Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
File: lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft (raw, json)
Hash identifier: JLRmKqFwJizrwwHHk2vR9rjSqTkgz8udEyUR14n5wu0=
Subject key identifier: 3F:E3:7A:AE:9C:8B:61:FB:74:A5:8F:61:D4:8C:F3:03:2B:96:AD:F7
Authority key identifier: 95:2D:DC:B3:50:78:26:7F:4F:37:52:E5:B4:CC:C6:5A:66:3A:63:E7
Certificate issuer: /CN=952ddcb35078267f4f3752e5b4ccc65a663a63e7
Certificate serial: 0196A23FFE3533D207C65889DE2C651808DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
Manifest number: 0207
Signing time: Mon 05 May 2025 21:00:24 +0000
Manifest this update: Mon 05 May 2025 21:00:24 +0000
Manifest next update: Tue 06 May 2025 21:00:24 +0000
Files and hashes: 1: fxlFgI3EysiECIF3mL-wg3P66gA.roa (hash: WG+Wf/XaXu5fK/R90C0HW02K/9LIUpQXBf5GmZqFRDg=)
2: lS3cs1B4Jn9PN1LltMzGWmY6Y-c.crl (hash: y7EVsVe3K/nlxE+DKND0M6L6a0qczdjfW4TPNVYso1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 21:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:3f:fe:35:33:d2:07:c6:58:89:de:2c:65:18:08:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952ddcb35078267f4f3752e5b4ccc65a663a63e7
Validity
Not Before: May 5 21:00:24 2025 GMT
Not After : May 6 21:00:24 2025 GMT
Subject: CN=3fe37aae9c8b61fb74a58f61d48cf3032b96adf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3e:58:06:d0:d0:4e:b2:68:f2:51:f0:bc:b7:
12:b8:5c:76:3c:7f:09:23:3d:98:2f:c3:19:0e:54:
9b:65:d9:6c:d5:f4:c0:6d:92:fe:ce:fc:c3:7e:76:
77:6e:20:2d:cf:ab:9e:e5:59:83:04:63:11:57:20:
5b:d4:3e:d7:51:d4:2a:5e:05:71:07:63:87:d7:72:
31:ca:88:50:1b:e7:e9:49:c2:97:bb:51:fd:62:01:
de:08:67:a4:8a:d4:a2:04:9b:bd:96:99:93:a2:69:
f3:1b:8c:c2:21:5c:68:68:ea:da:ed:7b:2b:81:e0:
e3:9e:a9:c4:8f:af:24:84:3b:b6:3e:15:77:05:a3:
f9:60:4a:4f:27:50:18:cc:76:0f:d6:94:c5:83:66:
b1:73:26:db:fc:aa:cf:9d:67:14:b4:0b:53:f0:82:
cd:d3:6a:df:d6:f4:4e:16:19:c4:57:44:6d:61:ec:
e7:33:13:ff:2e:02:a0:df:a8:4a:3b:b4:48:69:a6:
35:1e:09:6d:6f:7c:c0:8f:83:92:1b:8c:8c:39:f5:
ea:f2:c7:a8:54:66:91:75:8d:cb:48:61:74:8b:b0:
6e:27:91:f1:ef:a9:07:96:2b:85:8a:58:26:24:42:
25:c0:6d:d8:52:fb:e3:2d:06:0f:17:04:06:ce:e9:
ba:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E3:7A:AE:9C:8B:61:FB:74:A5:8F:61:D4:8C:F3:03:2B:96:AD:F7
X509v3 Authority Key Identifier:
keyid:95:2D:DC:B3:50:78:26:7F:4F:37:52:E5:B4:CC:C6:5A:66:3A:63:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:b6:25:5f:4b:31:a1:4d:89:a3:d0:40:92:03:d0:44:98:3e:
57:c2:f3:a2:a9:93:b1:33:89:78:4f:d7:d9:ce:a7:47:a3:59:
17:c6:8b:df:4f:27:08:ad:0b:40:0a:a5:5d:6c:00:19:8c:bd:
f1:a4:fb:de:08:5c:1e:31:1a:55:d8:39:af:6b:e4:31:08:66:
d5:5a:e8:5d:71:52:dc:13:7b:13:ed:84:71:2c:1f:2c:2b:b4:
c0:8f:6e:ba:e5:aa:58:58:7e:c4:36:db:31:4c:13:4d:2d:a5:
fd:dc:1a:b4:dc:30:13:f6:08:55:a9:d1:a0:d0:32:66:2b:ee:
60:d2:24:18:77:d7:e5:a2:4c:67:c5:9b:be:13:37:46:0d:dc:
98:f1:8f:3d:a3:d3:7a:e3:74:55:25:55:d1:41:64:43:48:27:
82:19:64:32:e1:f5:d6:43:64:12:3f:cd:d1:76:25:1b:13:66:
ed:0a:ad:35:07:92:fd:1c:08:7c:b5:9a:52:58:bd:27:7b:06:
04:4c:71:c9:89:c2:bd:00:cd:0c:a3:30:9d:21:26:ce:66:01:
aa:18:6f:23:bf:1e:6d:4a:2a:27:b8:9c:ea:7a:f5:b7:4e:d0:
58:c9:da:c1:44:c2:b2:67:9d:71:e5:75:36:0f:b2:ba:02:e7:
3a:48:f7:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaiP/41M9IHxliJ3ixlGAjdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MmRkY2IzNTA3ODI2N2Y0ZjM3NTJlNWI0Y2NjNjVhNjYz
YTYzZTcwHhcNMjUwNTA1MjEwMDI0WhcNMjUwNTA2MjEwMDI0WjAzMTEwLwYDVQQD
EygzZmUzN2FhZTljOGI2MWZiNzRhNThmNjFkNDhjZjMwMzJiOTZhZGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvj5YBtDQTrJo8lHwvLcSuFx2PH8J
Iz2YL8MZDlSbZdls1fTAbZL+zvzDfnZ3biAtz6ue5VmDBGMRVyBb1D7XUdQqXgVx
B2OH13IxyohQG+fpScKXu1H9YgHeCGekitSiBJu9lpmTomnzG4zCIVxoaOra7Xsr
geDjnqnEj68khDu2PhV3BaP5YEpPJ1AYzHYP1pTFg2axcybb/KrPnWcUtAtT8ILN
02rf1vROFhnEV0RtYeznMxP/LgKg36hKO7RIaaY1Hgltb3zAj4OSG4yMOfXq8seo
VGaRdY3LSGF0i7BuJ5Hx76kHliuFilgmJEIlwG3YUvvjLQYPFwQGzum6vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD/jeq6ci2H7dKWPYdSM8wMrlq33MB8GA1UdIwQY
MBaAFJUt3LNQeCZ/TzdS5bTMxlpmOmPnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFMzY3MxQjRKbjlQTjFMbHRNekdXbVk2WS1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9jNTliNjEtOTExNS00MTVmLTgxZjIt
YTRjMWJiY2I4Yzk3LzEvbFMzY3MxQjRKbjlQTjFMbHRNekdXbVk2WS1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9jNTliNjEtOTExNS00MTVmLTgxZjItYTRjMWJiY2I4Yzk3
LzEvbFMzY3MxQjRKbjlQTjFMbHRNekdXbVk2WS1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQLYlX0sx
oU2Jo9BAkgPQRJg+V8LzoqmTsTOJeE/X2c6nR6NZF8aL308nCK0LQAqlXWwAGYy9
8aT73ghcHjEaVdg5r2vkMQhm1VroXXFS3BN7E+2EcSwfLCu0wI9uuuWqWFh+xDbb
MUwTTS2l/dwatNwwE/YIVanRoNAyZivuYNIkGHfX5aJMZ8WbvhM3Rg3cmPGPPaPT
euN0VSVV0UFkQ0gnghlkMuH11kNkEj/N0XYlGxNm7QqtNQeS/RwIfLWaUli9J3sG
BExxyYnCvQDNDKMwnSEmzmYBqhhvI78ebUoqJ7ic6nr1t07QWMnawUTCsmedceV1
Ng+yugLnOkj3AQ==
-----END CERTIFICATE-----
Generated at Tue May 6 06:50:21 2025 by rpki-client