
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.mft
File: LkWQWSMqS7ky9j-w37ZUk-ucgng.mft (raw, json)
Hash identifier: mmSJeUR8PymNHx87DnWkCyqqJRdscUXHlk92E3MJU+o=
Subject key identifier: 26:9B:F2:EC:5A:B8:AB:FB:A9:80:74:59:55:B8:0F:DC:DB:60:95:80
Authority key identifier: 2E:45:90:59:23:2A:4B:B9:32:F6:3F:B0:DF:B6:54:93:EB:9C:82:78
Certificate issuer: /CN=2e459059232a4bb932f63fb0dfb65493eb9c8278
Certificate serial: 01969303BBF0AA414A588C913820BC331572
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkWQWSMqS7ky9j-w37ZUk-ucgng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.mft
Manifest number: 14AD
Signing time: Fri 02 May 2025 22:00:17 +0000
Manifest this update: Fri 02 May 2025 22:00:17 +0000
Manifest next update: Sat 03 May 2025 22:00:17 +0000
Files and hashes: 1: LkWQWSMqS7ky9j-w37ZUk-ucgng.crl (hash: 2/qFqZXcEF4dIunl/PBucb7w0J4QoUCHMCtEDUiyZoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkWQWSMqS7ky9j-w37ZUk-ucgng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 14:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:93:03:bb:f0:aa:41:4a:58:8c:91:38:20:bc:33:15:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e459059232a4bb932f63fb0dfb65493eb9c8278
Validity
Not Before: May 2 22:00:17 2025 GMT
Not After : May 3 22:00:17 2025 GMT
Subject: CN=269bf2ec5ab8abfba980745955b80fdcdb609580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e9:36:4c:00:8d:2e:79:64:2f:72:97:ad:b2:
0e:59:bf:ed:7d:34:36:59:f8:aa:25:50:2b:cb:0e:
26:20:91:63:a7:4e:14:9d:86:3b:20:9c:a5:69:53:
ea:9e:d9:71:ff:fa:95:a9:bc:c1:50:05:2c:cc:5f:
4a:71:5d:98:9a:73:6a:09:09:1c:5d:75:f4:77:af:
2c:85:1d:d8:89:99:a8:e5:2e:97:40:2a:37:ca:d4:
e8:68:cd:0f:1e:77:ae:55:98:4a:8a:1a:a5:b6:14:
00:ec:14:4f:92:fd:7c:6c:be:24:d6:6f:4b:95:4a:
e0:dd:72:cb:41:3a:ec:20:88:a7:f1:8a:6b:1d:4c:
ab:56:9a:93:12:6d:e2:77:ac:ba:39:69:c5:c0:4b:
73:a8:82:ab:3c:9b:cd:43:6c:81:8a:c1:bd:97:3e:
ed:d9:b5:34:a2:af:19:ec:fe:73:ad:b4:c6:07:f6:
79:c8:99:22:a4:b9:3b:a9:f7:18:63:ff:f3:b2:40:
28:46:0b:f1:6e:69:78:2e:5a:45:f3:90:b0:06:96:
05:ad:71:d1:22:73:5e:d9:4a:c6:7b:33:64:0c:be:
36:76:01:35:46:ec:13:b7:71:31:c1:a2:47:c0:7a:
6f:ec:95:70:0b:b8:c5:8a:c2:45:0b:3d:01:b8:52:
1e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:9B:F2:EC:5A:B8:AB:FB:A9:80:74:59:55:B8:0F:DC:DB:60:95:80
X509v3 Authority Key Identifier:
keyid:2E:45:90:59:23:2A:4B:B9:32:F6:3F:B0:DF:B6:54:93:EB:9C:82:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkWQWSMqS7ky9j-w37ZUk-ucgng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:48:e3:8f:1a:94:5d:b3:3b:d4:cc:ab:b9:f3:bf:7e:0a:a9:
2c:43:0b:3c:37:1c:b5:ec:c5:aa:ca:06:3b:47:38:63:b9:74:
da:db:fa:51:c6:98:7a:50:ae:b8:83:58:2f:ce:7d:46:1a:7c:
6b:be:c7:06:e2:33:c4:14:d9:22:de:0d:a4:8b:73:ec:bf:08:
2a:34:07:79:3e:6a:2c:06:56:16:44:f6:57:f2:91:ea:c5:83:
a5:22:ef:3a:48:c6:1f:9f:6f:4a:ba:5c:25:b7:7a:2a:bf:21:
cc:7a:ac:a6:14:2d:08:71:32:c3:fa:d7:2e:b3:ac:d3:b2:f8:
a9:b9:62:3a:d2:50:37:50:93:f3:06:58:2a:32:e1:5e:72:71:
17:c0:fa:af:79:17:46:fb:8c:ad:0f:19:94:9c:e0:ba:6a:11:
11:01:b2:68:14:b7:b8:f9:d1:0d:a6:eb:14:e9:bd:c4:75:2e:
e1:9a:63:0e:ca:f7:42:28:81:0c:ba:f4:6f:cb:70:99:25:c7:
1d:dc:3f:9b:f4:07:47:0b:72:b6:43:b0:70:55:24:83:ee:8b:
14:b6:86:a3:a7:39:98:69:65:b3:05:a4:95:60:1a:7c:a8:6d:
67:35:0c:8e:72:23:ab:c0:99:04:1c:42:e9:ba:2c:6d:1e:53:
94:f2:f9:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaTA7vwqkFKWIyROCC8MxVyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNDU5MDU5MjMyYTRiYjkzMmY2M2ZiMGRmYjY1NDkzZWI5
YzgyNzgwHhcNMjUwNTAyMjIwMDE3WhcNMjUwNTAzMjIwMDE3WjAzMTEwLwYDVQQD
EygyNjliZjJlYzVhYjhhYmZiYTk4MDc0NTk1NWI4MGZkY2RiNjA5NTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOk2TACNLnlkL3KXrbIOWb/tfTQ2
WfiqJVAryw4mIJFjp04UnYY7IJylaVPqntlx//qVqbzBUAUszF9KcV2YmnNqCQkc
XXX0d68shR3YiZmo5S6XQCo3ytToaM0PHneuVZhKihqlthQA7BRPkv18bL4k1m9L
lUrg3XLLQTrsIIin8YprHUyrVpqTEm3id6y6OWnFwEtzqIKrPJvNQ2yBisG9lz7t
2bU0oq8Z7P5zrbTGB/Z5yJkipLk7qfcYY//zskAoRgvxbml4LlpF85CwBpYFrXHR
InNe2UrGezNkDL42dgE1RuwTt3ExwaJHwHpv7JVwC7jFisJFCz0BuFIeYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCab8uxauKv7qYB0WVW4D9zbYJWAMB8GA1UdIwQY
MBaAFC5FkFkjKku5MvY/sN+2VJPrnIJ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGtXUVdTTXFTN2t5OWotdzM3WlVrLXVjZ25nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC82NjhiZjMtNzdkYy00M2VhLThmZGQt
NDg1ZWRhMzQ5OThmLzEvTGtXUVdTTXFTN2t5OWotdzM3WlVrLXVjZ25nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC82NjhiZjMtNzdkYy00M2VhLThmZGQtNDg1ZWRhMzQ5OThm
LzEvTGtXUVdTTXFTN2t5OWotdzM3WlVrLXVjZ25nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvEjjjxqU
XbM71MyrufO/fgqpLEMLPDcctezFqsoGO0c4Y7l02tv6UcaYelCuuINYL859Rhp8
a77HBuIzxBTZIt4NpItz7L8IKjQHeT5qLAZWFkT2V/KR6sWDpSLvOkjGH59vSrpc
Jbd6Kr8hzHqsphQtCHEyw/rXLrOs07L4qbliOtJQN1CT8wZYKjLhXnJxF8D6r3kX
RvuMrQ8ZlJzgumoREQGyaBS3uPnRDabrFOm9xHUu4ZpjDsr3QiiBDLr0b8twmSXH
Hdw/m/QHRwtytkOwcFUkg+6LFLaGo6c5mGllswWklWAafKhtZzUMjnIjq8CZBBxC
6bosbR5TlPL5jg==
-----END CERTIFICATE-----
Generated at Sat May 3 00:13:32 2025 by rpki-client