Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.mft
File: lOvBA1TTG_33wdg1EN8N1mzoNaw.mft (raw, json)
Hash identifier: xd6TfuRhQhCADlrTOSFydBYJhCkjmkiqcmJnIoRmWiQ=
Subject key identifier: EE:A1:68:0C:E9:6D:62:D0:F1:BB:D6:A9:12:B9:6B:16:49:0C:20:53
Authority key identifier: 94:EB:C1:03:54:D3:1B:FD:F7:C1:D8:35:10:DF:0D:D6:6C:E8:35:AC
Certificate issuer: /CN=94ebc10354d31bfdf7c1d83510df0dd66ce835ac
Certificate serial: 01976960B5C8A3C763366269A64D5472771F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOvBA1TTG_33wdg1EN8N1mzoNaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.mft
Manifest number: 1589
Signing time: Fri 13 Jun 2025 13:00:35 +0000
Manifest this update: Fri 13 Jun 2025 13:00:35 +0000
Manifest next update: Sat 14 Jun 2025 13:00:35 +0000
Files and hashes: 1: lOvBA1TTG_33wdg1EN8N1mzoNaw.crl (hash: P6EeB3dvrp+/PP8IBWEugl3EfRmHnxi0Ak8q0ohR7Eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lOvBA1TTG_33wdg1EN8N1mzoNaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:b5:c8:a3:c7:63:36:62:69:a6:4d:54:72:77:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94ebc10354d31bfdf7c1d83510df0dd66ce835ac
Validity
Not Before: Jun 13 13:00:35 2025 GMT
Not After : Jun 14 13:00:35 2025 GMT
Subject: CN=eea1680ce96d62d0f1bbd6a912b96b16490c2053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:32:a2:0b:48:f3:04:a0:31:71:54:ac:40:4a:
7d:73:cd:92:ea:87:dd:19:54:92:19:ad:9a:d4:e3:
18:cb:25:72:a7:cc:9a:cd:d1:82:c6:44:ac:ff:02:
f3:b3:10:90:9c:ab:db:10:e2:73:b3:46:3c:34:1f:
af:9b:50:b3:9d:43:e4:d5:16:ae:48:6c:d7:f5:d0:
b7:b0:70:e8:b4:1e:f8:54:e0:9a:2e:fc:8a:99:aa:
53:e0:44:e3:67:83:ec:bb:c1:5d:90:95:a4:9e:4a:
87:f1:80:ae:dc:c1:ec:db:70:75:9b:c0:2e:89:4b:
68:b5:4d:8b:f9:7a:ad:20:98:b6:e6:83:c3:6a:11:
e9:45:64:bf:ee:11:c5:63:54:0f:0e:6e:5a:b6:69:
46:bd:09:90:03:04:6b:6a:53:35:f1:87:d8:45:12:
e6:1e:8d:17:6b:a2:4a:78:6a:79:47:21:49:bb:7f:
db:45:ca:c5:76:27:ea:e0:d9:d5:dd:b0:5e:09:88:
cc:72:54:fd:f6:ae:48:ab:35:98:29:02:e1:33:69:
6f:f2:c0:2e:50:e3:91:d7:f7:20:0e:17:d6:fd:01:
b6:23:cb:27:50:71:19:1c:ca:41:66:b4:8f:cf:28:
3b:fc:7b:b0:ee:4e:eb:bb:78:09:ac:1d:6e:f3:8a:
f6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A1:68:0C:E9:6D:62:D0:F1:BB:D6:A9:12:B9:6B:16:49:0C:20:53
X509v3 Authority Key Identifier:
keyid:94:EB:C1:03:54:D3:1B:FD:F7:C1:D8:35:10:DF:0D:D6:6C:E8:35:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOvBA1TTG_33wdg1EN8N1mzoNaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9c036c-56c5-41e1-87f8-b7780396faf4/1/lOvBA1TTG_33wdg1EN8N1mzoNaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:c4:b1:05:7e:e5:41:9e:69:f0:7a:4c:d9:35:cf:c7:ce:76:
68:09:f5:1a:59:1a:85:6d:ec:a4:33:2b:d9:5a:bf:b5:1b:38:
b0:a0:c4:fa:52:8a:63:45:7f:9b:13:bc:6f:51:78:e5:f2:0e:
8c:1e:8f:8d:63:5c:bf:94:cb:54:9b:b1:3f:3d:9d:82:ef:11:
36:84:a8:33:15:45:7c:a7:f5:26:11:7c:55:dc:98:7e:12:8e:
d3:8f:2f:74:49:73:4b:71:7a:3a:7b:35:2b:01:0a:bd:5e:37:
bc:35:7a:0b:b2:cb:17:6a:89:cd:6e:ad:4d:17:9b:e4:b3:d9:
f9:f8:7f:2c:27:1a:fb:ad:e6:36:82:36:ba:d6:89:a3:80:ca:
06:4d:7a:19:92:1d:0c:f4:59:cb:ca:68:ac:14:a3:3c:19:1f:
99:6a:db:c3:dd:13:bf:1f:10:af:62:8b:94:1d:e1:46:74:60:
3d:cc:27:c1:f7:56:b3:bc:2f:98:9d:f9:31:24:24:d4:47:6e:
51:ce:ce:ff:67:9b:40:e5:f7:a0:63:2a:86:dd:db:80:a3:db:
3a:4a:00:7f:c8:3c:41:fe:25:02:99:bc:90:ff:5c:9b:b1:ed:
1e:e8:67:26:be:21:ae:3a:96:5f:cb:cc:54:7d:b2:88:c2:53:
26:2a:6d:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpYLXIo8djNmJppk1UcncfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ZWJjMTAzNTRkMzFiZmRmN2MxZDgzNTEwZGYwZGQ2NmNl
ODM1YWMwHhcNMjUwNjEzMTMwMDM1WhcNMjUwNjE0MTMwMDM1WjAzMTEwLwYDVQQD
EyhlZWExNjgwY2U5NmQ2MmQwZjFiYmQ2YTkxMmI5NmIxNjQ5MGMyMDUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDKiC0jzBKAxcVSsQEp9c82S6ofd
GVSSGa2a1OMYyyVyp8yazdGCxkSs/wLzsxCQnKvbEOJzs0Y8NB+vm1CznUPk1Rau
SGzX9dC3sHDotB74VOCaLvyKmapT4ETjZ4Psu8FdkJWknkqH8YCu3MHs23B1m8Au
iUtotU2L+XqtIJi25oPDahHpRWS/7hHFY1QPDm5atmlGvQmQAwRralM18YfYRRLm
Ho0Xa6JKeGp5RyFJu3/bRcrFdifq4NnV3bBeCYjMclT99q5IqzWYKQLhM2lv8sAu
UOOR1/cgDhfW/QG2I8snUHEZHMpBZrSPzyg7/Huw7k7ru3gJrB1u84r2IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO6haAzpbWLQ8bvWqRK5axZJDCBTMB8GA1UdIwQY
MBaAFJTrwQNU0xv998HYNRDfDdZs6DWsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbE92QkExVFRHXzMzd2RnMUVOOE4xbXpvTmF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy85YzAzNmMtNTZjNS00MWUxLTg3Zjgt
Yjc3ODAzOTZmYWY0LzEvbE92QkExVFRHXzMzd2RnMUVOOE4xbXpvTmF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy85YzAzNmMtNTZjNS00MWUxLTg3ZjgtYjc3ODAzOTZmYWY0
LzEvbE92QkExVFRHXzMzd2RnMUVOOE4xbXpvTmF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ8SxBX7l
QZ5p8HpM2TXPx852aAn1GlkahW3spDMr2Vq/tRs4sKDE+lKKY0V/mxO8b1F45fIO
jB6PjWNcv5TLVJuxPz2dgu8RNoSoMxVFfKf1JhF8VdyYfhKO048vdElzS3F6Ons1
KwEKvV43vDV6C7LLF2qJzW6tTReb5LPZ+fh/LCca+63mNoI2utaJo4DKBk16GZId
DPRZy8porBSjPBkfmWrbw90Tvx8Qr2KLlB3hRnRgPcwnwfdWs7wvmJ35MSQk1Edu
Uc7O/2ebQOX3oGMqht3bgKPbOkoAf8g8Qf4lApm8kP9cm7HtHuhnJr4hrjqWX8vM
VH2yiMJTJiptwA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:26:40 2025 by rpki-client