Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.mft
File: LkWQWSMqS7ky9j-w37ZUk-ucgng.mft (raw, json)
Hash identifier: Wi34ixA2TgrtwjGwRUx/voh9dFqLLQbDrt4D75vvGg8=
Subject key identifier: 67:31:27:F3:92:DB:04:71:87:F4:11:BE:96:6A:7B:5D:2F:80:6E:15
Authority key identifier: 2E:45:90:59:23:2A:4B:B9:32:F6:3F:B0:DF:B6:54:93:EB:9C:82:78
Certificate issuer: /CN=2e459059232a4bb932f63fb0dfb65493eb9c8278
Certificate serial: 0198A4296E2B3BD42E9970F0AE43797DC3E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkWQWSMqS7ky9j-w37ZUk-ucgng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.mft
Manifest number: 15BF
Signing time: Wed 13 Aug 2025 16:00:35 +0000
Manifest this update: Wed 13 Aug 2025 16:00:35 +0000
Manifest next update: Thu 14 Aug 2025 16:00:35 +0000
Files and hashes: 1: LkWQWSMqS7ky9j-w37ZUk-ucgng.crl (hash: Ms0MxjKY3tztXhyxbRn5CZ9YX+TRk5P2bEO0V9Q/DmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkWQWSMqS7ky9j-w37ZUk-ucgng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 Aug 2025 16:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a4:29:6e:2b:3b:d4:2e:99:70:f0:ae:43:79:7d:c3:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e459059232a4bb932f63fb0dfb65493eb9c8278
Validity
Not Before: Aug 13 16:00:35 2025 GMT
Not After : Aug 14 16:00:35 2025 GMT
Subject: CN=673127f392db047187f411be966a7b5d2f806e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:54:17:5c:e8:90:fe:f0:a0:6f:bc:75:54:b5:
7b:4d:b5:a9:a7:2c:e9:b6:62:de:27:27:ed:60:68:
cc:1d:37:17:e4:26:b3:63:ba:1e:62:f1:5b:18:15:
22:8d:bf:1a:54:68:4a:8b:67:22:a0:cf:8b:ab:78:
4f:d7:43:c4:78:3e:0a:45:b9:00:e2:8b:41:e1:61:
f4:78:aa:65:f1:06:3d:4a:2c:a2:3c:19:2b:0f:5a:
03:3e:82:a6:91:dc:68:4a:33:8f:6f:de:8a:d4:31:
8e:12:6a:56:9d:38:5d:4d:6c:0e:05:a9:af:21:84:
42:b4:da:96:64:18:f0:b8:ad:9e:75:2d:bd:e8:c8:
66:13:3a:82:8f:ff:04:a8:74:7e:20:4f:7a:c4:d4:
40:ae:3c:d6:c8:b5:b2:22:6b:2b:48:d7:ab:5d:7b:
a8:0a:49:be:b2:8d:51:e9:5d:eb:a5:24:75:c1:92:
a2:88:9b:fc:47:af:c1:83:75:be:08:2b:34:83:9a:
70:3a:6a:76:21:4d:6e:15:5c:b1:e8:fb:fc:db:73:
25:67:85:94:28:aa:bc:cf:34:3b:76:01:14:4a:2e:
44:48:e8:a8:39:8f:ad:f7:e8:97:4c:4b:f3:e7:34:
cb:7d:90:5b:6d:83:c6:9c:72:7e:64:6d:c3:b7:e1:
17:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:31:27:F3:92:DB:04:71:87:F4:11:BE:96:6A:7B:5D:2F:80:6E:15
X509v3 Authority Key Identifier:
keyid:2E:45:90:59:23:2A:4B:B9:32:F6:3F:B0:DF:B6:54:93:EB:9C:82:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkWQWSMqS7ky9j-w37ZUk-ucgng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:da:0f:c6:4d:17:7d:3c:b0:00:38:0c:0a:9f:21:45:9b:37:
eb:17:dd:14:27:82:ef:b7:91:57:17:ac:57:8f:06:f3:a2:9c:
ed:67:be:52:7c:4e:29:70:40:4f:f4:26:5a:87:28:b7:ae:8f:
9b:3d:f8:20:09:f8:d5:fd:58:39:be:e8:cb:13:32:0e:e3:9c:
56:79:c4:f1:4a:8d:c0:20:af:6b:ab:01:11:84:56:10:9a:03:
d7:ea:2c:fc:3a:d2:28:09:c4:89:5d:9a:ef:46:b1:76:a8:21:
8e:f6:21:e5:85:e1:57:b0:4c:ed:aa:25:70:d9:74:18:e3:88:
38:ec:cc:29:b2:41:dd:6c:f2:ae:1a:9d:ba:c8:57:90:9b:58:
57:91:3e:34:2f:c5:59:44:85:06:9e:9c:5e:fa:7e:65:47:72:
4f:f7:8f:59:28:57:81:10:23:a2:b3:f5:be:67:ec:74:f6:6a:
d0:ca:89:7c:f5:ea:57:ca:5a:8b:56:07:f9:07:c2:41:c0:fc:
43:40:ce:39:fc:27:21:f5:80:de:68:60:c2:36:e6:39:65:bb:
27:71:0d:2c:2f:1a:02:82:fc:bc:6b:7c:cb:2e:c4:5f:c7:2b:
75:c8:b9:53:b9:fb:5f:48:b9:db:0b:f4:3b:d5:fc:f3:d7:61:
47:82:46:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZikKW4rO9QumXDwrkN5fcPkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNDU5MDU5MjMyYTRiYjkzMmY2M2ZiMGRmYjY1NDkzZWI5
YzgyNzgwHhcNMjUwODEzMTYwMDM1WhcNMjUwODE0MTYwMDM1WjAzMTEwLwYDVQQD
Eyg2NzMxMjdmMzkyZGIwNDcxODdmNDExYmU5NjZhN2I1ZDJmODA2ZTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVQXXOiQ/vCgb7x1VLV7TbWppyzp
tmLeJyftYGjMHTcX5CazY7oeYvFbGBUijb8aVGhKi2cioM+Lq3hP10PEeD4KRbkA
4otB4WH0eKpl8QY9SiyiPBkrD1oDPoKmkdxoSjOPb96K1DGOEmpWnThdTWwOBamv
IYRCtNqWZBjwuK2edS296MhmEzqCj/8EqHR+IE96xNRArjzWyLWyImsrSNerXXuo
Ckm+so1R6V3rpSR1wZKiiJv8R6/Bg3W+CCs0g5pwOmp2IU1uFVyx6Pv823MlZ4WU
KKq8zzQ7dgEUSi5ESOioOY+t9+iXTEvz5zTLfZBbbYPGnHJ+ZG3Dt+EXDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGcxJ/OS2wRxh/QRvpZqe10vgG4VMB8GA1UdIwQY
MBaAFC5FkFkjKku5MvY/sN+2VJPrnIJ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGtXUVdTTXFTN2t5OWotdzM3WlVrLXVjZ25nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC82NjhiZjMtNzdkYy00M2VhLThmZGQt
NDg1ZWRhMzQ5OThmLzEvTGtXUVdTTXFTN2t5OWotdzM3WlVrLXVjZ25nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC82NjhiZjMtNzdkYy00M2VhLThmZGQtNDg1ZWRhMzQ5OThm
LzEvTGtXUVdTTXFTN2t5OWotdzM3WlVrLXVjZ25nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOdoPxk0X
fTywADgMCp8hRZs36xfdFCeC77eRVxesV48G86Kc7We+UnxOKXBAT/QmWocot66P
mz34IAn41f1YOb7oyxMyDuOcVnnE8UqNwCCva6sBEYRWEJoD1+os/DrSKAnEiV2a
70axdqghjvYh5YXhV7BM7aolcNl0GOOIOOzMKbJB3WzyrhqdushXkJtYV5E+NC/F
WUSFBp6cXvp+ZUdyT/ePWShXgRAjorP1vmfsdPZq0MqJfPXqV8pai1YH+QfCQcD8
Q0DOOfwnIfWA3mhgwjbmOWW7J3ENLC8aAoL8vGt8yy7EX8crdci5U7n7X0i52wv0
O9X889dhR4JGTQ==
-----END CERTIFICATE-----
Generated at Wed Aug 13 23:02:53 2025 by rpki-client