Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.mft
File: LKVMSc_kyVm2nIriZoMm8QX2K50.mft (raw, json)
Hash identifier: y/dg2AobOQ41weE9rZ+kV8dLoHaisOiguqDNZbVOvH0=
Subject key identifier: 2A:AB:CA:1D:3B:96:88:A3:61:2F:6F:C1:5D:7B:AE:70:6D:01:89:7B
Authority key identifier: 2C:A5:4C:49:CF:E4:C9:59:B6:9C:8A:E2:66:83:26:F1:05:F6:2B:9D
Certificate issuer: /CN=2ca54c49cfe4c959b69c8ae2668326f105f62b9d
Certificate serial: 01988C20FC9A2F5D823B1744387B3223960F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKVMSc_kyVm2nIriZoMm8QX2K50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.mft
Manifest number: 0605
Signing time: Sat 09 Aug 2025 00:00:28 +0000
Manifest this update: Sat 09 Aug 2025 00:00:28 +0000
Manifest next update: Sun 10 Aug 2025 00:00:28 +0000
Files and hashes: 1: LKVMSc_kyVm2nIriZoMm8QX2K50.crl (hash: 2S6Z2JbFeYphmMtUuQgUBjREzT32xJ+Xfca6am7ST2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKVMSc_kyVm2nIriZoMm8QX2K50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:20:fc:9a:2f:5d:82:3b:17:44:38:7b:32:23:96:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ca54c49cfe4c959b69c8ae2668326f105f62b9d
Validity
Not Before: Aug 9 00:00:28 2025 GMT
Not After : Aug 10 00:00:28 2025 GMT
Subject: CN=2aabca1d3b9688a3612f6fc15d7bae706d01897b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8a:9a:90:c7:c3:fa:49:55:f4:fc:b8:8d:77:
1d:39:fd:2d:b8:49:e4:0e:93:72:7b:f5:e2:60:1c:
24:f7:c4:b7:12:8a:17:3a:e4:00:57:59:50:8f:63:
aa:60:a2:2f:08:0a:e2:40:1d:22:36:11:c6:52:96:
51:78:f1:6d:2a:81:3d:2d:65:69:02:d8:e3:0f:09:
64:45:ca:73:a1:54:3d:72:27:eb:8c:8b:6e:b1:3f:
10:c0:67:8f:67:68:a7:d9:48:35:49:a7:ee:b3:74:
44:cc:18:90:31:fc:e7:24:02:8b:c2:db:72:f1:d0:
1d:9b:c8:e0:db:80:86:f4:ca:43:a3:84:f6:02:2a:
40:97:6f:f1:03:fb:32:70:37:07:3e:8d:04:8e:d4:
9b:db:6b:13:93:c7:89:2d:3e:30:9a:c6:0b:ac:a9:
08:02:56:03:18:f3:fd:d6:f3:ce:6d:e9:9a:59:cb:
9a:75:0b:71:fb:15:e2:98:b8:b2:3b:8b:92:77:c7:
25:66:54:9c:99:01:3b:74:94:c9:24:ee:53:7b:e2:
df:a8:cd:5c:a3:97:b5:8d:b6:64:23:a3:c8:8c:f5:
06:d4:1b:dc:48:44:73:47:27:a9:e4:d2:49:c7:28:
1f:1d:5b:c9:7c:01:6f:a6:92:f1:94:40:36:8e:f1:
77:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:AB:CA:1D:3B:96:88:A3:61:2F:6F:C1:5D:7B:AE:70:6D:01:89:7B
X509v3 Authority Key Identifier:
keyid:2C:A5:4C:49:CF:E4:C9:59:B6:9C:8A:E2:66:83:26:F1:05:F6:2B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKVMSc_kyVm2nIriZoMm8QX2K50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4b1f9e-88fe-4939-ad58-f23f29cefee6/1/LKVMSc_kyVm2nIriZoMm8QX2K50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:c2:2d:c0:8e:b4:76:c1:20:29:78:c9:5f:f8:b8:c5:5d:7e:
a9:bc:7c:3a:bb:22:27:15:bb:7b:95:c9:85:5a:e1:f6:c0:a6:
bd:de:46:b8:3c:9f:46:c0:75:39:2b:2f:8c:a5:22:f2:f6:c6:
99:3b:66:f9:8f:92:9d:da:e0:59:2e:af:0c:3e:58:de:30:4f:
cd:09:a8:d1:26:dd:db:89:97:e4:1c:dc:00:a0:c3:8b:93:d2:
95:da:ec:3e:40:71:00:c5:a3:08:29:f1:50:e9:7f:1b:d8:98:
42:cc:be:60:be:0f:68:92:f9:5d:8e:96:94:95:1d:83:4f:8c:
42:00:8b:27:4d:44:79:70:30:d8:ef:53:80:9a:90:f4:23:49:
88:ae:30:3f:04:89:fd:5b:55:18:fe:e2:3e:0f:b3:0f:08:b0:
4d:f6:3d:e2:3b:82:e6:a0:59:38:a4:20:8f:a8:82:3e:1a:9e:
51:68:98:73:72:3d:a7:12:ad:c3:44:1b:7a:3a:3b:8e:33:43:
32:a0:f1:4c:fa:eb:39:bd:fd:b3:93:37:ee:13:19:35:9c:e9:
ad:8a:da:22:06:92:c4:54:45:de:70:01:91:68:a2:88:73:92:
72:73:7c:e0:81:fc:f3:e0:df:b7:1b:f6:95:6d:95:5c:ab:55:
d1:ef:cb:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiMIPyaL12COxdEOHsyI5YPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjYTU0YzQ5Y2ZlNGM5NTliNjljOGFlMjY2ODMyNmYxMDVm
NjJiOWQwHhcNMjUwODA5MDAwMDI4WhcNMjUwODEwMDAwMDI4WjAzMTEwLwYDVQQD
EygyYWFiY2ExZDNiOTY4OGEzNjEyZjZmYzE1ZDdiYWU3MDZkMDE4OTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIqakMfD+klV9Py4jXcdOf0tuEnk
DpNye/XiYBwk98S3EooXOuQAV1lQj2OqYKIvCAriQB0iNhHGUpZRePFtKoE9LWVp
AtjjDwlkRcpzoVQ9cifrjItusT8QwGePZ2in2Ug1Safus3REzBiQMfznJAKLwtty
8dAdm8jg24CG9MpDo4T2AipAl2/xA/sycDcHPo0EjtSb22sTk8eJLT4wmsYLrKkI
AlYDGPP91vPObemaWcuadQtx+xXimLiyO4uSd8clZlScmQE7dJTJJO5Te+LfqM1c
o5e1jbZkI6PIjPUG1BvcSERzRyep5NJJxygfHVvJfAFvppLxlEA2jvF3kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqryh07loijYS9vwV17rnBtAYl7MB8GA1UdIwQY
MBaAFCylTEnP5MlZtpyK4maDJvEF9iudMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEtWTVNjX2t5Vm0ybklyaVpvTW04UVgySzUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80YjFmOWUtODhmZS00OTM5LWFkNTgt
ZjIzZjI5Y2VmZWU2LzEvTEtWTVNjX2t5Vm0ybklyaVpvTW04UVgySzUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC80YjFmOWUtODhmZS00OTM5LWFkNTgtZjIzZjI5Y2VmZWU2
LzEvTEtWTVNjX2t5Vm0ybklyaVpvTW04UVgySzUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN8ItwI60
dsEgKXjJX/i4xV1+qbx8OrsiJxW7e5XJhVrh9sCmvd5GuDyfRsB1OSsvjKUi8vbG
mTtm+Y+SndrgWS6vDD5Y3jBPzQmo0Sbd24mX5BzcAKDDi5PSldrsPkBxAMWjCCnx
UOl/G9iYQsy+YL4PaJL5XY6WlJUdg0+MQgCLJ01EeXAw2O9TgJqQ9CNJiK4wPwSJ
/VtVGP7iPg+zDwiwTfY94juC5qBZOKQgj6iCPhqeUWiYc3I9pxKtw0Qbejo7jjND
MqDxTPrrOb39s5M37hMZNZzprYraIgaSxFRF3nABkWiiiHOScnN84IH88+Dftxv2
lW2VXKtV0e/LXA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:34:58 2025 by rpki-client