Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.mft
File: LKw-jWOxw6_HxsC_2p1ayBe27m0.mft (raw, json)
Hash identifier: kAfZ336zsnSikXiXqk3wUKxDw/b5exxUzvg51mK7TPk=
Subject key identifier: B4:A0:D3:98:41:43:E6:ED:0E:AB:23:DB:D2:B1:C2:D9:60:0F:C5:EA
Authority key identifier: 2C:AC:3E:8D:63:B1:C3:AF:C7:C6:C0:BF:DA:9D:5A:C8:17:B6:EE:6D
Certificate issuer: /CN=2cac3e8d63b1c3afc7c6c0bfda9d5ac817b6ee6d
Certificate serial: 0196CC4F07A9D70E777AAB7F1ECE720034C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKw-jWOxw6_HxsC_2p1ayBe27m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.mft
Manifest number: 0F18
Signing time: Wed 14 May 2025 01:00:53 +0000
Manifest this update: Wed 14 May 2025 01:00:53 +0000
Manifest next update: Thu 15 May 2025 01:00:53 +0000
Files and hashes: 1: LKw-jWOxw6_HxsC_2p1ayBe27m0.crl (hash: Ox4Lz46amVoRlbVJ5Gaa7GrfbOnEsWxm0NSwaU+4TpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKw-jWOxw6_HxsC_2p1ayBe27m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:4f:07:a9:d7:0e:77:7a:ab:7f:1e:ce:72:00:34:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cac3e8d63b1c3afc7c6c0bfda9d5ac817b6ee6d
Validity
Not Before: May 14 01:00:53 2025 GMT
Not After : May 15 01:00:53 2025 GMT
Subject: CN=b4a0d3984143e6ed0eab23dbd2b1c2d9600fc5ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e1:28:29:e5:93:bf:b7:5e:7c:b7:e8:23:05:
16:8f:07:cf:e0:5b:24:3c:cc:c6:2b:97:ae:05:e2:
81:0b:3b:53:ce:7c:a8:4a:dd:2a:8c:f8:c8:eb:7c:
58:ed:51:01:d4:73:b1:d9:8b:fe:72:b6:b1:30:a3:
9c:32:13:61:0c:9e:65:5e:7f:7b:9d:88:25:6b:00:
57:a0:82:da:74:06:20:f1:31:f9:5b:9d:b8:72:39:
11:c0:07:79:d0:31:80:55:49:16:27:91:2b:c2:7b:
bb:45:27:70:e0:b7:98:41:d3:19:df:da:b1:4e:63:
c4:26:fc:b5:06:93:ac:45:93:2b:92:c9:0c:b0:6d:
a7:c4:56:a7:52:cc:8b:70:8f:77:78:aa:fb:c8:81:
34:8b:1e:10:6d:17:09:ac:68:33:4f:ef:63:e0:b8:
56:d9:2e:c1:13:fe:0f:fe:19:8c:16:59:ce:91:f1:
51:7e:92:22:90:d7:ef:df:1f:4b:64:90:70:e6:52:
6a:f6:e4:08:32:e5:ae:b4:cf:23:fe:b9:f1:19:4f:
d0:38:ca:57:00:ea:b9:ea:a3:d5:de:4b:0e:e7:9e:
4d:98:7e:0a:c4:d9:6e:27:42:6e:ef:09:06:ac:9c:
ca:25:be:a8:f2:44:88:69:85:a1:e6:03:be:ef:c6:
f9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A0:D3:98:41:43:E6:ED:0E:AB:23:DB:D2:B1:C2:D9:60:0F:C5:EA
X509v3 Authority Key Identifier:
keyid:2C:AC:3E:8D:63:B1:C3:AF:C7:C6:C0:BF:DA:9D:5A:C8:17:B6:EE:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKw-jWOxw6_HxsC_2p1ayBe27m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/17e999-e53d-48ca-980a-95ae64bd56ec/1/LKw-jWOxw6_HxsC_2p1ayBe27m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:51:85:f0:3d:44:09:98:3e:2d:ac:7a:fe:47:88:f4:e9:cc:
13:04:49:25:3c:16:bc:0e:cf:79:49:e4:34:c4:07:92:7e:28:
ca:bb:0e:f6:96:5e:a6:b4:8f:2c:35:62:1c:9b:3a:28:16:1c:
69:23:5b:45:9e:e0:03:d6:c3:c4:c0:e5:2c:2c:96:36:85:f6:
21:ec:7c:ba:33:8e:c4:77:81:b5:22:f6:46:6a:ef:5a:09:c7:
82:b1:45:c5:9c:e6:59:3d:dd:4e:b6:c4:7d:1e:f1:bd:63:89:
ad:16:cc:64:6f:b9:eb:44:64:23:5d:1f:6c:a6:ed:63:a0:60:
95:85:2b:db:59:5f:b0:cd:40:e9:ab:44:f2:2a:5e:81:5c:0f:
aa:64:dc:c9:ea:9e:eb:40:a2:00:bf:7d:ff:a3:f5:25:02:de:
c5:4a:6a:3b:9a:23:73:e6:43:cf:a3:c8:40:30:c8:e2:9c:15:
9b:e0:be:ab:c9:97:35:cd:de:d1:71:0a:14:52:02:7b:f1:68:
6c:b2:eb:04:f6:82:2f:2e:bb:36:34:94:02:01:d8:77:0f:8d:
ad:af:3f:43:ea:96:0d:0b:e9:fb:9e:a9:70:18:9d:bc:8a:0e:
f5:84:6b:91:14:11:93:c8:20:9d:85:63:f0:82:dc:e6:34:74:
f9:28:f8:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbMTwep1w53eqt/Hs5yADTIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjYWMzZThkNjNiMWMzYWZjN2M2YzBiZmRhOWQ1YWM4MTdi
NmVlNmQwHhcNMjUwNTE0MDEwMDUzWhcNMjUwNTE1MDEwMDUzWjAzMTEwLwYDVQQD
EyhiNGEwZDM5ODQxNDNlNmVkMGVhYjIzZGJkMmIxYzJkOTYwMGZjNWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+EoKeWTv7defLfoIwUWjwfP4Fsk
PMzGK5euBeKBCztTznyoSt0qjPjI63xY7VEB1HOx2Yv+craxMKOcMhNhDJ5lXn97
nYglawBXoILadAYg8TH5W524cjkRwAd50DGAVUkWJ5Erwnu7RSdw4LeYQdMZ39qx
TmPEJvy1BpOsRZMrkskMsG2nxFanUsyLcI93eKr7yIE0ix4QbRcJrGgzT+9j4LhW
2S7BE/4P/hmMFlnOkfFRfpIikNfv3x9LZJBw5lJq9uQIMuWutM8j/rnxGU/QOMpX
AOq56qPV3ksO555NmH4KxNluJ0Ju7wkGrJzKJb6o8kSIaYWh5gO+78b5kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLSg05hBQ+btDqsj29KxwtlgD8XqMB8GA1UdIwQY
MBaAFCysPo1jscOvx8bAv9qdWsgXtu5tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEt3LWpXT3h3Nl9IeHNDXzJwMWF5QmUyN20wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8xN2U5OTktZTUzZC00OGNhLTk4MGEt
OTVhZTY0YmQ1NmVjLzEvTEt3LWpXT3h3Nl9IeHNDXzJwMWF5QmUyN20wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8xN2U5OTktZTUzZC00OGNhLTk4MGEtOTVhZTY0YmQ1NmVj
LzEvTEt3LWpXT3h3Nl9IeHNDXzJwMWF5QmUyN20wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmVGF8D1E
CZg+Lax6/keI9OnMEwRJJTwWvA7PeUnkNMQHkn4oyrsO9pZeprSPLDViHJs6KBYc
aSNbRZ7gA9bDxMDlLCyWNoX2Iex8ujOOxHeBtSL2RmrvWgnHgrFFxZzmWT3dTrbE
fR7xvWOJrRbMZG+560RkI10fbKbtY6BglYUr21lfsM1A6atE8ipegVwPqmTcyeqe
60CiAL99/6P1JQLexUpqO5ojc+ZDz6PIQDDI4pwVm+C+q8mXNc3e0XEKFFICe/Fo
bLLrBPaCLy67NjSUAgHYdw+Nra8/Q+qWDQvp+56pcBidvIoO9YRrkRQRk8ggnYVj
8ILc5jR0+Sj4dg==
-----END CERTIFICATE-----
Generated at Wed May 14 06:45:12 2025 by rpki-client