Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft
File: lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft (raw, json)
Hash identifier: aQg1OM+PeZX/g0wsjor4WT2dl5FLDnnkN1QSWIKnJsc=
Subject key identifier: DA:3F:D3:64:17:B0:AF:B8:95:7D:2D:34:48:3C:D1:86:5B:6E:14:51
Authority key identifier: 95:4B:07:1A:03:DB:5D:23:3D:05:AB:03:94:54:80:07:76:7F:83:E7
Certificate issuer: /CN=954b071a03db5d233d05ab0394548007767f83e7
Certificate serial: 0196B9A39484AA9B76FF2FCFBBB8883A67FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUsHGgPbXSM9BasDlFSAB3Z_g-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft
Manifest number: 05A9
Signing time: Sat 10 May 2025 10:00:27 +0000
Manifest this update: Sat 10 May 2025 10:00:27 +0000
Manifest next update: Sun 11 May 2025 10:00:27 +0000
Files and hashes: 1: MeHcHEJLI5aJxpbL08K_nBsRPYY.roa (hash: N7FogbwCwinhT6HlieiaEOy7N6CNclRf7G6B1lRFJU0=)
2: lUsHGgPbXSM9BasDlFSAB3Z_g-c.crl (hash: te3bbxM9ia0yfGpeg5BXALJdmdXHXFz455NMNX+2kao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUsHGgPbXSM9BasDlFSAB3Z_g-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a3:94:84:aa:9b:76:ff:2f:cf:bb:b8:88:3a:67:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954b071a03db5d233d05ab0394548007767f83e7
Validity
Not Before: May 10 10:00:27 2025 GMT
Not After : May 11 10:00:27 2025 GMT
Subject: CN=da3fd36417b0afb8957d2d34483cd1865b6e1451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b2:03:f3:56:b1:84:9d:5d:91:81:c4:1f:14:
64:9e:7d:2a:13:64:62:cb:35:bc:ab:d2:b0:07:42:
c3:82:2c:f0:1c:cc:bf:96:3b:91:57:78:cb:94:9a:
c8:83:4c:78:57:1c:ff:0b:0a:d9:52:fe:b9:f3:d7:
55:aa:f7:12:c4:a9:d6:a5:fe:10:35:53:4e:aa:17:
88:10:98:92:0b:6c:c0:3a:54:31:07:ad:d4:75:18:
53:07:5a:db:e7:8a:8e:b9:ce:96:f4:91:24:8d:a6:
c5:c0:06:0b:c4:b1:e4:7c:53:d8:de:93:0e:23:0f:
35:52:f4:29:c9:6b:50:bb:10:26:14:9b:3c:56:69:
28:6a:e3:9c:c2:aa:0d:21:e2:fc:54:cb:5f:db:7b:
cb:ed:9c:55:ec:a9:27:fe:34:c9:84:1b:e2:89:1a:
83:45:e0:33:2b:25:75:9a:e3:06:44:2f:af:66:9c:
d0:0e:70:ae:1d:c7:d5:ca:49:10:38:6d:57:81:da:
39:f5:98:25:28:eb:9a:2c:86:fb:01:5a:66:9b:7e:
8e:f3:90:e1:7d:9d:c9:fb:01:40:8d:71:d5:f7:d2:
dd:74:53:07:4c:95:00:e2:9d:5f:b7:a5:ad:2d:26:
dc:2f:b2:98:19:5b:d0:3d:53:1f:fa:d9:22:58:bf:
c2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:3F:D3:64:17:B0:AF:B8:95:7D:2D:34:48:3C:D1:86:5B:6E:14:51
X509v3 Authority Key Identifier:
keyid:95:4B:07:1A:03:DB:5D:23:3D:05:AB:03:94:54:80:07:76:7F:83:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUsHGgPbXSM9BasDlFSAB3Z_g-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:e0:85:6a:8a:4f:c4:95:6b:d7:07:14:50:54:8f:56:e5:d9:
69:ca:eb:98:61:b2:69:b5:91:69:2d:ca:ba:06:15:41:86:85:
b0:5f:55:44:02:04:8f:3d:2d:6f:82:fa:03:b2:8d:e6:58:2a:
ae:68:19:11:8a:60:3c:78:10:3c:1b:6c:5f:8b:5e:f4:fd:c1:
74:e0:97:90:98:c0:ff:00:a6:3c:43:e7:2d:c4:7f:1c:a7:c1:
c5:31:68:c5:6d:ed:39:d2:0a:64:34:cb:ab:29:1b:45:43:29:
e0:e6:17:ce:a7:1c:d2:61:f4:61:6c:d2:ed:e8:cb:b4:a4:fa:
5d:9e:36:1b:66:26:1d:38:3a:eb:24:63:d6:39:a1:fa:62:73:
27:81:b1:3f:f0:87:0e:3a:10:88:83:15:24:e7:7d:14:8d:d6:
ba:e5:2f:eb:62:92:83:a7:11:04:dc:9f:d0:ba:d0:b1:c3:63:
61:ac:31:02:25:c1:7b:da:6a:0e:f2:f0:f5:34:10:88:bd:52:
ba:cd:22:19:31:52:75:45:a9:8f:06:ae:68:7b:0b:d5:dd:f7:
f2:54:93:4b:7c:f3:3d:b2:2e:aa:9b:5c:dc:4d:54:55:5d:75:
3e:43:f1:66:e4:de:e2:55:cc:d6:a7:5f:60:30:a7:7f:eb:97:
93:20:d2:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa5o5SEqpt2/y/Pu7iIOmf+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NGIwNzFhMDNkYjVkMjMzZDA1YWIwMzk0NTQ4MDA3NzY3
ZjgzZTcwHhcNMjUwNTEwMTAwMDI3WhcNMjUwNTExMTAwMDI3WjAzMTEwLwYDVQQD
EyhkYTNmZDM2NDE3YjBhZmI4OTU3ZDJkMzQ0ODNjZDE4NjViNmUxNDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bID81axhJ1dkYHEHxRknn0qE2Ri
yzW8q9KwB0LDgizwHMy/ljuRV3jLlJrIg0x4Vxz/CwrZUv6589dVqvcSxKnWpf4Q
NVNOqheIEJiSC2zAOlQxB63UdRhTB1rb54qOuc6W9JEkjabFwAYLxLHkfFPY3pMO
Iw81UvQpyWtQuxAmFJs8VmkoauOcwqoNIeL8VMtf23vL7ZxV7Kkn/jTJhBviiRqD
ReAzKyV1muMGRC+vZpzQDnCuHcfVykkQOG1Xgdo59ZglKOuaLIb7AVpmm36O85Dh
fZ3J+wFAjXHV99LddFMHTJUA4p1ft6WtLSbcL7KYGVvQPVMf+tkiWL/CnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNo/02QXsK+4lX0tNEg80YZbbhRRMB8GA1UdIwQY
MBaAFJVLBxoD210jPQWrA5RUgAd2f4PnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFVzSEdnUGJYU005QmFzRGxGU0FCM1pfZy1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9lNjQ2MjUtY2I4Yi00OWNiLTg1Njkt
MjY2YWMxMDRmN2I0LzEvbFVzSEdnUGJYU005QmFzRGxGU0FCM1pfZy1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9lNjQ2MjUtY2I4Yi00OWNiLTg1NjktMjY2YWMxMDRmN2I0
LzEvbFVzSEdnUGJYU005QmFzRGxGU0FCM1pfZy1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWOCFaopP
xJVr1wcUUFSPVuXZacrrmGGyabWRaS3KugYVQYaFsF9VRAIEjz0tb4L6A7KN5lgq
rmgZEYpgPHgQPBtsX4te9P3BdOCXkJjA/wCmPEPnLcR/HKfBxTFoxW3tOdIKZDTL
qykbRUMp4OYXzqcc0mH0YWzS7ejLtKT6XZ42G2YmHTg66yRj1jmh+mJzJ4GxP/CH
DjoQiIMVJOd9FI3WuuUv62KSg6cRBNyf0LrQscNjYawxAiXBe9pqDvLw9TQQiL1S
us0iGTFSdUWpjwauaHsL1d338lSTS3zzPbIuqptc3E1UVV11PkPxZuTe4lXM1qdf
YDCnf+uXkyDSkQ==
-----END CERTIFICATE-----
Generated at Sat May 10 15:17:52 2025 by rpki-client