Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
File: lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft (raw, json)
Hash identifier: q6ngz7asDi0H+SSW/fwMr/NJR0y8XoEqXCNHMZUAm48=
Subject key identifier: 19:40:A6:00:FC:55:73:F8:79:C3:FF:16:E3:B6:96:54:50:60:45:D9
Authority key identifier: 96:F7:1B:22:73:AB:34:ED:4A:54:81:17:6E:F7:0F:AD:86:7E:F1:66
Certificate issuer: /CN=96f71b2273ab34ed4a5481176ef70fad867ef166
Certificate serial: 019644E8BAC81EAED70D8BC192F26B6AE6D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
Manifest number: 0F23
Signing time: Thu 17 Apr 2025 18:00:24 +0000
Manifest this update: Thu 17 Apr 2025 18:00:24 +0000
Manifest next update: Fri 18 Apr 2025 18:00:24 +0000
Files and hashes: 1: Fj_5uSamv3jJtjHIke52iA3Na28.roa (hash: bRfKAtXHlDItQpeybK7VtR0dtUctyiWAqKlzDKS2Kn8=)
2: dJXQbo6z-3ryGZc7-KlzntCNDPg.roa (hash: dZ1N3sX+9N9ZicyxN/2APG+qgevhxMcEIynl4tsXiwo=)
3: lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl (hash: h0ZglVLa0Ulr7K7VOdlXygshVJt0s13YNCxGyp89TRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:e8:ba:c8:1e:ae:d7:0d:8b:c1:92:f2:6b:6a:e6:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f71b2273ab34ed4a5481176ef70fad867ef166
Validity
Not Before: Apr 17 18:00:24 2025 GMT
Not After : Apr 18 18:00:24 2025 GMT
Subject: CN=1940a600fc5573f879c3ff16e3b69654506045d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6e:68:a1:13:a5:38:69:a7:db:1b:8a:bc:49:
c9:44:1d:a9:73:ac:9a:48:ca:a3:51:17:d7:4b:7b:
a4:1d:10:9d:20:b9:f4:59:1b:21:bd:f4:9b:51:bc:
24:5c:b7:20:b6:c7:5e:4d:21:e4:2d:8c:91:07:6c:
5a:48:f4:ae:f8:33:16:e5:9c:03:d7:90:e3:a2:2d:
8d:80:d0:82:cf:83:ad:19:97:8e:56:6a:b6:45:c5:
01:a4:2f:e5:b5:70:78:5d:ea:88:90:4c:a2:08:8a:
2c:c1:8c:55:40:be:9f:46:d8:a9:3a:f3:b1:31:67:
6e:fa:b5:1f:68:48:db:48:3c:62:2f:df:c7:89:0c:
1b:9c:14:80:94:72:f0:ef:90:09:6f:77:37:75:0b:
a5:96:0b:3d:4b:96:e7:ba:7a:4c:aa:40:d2:46:3e:
08:2b:a1:e3:af:d4:a2:b8:d6:a1:6b:ca:4a:d0:99:
04:89:dc:61:86:d9:a4:80:c1:ca:ea:17:70:4d:b9:
68:c6:61:40:1a:8a:2d:0a:50:22:2e:51:e6:ce:f8:
bd:a0:1a:65:8b:2f:46:4c:c0:22:a2:9e:02:a2:40:
95:8a:18:e0:56:5d:80:fe:5e:53:8f:d7:73:ef:6d:
07:25:70:41:23:b7:c4:c6:0d:6f:26:3a:85:7c:e5:
fa:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:40:A6:00:FC:55:73:F8:79:C3:FF:16:E3:B6:96:54:50:60:45:D9
X509v3 Authority Key Identifier:
keyid:96:F7:1B:22:73:AB:34:ED:4A:54:81:17:6E:F7:0F:AD:86:7E:F1:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvcbInOrNO1KVIEXbvcPrYZ-8WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/07ae9e-3d04-45b6-9db0-46935fcc855e/1/lvcbInOrNO1KVIEXbvcPrYZ-8WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:74:2a:56:b5:bb:d4:28:a2:7e:87:e2:ab:3d:c9:c4:e0:1d:
3b:64:86:d3:b1:4a:53:7f:63:f9:d1:dd:b0:c5:98:8f:ba:a3:
ea:88:b1:cc:1c:31:77:f4:14:81:4e:53:a4:71:f4:cd:6d:83:
c3:05:b5:45:70:62:e6:88:f2:45:83:5a:c7:a2:2f:53:80:b5:
e7:0f:a7:80:70:1c:e7:b3:21:7e:38:b6:f1:e2:f3:3c:b8:2d:
83:ac:88:b7:78:a5:01:75:a9:34:6d:9b:97:48:c1:85:7d:b5:
5b:20:62:64:65:72:7d:28:4b:e3:ee:2e:6d:22:bb:ce:df:92:
02:65:2f:57:eb:a9:36:69:c2:ca:5f:9a:42:20:ab:3d:35:18:
3f:22:e8:39:2b:d2:79:b0:3c:c0:cd:a6:85:e6:3f:16:00:2f:
67:7c:74:53:04:49:c7:24:e3:e3:6d:c1:4d:79:8b:d0:24:f0:
10:1c:91:38:b0:15:29:b9:1b:f9:d3:bf:1d:41:9f:24:5e:0a:
ce:d3:1b:8e:fb:c2:21:fd:55:7d:f2:75:09:b6:06:b3:3b:53:
e5:7d:38:7a:14:1e:b7:da:82:de:74:a7:4f:64:cb:02:b7:f3:
62:a0:7f:f4:96:53:55:ab:3b:19:81:81:f5:48:df:eb:64:4d:
73:7c:b5:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZE6LrIHq7XDYvBkvJraubRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZjcxYjIyNzNhYjM0ZWQ0YTU0ODExNzZlZjcwZmFkODY3
ZWYxNjYwHhcNMjUwNDE3MTgwMDI0WhcNMjUwNDE4MTgwMDI0WjAzMTEwLwYDVQQD
EygxOTQwYTYwMGZjNTU3M2Y4NzljM2ZmMTZlM2I2OTY1NDUwNjA0NWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvG5ooROlOGmn2xuKvEnJRB2pc6ya
SMqjURfXS3ukHRCdILn0WRshvfSbUbwkXLcgtsdeTSHkLYyRB2xaSPSu+DMW5ZwD
15Djoi2NgNCCz4OtGZeOVmq2RcUBpC/ltXB4XeqIkEyiCIoswYxVQL6fRtipOvOx
MWdu+rUfaEjbSDxiL9/HiQwbnBSAlHLw75AJb3c3dQullgs9S5bnunpMqkDSRj4I
K6Hjr9SiuNaha8pK0JkEidxhhtmkgMHK6hdwTbloxmFAGootClAiLlHmzvi9oBpl
iy9GTMAiop4CokCVihjgVl2A/l5Tj9dz720HJXBBI7fExg1vJjqFfOX6RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBlApgD8VXP4ecP/FuO2llRQYEXZMB8GA1UdIwQY
MBaAFJb3GyJzqzTtSlSBF273D62GfvFmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHZjYkluT3JOTzFLVklFWGJ2Y1ByWVotOFdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wN2FlOWUtM2QwNC00NWI2LTlkYjAt
NDY5MzVmY2M4NTVlLzEvbHZjYkluT3JOTzFLVklFWGJ2Y1ByWVotOFdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8wN2FlOWUtM2QwNC00NWI2LTlkYjAtNDY5MzVmY2M4NTVl
LzEvbHZjYkluT3JOTzFLVklFWGJ2Y1ByWVotOFdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUnQqVrW7
1Ciifofiqz3JxOAdO2SG07FKU39j+dHdsMWYj7qj6oixzBwxd/QUgU5TpHH0zW2D
wwW1RXBi5ojyRYNax6IvU4C15w+ngHAc57Mhfji28eLzPLgtg6yIt3ilAXWpNG2b
l0jBhX21WyBiZGVyfShL4+4ubSK7zt+SAmUvV+upNmnCyl+aQiCrPTUYPyLoOSvS
ebA8wM2mheY/FgAvZ3x0UwRJxyTj423BTXmL0CTwEByROLAVKbkb+dO/HUGfJF4K
ztMbjvvCIf1VffJ1CbYGsztT5X04ehQet9qC3nSnT2TLArfzYqB/9JZTVas7GYGB
9Ujf62RNc3y1Fg==
-----END CERTIFICATE-----
Generated at Fri Apr 18 04:32:43 2025 by rpki-client