Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.mft
File: _-LSEcNBNyjvBNJUQlgoqLQYHuA.mft (raw, json)
Hash identifier: ZXpXSa9Bln+1DQ1UCl1zOdioqhvSqIeLYM+Z51c+k84=
Subject key identifier: 5D:38:9D:49:F6:7B:CB:F3:63:CD:E3:80:C9:8A:7D:E3:AD:D2:21:72
Authority key identifier: FF:E2:D2:11:C3:41:37:28:EF:04:D2:54:42:58:28:A8:B4:18:1E:E0
Certificate issuer: /CN=ffe2d211c3413728ef04d254425828a8b4181ee0
Certificate serial: 0196CFF4507EFAF17429E9B68B9051557643
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-LSEcNBNyjvBNJUQlgoqLQYHuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.mft
Manifest number: 0487
Signing time: Wed 14 May 2025 18:00:17 +0000
Manifest this update: Wed 14 May 2025 18:00:17 +0000
Manifest next update: Thu 15 May 2025 18:00:17 +0000
Files and hashes: 1: _-LSEcNBNyjvBNJUQlgoqLQYHuA.crl (hash: zAP/aC+udP8fdYLl5XnmKubE8pvUxCrEvjQg/3NQ+nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-LSEcNBNyjvBNJUQlgoqLQYHuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:f4:50:7e:fa:f1:74:29:e9:b6:8b:90:51:55:76:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe2d211c3413728ef04d254425828a8b4181ee0
Validity
Not Before: May 14 18:00:17 2025 GMT
Not After : May 15 18:00:17 2025 GMT
Subject: CN=5d389d49f67bcbf363cde380c98a7de3add22172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:ba:32:a2:69:81:8e:67:1b:55:5b:b4:dc:95:
35:20:ed:4b:2d:8a:f2:6e:5f:d4:e1:68:60:79:7e:
8f:b9:02:34:1b:8b:0b:bb:58:b7:3b:4c:c5:45:b8:
82:55:a2:45:08:c2:b3:3b:52:f4:11:c4:0d:e9:e8:
fe:fd:a5:90:fc:bc:e9:5a:a7:46:ea:17:9c:45:50:
9c:c1:d2:88:e3:85:07:07:8e:c9:8e:87:ee:60:8e:
df:aa:01:f0:ba:8d:b3:c8:cb:40:6c:34:72:a9:b5:
04:25:fa:aa:b4:be:f5:ad:ba:b2:48:51:0a:f5:0d:
12:b7:ef:fb:aa:f6:27:e8:88:85:3f:16:5b:9e:4b:
03:40:88:f2:80:56:69:59:7b:9f:a1:49:97:b9:59:
58:b3:6c:11:2e:e1:dd:82:89:be:bf:0f:e2:91:6d:
7a:8d:39:fa:f5:f5:f0:b1:a4:4e:86:1e:cd:79:ea:
00:1f:66:3b:6e:e3:ba:c4:ed:96:f5:29:1f:5a:32:
19:2d:b9:66:e3:b9:b4:b9:4a:03:60:e5:9f:df:eb:
03:96:7f:f6:6b:5c:65:6e:55:71:58:f5:f1:06:e7:
ca:0e:6d:30:95:9c:74:97:d6:13:0c:fd:b7:2d:84:
85:e6:fb:47:bb:8e:18:c5:47:e7:7c:e4:46:0d:45:
e2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:38:9D:49:F6:7B:CB:F3:63:CD:E3:80:C9:8A:7D:E3:AD:D2:21:72
X509v3 Authority Key Identifier:
keyid:FF:E2:D2:11:C3:41:37:28:EF:04:D2:54:42:58:28:A8:B4:18:1E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-LSEcNBNyjvBNJUQlgoqLQYHuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c4982c-b4a5-4cad-891a-8fd103b8cc89/1/_-LSEcNBNyjvBNJUQlgoqLQYHuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:22:b5:af:10:dd:73:67:46:ca:68:a0:ac:87:0e:3f:4b:ad:
ce:cd:1e:44:5c:0f:07:8f:fa:74:84:3f:21:1d:69:84:70:c6:
54:70:0c:e8:22:40:e1:19:3f:f2:da:9d:42:27:18:c4:20:95:
cb:b2:60:a3:10:f0:b6:ad:c2:dd:0a:bc:0f:22:9c:cc:60:6c:
59:0a:9f:cf:5a:d9:0e:68:62:03:aa:ca:92:27:24:d2:d7:6a:
0f:1f:f7:0e:a6:45:9b:0d:43:f0:1d:9a:6c:bb:bd:6e:32:34:
b7:dc:99:37:ae:6a:2b:37:6e:ab:bf:b3:ed:12:6d:1d:f0:e5:
80:7c:a3:b7:04:7e:b1:01:6b:1b:2c:c4:26:72:d0:1b:46:30:
10:e7:be:95:99:4c:74:ba:f4:a3:fd:78:5b:9e:1c:1b:91:84:
1c:1e:c1:cf:b2:4d:b6:f3:ac:37:45:2b:58:e3:87:a4:af:09:
1d:3e:ef:43:e5:41:bf:75:d7:89:71:44:87:d4:be:fd:d9:fb:
98:90:e9:00:db:56:2e:a9:14:14:44:33:10:af:4a:08:d9:18:
45:6c:b8:a6:70:56:1d:88:f1:98:cd:63:52:cc:4f:d7:53:24:
9b:6e:46:58:0a:14:7d:98:89:c8:29:6f:50:6d:7d:d4:1b:e1:
c3:4c:14:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbP9FB++vF0Kem2i5BRVXZDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZTJkMjExYzM0MTM3MjhlZjA0ZDI1NDQyNTgyOGE4YjQx
ODFlZTAwHhcNMjUwNTE0MTgwMDE3WhcNMjUwNTE1MTgwMDE3WjAzMTEwLwYDVQQD
Eyg1ZDM4OWQ0OWY2N2JjYmYzNjNjZGUzODBjOThhN2RlM2FkZDIyMTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+7oyommBjmcbVVu03JU1IO1LLYry
bl/U4WhgeX6PuQI0G4sLu1i3O0zFRbiCVaJFCMKzO1L0EcQN6ej+/aWQ/LzpWqdG
6hecRVCcwdKI44UHB47JjofuYI7fqgHwuo2zyMtAbDRyqbUEJfqqtL71rbqySFEK
9Q0St+/7qvYn6IiFPxZbnksDQIjygFZpWXufoUmXuVlYs2wRLuHdgom+vw/ikW16
jTn69fXwsaROhh7NeeoAH2Y7buO6xO2W9SkfWjIZLblm47m0uUoDYOWf3+sDln/2
a1xlblVxWPXxBufKDm0wlZx0l9YTDP23LYSF5vtHu44YxUfnfORGDUXiJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF04nUn2e8vzY83jgMmKfeOt0iFyMB8GA1UdIwQY
MBaAFP/i0hHDQTco7wTSVEJYKKi0GB7gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXy1MU0VjTkJOeWp2Qk5KVVFsZ29xTFFZSHVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9jNDk4MmMtYjRhNS00Y2FkLTg5MWEt
OGZkMTAzYjhjYzg5LzEvXy1MU0VjTkJOeWp2Qk5KVVFsZ29xTFFZSHVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9jNDk4MmMtYjRhNS00Y2FkLTg5MWEtOGZkMTAzYjhjYzg5
LzEvXy1MU0VjTkJOeWp2Qk5KVVFsZ29xTFFZSHVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPCK1rxDd
c2dGymigrIcOP0utzs0eRFwPB4/6dIQ/IR1phHDGVHAM6CJA4Rk/8tqdQicYxCCV
y7JgoxDwtq3C3Qq8DyKczGBsWQqfz1rZDmhiA6rKkick0tdqDx/3DqZFmw1D8B2a
bLu9bjI0t9yZN65qKzduq7+z7RJtHfDlgHyjtwR+sQFrGyzEJnLQG0YwEOe+lZlM
dLr0o/14W54cG5GEHB7Bz7JNtvOsN0UrWOOHpK8JHT7vQ+VBv3XXiXFEh9S+/dn7
mJDpANtWLqkUFEQzEK9KCNkYRWy4pnBWHYjxmM1jUsxP11Mkm25GWAoUfZiJyClv
UG191Bvhw0wUEA==
-----END CERTIFICATE-----
Generated at Wed May 14 21:55:32 2025 by rpki-client