Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft
File: lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft (raw, json)
Hash identifier: 8g1QON/P5ifgS349Lr/sAUd30s1bney7A0U6/oHPmyA=
Subject key identifier: 25:7A:8B:A1:F5:3D:E9:B7:48:6E:81:1E:BC:5D:3E:FA:37:F3:48:F0
Authority key identifier: 96:F7:52:3A:7B:33:2E:BD:F1:14:A5:C0:8D:C1:D5:F3:2C:BD:73:C6
Certificate issuer: /CN=96f7523a7b332ebdf114a5c08dc1d5f32cbd73c6
Certificate serial: 01976DAC3C6A70B3FD2F5885F1751410E171
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvdSOnszLr3xFKXAjcHV8yy9c8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft
Manifest number: 0459
Signing time: Sat 14 Jun 2025 09:01:33 +0000
Manifest this update: Sat 14 Jun 2025 09:01:33 +0000
Manifest next update: Sun 15 Jun 2025 09:01:33 +0000
Files and hashes: 1: lvdSOnszLr3xFKXAjcHV8yy9c8Y.crl (hash: dE4NSUAljnfwqXbphm0KEd07xhnntVuyZAJDgP7zN9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvdSOnszLr3xFKXAjcHV8yy9c8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ac:3c:6a:70:b3:fd:2f:58:85:f1:75:14:10:e1:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f7523a7b332ebdf114a5c08dc1d5f32cbd73c6
Validity
Not Before: Jun 14 09:01:33 2025 GMT
Not After : Jun 15 09:01:33 2025 GMT
Subject: CN=257a8ba1f53de9b7486e811ebc5d3efa37f348f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:da:d2:ba:17:f9:f5:0b:e5:b2:24:35:47:96:
49:ee:33:1f:cf:d1:f0:c5:3f:ba:9f:a4:03:c6:ca:
72:6f:0a:3b:28:b0:a4:6d:98:38:f1:ee:d6:d9:e1:
49:96:bf:f1:2f:5d:15:ab:e5:3e:15:8a:4d:e5:b5:
83:69:1d:2c:8e:b0:4e:e4:a0:12:02:1b:ed:d3:6f:
af:f9:82:2b:89:54:56:6a:2b:3d:dd:04:78:2c:31:
5f:ce:f5:b7:d0:bd:23:c7:3d:56:4c:73:a6:ad:7b:
c4:e9:25:05:83:01:40:8e:5c:75:1e:5d:f6:b0:86:
b9:6b:87:4c:55:cb:de:93:ba:b2:cb:99:42:44:0e:
80:4f:26:b4:d8:06:5e:70:a4:e2:a4:97:0b:31:48:
b9:83:47:ce:9e:cd:20:e5:35:41:35:e2:d1:9b:cc:
62:b5:d7:1a:7a:e6:a1:98:ba:0e:64:b0:38:f0:5d:
b9:b1:16:61:82:be:d3:78:53:7e:73:94:29:40:50:
40:8c:f0:f8:dc:19:09:b6:bd:34:1a:ad:f2:8d:e1:
7c:1a:a4:0f:24:ed:c1:75:26:73:35:95:c2:d1:45:
bb:af:bd:eb:fb:37:fb:4c:e6:8f:04:97:4f:9b:fe:
c4:71:ce:80:32:41:ee:86:d7:bb:54:20:c6:51:a7:
26:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7A:8B:A1:F5:3D:E9:B7:48:6E:81:1E:BC:5D:3E:FA:37:F3:48:F0
X509v3 Authority Key Identifier:
keyid:96:F7:52:3A:7B:33:2E:BD:F1:14:A5:C0:8D:C1:D5:F3:2C:BD:73:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvdSOnszLr3xFKXAjcHV8yy9c8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c3:6a:ed:24:c4:db:1b:cb:70:06:c1:c1:bc:e0:40:14:5b:
37:80:81:69:ca:00:a1:1d:18:01:b6:a5:a9:40:02:03:e6:2d:
d8:ad:d0:19:76:98:61:d2:f0:ee:7b:b3:d8:29:79:c3:cd:b7:
47:ac:cf:89:48:79:d6:98:51:3b:69:70:fd:76:76:47:d3:6d:
27:aa:d7:a6:a3:19:39:7f:94:17:fa:69:5f:d2:69:21:a9:fa:
6b:cf:84:98:97:00:c4:60:e2:82:6f:ae:21:c4:9e:12:02:35:
f0:6e:7e:77:29:b4:07:23:58:39:0a:3b:1b:cf:29:f1:cf:d6:
7b:39:e0:f8:7d:ed:b1:01:f2:e9:75:22:fb:32:a7:4d:27:fa:
9e:ef:28:85:71:10:91:a4:a5:ec:4e:fb:60:30:ef:7b:d3:20:
55:65:66:25:dc:6c:7b:96:8d:33:77:cb:39:e6:e8:71:ca:67:
1b:2a:9d:ff:10:8b:a3:42:61:31:5b:64:0b:f5:4d:7e:fe:a8:
df:17:53:06:93:34:83:c3:b6:47:98:40:6f:78:eb:7c:33:0b:
28:32:a4:b8:10:f1:8d:d2:f1:2f:41:11:03:69:48:91:2a:7a:
92:c0:34:be:b3:49:0c:43:d1:09:62:f1:9a:7c:39:aa:d3:50:
b0:b5:70:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtrDxqcLP9L1iF8XUUEOFxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2Zjc1MjNhN2IzMzJlYmRmMTE0YTVjMDhkYzFkNWYzMmNi
ZDczYzYwHhcNMjUwNjE0MDkwMTMzWhcNMjUwNjE1MDkwMTMzWjAzMTEwLwYDVQQD
EygyNTdhOGJhMWY1M2RlOWI3NDg2ZTgxMWViYzVkM2VmYTM3ZjM0OGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNrSuhf59QvlsiQ1R5ZJ7jMfz9Hw
xT+6n6QDxspybwo7KLCkbZg48e7W2eFJlr/xL10Vq+U+FYpN5bWDaR0sjrBO5KAS
Ahvt02+v+YIriVRWais93QR4LDFfzvW30L0jxz1WTHOmrXvE6SUFgwFAjlx1Hl32
sIa5a4dMVcvek7qyy5lCRA6ATya02AZecKTipJcLMUi5g0fOns0g5TVBNeLRm8xi
tdcaeuahmLoOZLA48F25sRZhgr7TeFN+c5QpQFBAjPD43BkJtr00Gq3yjeF8GqQP
JO3BdSZzNZXC0UW7r73r+zf7TOaPBJdPm/7Ecc6AMkHuhte7VCDGUacmtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCV6i6H1Pem3SG6BHrxdPvo380jwMB8GA1UdIwQY
MBaAFJb3Ujp7My698RSlwI3B1fMsvXPGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHZkU09uc3pMcjN4RktYQWpjSFY4eXk5YzhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8wZjk1ZTktYjRkYi00N2FiLWJlNTUt
MzYwNTdlMzU0ODc2LzEvbHZkU09uc3pMcjN4RktYQWpjSFY4eXk5YzhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8wZjk1ZTktYjRkYi00N2FiLWJlNTUtMzYwNTdlMzU0ODc2
LzEvbHZkU09uc3pMcjN4RktYQWpjSFY4eXk5YzhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQsNq7STE
2xvLcAbBwbzgQBRbN4CBacoAoR0YAbalqUACA+Yt2K3QGXaYYdLw7nuz2Cl5w823
R6zPiUh51phRO2lw/XZ2R9NtJ6rXpqMZOX+UF/ppX9JpIan6a8+EmJcAxGDigm+u
IcSeEgI18G5+dym0ByNYOQo7G88p8c/Wezng+H3tsQHy6XUi+zKnTSf6nu8ohXEQ
kaSl7E77YDDve9MgVWVmJdxse5aNM3fLOeboccpnGyqd/xCLo0JhMVtkC/VNfv6o
3xdTBpM0g8O2R5hAb3jrfDMLKDKkuBDxjdLxL0ERA2lIkSp6ksA0vrNJDEPRCWLx
mnw5qtNQsLVwpg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:33:41 2025 by rpki-client