Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft
File: lJgy8CXL76HqG8oMOQtjwXaUjNI.mft (raw, json)
Hash identifier: uMykRvoHtcBPawy6fkT6z90U4/9ZsWiBMwxh5j3JzL8=
Subject key identifier: C8:D1:F0:40:C5:33:81:89:51:26:1E:6A:93:A9:90:E3:7E:2F:7E:0D
Authority key identifier: 94:98:32:F0:25:CB:EF:A1:EA:1B:CA:0C:39:0B:63:C1:76:94:8C:D2
Certificate issuer: /CN=949832f025cbefa1ea1bca0c390b63c176948cd2
Certificate serial: 0196BCDBFED3F5692B0258F82A2EBC5D5ACE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJgy8CXL76HqG8oMOQtjwXaUjNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft
Manifest number: 03AE
Signing time: Sun 11 May 2025 01:00:56 +0000
Manifest this update: Sun 11 May 2025 01:00:56 +0000
Manifest next update: Mon 12 May 2025 01:00:56 +0000
Files and hashes: 1: euJQQHPXaEEafjtTEpsACoT0UO8.roa (hash: LMr9+ppvHgb0CfRsIuadMwP8K1TTGxo74gFD8Bmp2bs=)
2: lJgy8CXL76HqG8oMOQtjwXaUjNI.crl (hash: KdlnwbThERicWp8Y+tHRCF6ofwOg2OwJ5fRn1cXT4hY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJgy8CXL76HqG8oMOQtjwXaUjNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:db:fe:d3:f5:69:2b:02:58:f8:2a:2e:bc:5d:5a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=949832f025cbefa1ea1bca0c390b63c176948cd2
Validity
Not Before: May 11 01:00:56 2025 GMT
Not After : May 12 01:00:56 2025 GMT
Subject: CN=c8d1f040c533818951261e6a93a990e37e2f7e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:17:04:d1:4d:07:fa:ef:1e:29:d2:63:34:37:
11:68:d9:95:25:61:f1:26:28:2b:67:1d:11:22:c3:
69:c7:a5:c9:69:75:ff:8a:eb:d7:e2:91:2c:87:4c:
35:b7:a3:15:6a:de:1e:0a:f4:f7:c7:99:52:d4:92:
3c:48:bb:1b:db:53:d0:80:45:dc:fe:48:85:81:31:
b5:7b:70:fb:2b:9d:1f:77:75:5e:b0:a6:13:7d:67:
49:ec:a7:ac:c9:b7:4b:db:4f:fe:f4:92:94:69:60:
ca:be:82:b6:e1:4a:44:41:13:a2:82:34:2f:67:0c:
02:2a:d0:4a:33:d0:4f:04:8f:25:99:8b:76:3b:1b:
5c:77:d0:f4:96:a9:b3:6d:2e:ab:f1:89:64:88:3b:
6a:f7:19:6d:76:88:d3:6f:3e:d6:8b:cf:cf:d3:32:
61:1d:69:dd:f3:60:e9:a1:6d:6a:53:71:a5:21:02:
78:be:69:42:71:b9:42:a6:d7:54:88:52:10:85:cb:
b0:43:9f:79:d2:9f:b0:ff:a1:22:51:d7:8f:07:02:
c0:52:36:cc:a8:03:43:65:8c:06:2d:ac:76:22:00:
96:c1:a2:31:b0:ae:65:ea:db:dc:91:30:0b:84:1a:
83:53:d9:94:d8:6f:17:ac:b7:95:c2:a7:46:7f:b2:
53:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D1:F0:40:C5:33:81:89:51:26:1E:6A:93:A9:90:E3:7E:2F:7E:0D
X509v3 Authority Key Identifier:
keyid:94:98:32:F0:25:CB:EF:A1:EA:1B:CA:0C:39:0B:63:C1:76:94:8C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJgy8CXL76HqG8oMOQtjwXaUjNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:0b:16:c7:d6:7d:a7:97:3e:74:7a:96:f1:1f:f3:b9:cb:bc:
6b:b0:64:27:be:28:6b:87:76:01:ab:4a:83:2c:94:c6:25:87:
d2:6c:0e:34:19:b0:c4:81:9a:c8:96:e1:18:69:29:eb:a9:3b:
16:8e:59:cd:5d:4e:a9:8d:31:dc:23:64:d0:d6:30:d5:66:46:
16:7c:be:b7:4e:6a:fc:4a:a1:9e:82:5f:d5:93:8a:29:a6:ee:
f5:5a:99:4a:c8:30:29:8a:bb:bc:03:6c:6b:0c:fc:f0:e6:8c:
fb:88:13:44:16:17:c0:64:3a:58:b9:f5:b3:89:93:33:e3:e5:
5a:a2:ce:a0:af:b0:c7:ac:8f:05:11:08:34:e9:5b:00:0c:8a:
01:19:46:3d:8f:ca:ec:16:e5:ab:b7:af:9b:ba:a2:d3:4f:4b:
b3:3e:a5:b9:a1:01:3d:1c:34:a2:29:0b:11:b7:b6:ae:17:c7:
f1:5d:28:ee:89:cd:74:c3:a5:af:2d:56:84:29:35:a1:3a:09:
e5:bf:b4:79:d6:7b:bd:f0:5b:1f:a7:a7:8e:5f:76:a4:c1:0c:
02:38:11:31:b3:31:f3:f3:d2:f8:c5:5e:4e:ab:af:2f:38:a6:
0f:92:0d:35:54:18:ba:16:07:86:af:13:e2:87:d7:9f:b3:82:
07:02:fe:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa82/7T9WkrAlj4Ki68XVrOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0OTgzMmYwMjVjYmVmYTFlYTFiY2EwYzM5MGI2M2MxNzY5
NDhjZDIwHhcNMjUwNTExMDEwMDU2WhcNMjUwNTEyMDEwMDU2WjAzMTEwLwYDVQQD
EyhjOGQxZjA0MGM1MzM4MTg5NTEyNjFlNmE5M2E5OTBlMzdlMmY3ZTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBcE0U0H+u8eKdJjNDcRaNmVJWHx
JigrZx0RIsNpx6XJaXX/iuvX4pEsh0w1t6MVat4eCvT3x5lS1JI8SLsb21PQgEXc
/kiFgTG1e3D7K50fd3VesKYTfWdJ7KesybdL20/+9JKUaWDKvoK24UpEQROigjQv
ZwwCKtBKM9BPBI8lmYt2Oxtcd9D0lqmzbS6r8YlkiDtq9xltdojTbz7Wi8/P0zJh
HWnd82DpoW1qU3GlIQJ4vmlCcblCptdUiFIQhcuwQ5950p+w/6EiUdePBwLAUjbM
qANDZYwGLax2IgCWwaIxsK5l6tvckTALhBqDU9mU2G8XrLeVwqdGf7JT8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMjR8EDFM4GJUSYeapOpkON+L34NMB8GA1UdIwQY
MBaAFJSYMvAly++h6hvKDDkLY8F2lIzSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEpneThDWEw3NkhxRzhvTU9RdGp3WGFVak5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lNWMwNTYtMDNiMS00NmE5LWIyMTQt
NzhmYzNiYzI4YmExLzEvbEpneThDWEw3NkhxRzhvTU9RdGp3WGFVak5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9lNWMwNTYtMDNiMS00NmE5LWIyMTQtNzhmYzNiYzI4YmEx
LzEvbEpneThDWEw3NkhxRzhvTU9RdGp3WGFVak5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbgsWx9Z9
p5c+dHqW8R/zucu8a7BkJ74oa4d2AatKgyyUxiWH0mwONBmwxIGayJbhGGkp66k7
Fo5ZzV1OqY0x3CNk0NYw1WZGFny+t05q/EqhnoJf1ZOKKabu9VqZSsgwKYq7vANs
awz88OaM+4gTRBYXwGQ6WLn1s4mTM+PlWqLOoK+wx6yPBREINOlbAAyKARlGPY/K
7Bblq7evm7qi009Lsz6luaEBPRw0oikLEbe2rhfH8V0o7onNdMOlry1WhCk1oToJ
5b+0edZ7vfBbH6enjl92pMEMAjgRMbMx8/PS+MVeTquvLzimD5INNVQYuhYHhq8T
4ofXn7OCBwL+xw==
-----END CERTIFICATE-----
Generated at Sun May 11 06:17:38 2025 by rpki-client