Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
File: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft (raw, json)
Hash identifier: y78DjLkr6Qtc3wRO14LRGEXRHtfR9hkCORfWqjKtIC8=
Subject key identifier: 3A:8F:A2:DC:4E:63:F4:03:F6:80:6F:27:E2:45:E0:00:B3:87:25:BA
Authority key identifier: 95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C
Certificate issuer: /CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c
Certificate serial: 0196BE25AEBFC65F30DCD58269E1210CDF53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
Manifest number: 042A
Signing time: Sun 11 May 2025 07:01:02 +0000
Manifest this update: Sun 11 May 2025 07:01:02 +0000
Manifest next update: Mon 12 May 2025 07:01:02 +0000
Files and hashes: 1: 3lPRro5fMsXxYuW-hKXrt5HlTo4.roa (hash: DuXt+VcN5cXAHGtGx0Qm+zdCVxsi9h5/RSKUTcxydqs=)
2: Eg4zth0ANX0mkRnAh6suVOeAzdk.roa (hash: zASvpGNGcNFQXQ8M9IjuKp7MbbcQqn5NoJLmUtGca/I=)
3: lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl (hash: LkxagxiYG5bwsCNxfuK45qrdG3YO9c433tOXKMcXqGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:ae:bf:c6:5f:30:dc:d5:82:69:e1:21:0c:df:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c
Validity
Not Before: May 11 07:01:02 2025 GMT
Not After : May 12 07:01:02 2025 GMT
Subject: CN=3a8fa2dc4e63f403f6806f27e245e000b38725ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f4:75:4b:e6:75:39:f9:a4:5c:3d:a8:fe:61:
1a:8b:91:c0:25:61:81:55:8a:ab:f1:35:22:c1:1c:
15:71:aa:20:7a:a8:9a:6f:a4:2f:af:3a:3e:37:88:
ba:e8:13:00:10:1a:05:62:bf:b6:95:2d:f5:fe:42:
cc:62:1d:fd:18:b9:1d:3d:22:50:82:5c:06:b3:f0:
f7:3e:93:6e:1a:4f:7a:23:72:a4:9a:20:2d:f2:29:
92:ad:65:64:d0:16:02:c2:46:06:2d:3c:fd:16:b0:
4a:7d:75:27:73:fe:45:9d:01:82:09:97:ee:2c:78:
96:41:12:cd:42:23:47:da:d6:4a:9b:2b:54:1c:14:
bf:40:56:78:d5:8a:25:5f:e0:58:81:a7:19:a4:b7:
bd:a9:e2:42:6b:8e:24:af:6b:99:1a:d6:09:b5:48:
f9:66:4b:5c:90:46:cc:e6:88:03:bd:ee:1c:73:90:
7a:69:ac:80:4e:9a:0b:2d:2f:24:0f:6b:0e:82:54:
57:56:ec:38:a4:04:e0:50:8f:1f:64:7a:33:0c:63:
b8:bc:28:f9:9f:0b:b5:13:e0:1b:23:3d:9b:74:06:
27:37:29:ac:ff:3d:d6:cd:b5:d5:b7:b4:7e:ae:d9:
73:61:6b:4f:91:b4:74:03:d0:e8:20:b1:7b:13:3c:
c6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:8F:A2:DC:4E:63:F4:03:F6:80:6F:27:E2:45:E0:00:B3:87:25:BA
X509v3 Authority Key Identifier:
keyid:95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:c2:c3:f6:ba:07:8f:9d:05:46:92:eb:1a:8c:94:a5:29:34:
83:87:07:64:d3:d4:75:ea:1f:2d:73:ed:c9:41:f9:a2:e6:d5:
e0:06:52:cf:4f:5b:57:3c:34:14:43:eb:5b:31:cf:c9:f2:fd:
7e:ce:0b:f3:8f:cb:3a:f8:5d:45:c0:13:57:07:f1:7d:98:70:
59:a0:fc:8f:7c:f5:fc:71:4b:a9:f0:d7:be:09:4a:88:7a:35:
ff:d9:e9:19:57:4f:95:d6:8e:f8:8b:76:70:94:24:40:55:cc:
cd:67:ea:8c:22:83:b3:a0:8c:0e:6b:cd:10:61:78:0d:cc:fa:
e3:20:63:9c:ee:96:05:b2:05:7c:3c:54:14:f6:6f:68:e5:88:
29:4c:66:58:b3:aa:6f:76:61:f0:39:ab:ac:b9:d0:d4:a5:96:
d6:08:c7:3d:26:0d:dc:ea:2e:ad:e7:ad:d6:d4:90:91:41:cd:
7b:46:40:14:1c:46:e6:f9:4f:32:ee:55:19:50:44:06:be:41:
60:83:4b:de:5a:04:14:97:d4:9c:20:d5:75:6b:fc:86:47:0e:
52:2c:f2:c2:98:8e:d5:8e:e6:90:d2:8a:5c:64:f8:a4:8b:2e:
bf:e0:8c:a1:9c:1c:8b:dc:ea:c0:af:6a:81:e1:bd:f4:e8:26:
93:f9:99:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa+Ja6/xl8w3NWCaeEhDN9TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NjhjNjAwNWIyODQwYWI3YmY4YTNhZDcyYTE3NTFkMGRi
MjliOWMwHhcNMjUwNTExMDcwMTAyWhcNMjUwNTEyMDcwMTAyWjAzMTEwLwYDVQQD
EygzYThmYTJkYzRlNjNmNDAzZjY4MDZmMjdlMjQ1ZTAwMGIzODcyNWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5vR1S+Z1OfmkXD2o/mEai5HAJWGB
VYqr8TUiwRwVcaogeqiab6Qvrzo+N4i66BMAEBoFYr+2lS31/kLMYh39GLkdPSJQ
glwGs/D3PpNuGk96I3KkmiAt8imSrWVk0BYCwkYGLTz9FrBKfXUnc/5FnQGCCZfu
LHiWQRLNQiNH2tZKmytUHBS/QFZ41YolX+BYgacZpLe9qeJCa44kr2uZGtYJtUj5
ZktckEbM5ogDve4cc5B6aayATpoLLS8kD2sOglRXVuw4pATgUI8fZHozDGO4vCj5
nwu1E+AbIz2bdAYnNyms/z3WzbXVt7R+rtlzYWtPkbR0A9DoILF7EzzGEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDqPotxOY/QD9oBvJ+JF4ACzhyW6MB8GA1UdIwQY
MBaAFJVoxgBbKECre/ijrXKhdR0NspucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFdqR0FGc29RS3Q3LUtPdGNxRjFIUTJ5bTV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yYjk4MGEtMWViNi00ODA4LThhZmEt
M2E1ZTE4ZDAwZGRjLzEvbFdqR0FGc29RS3Q3LUtPdGNxRjFIUTJ5bTV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8yYjk4MGEtMWViNi00ODA4LThhZmEtM2E1ZTE4ZDAwZGRj
LzEvbFdqR0FGc29RS3Q3LUtPdGNxRjFIUTJ5bTV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARcLD9roH
j50FRpLrGoyUpSk0g4cHZNPUdeofLXPtyUH5oubV4AZSz09bVzw0FEPrWzHPyfL9
fs4L84/LOvhdRcATVwfxfZhwWaD8j3z1/HFLqfDXvglKiHo1/9npGVdPldaO+It2
cJQkQFXMzWfqjCKDs6CMDmvNEGF4Dcz64yBjnO6WBbIFfDxUFPZvaOWIKUxmWLOq
b3Zh8DmrrLnQ1KWW1gjHPSYN3Ooureet1tSQkUHNe0ZAFBxG5vlPMu5VGVBEBr5B
YINL3loEFJfUnCDVdWv8hkcOUizywpiO1Y7mkNKKXGT4pIsuv+CMoZwci9zqwK9q
geG99Ogmk/mZ+A==
-----END CERTIFICATE-----
Generated at Sun May 11 15:56:48 2025 by rpki-client