Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
File: LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft (raw, json)
Hash identifier: 41uMBriFph8/Tw36dzGKLJqAy3MOlx958YTt3DyErjE=
Subject key identifier: 21:6E:D8:FA:48:A3:C0:A9:E5:D1:C4:DD:D6:63:8B:77:42:86:35:0C
Authority key identifier: 2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
Certificate issuer: /CN=2e1620890f700f012b0ba60172314e3c85919513
Certificate serial: 0196BCA4BA6A4125610E86B2A8B543FF8896
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
Manifest number: 1532
Signing time: Sun 11 May 2025 00:00:34 +0000
Manifest this update: Sun 11 May 2025 00:00:34 +0000
Manifest next update: Mon 12 May 2025 00:00:34 +0000
Files and hashes: 1: LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl (hash: YOOQvJCb4X+Vz5okfBpXc4ze4Ufncgh3h9N0kcWiY8A=)
2: UEzUyopP5UVcAuE2wQnf6zxgiYA.roa (hash: WO7cSkDAVVG4RqEt/anGaCZXbbFB9XEJIQ0eE+HtSwo=)
3: g1Qj1KnuMxZpXuMaGLTMbgWLRyE.roa (hash: f3NI3BOfnPP1R6nzFdJwSdGpqAlLYVxZtd9uD+YokWY=)
4: x9mgn-wCUD8rT1tTi9C7mbyMAtI.roa (hash: sgZbLcOXGM2ArVU0X49/Qh6v7QEpIvbA1cc08MVfbkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:a4:ba:6a:41:25:61:0e:86:b2:a8:b5:43:ff:88:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1620890f700f012b0ba60172314e3c85919513
Validity
Not Before: May 11 00:00:34 2025 GMT
Not After : May 12 00:00:34 2025 GMT
Subject: CN=216ed8fa48a3c0a9e5d1c4ddd6638b774286350c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f1:ea:97:a0:1a:ca:3a:95:17:f8:df:f0:29:
aa:59:43:4e:23:d6:22:bb:e1:93:a9:ec:4b:38:d6:
77:42:6d:99:e0:9e:2c:f9:59:47:8a:93:01:41:c8:
58:34:7b:a2:1d:14:89:13:12:0c:a0:1c:b6:4e:48:
18:b1:d2:ba:7e:95:23:b1:30:95:aa:23:68:fc:69:
f5:bd:98:da:fb:d7:1e:7e:4c:3d:cc:e1:83:6e:99:
ee:d6:91:43:38:9a:29:b7:e5:51:5e:99:d5:d5:93:
2e:ad:3b:d4:b8:7c:43:28:1d:c3:66:4b:ed:73:a6:
bf:2e:22:a5:0e:10:e3:df:75:27:ea:dc:50:e8:52:
04:54:1a:07:9c:01:d7:aa:c4:9b:82:dc:15:46:13:
cb:8f:a8:69:bc:18:84:09:c9:78:cd:e6:93:b1:8c:
46:b9:71:46:29:5b:d2:a9:8f:f9:38:d8:ee:57:93:
e6:02:47:4d:96:1e:e1:b7:70:5e:ea:e0:02:c8:26:
dc:2f:0b:56:ab:77:9d:5d:11:c2:b1:43:48:f7:23:
3a:42:3d:c9:66:13:c3:aa:e9:ff:b7:54:18:65:22:
ff:30:b7:74:b0:4d:00:56:61:ca:1d:55:00:2c:e1:
d7:93:33:ba:59:7c:4d:e5:af:cc:3d:7d:74:18:dc:
e9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:6E:D8:FA:48:A3:C0:A9:E5:D1:C4:DD:D6:63:8B:77:42:86:35:0C
X509v3 Authority Key Identifier:
keyid:2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:e1:9f:f7:db:57:0b:2a:32:43:c3:10:e3:22:e5:62:a1:16:
b3:19:08:f9:f7:e4:f4:9d:9c:9b:df:43:9b:52:96:31:50:dd:
64:bc:dc:39:95:86:ff:35:0b:f8:90:7c:b2:b5:8a:1a:e2:25:
28:8e:f2:70:12:e6:5b:dc:db:6d:1c:c0:76:84:22:fd:8f:8b:
29:b6:71:24:4e:88:03:27:aa:14:de:35:6b:06:7f:ab:24:1a:
fd:79:97:a9:d8:bc:d0:d5:a0:b3:a8:54:5f:10:41:a5:66:f8:
d7:12:bc:23:e2:bc:3a:6a:ac:8d:c3:b6:f6:98:86:48:b7:63:
34:5b:f6:2e:53:78:82:e1:a2:72:73:80:5a:42:e5:3d:f4:97:
ab:44:7d:45:4c:cb:a0:1d:21:23:48:c9:43:aa:23:98:b1:df:
a9:82:4a:7b:2c:40:57:a0:5d:4f:c2:3d:5c:ee:0b:55:f4:f7:
7c:4e:cf:25:c6:75:a4:0e:ab:e3:3d:61:b8:e1:69:aa:88:72:
f3:3e:aa:1d:51:50:29:0c:18:b7:5c:72:17:1a:75:78:d1:91:
29:e9:60:3c:6e:ac:7a:f1:cb:62:7e:cc:d8:f4:38:8c:17:5f:
e5:92:f5:8d:f9:8e:34:da:68:29:60:3e:ce:7e:94:3d:c1:77:
c5:ba:ed:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa8pLpqQSVhDoayqLVD/4iWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMTYyMDg5MGY3MDBmMDEyYjBiYTYwMTcyMzE0ZTNjODU5
MTk1MTMwHhcNMjUwNTExMDAwMDM0WhcNMjUwNTEyMDAwMDM0WjAzMTEwLwYDVQQD
EygyMTZlZDhmYTQ4YTNjMGE5ZTVkMWM0ZGRkNjYzOGI3NzQyODYzNTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/Hql6AayjqVF/jf8CmqWUNOI9Yi
u+GTqexLONZ3Qm2Z4J4s+VlHipMBQchYNHuiHRSJExIMoBy2TkgYsdK6fpUjsTCV
qiNo/Gn1vZja+9cefkw9zOGDbpnu1pFDOJopt+VRXpnV1ZMurTvUuHxDKB3DZkvt
c6a/LiKlDhDj33Un6txQ6FIEVBoHnAHXqsSbgtwVRhPLj6hpvBiECcl4zeaTsYxG
uXFGKVvSqY/5ONjuV5PmAkdNlh7ht3Be6uACyCbcLwtWq3edXRHCsUNI9yM6Qj3J
ZhPDqun/t1QYZSL/MLd0sE0AVmHKHVUALOHXkzO6WXxN5a/MPX10GNzp0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCFu2PpIo8Cp5dHE3dZji3dChjUMMB8GA1UdIwQY
MBaAFC4WIIkPcA8BKwumAXIxTjyFkZUTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGhZZ2lROXdEd0VyQzZZQmNqRk9QSVdSbFJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy84MjExNTItOWYxMy00YzA5LTlkY2Qt
NDViYmIyM2ExNWQ4LzEvTGhZZ2lROXdEd0VyQzZZQmNqRk9QSVdSbFJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy84MjExNTItOWYxMy00YzA5LTlkY2QtNDViYmIyM2ExNWQ4
LzEvTGhZZ2lROXdEd0VyQzZZQmNqRk9QSVdSbFJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADeGf99tX
CyoyQ8MQ4yLlYqEWsxkI+ffk9J2cm99Dm1KWMVDdZLzcOZWG/zUL+JB8srWKGuIl
KI7ycBLmW9zbbRzAdoQi/Y+LKbZxJE6IAyeqFN41awZ/qyQa/XmXqdi80NWgs6hU
XxBBpWb41xK8I+K8OmqsjcO29piGSLdjNFv2LlN4guGicnOAWkLlPfSXq0R9RUzL
oB0hI0jJQ6ojmLHfqYJKeyxAV6BdT8I9XO4LVfT3fE7PJcZ1pA6r4z1huOFpqohy
8z6qHVFQKQwYt1xyFxp1eNGRKelgPG6sevHLYn7M2PQ4jBdf5ZL1jfmONNpoKWA+
zn6UPcF3xbrttQ==
-----END CERTIFICATE-----
Generated at Sun May 11 06:37:31 2025 by rpki-client