Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
File: LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft (raw, json)
Hash identifier: LVP5wMTWRwmRg0g5DsMM5MEHSrfEcfdJ/QtzNeXrvlA=
Subject key identifier: 0E:0C:54:79:6D:A9:EB:BB:9D:EA:51:87:B2:62:B9:3D:2C:6D:63:A7
Authority key identifier: 2D:2A:08:A7:43:8A:49:58:9D:63:4F:88:A0:9E:93:94:1F:81:07:F6
Certificate issuer: /CN=2d2a08a7438a49589d634f88a09e93941f8107f6
Certificate serial: 0197711A5F2ADB660C4D9AB091115096E7BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
Manifest number: 2F
Signing time: Sun 15 Jun 2025 01:00:43 +0000
Manifest this update: Sun 15 Jun 2025 01:00:43 +0000
Manifest next update: Mon 16 Jun 2025 01:00:43 +0000
Files and hashes: 1: LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl (hash: TJK+E5iz5kgzjiiRzjqYtiKbUqyW/bXcVf23dMg8ly0=)
2: OhZtVLJsToPJ5XT9Ri4PQ-fSzP4.roa (hash: cEI9APBy77RnV/y58ZcNRskCn0uMdesQT/xyTSiVBjs=)
3: Zxk5-UNoTN_fe5rahHCdwdJyWVw.roa (hash: 0rHpKBpbLdp/1wBkgWFoF+psPXoi1NKt4eIQVUq7Q8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:5f:2a:db:66:0c:4d:9a:b0:91:11:50:96:e7:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2a08a7438a49589d634f88a09e93941f8107f6
Validity
Not Before: Jun 15 01:00:43 2025 GMT
Not After : Jun 16 01:00:43 2025 GMT
Subject: CN=0e0c54796da9ebbb9dea5187b262b93d2c6d63a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b0:00:34:31:c8:fd:59:74:e1:5a:67:25:27:
e7:6f:3b:3d:14:f3:46:69:ee:af:a3:13:44:d1:ed:
8b:60:87:e6:d7:55:48:ab:cb:e8:ef:95:a5:f0:ec:
2c:a5:54:b6:02:a0:80:65:4b:db:b6:85:07:58:b1:
73:84:d2:c1:c4:f0:b9:d5:a9:06:43:9f:26:a0:8f:
b6:62:8f:35:cf:34:17:51:b5:d7:9b:aa:7c:38:d9:
8f:df:04:49:95:ed:c9:5f:53:52:ba:5a:53:cd:7b:
80:df:cd:b7:03:2b:ab:01:c0:5e:f5:23:f2:4d:ba:
78:5a:85:8a:dc:78:84:5f:23:4e:84:a8:37:73:18:
7d:62:49:9a:40:50:d0:94:10:03:de:40:3e:95:1f:
6d:b1:27:6b:fd:d8:05:36:47:f0:55:3e:cc:b4:5c:
af:cc:c6:79:ef:04:b9:4e:86:48:2b:f5:4b:ad:1c:
c3:cc:c6:af:8a:ae:de:e5:8a:30:87:6c:6e:f2:d3:
49:7f:72:a5:4c:14:ab:3b:56:6a:0c:e9:a1:f5:2f:
59:5b:29:00:68:12:d1:b8:d4:fa:d5:46:1b:04:78:
d3:c2:bc:2c:08:74:eb:f9:8b:23:3c:3c:3c:c2:56:
2d:c3:70:3d:95:31:f5:7d:08:82:23:d4:74:81:65:
11:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:0C:54:79:6D:A9:EB:BB:9D:EA:51:87:B2:62:B9:3D:2C:6D:63:A7
X509v3 Authority Key Identifier:
keyid:2D:2A:08:A7:43:8A:49:58:9D:63:4F:88:A0:9E:93:94:1F:81:07:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dcd18-c5b6-4ff5-b235-26c67cd0128c/1/LSoIp0OKSVidY0-IoJ6TlB-BB_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:6d:df:e1:d8:f9:8c:62:5e:80:c0:57:e5:20:26:7a:48:94:
59:9b:9e:9c:f4:2d:1d:5a:fa:3d:92:4a:f5:e4:35:89:37:6d:
47:98:83:c0:b6:3c:c4:a9:28:2c:23:d0:40:07:49:98:d8:56:
26:70:4e:d0:ea:d6:e5:15:59:06:ff:01:89:ae:e7:dd:ff:a8:
29:19:04:4e:89:c8:ff:ec:9a:84:a6:d1:c6:9b:e6:a6:32:06:
b3:bc:1d:5a:74:9d:9b:d7:ee:e3:73:cd:58:61:3e:4d:0e:31:
25:23:f6:46:4f:a0:38:8d:9f:f1:d8:25:26:f6:49:d1:16:a5:
37:e3:6c:73:26:06:66:1c:ae:e5:2c:d6:47:65:8b:0c:c1:a4:
a5:e1:2d:73:a4:8a:1e:b3:78:b1:9f:ed:91:e5:ed:b2:e0:97:
65:0d:86:39:8b:ee:24:68:56:78:fd:76:6a:8e:60:7c:01:e0:
60:74:8d:82:bb:a3:9a:63:bc:06:f7:8f:3e:27:1f:f2:3c:51:
4c:7a:c1:bb:4b:f8:35:06:41:22:b2:f2:63:13:29:7c:29:b5:
cd:74:1e:0c:49:4f:36:30:78:c5:06:f4:62:94:0c:f9:86:22:
e4:cb:e6:d5:c7:1b:ca:cd:97:d7:8e:6e:9c:fb:21:86:64:9d:
51:bd:46:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxGl8q22YMTZqwkRFQlue9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMmEwOGE3NDM4YTQ5NTg5ZDYzNGY4OGEwOWU5Mzk0MWY4
MTA3ZjYwHhcNMjUwNjE1MDEwMDQzWhcNMjUwNjE2MDEwMDQzWjAzMTEwLwYDVQQD
EygwZTBjNTQ3OTZkYTllYmJiOWRlYTUxODdiMjYyYjkzZDJjNmQ2M2E3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rAANDHI/Vl04VpnJSfnbzs9FPNG
ae6voxNE0e2LYIfm11VIq8vo75Wl8OwspVS2AqCAZUvbtoUHWLFzhNLBxPC51akG
Q58moI+2Yo81zzQXUbXXm6p8ONmP3wRJle3JX1NSulpTzXuA3823AyurAcBe9SPy
Tbp4WoWK3HiEXyNOhKg3cxh9YkmaQFDQlBAD3kA+lR9tsSdr/dgFNkfwVT7MtFyv
zMZ57wS5ToZIK/VLrRzDzMaviq7e5Yowh2xu8tNJf3KlTBSrO1ZqDOmh9S9ZWykA
aBLRuNT61UYbBHjTwrwsCHTr+YsjPDw8wlYtw3A9lTH1fQiCI9R0gWURewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA4MVHltqeu7nepRh7JiuT0sbWOnMB8GA1UdIwQY
MBaAFC0qCKdDiklYnWNPiKCek5QfgQf2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFNvSXAwT0tTVmlkWTAtSW9KNlRsQi1CQl9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8yZGNkMTgtYzViNi00ZmY1LWIyMzUt
MjZjNjdjZDAxMjhjLzEvTFNvSXAwT0tTVmlkWTAtSW9KNlRsQi1CQl9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8yZGNkMTgtYzViNi00ZmY1LWIyMzUtMjZjNjdjZDAxMjhj
LzEvTFNvSXAwT0tTVmlkWTAtSW9KNlRsQi1CQl9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP23f4dj5
jGJegMBX5SAmekiUWZuenPQtHVr6PZJK9eQ1iTdtR5iDwLY8xKkoLCPQQAdJmNhW
JnBO0OrW5RVZBv8Bia7n3f+oKRkETonI/+yahKbRxpvmpjIGs7wdWnSdm9fu43PN
WGE+TQ4xJSP2Rk+gOI2f8dglJvZJ0RalN+NscyYGZhyu5SzWR2WLDMGkpeEtc6SK
HrN4sZ/tkeXtsuCXZQ2GOYvuJGhWeP12ao5gfAHgYHSNgrujmmO8BvePPicf8jxR
THrBu0v4NQZBIrLyYxMpfCm1zXQeDElPNjB4xQb0YpQM+YYi5Mvm1ccbys2X145u
nPshhmSdUb1GCw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 04:03:12 2025 by rpki-client