Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.mft
File: LQcZ69mnslPhSyXN7EzdFUoRHjA.mft (raw, json)
Hash identifier: 0+dEQ+sJ41crZcpWjQa95t23zrxCJoNI16HZHU7O0xQ=
Subject key identifier: 8C:F5:48:EE:E3:03:A2:4F:55:D7:47:C0:E6:20:1E:6F:F4:DF:EC:67
Authority key identifier: 2D:07:19:EB:D9:A7:B2:53:E1:4B:25:CD:EC:4C:DD:15:4A:11:1E:30
Certificate issuer: /CN=2d0719ebd9a7b253e14b25cdec4cdd154a111e30
Certificate serial: 0196BF00E492637C18D8FB711682E4488A03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQcZ69mnslPhSyXN7EzdFUoRHjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.mft
Manifest number: 01B8
Signing time: Sun 11 May 2025 11:00:28 +0000
Manifest this update: Sun 11 May 2025 11:00:28 +0000
Manifest next update: Mon 12 May 2025 11:00:28 +0000
Files and hashes: 1: 3RDyrZvZCaLxq028Ow5HCrsQefI.roa (hash: NXFuVuevT7dKqj3U3xabeRYu8pGJV55BCTjMmY4c/fY=)
2: LQcZ69mnslPhSyXN7EzdFUoRHjA.crl (hash: m/lDUN9dk+NKgH2fNa3KJPAO9wJuijGiggmY7dnJKaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LQcZ69mnslPhSyXN7EzdFUoRHjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:00:e4:92:63:7c:18:d8:fb:71:16:82:e4:48:8a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d0719ebd9a7b253e14b25cdec4cdd154a111e30
Validity
Not Before: May 11 11:00:28 2025 GMT
Not After : May 12 11:00:28 2025 GMT
Subject: CN=8cf548eee303a24f55d747c0e6201e6ff4dfec67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:2a:e5:1c:15:d7:0a:ab:d1:01:a4:28:87:9f:
7b:8a:31:30:6d:7a:8f:70:93:cf:3a:46:cd:dd:79:
6d:48:96:1b:10:1d:0d:86:a5:22:cf:18:97:7c:4f:
17:66:30:fc:b7:2f:a7:06:3c:ab:26:45:f9:2e:e6:
c8:59:ca:74:4b:19:e4:d4:07:b1:aa:bb:24:c8:de:
01:f9:05:a1:82:9d:88:c4:4e:04:8b:25:1f:d4:6f:
6c:80:ba:a5:6d:24:d4:6b:8a:08:44:0d:ea:8c:24:
9d:2d:12:b9:37:ef:78:5a:88:29:75:d5:41:1b:01:
63:54:08:7b:00:22:7e:34:b2:d3:cc:b6:d1:54:ba:
83:5e:99:3a:8a:3e:0b:ce:48:b4:a3:f7:a0:24:90:
77:d3:40:a1:10:ca:68:ae:a8:1a:ca:85:07:ff:7e:
a2:32:f0:0e:5b:31:54:70:fc:23:c9:ab:c0:f8:90:
e9:83:8b:11:fb:52:bf:f5:9a:b9:60:2e:3c:f2:e1:
20:7f:06:6e:97:a7:fc:14:c8:fa:f6:b1:7f:cf:5d:
45:73:e6:74:cd:39:f2:30:ad:88:e7:3b:44:05:f2:
d6:eb:77:1c:9d:7c:74:60:0e:d4:24:53:28:a5:f4:
be:55:04:13:e5:6d:61:0a:bd:39:c8:2d:11:5e:0f:
ad:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F5:48:EE:E3:03:A2:4F:55:D7:47:C0:E6:20:1E:6F:F4:DF:EC:67
X509v3 Authority Key Identifier:
keyid:2D:07:19:EB:D9:A7:B2:53:E1:4B:25:CD:EC:4C:DD:15:4A:11:1E:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQcZ69mnslPhSyXN7EzdFUoRHjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1a2a5-38e0-458f-8600-377493ce5877/1/LQcZ69mnslPhSyXN7EzdFUoRHjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:a8:15:d8:3e:dd:12:36:2e:5e:44:82:b9:01:10:67:25:5a:
a1:d7:26:c3:20:1d:5b:7b:9c:f7:7c:2d:df:42:40:ad:50:a4:
46:0b:cf:c4:8c:9f:18:37:d2:f6:48:32:b3:01:9a:87:12:27:
f4:e7:be:f9:f6:82:d9:3f:bb:7d:aa:42:dc:8f:ec:2e:7c:71:
ca:9f:ed:d0:d0:34:77:32:7f:fd:95:4d:41:cd:f8:24:9d:c8:
ce:8b:6e:f1:dd:4c:36:8f:f4:cf:c3:ba:98:06:e5:2b:9a:bb:
d3:1c:8f:3c:4c:01:46:31:b9:d0:b2:ad:27:f5:d8:d0:89:a9:
17:63:4b:2f:22:8a:dc:aa:fd:99:5f:51:37:66:6d:fb:f7:8a:
62:e6:b1:00:6b:4a:0e:e2:cb:62:a9:1f:33:91:33:8e:91:f0:
15:da:96:29:91:01:42:c4:4c:ff:46:2c:04:7d:56:4c:aa:9d:
97:e3:e3:07:63:a3:be:87:f2:f8:f7:82:46:4c:a7:c9:60:db:
44:e5:da:7c:26:6f:a9:80:29:38:a3:aa:96:29:54:14:17:d5:
94:bf:7f:11:99:fb:66:de:d1:f6:b4:0d:ef:4e:a8:0a:15:0e:
a3:60:7a:4c:94:9c:09:69:9e:a0:7a:0b:c0:55:39:21:24:34:
59:16:8d:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/AOSSY3wY2PtxFoLkSIoDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMDcxOWViZDlhN2IyNTNlMTRiMjVjZGVjNGNkZDE1NGEx
MTFlMzAwHhcNMjUwNTExMTEwMDI4WhcNMjUwNTEyMTEwMDI4WjAzMTEwLwYDVQQD
Eyg4Y2Y1NDhlZWUzMDNhMjRmNTVkNzQ3YzBlNjIwMWU2ZmY0ZGZlYzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yrlHBXXCqvRAaQoh597ijEwbXqP
cJPPOkbN3XltSJYbEB0NhqUizxiXfE8XZjD8ty+nBjyrJkX5LubIWcp0Sxnk1Aex
qrskyN4B+QWhgp2IxE4EiyUf1G9sgLqlbSTUa4oIRA3qjCSdLRK5N+94WogpddVB
GwFjVAh7ACJ+NLLTzLbRVLqDXpk6ij4Lzki0o/egJJB300ChEMporqgayoUH/36i
MvAOWzFUcPwjyavA+JDpg4sR+1K/9Zq5YC488uEgfwZul6f8FMj69rF/z11Fc+Z0
zTnyMK2I5ztEBfLW63ccnXx0YA7UJFMopfS+VQQT5W1hCr05yC0RXg+tjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIz1SO7jA6JPVddHwOYgHm/03+xnMB8GA1UdIwQY
MBaAFC0HGevZp7JT4UslzexM3RVKER4wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFFjWjY5bW5zbFBoU3lYTjdFemRGVW9SSGpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9hMWEyYTUtMzhlMC00NThmLTg2MDAt
Mzc3NDkzY2U1ODc3LzEvTFFjWjY5bW5zbFBoU3lYTjdFemRGVW9SSGpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9hMWEyYTUtMzhlMC00NThmLTg2MDAtMzc3NDkzY2U1ODc3
LzEvTFFjWjY5bW5zbFBoU3lYTjdFemRGVW9SSGpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaKgV2D7d
EjYuXkSCuQEQZyVaodcmwyAdW3uc93wt30JArVCkRgvPxIyfGDfS9kgyswGahxIn
9Oe++faC2T+7fapC3I/sLnxxyp/t0NA0dzJ//ZVNQc34JJ3Izotu8d1MNo/0z8O6
mAblK5q70xyPPEwBRjG50LKtJ/XY0ImpF2NLLyKK3Kr9mV9RN2Zt+/eKYuaxAGtK
DuLLYqkfM5EzjpHwFdqWKZEBQsRM/0YsBH1WTKqdl+PjB2Ojvofy+PeCRkynyWDb
ROXafCZvqYApOKOqlilUFBfVlL9/EZn7Zt7R9rQN706oChUOo2B6TJScCWmeoHoL
wFU5ISQ0WRaNRg==
-----END CERTIFICATE-----
Generated at Sun May 11 16:56:04 2025 by rpki-client