Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
File: lvgJYTh33quHSpQB0VbbFP9NKBQ.mft (raw, json)
Hash identifier: g15iL8dSPgUg307KZTEyrAWST+sHIwZGEtUidoh3YFY=
Subject key identifier: 44:D1:28:12:58:81:48:36:55:4E:22:36:9C:5A:FA:ED:B3:C0:F9:0D
Authority key identifier: 96:F8:09:61:38:77:DE:AB:87:4A:94:01:D1:56:DB:14:FF:4D:28:14
Certificate issuer: /CN=96f809613877deab874a9401d156db14ff4d2814
Certificate serial: 0197752E117818880D77773F46C19E971F96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
Manifest number: 112C
Signing time: Sun 15 Jun 2025 20:00:42 +0000
Manifest this update: Sun 15 Jun 2025 20:00:42 +0000
Manifest next update: Mon 16 Jun 2025 20:00:42 +0000
Files and hashes: 1: lvgJYTh33quHSpQB0VbbFP9NKBQ.crl (hash: 5JwQ4/ijvhsz+Gz4WP1lWjuaIdSRiYyCd3YeQxLKAlQ=)
2: pvaPM5j3-BPWJpSuaWFE01jgVBg.roa (hash: vcFvxHEzp1YnutqV+Bq+p/f/FPwpa1xjzTG6Rie7rFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:2e:11:78:18:88:0d:77:77:3f:46:c1:9e:97:1f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f809613877deab874a9401d156db14ff4d2814
Validity
Not Before: Jun 15 20:00:42 2025 GMT
Not After : Jun 16 20:00:42 2025 GMT
Subject: CN=44d1281258814836554e22369c5afaedb3c0f90d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:88:4d:6a:aa:c4:6b:89:a8:bd:0c:b1:d1:07:
0e:f7:62:30:c8:48:bd:83:86:90:31:8f:53:42:19:
a1:52:1c:71:f9:fb:56:a7:c4:bd:9b:4e:da:f1:ee:
2d:0a:31:fe:95:0a:8c:72:93:e4:28:bc:c7:a8:e9:
fd:5b:a2:bd:58:5e:9c:3e:f7:c2:1b:67:72:2a:3e:
c4:a4:9b:2a:d0:17:00:69:f5:54:16:33:72:1f:1f:
36:68:5f:5f:da:89:c0:18:70:86:08:fd:0f:19:48:
c0:1b:24:97:d5:02:07:9b:aa:43:95:85:02:32:6b:
47:ff:5c:8f:58:b0:d1:38:f3:d7:46:78:14:1e:c1:
68:dd:2f:60:29:f8:4c:37:d8:e3:7f:3f:0c:f1:62:
05:3b:b2:a6:b1:1f:48:c2:2a:1b:c8:c3:a6:0d:25:
30:e3:58:ec:7b:78:c2:91:48:32:fe:0d:db:32:98:
84:6e:72:4b:b5:e7:3a:91:b8:4a:a9:c8:cb:cb:d4:
b8:9b:ef:f8:c8:7a:77:2b:fd:bb:59:57:34:1e:e8:
ea:08:7f:a9:ea:f6:31:fe:8b:97:8d:07:a0:fc:ca:
93:66:d3:3f:c3:99:62:02:0f:a1:d0:c9:85:26:99:
4a:d6:2e:95:26:9b:1b:6f:3b:3a:a3:ba:18:8d:b2:
0d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D1:28:12:58:81:48:36:55:4E:22:36:9C:5A:FA:ED:B3:C0:F9:0D
X509v3 Authority Key Identifier:
keyid:96:F8:09:61:38:77:DE:AB:87:4A:94:01:D1:56:DB:14:FF:4D:28:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c3:79:04:23:d8:f0:08:71:b5:7d:f6:6c:30:68:69:90:7f:
e1:6a:26:ed:c8:88:73:0f:40:55:84:cb:37:f7:d9:18:9d:05:
7d:be:e8:6a:d8:cf:20:fe:ce:00:81:42:1f:26:68:02:d4:44:
b0:41:17:f1:e3:9b:0b:d8:b4:ad:0a:21:1e:45:45:c5:71:66:
e3:f5:09:11:ed:3c:53:bc:07:36:e7:a3:26:2d:4a:ac:11:ed:
be:19:67:5b:84:00:0a:f9:08:1e:54:59:b0:ec:5a:13:3e:87:
bd:aa:2c:8a:59:2f:9e:90:16:50:f5:ec:11:35:dd:8e:c0:d6:
d1:55:d1:a5:72:f0:f3:b1:d9:87:3d:94:19:67:9f:b7:c1:1d:
e6:82:d2:a5:f1:1e:35:50:d1:27:ea:a0:8c:97:d8:bc:2b:25:
15:ac:c2:e9:ee:4b:f2:73:1b:c8:12:53:29:2d:15:69:35:5c:
45:ea:60:58:5f:f7:7b:2c:71:4e:e5:9f:87:e3:2b:7c:3d:31:
82:7a:8f:28:1f:8b:db:af:72:45:00:5a:c6:da:7c:52:be:2b:
13:95:1e:d1:be:44:6b:90:a3:bc:97:6c:e0:99:d5:8e:43:dc:
b9:23:48:55:fa:73:cc:59:a0:0a:85:3f:72:a4:e7:fa:81:ea:
a2:51:14:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd1LhF4GIgNd3c/RsGelx+WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZjgwOTYxMzg3N2RlYWI4NzRhOTQwMWQxNTZkYjE0ZmY0
ZDI4MTQwHhcNMjUwNjE1MjAwMDQyWhcNMjUwNjE2MjAwMDQyWjAzMTEwLwYDVQQD
Eyg0NGQxMjgxMjU4ODE0ODM2NTU0ZTIyMzY5YzVhZmFlZGIzYzBmOTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYhNaqrEa4movQyx0QcO92IwyEi9
g4aQMY9TQhmhUhxx+ftWp8S9m07a8e4tCjH+lQqMcpPkKLzHqOn9W6K9WF6cPvfC
G2dyKj7EpJsq0BcAafVUFjNyHx82aF9f2onAGHCGCP0PGUjAGySX1QIHm6pDlYUC
MmtH/1yPWLDROPPXRngUHsFo3S9gKfhMN9jjfz8M8WIFO7KmsR9IwiobyMOmDSUw
41jse3jCkUgy/g3bMpiEbnJLtec6kbhKqcjLy9S4m+/4yHp3K/27WVc0HujqCH+p
6vYx/ouXjQeg/MqTZtM/w5liAg+h0MmFJplK1i6VJpsbbzs6o7oYjbINPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFETRKBJYgUg2VU4iNpxa+u2zwPkNMB8GA1UdIwQY
MBaAFJb4CWE4d96rh0qUAdFW2xT/TSgUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHZnSllUaDMzcXVIU3BRQjBWYmJGUDlOS0JRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9hZDI3ODItZjUzYS00YmI0LWI4ZDct
NjQ2NmQ0ODM0NTljLzEvbHZnSllUaDMzcXVIU3BRQjBWYmJGUDlOS0JRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9hZDI3ODItZjUzYS00YmI0LWI4ZDctNjQ2NmQ0ODM0NTlj
LzEvbHZnSllUaDMzcXVIU3BRQjBWYmJGUDlOS0JRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHcN5BCPY
8AhxtX32bDBoaZB/4Wom7ciIcw9AVYTLN/fZGJ0Ffb7oatjPIP7OAIFCHyZoAtRE
sEEX8eObC9i0rQohHkVFxXFm4/UJEe08U7wHNuejJi1KrBHtvhlnW4QACvkIHlRZ
sOxaEz6HvaosilkvnpAWUPXsETXdjsDW0VXRpXLw87HZhz2UGWeft8Ed5oLSpfEe
NVDRJ+qgjJfYvCslFazC6e5L8nMbyBJTKS0VaTVcRepgWF/3eyxxTuWfh+MrfD0x
gnqPKB+L269yRQBaxtp8Ur4rE5Ue0b5Ea5CjvJds4JnVjkPcuSNIVfpzzFmgCoU/
cqTn+oHqolEUiw==
-----END CERTIFICATE-----
Generated at Mon Jun 16 02:28:47 2025 by rpki-client