
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
File: lirjRjk4sm-Dt28MTfgd-rsVpOs.mft (raw, json)
Hash identifier: HzVskPhNQ9SWw3p7rsxzDlaZTUG2fxUmkCm2WzUhKuk=
Subject key identifier: 83:EB:EA:F4:2D:9F:49:AB:F6:12:5F:44:E9:50:18:7D:07:B7:36:BE
Authority key identifier: 96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB
Certificate issuer: /CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb
Certificate serial: 0196A5AF761340C460580B4997BA54EE08AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
Manifest number: 1531
Signing time: Tue 06 May 2025 13:01:01 +0000
Manifest this update: Tue 06 May 2025 13:01:01 +0000
Manifest next update: Wed 07 May 2025 13:01:01 +0000
Files and hashes: 1: LF7l95kGKNm3QeT2Qx4rsVG6q2c.roa (hash: jKT9RAPhg+2vhp/aPlK2AWW9oSPYGTYBnXz2ZpVTPS4=)
2: lirjRjk4sm-Dt28MTfgd-rsVpOs.crl (hash: TluLU+UL+z8NnNgVqoTmqe9nnL806RSWwYWRd6PUifs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:af:76:13:40:c4:60:58:0b:49:97:ba:54:ee:08:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb
Validity
Not Before: May 6 13:01:01 2025 GMT
Not After : May 7 13:01:01 2025 GMT
Subject: CN=83ebeaf42d9f49abf6125f44e950187d07b736be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:68:5b:8f:9c:8f:49:e2:60:3c:66:33:7f:e3:
aa:80:11:36:39:84:74:16:79:c7:da:4a:c3:dd:8b:
44:58:1c:71:9a:33:e3:6d:8f:38:34:e2:63:ae:54:
a2:c9:3f:7f:0f:5c:39:da:f3:7f:42:2a:f5:f8:51:
f8:ed:48:90:88:f6:0d:b3:99:bf:83:33:23:7b:af:
6a:e7:b4:c2:f4:a4:84:c9:c7:3b:8c:68:2d:bf:01:
85:ea:54:7a:fa:a4:d2:11:37:c9:c9:54:45:43:d2:
d3:ec:77:34:58:95:f8:0e:14:90:f5:92:cc:0e:ff:
b1:cb:8b:71:a8:7d:aa:91:7d:f0:0a:96:9e:56:64:
08:22:dc:d9:37:fa:ee:45:1c:98:b3:57:f4:e8:bf:
73:0b:fd:bf:2d:b1:cb:40:d2:33:95:69:d0:93:df:
39:2a:bf:ab:d3:dd:7b:86:e6:2e:52:e5:b9:a8:03:
37:87:4d:3b:f3:10:04:2e:0f:21:09:69:ac:77:13:
29:1e:23:0a:ac:b2:c9:7d:df:a9:18:40:71:23:d6:
4b:b6:05:b5:fe:b0:f3:3f:f1:fb:f4:80:19:1f:6d:
0f:a0:da:17:da:a5:dc:4b:f8:fc:88:28:b0:95:08:
0f:99:af:af:b8:43:7a:3c:56:9b:e6:9f:41:4b:95:
f8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:EB:EA:F4:2D:9F:49:AB:F6:12:5F:44:E9:50:18:7D:07:B7:36:BE
X509v3 Authority Key Identifier:
keyid:96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:3b:ad:68:48:48:f9:97:52:fd:93:a7:90:32:1f:91:7f:ae:
8c:19:24:36:8d:a3:fe:51:c1:88:6a:f6:13:9d:f3:6c:e8:3b:
cd:92:be:09:63:35:0d:70:b4:0e:e3:34:50:a1:85:f2:76:57:
a2:ea:56:1b:6e:69:50:f1:0e:46:59:69:5b:89:1e:17:57:39:
56:b3:3d:1f:fb:bb:b9:0a:48:03:4b:9c:9f:6b:00:0f:66:da:
ab:d7:bb:84:d5:1f:b0:90:32:47:a3:5d:4f:2c:d9:00:8a:5d:
e7:c4:0e:7a:f1:c7:15:b9:6d:0b:cd:81:66:ad:9a:6a:4e:f5:
66:3f:76:3e:72:ef:1c:5e:a5:48:00:71:7d:58:fe:96:72:a3:
ec:32:c3:3c:f4:19:46:c0:f5:34:e3:a6:6d:8a:61:ae:c4:51:
8e:df:1c:4b:1a:78:7f:c2:ef:cf:ac:f6:65:4a:e9:89:dd:e8:
2a:dc:97:c8:92:6f:47:41:1b:c4:6e:a2:1f:a9:22:63:6d:e4:
6c:f0:df:80:10:5f:7b:57:dd:32:04:39:6e:e0:cd:66:a6:41:
52:81:4e:50:48:fd:44:93:64:18:9c:82:96:90:b6:ea:a1:09:
14:2c:e4:80:14:e6:15:af:75:19:07:db:b9:34:25:d3:2f:c1:
97:c0:f0:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZalr3YTQMRgWAtJl7pU7giqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MmFlMzQ2MzkzOGIyNmY4M2I3NmYwYzRkZjgxZGZhYmIx
NWE0ZWIwHhcNMjUwNTA2MTMwMTAxWhcNMjUwNTA3MTMwMTAxWjAzMTEwLwYDVQQD
Eyg4M2ViZWFmNDJkOWY0OWFiZjYxMjVmNDRlOTUwMTg3ZDA3YjczNmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2hbj5yPSeJgPGYzf+OqgBE2OYR0
FnnH2krD3YtEWBxxmjPjbY84NOJjrlSiyT9/D1w52vN/Qir1+FH47UiQiPYNs5m/
gzMje69q57TC9KSEycc7jGgtvwGF6lR6+qTSETfJyVRFQ9LT7Hc0WJX4DhSQ9ZLM
Dv+xy4txqH2qkX3wCpaeVmQIItzZN/ruRRyYs1f06L9zC/2/LbHLQNIzlWnQk985
Kr+r0917huYuUuW5qAM3h0078xAELg8hCWmsdxMpHiMKrLLJfd+pGEBxI9ZLtgW1
/rDzP/H79IAZH20PoNoX2qXcS/j8iCiwlQgPma+vuEN6PFab5p9BS5X47wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIPr6vQtn0mr9hJfROlQGH0Htza+MB8GA1UdIwQY
MBaAFJYq40Y5OLJvg7dvDE34Hfq7FaTrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGlyalJqazRzbS1EdDI4TVRmZ2QtcnNWcE9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iYjBmYzMtZDVmOS00YmY1LTk2ODMt
OWVkZjBkMTdmYjkxLzEvbGlyalJqazRzbS1EdDI4TVRmZ2QtcnNWcE9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9iYjBmYzMtZDVmOS00YmY1LTk2ODMtOWVkZjBkMTdmYjkx
LzEvbGlyalJqazRzbS1EdDI4TVRmZ2QtcnNWcE9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmjutaEhI
+ZdS/ZOnkDIfkX+ujBkkNo2j/lHBiGr2E53zbOg7zZK+CWM1DXC0DuM0UKGF8nZX
oupWG25pUPEORllpW4keF1c5VrM9H/u7uQpIA0ucn2sAD2baq9e7hNUfsJAyR6Nd
TyzZAIpd58QOevHHFbltC82BZq2aak71Zj92PnLvHF6lSABxfVj+lnKj7DLDPPQZ
RsD1NOOmbYphrsRRjt8cSxp4f8Lvz6z2ZUrpid3oKtyXyJJvR0EbxG6iH6kiY23k
bPDfgBBfe1fdMgQ5buDNZqZBUoFOUEj9RJNkGJyClpC26qEJFCzkgBTmFa91GQfb
uTQl0y/Bl8DwEQ==
-----END CERTIFICATE-----
Generated at Tue May 6 17:34:00 2025 by rpki-client