Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
File: LkvU7cop1Ocr6GztC3rWUsfSYck.mft (raw, json)
Hash identifier: sAbf1J+v47zF7ZQ4zmYC982wxPQVJmq46d5hqt3x1KQ=
Subject key identifier: 1E:B1:3E:34:0B:13:B0:60:45:D1:69:17:08:96:E1:AA:A1:78:7C:FD
Authority key identifier: 2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
Certificate issuer: /CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Certificate serial: 0197805668F68EB8B536CD320D65AFE49301
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
Manifest number: 15A1
Signing time: Wed 18 Jun 2025 00:00:36 +0000
Manifest this update: Wed 18 Jun 2025 00:00:36 +0000
Manifest next update: Thu 19 Jun 2025 00:00:36 +0000
Files and hashes: 1: 9cXZNBVPbFK7YgwhAS48hqVN3Q8.roa (hash: P8nablk4XjPWocUs0+w/NDTZnQaNhHciAel+enfRgUQ=)
2: GJ7X3NXNPspZEiv4IaMeRbRsKjQ.roa (hash: +RNCIDZL3jBzsc6WtooEau4eUrswSESksvuz73mPQ2Q=)
3: LkvU7cop1Ocr6GztC3rWUsfSYck.crl (hash: ENt3trne1EenWGA6hyascktW5EvZqFiGYK8kzhvziFA=)
4: g2LuFjEhsXOpJYmb2qeJVNKQyUw.roa (hash: gXxbZRZ22rqSRTpziJlqNBg77T4+7Pe2wPiUn7l87EQ=)
5: kEq9Sa-aYq3KR4A40M5VyPd54wg.roa (hash: UxvV1YF4/u8pr981HOY28yhkvm5jpeElKKL/ei/Iusw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:80:56:68:f6:8e:b8:b5:36:cd:32:0d:65:af:e4:93:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e4bd4edca29d4e72be86ced0b7ad652c7d261c9
Validity
Not Before: Jun 18 00:00:36 2025 GMT
Not After : Jun 19 00:00:36 2025 GMT
Subject: CN=1eb13e340b13b06045d169170896e1aaa1787cfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:17:3f:aa:1c:69:de:34:76:13:5d:13:d1:0a:
f2:01:b1:12:d0:55:3d:69:a6:f3:84:4c:9f:1a:17:
ec:e1:00:33:f4:ab:61:ab:5e:9e:74:bd:10:8a:7f:
8e:5e:79:1d:3b:f8:97:bd:47:1e:4c:68:16:17:98:
a7:24:29:ea:3e:0e:76:03:90:2a:5e:f8:e2:45:7a:
bd:aa:32:2a:24:13:27:ec:f7:21:25:5f:e1:bb:d2:
b8:d0:a7:76:bf:8d:02:c3:23:f7:c4:4b:f6:03:cd:
28:fe:1b:61:1c:7b:88:bb:34:26:87:00:f6:e3:fb:
7f:4d:b2:d3:26:b1:98:a6:08:0e:bc:f3:07:f9:53:
de:3b:ec:04:58:bb:65:25:10:4a:ad:c6:32:a2:7c:
d5:69:f4:43:f2:f2:75:ae:83:11:05:6a:88:4f:4f:
e0:e6:97:47:0a:aa:07:fb:3b:aa:91:1e:2e:60:9e:
2e:77:d7:e7:32:9e:09:4b:49:53:26:bb:96:99:41:
0e:10:a3:2e:8e:ab:f1:84:1e:15:58:b5:f5:7d:74:
79:1b:8e:14:e3:ee:2e:5f:92:ca:63:b6:e5:f5:c1:
ce:6a:99:38:45:88:8a:94:ff:f3:97:5b:93:33:56:
2a:52:a9:82:43:a8:4d:22:7e:6d:75:7d:52:55:79:
41:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B1:3E:34:0B:13:B0:60:45:D1:69:17:08:96:E1:AA:A1:78:7C:FD
X509v3 Authority Key Identifier:
keyid:2E:4B:D4:ED:CA:29:D4:E7:2B:E8:6C:ED:0B:7A:D6:52:C7:D2:61:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkvU7cop1Ocr6GztC3rWUsfSYck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a53bb6-66c0-4861-b288-2a6372e054d2/1/LkvU7cop1Ocr6GztC3rWUsfSYck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:99:2c:d1:88:76:6a:73:97:ab:87:e7:e1:e1:aa:5a:96:5a:
92:98:13:83:2f:81:d9:1e:61:56:d5:ac:87:4d:4a:48:7e:42:
7c:c2:0f:d0:50:ab:4f:8a:c9:ca:3f:22:dc:21:d9:d8:7d:21:
10:ef:50:3f:df:9a:d4:84:ce:6e:5f:ff:a1:9f:02:17:89:e3:
4c:a2:11:8e:43:07:87:49:3d:f4:9f:73:fe:9c:9e:8e:e6:00:
f6:48:bd:a1:6f:93:d6:12:e5:cc:5e:44:3a:b0:c6:28:06:dd:
fc:76:da:a4:61:95:f8:ce:54:e6:5e:e1:1d:7b:f4:96:fe:91:
43:31:0c:e3:ea:b6:34:c4:2c:11:b1:05:b4:cd:28:6e:55:73:
b2:54:4b:75:d1:9d:6a:c9:8d:d8:6e:64:31:9b:76:31:de:0d:
77:3a:e9:d5:d9:10:48:12:86:bc:73:80:92:5d:7f:75:03:ef:
5d:ec:63:89:78:2f:cf:7b:83:00:b0:c3:a3:37:d6:ec:2f:f3:
7a:db:04:35:da:7f:b8:80:48:34:32:b0:ea:1b:21:76:59:d5:
57:bc:01:d2:4d:7a:54:cc:23:aa:b5:ed:95:38:61:b3:64:00:
c7:6c:39:e3:35:58:a3:9e:38:53:33:30:be:71:5d:30:d4:a3:
82:b3:76:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeAVmj2jri1Ns0yDWWv5JMBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNGJkNGVkY2EyOWQ0ZTcyYmU4NmNlZDBiN2FkNjUyYzdk
MjYxYzkwHhcNMjUwNjE4MDAwMDM2WhcNMjUwNjE5MDAwMDM2WjAzMTEwLwYDVQQD
EygxZWIxM2UzNDBiMTNiMDYwNDVkMTY5MTcwODk2ZTFhYWExNzg3Y2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBc/qhxp3jR2E10T0QryAbES0FU9
aabzhEyfGhfs4QAz9Kthq16edL0Qin+OXnkdO/iXvUceTGgWF5inJCnqPg52A5Aq
XvjiRXq9qjIqJBMn7PchJV/hu9K40Kd2v40CwyP3xEv2A80o/hthHHuIuzQmhwD2
4/t/TbLTJrGYpggOvPMH+VPeO+wEWLtlJRBKrcYyonzVafRD8vJ1roMRBWqIT0/g
5pdHCqoH+zuqkR4uYJ4ud9fnMp4JS0lTJruWmUEOEKMujqvxhB4VWLX1fXR5G44U
4+4uX5LKY7bl9cHOapk4RYiKlP/zl1uTM1YqUqmCQ6hNIn5tdX1SVXlBKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB6xPjQLE7BgRdFpFwiW4aqheHz9MB8GA1UdIwQY
MBaAFC5L1O3KKdTnK+hs7Qt61lLH0mHJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGt2VTdjb3AxT2NyNkd6dEMzcldVc2ZTWWNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9hNTNiYjYtNjZjMC00ODYxLWIyODgt
MmE2MzcyZTA1NGQyLzEvTGt2VTdjb3AxT2NyNkd6dEMzcldVc2ZTWWNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9hNTNiYjYtNjZjMC00ODYxLWIyODgtMmE2MzcyZTA1NGQy
LzEvTGt2VTdjb3AxT2NyNkd6dEMzcldVc2ZTWWNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVpks0Yh2
anOXq4fn4eGqWpZakpgTgy+B2R5hVtWsh01KSH5CfMIP0FCrT4rJyj8i3CHZ2H0h
EO9QP9+a1ITObl//oZ8CF4njTKIRjkMHh0k99J9z/pyejuYA9ki9oW+T1hLlzF5E
OrDGKAbd/HbapGGV+M5U5l7hHXv0lv6RQzEM4+q2NMQsEbEFtM0oblVzslRLddGd
asmN2G5kMZt2Md4Ndzrp1dkQSBKGvHOAkl1/dQPvXexjiXgvz3uDALDDozfW7C/z
etsENdp/uIBINDKw6hshdlnVV7wB0k16VMwjqrXtlThhs2QAx2w54zVYo544UzMw
vnFdMNSjgrN2Lw==
-----END CERTIFICATE-----
Generated at Wed Jun 18 06:33:54 2025 by rpki-client