Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
File: LrTU3kCE88jhpPbU01U5B6sMgIo.mft (raw, json)
Hash identifier: jO/voaid7XYJrf9JGLFn1sylleHHBAk8OAx8qVZYLrY=
Subject key identifier: 10:A2:D9:6D:4F:CA:D2:92:CF:ED:6B:99:DA:63:F1:49:A3:C1:7C:7E
Authority key identifier: 2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A
Certificate issuer: /CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a
Certificate serial: 0196C1CB17970CE7B00B5FEA2147C173C8A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
Manifest number: 1029
Signing time: Mon 12 May 2025 00:00:34 +0000
Manifest this update: Mon 12 May 2025 00:00:34 +0000
Manifest next update: Tue 13 May 2025 00:00:34 +0000
Files and hashes: 1: LGVpAvXVwr_XUuW1Ewf10IhBxfc.roa (hash: 3OZo0AzihAddNAANHnnyFlR5uDQooXnrMnBJf8bFoKs=)
2: LrTU3kCE88jhpPbU01U5B6sMgIo.crl (hash: 1kbqey7qJCxTHQaqq3w291Adf8kY/6W+z1eyAccjcLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:17:97:0c:e7:b0:0b:5f:ea:21:47:c1:73:c8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a
Validity
Not Before: May 12 00:00:34 2025 GMT
Not After : May 13 00:00:34 2025 GMT
Subject: CN=10a2d96d4fcad292cfed6b99da63f149a3c17c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d6:d4:7e:b9:56:89:f4:00:eb:f4:b1:d2:f0:
a5:25:52:f5:20:c6:f7:c2:9a:64:72:b7:66:1d:e3:
71:ec:61:7b:56:8c:c7:53:aa:a2:b8:92:c3:2d:76:
67:fb:cd:ad:12:4a:46:de:2e:89:db:02:ec:fe:fe:
f3:14:84:4c:97:f2:f5:60:52:4b:a4:e0:9d:86:a1:
26:7b:b4:8e:9f:ff:6f:ff:6f:9e:62:64:f2:cf:e6:
ae:24:a3:9c:bf:90:ef:ea:8f:34:d6:cb:54:da:1f:
29:c9:65:f4:4f:69:21:f9:2e:72:0c:5e:4a:c8:db:
02:5c:fb:96:81:51:11:2a:a2:3e:ee:20:7c:6e:0c:
13:08:fe:79:7b:85:43:64:a3:6f:02:9b:e8:ac:10:
18:ce:ee:0e:b8:ad:0d:f4:b6:14:66:e6:95:a6:e1:
8b:1d:4f:c9:f8:e5:81:12:76:5b:b3:20:3b:3b:ee:
fb:cb:e3:01:95:07:9b:e1:bd:31:41:e9:ab:5e:44:
c5:b8:7f:47:13:8c:0f:70:d5:82:62:c1:4e:fa:b5:
47:21:24:59:c0:6a:78:3a:fa:5b:3b:e8:16:f2:a0:
e2:1d:c3:0d:77:f9:49:2b:a2:5a:f0:ca:63:1e:68:
47:6e:0d:ef:28:8f:91:cd:c8:35:31:dc:65:b6:7f:
9e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A2:D9:6D:4F:CA:D2:92:CF:ED:6B:99:DA:63:F1:49:A3:C1:7C:7E
X509v3 Authority Key Identifier:
keyid:2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:57:db:d2:3d:36:a3:50:6e:3a:d1:9e:5a:a8:8f:fd:49:36:
ee:0b:d8:5d:18:fd:a8:23:05:28:27:c8:a9:ae:2b:e4:3f:09:
c5:7d:e2:57:b9:f9:cc:1f:aa:90:a8:f6:df:19:3a:75:d9:46:
bf:d3:20:2a:92:45:e1:7d:4f:84:11:7c:23:03:0a:81:55:f5:
06:8e:81:3a:4b:31:f4:8a:b2:d5:a2:c1:3d:5c:9f:54:d9:ea:
f4:00:69:c7:15:27:5f:70:f9:66:66:5c:00:3c:2a:c8:06:34:
6d:c3:8b:9b:f5:65:fd:5f:42:2f:98:10:ae:97:dd:90:17:90:
f3:c6:d7:e7:12:c8:eb:1b:3d:ec:2b:f0:49:14:84:5d:eb:e1:
fa:74:7b:35:d0:32:4e:5b:de:75:8c:83:94:c7:d0:4a:96:d0:
77:73:73:39:e4:17:ac:06:3a:61:99:07:cc:72:60:3b:21:43:
7f:d6:3d:f2:4c:2e:87:79:01:98:7a:75:ac:13:ad:f9:6d:f0:
e9:44:0c:b8:fc:46:62:35:28:98:10:3e:41:db:46:e0:8d:f6:
2e:3c:15:76:d3:30:66:f3:ba:06:f3:9f:49:eb:6f:94:6d:dd:
6e:5d:c9:f4:fc:91:28:4a:52:30:f0:dc:cb:75:05:82:f0:02:
84:91:ba:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbByxeXDOewC1/qIUfBc8igMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlYjRkNGRlNDA4NGYzYzhlMWE0ZjZkNGQzNTUzOTA3YWIw
YzgwOGEwHhcNMjUwNTEyMDAwMDM0WhcNMjUwNTEzMDAwMDM0WjAzMTEwLwYDVQQD
EygxMGEyZDk2ZDRmY2FkMjkyY2ZlZDZiOTlkYTYzZjE0OWEzYzE3YzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtbUfrlWifQA6/Sx0vClJVL1IMb3
wppkcrdmHeNx7GF7VozHU6qiuJLDLXZn+82tEkpG3i6J2wLs/v7zFIRMl/L1YFJL
pOCdhqEme7SOn/9v/2+eYmTyz+auJKOcv5Dv6o801stU2h8pyWX0T2kh+S5yDF5K
yNsCXPuWgVERKqI+7iB8bgwTCP55e4VDZKNvApvorBAYzu4OuK0N9LYUZuaVpuGL
HU/J+OWBEnZbsyA7O+77y+MBlQeb4b0xQemrXkTFuH9HE4wPcNWCYsFO+rVHISRZ
wGp4OvpbO+gW8qDiHcMNd/lJK6Ja8MpjHmhHbg3vKI+Rzcg1Mdxltn+eZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBCi2W1PytKSz+1rmdpj8UmjwXx+MB8GA1UdIwQY
MBaAFC601N5AhPPI4aT21NNVOQerDICKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHJUVTNrQ0U4OGpocFBiVTAxVTVCNnNNZ0lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS83Y2ZjNjgtNDdiOC00NjI4LWI0MmYt
OTUyOWJjY2JiYjE0LzEvTHJUVTNrQ0U4OGpocFBiVTAxVTVCNnNNZ0lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS83Y2ZjNjgtNDdiOC00NjI4LWI0MmYtOTUyOWJjY2JiYjE0
LzEvTHJUVTNrQ0U4OGpocFBiVTAxVTVCNnNNZ0lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo1fb0j02
o1BuOtGeWqiP/Uk27gvYXRj9qCMFKCfIqa4r5D8JxX3iV7n5zB+qkKj23xk6ddlG
v9MgKpJF4X1PhBF8IwMKgVX1Bo6BOksx9Iqy1aLBPVyfVNnq9ABpxxUnX3D5ZmZc
ADwqyAY0bcOLm/Vl/V9CL5gQrpfdkBeQ88bX5xLI6xs97CvwSRSEXevh+nR7NdAy
TlvedYyDlMfQSpbQd3NzOeQXrAY6YZkHzHJgOyFDf9Y98kwuh3kBmHp1rBOt+W3w
6UQMuPxGYjUomBA+QdtG4I32LjwVdtMwZvO6BvOfSetvlG3dbl3J9PyRKEpSMPDc
y3UFgvAChJG6FQ==
-----END CERTIFICATE-----
Generated at Mon May 12 05:27:30 2025 by rpki-client