReGY5UFxlF/yTzo6oQ=
Subject key identifier: BC:E6:05:5D:81:EA:B3:C3:24:B1:2F:84:22:AB:D9:F2:69:C7:22:AC
Authority key identifier: 2E:41:45:7D:A1:EA:6C:79:B1:B6:BE:A5:2C:64:A7:A1:B5:F2:96:48
Certificate issuer: /CN=2e41457da1ea6c79b1b6bea52c64a7a1b5f29648
Certificate serial: 01974A7B10D09E9BCFE6ADEF69D0F8096E93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 13:01:08 +0000
Manifest this update: Sat 07 Jun 2025 13:01:08 +0000
Manifest next update: Sun 08 Jun 2025 13:01:08 +0000
Files and hashes: 1: LkFFfaHqbHmxtr6lLGSnobXylkg.crl (hash: wCfsfkju6XSA7gKS+y+JLsQLrs2hcy78v8B8Jll1wJ8=)
2: RIRzVPPhcE8vA4XvF5JriP-fYwY.roa (hash: WtatU7VzUfyqgkJxN/FnJMt83P40z2B19888ZIjTAHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:10:d0:9e:9b:cf:e6:ad:ef:69:d0:f8:09:6e:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e41457da1ea6c79b1b6bea52c64a7a1b5f29648
Validity
Not Before: Jun 7 13:01:08 2025 GMT
Not After : Jun 8 13:01:08 2025 GMT
Subject: CN=bce6055d81eab3c324b12f8422abd9f269c722ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:57:8f:5a:5a:41:aa:c2:2d:de:61:c9:46:0a:
9b:36:cb:6d:ab:d1:31:ea:40:2a:a4:b2:75:14:9c:
af:bd:16:1c:ef:d7:c3:af:7a:b1:d3:37:a5:37:73:
62:53:6f:9a:2c:5e:39:60:23:64:5f:9c:75:51:0f:
fa:a5:5b:e9:c6:8e:c5:99:56:c0:cc:94:cc:f8:fe:
78:27:9f:f1:9d:22:27:cd:fe:40:85:62:83:b0:b9:
0d:d5:90:e2:1d:71:a2:e0:56:49:04:81:a7:e0:9b:
ce:aa:73:61:6c:83:1e:40:3a:a4:72:c6:e6:78:21:
09:31:c9:2e:a1:90:8a:d6:0d:53:62:b3:34:e6:43:
e4:97:29:1b:93:8d:b3:96:f9:0c:bf:ec:67:0f:34:
05:a4:f3:81:0a:4c:e1:b3:ff:e5:59:54:cd:d4:ba:
5f:a0:1c:aa:7d:5f:38:ba:c4:e2:31:f2:6c:33:2c:
37:83:22:51:61:07:23:b1:14:7f:91:f8:97:29:ce:
8d:a8:9b:f7:ff:10:d0:df:6d:38:ee:3e:3f:e3:df:
7a:ab:1b:f4:06:eb:6a:e3:36:8e:20:ff:d9:b5:ce:
a9:ee:94:fb:dc:0e:2a:bc:67:00:d0:24:d0:d0:f4:
19:45:80:87:45:0c:ed:c3:2b:43:dc:76:c1:65:23:
41:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E6:05:5D:81:EA:B3:C3:24:B1:2F:84:22:AB:D9:F2:69:C7:22:AC
X509v3 Authority Key Identifier:
keyid:2E:41:45:7D:A1:EA:6C:79:B1:B6:BE:A5:2C:64:A7:A1:B5:F2:96:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkFFfaHqbHmxtr6lLGSnobXylkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8fad8b-a033-4484-885e-e02872d1db01/1/LkFFfaHqbHmxtr6lLGSnobXylkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:68:92:25:4a:01:d0:72:41:15:b4:a3:6c:aa:f2:69:79:30:
a5:1f:19:ec:7b:2d:5f:b1:94:3f:8c:9b:36:61:17:fe:58:54:
d2:e7:18:6b:1f:50:51:8f:ba:bc:22:39:15:26:3f:d8:4e:e3:
cb:f1:e3:bb:71:66:df:66:69:f4:67:d4:4c:34:df:67:af:4f:
14:79:4f:26:7e:e1:39:ac:7c:33:93:f2:73:f8:e6:f4:64:18:
d8:15:e9:b5:f5:dc:03:fe:b2:2d:f5:37:42:f2:17:83:1b:22:
7c:8c:19:e8:09:b2:d6:03:d6:ac:6e:b6:e1:5b:17:93:9d:9a:
c7:8e:0b:24:fe:90:79:0e:49:75:83:d6:84:1e:f9:47:71:0d:
e2:66:01:da:a2:51:55:76:ea:29:3a:41:10:3d:36:9d:10:e4:
a4:39:25:c7:c1:63:e9:03:73:c9:2a:e1:85:52:73:3d:f9:52:
9b:c7:59:1a:bf:b0:e0:a1:21:79:c1:fd:4e:4e:57:b5:4b:67:
80:cd:58:17:51:63:e8:e1:67:c3:b7:b1:8e:f5:1e:42:dc:9b:
15:0e:64:62:1e:67:8a:90:b2:73:3a:1a:b1:f9:35:2e:a7:00:
c8:90:a9:40:f2:9c:52:5f:df:b3:d4:f9:0f:6d:2a:3f:e5:99:
71:2b:ac:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKexDQnpvP5q3vadD4CW6TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNDE0NTdkYTFlYTZjNzliMWI2YmVhNTJjNjRhN2ExYjVm
Mjk2NDgwHhcNMjUwNjA3MTMwMTA4WhcNMjUwNjA4MTMwMTA4WjAzMTEwLwYDVQQD
EyhiY2U2MDU1ZDgxZWFiM2MzMjRiMTJmODQyMmFiZDlmMjY5YzcyMmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVePWlpBqsIt3mHJRgqbNsttq9Ex
6kAqpLJ1FJyvvRYc79fDr3qx0zelN3NiU2+aLF45YCNkX5x1UQ/6pVvpxo7FmVbA
zJTM+P54J5/xnSInzf5AhWKDsLkN1ZDiHXGi4FZJBIGn4JvOqnNhbIMeQDqkcsbm
eCEJMckuoZCK1g1TYrM05kPklykbk42zlvkMv+xnDzQFpPOBCkzhs//lWVTN1Lpf
oByqfV84usTiMfJsMyw3gyJRYQcjsRR/kfiXKc6NqJv3/xDQ32047j4/4996qxv0
Butq4zaOIP/Ztc6p7pT73A4qvGcA0CTQ0PQZRYCHRQztwytD3HbBZSNBmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLzmBV2B6rPDJLEvhCKr2fJpxyKsMB8GA1UdIwQY
MBaAFC5BRX2h6mx5sba+pSxkp6G18pZIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGtGRmZhSHFiSG14dHI2bExHU25vYlh5bGtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84ZmFkOGItYTAzMy00NDg0LTg4NWUt
ZTAyODcyZDFkYjAxLzEvTGtGRmZhSHFiSG14dHI2bExHU25vYlh5bGtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC84ZmFkOGItYTAzMy00NDg0LTg4NWUtZTAyODcyZDFkYjAx
LzEvTGtGRmZhSHFiSG14dHI2bExHU25vYlh5bGtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj2iSJUoB
0HJBFbSjbKryaXkwpR8Z7HstX7GUP4ybNmEX/lhU0ucYax9QUY+6vCI5FSY/2E7j
y/Hju3Fm32Zp9GfUTDTfZ69PFHlPJn7hOax8M5Pyc/jm9GQY2BXptfXcA/6yLfU3
QvIXgxsifIwZ6Amy1gPWrG624VsXk52ax44LJP6QeQ5JdYPWhB75R3EN4mYB2qJR
VXbqKTpBED02nRDkpDklx8Fj6QNzySrhhVJzPflSm8dZGr+w4KEhecH9Tk5XtUtn
gM1YF1Fj6OFnw7exjvUeQtybFQ5kYh5nipCyczoasfk1LqcAyJCpQPKcUl/fs9T5
D20qP+WZcSusNw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:45:28 2025 by rpki-client