Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.mft
File: LkWQWSMqS7ky9j-w37ZUk-ucgng.mft (raw, json)
Hash identifier: dtz1ZhWZQ+NE57R/lpBJ+q30gKSJca0T65LiPndw9Q0=
Subject key identifier: BB:1C:D1:BC:D3:6B:5C:1F:41:9C:37:5C:D6:F9:2E:06:9F:C3:D2:F2
Authority key identifier: 2E:45:90:59:23:2A:4B:B9:32:F6:3F:B0:DF:B6:54:93:EB:9C:82:78
Certificate issuer: /CN=2e459059232a4bb932f63fb0dfb65493eb9c8278
Certificate serial: 019795CC6120EDD7377E3707EDC31EFD114E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkWQWSMqS7ky9j-w37ZUk-ucgng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.mft
Manifest number: 1533
Signing time: Sun 22 Jun 2025 04:01:28 +0000
Manifest this update: Sun 22 Jun 2025 04:01:28 +0000
Manifest next update: Mon 23 Jun 2025 04:01:28 +0000
Files and hashes: 1: LkWQWSMqS7ky9j-w37ZUk-ucgng.crl (hash: l0uvrVSc8gMA3Bs1Lb0gX8Nhf1U1z/hyu5LjQMhiI5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkWQWSMqS7ky9j-w37ZUk-ucgng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Jun 2025 04:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:95:cc:61:20:ed:d7:37:7e:37:07:ed:c3:1e:fd:11:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e459059232a4bb932f63fb0dfb65493eb9c8278
Validity
Not Before: Jun 22 04:01:28 2025 GMT
Not After : Jun 23 04:01:28 2025 GMT
Subject: CN=bb1cd1bcd36b5c1f419c375cd6f92e069fc3d2f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:85:bf:e5:51:06:51:f8:56:9d:3e:99:dd:09:
d2:d7:02:a7:aa:5e:3f:5e:e1:d1:1b:0a:cd:7c:44:
fe:c1:81:33:e7:0a:6a:7b:2a:6b:d4:11:07:58:ba:
b4:89:3c:48:17:38:4d:b9:1a:15:54:f1:b7:ea:f1:
d1:67:7b:37:87:5a:03:fb:4a:70:68:25:5a:c3:c5:
3d:24:f5:61:29:17:37:8d:69:bd:18:f2:5a:66:2b:
8d:76:92:dd:c8:30:8a:f9:35:26:70:14:08:ef:3f:
1f:b5:8e:e5:0b:28:df:32:5e:2f:4d:13:04:5b:e5:
18:e9:be:30:2f:34:b7:74:4f:e1:71:d1:ad:a7:25:
00:d7:9d:5a:56:11:31:0f:08:5b:57:dc:f4:3d:71:
b2:c9:54:dd:64:8a:25:f1:24:94:9e:72:d0:ac:f6:
d2:71:0d:91:15:0a:f9:48:63:74:20:23:a1:71:9d:
b2:bc:f9:9b:6b:a8:0c:d4:ff:b4:40:bf:00:f6:f6:
60:0a:99:4d:04:10:a6:b4:e9:77:86:2d:e2:8b:a9:
ef:d3:39:10:d7:87:84:40:ad:74:33:a8:49:4d:68:
b9:ec:a9:bf:e0:af:3a:35:51:00:b6:52:62:3a:a3:
87:7d:43:39:0c:ef:b8:3c:25:4a:b2:b0:19:94:2c:
c1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1C:D1:BC:D3:6B:5C:1F:41:9C:37:5C:D6:F9:2E:06:9F:C3:D2:F2
X509v3 Authority Key Identifier:
keyid:2E:45:90:59:23:2A:4B:B9:32:F6:3F:B0:DF:B6:54:93:EB:9C:82:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkWQWSMqS7ky9j-w37ZUk-ucgng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/668bf3-77dc-43ea-8fdd-485eda34998f/1/LkWQWSMqS7ky9j-w37ZUk-ucgng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:9f:1c:0b:c8:f8:02:ba:60:c9:fc:b3:0c:42:4d:74:da:86:
d9:63:be:c9:a8:e0:54:98:e5:5d:75:d6:77:59:33:15:5f:4c:
f0:5a:c7:c2:ab:a0:af:96:30:b2:8a:82:90:4c:bc:2a:6e:31:
58:f9:ec:87:6a:85:57:cf:02:4c:8a:ff:e1:fd:0e:40:ac:21:
9b:e0:f4:b2:d5:22:c8:d3:bc:93:bc:d3:cf:e4:bc:31:e1:7c:
84:22:27:ef:48:c1:89:da:d0:d4:2f:eb:45:b7:02:eb:d3:05:
cb:72:cd:17:f4:a7:75:45:db:ce:ce:be:e8:0d:6d:65:4a:ec:
10:f3:8e:72:5a:3c:a4:37:4e:ab:5c:79:87:4e:c8:c1:75:7a:
d4:37:bd:64:9c:c3:7f:55:ff:84:34:be:96:8b:37:d6:a2:34:
39:2c:a4:be:8c:94:fb:19:f2:40:c2:dc:a1:4b:f6:9f:28:96:
5d:bc:51:ed:d2:8d:59:63:91:9b:c9:93:21:8b:62:a6:52:5d:
dd:7e:80:57:10:79:ee:ca:2f:ff:fc:10:94:6c:1d:52:99:f4:
98:f0:85:a4:df:25:4e:0e:60:cc:94:9d:e9:fd:5f:98:93:40:
f4:3c:ba:57:0c:55:8d:b2:e7:11:12:c7:3f:a4:fb:58:fb:1a:
6e:15:cb:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeVzGEg7dc3fjcH7cMe/RFOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNDU5MDU5MjMyYTRiYjkzMmY2M2ZiMGRmYjY1NDkzZWI5
YzgyNzgwHhcNMjUwNjIyMDQwMTI4WhcNMjUwNjIzMDQwMTI4WjAzMTEwLwYDVQQD
EyhiYjFjZDFiY2QzNmI1YzFmNDE5YzM3NWNkNmY5MmUwNjlmYzNkMmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoW/5VEGUfhWnT6Z3QnS1wKnql4/
XuHRGwrNfET+wYEz5wpqeypr1BEHWLq0iTxIFzhNuRoVVPG36vHRZ3s3h1oD+0pw
aCVaw8U9JPVhKRc3jWm9GPJaZiuNdpLdyDCK+TUmcBQI7z8ftY7lCyjfMl4vTRME
W+UY6b4wLzS3dE/hcdGtpyUA151aVhExDwhbV9z0PXGyyVTdZIol8SSUnnLQrPbS
cQ2RFQr5SGN0ICOhcZ2yvPmba6gM1P+0QL8A9vZgCplNBBCmtOl3hi3ii6nv0zkQ
14eEQK10M6hJTWi57Km/4K86NVEAtlJiOqOHfUM5DO+4PCVKsrAZlCzBZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLsc0bzTa1wfQZw3XNb5Lgafw9LyMB8GA1UdIwQY
MBaAFC5FkFkjKku5MvY/sN+2VJPrnIJ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGtXUVdTTXFTN2t5OWotdzM3WlVrLXVjZ25nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC82NjhiZjMtNzdkYy00M2VhLThmZGQt
NDg1ZWRhMzQ5OThmLzEvTGtXUVdTTXFTN2t5OWotdzM3WlVrLXVjZ25nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC82NjhiZjMtNzdkYy00M2VhLThmZGQtNDg1ZWRhMzQ5OThm
LzEvTGtXUVdTTXFTN2t5OWotdzM3WlVrLXVjZ25nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFJ8cC8j4
ArpgyfyzDEJNdNqG2WO+yajgVJjlXXXWd1kzFV9M8FrHwqugr5YwsoqCkEy8Km4x
WPnsh2qFV88CTIr/4f0OQKwhm+D0stUiyNO8k7zTz+S8MeF8hCIn70jBidrQ1C/r
RbcC69MFy3LNF/SndUXbzs6+6A1tZUrsEPOOclo8pDdOq1x5h07IwXV61De9ZJzD
f1X/hDS+los31qI0OSykvoyU+xnyQMLcoUv2nyiWXbxR7dKNWWORm8mTIYtiplJd
3X6AVxB57sov//wQlGwdUpn0mPCFpN8lTg5gzJSd6f1fmJNA9Dy6VwxVjbLnERLH
P6T7WPsabhXLkA==
-----END CERTIFICATE-----
Generated at Sun Jun 22 14:18:59 2025 by rpki-client