Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
File: lhJPJSRqVAn77hG1Ny3YviTG6es.mft (raw, json)
Hash identifier: nBsRIEejRWIlx84xXYhgHNJtd938Fo4k3Fs67+PvTok=
Subject key identifier: A7:F0:9A:74:44:8D:32:95:ED:AC:55:AB:9E:09:D0:95:30:DD:DC:AE
Authority key identifier: 96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB
Certificate issuer: /CN=96124f25246a5409fbee11b5372dd8be24c6e9eb
Certificate serial: 0196CF18B5CD19345D4F2E191D991DAD0FB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
Manifest number: 085C
Signing time: Wed 14 May 2025 14:00:25 +0000
Manifest this update: Wed 14 May 2025 14:00:25 +0000
Manifest next update: Thu 15 May 2025 14:00:25 +0000
Files and hashes: 1: c3njCbUkCCL3mnp4u_KCanHzP7M.roa (hash: vVs8Ror537sKvCZah39iYsDHQqQgVb1rydMRu4BJ5YQ=)
2: lhJPJSRqVAn77hG1Ny3YviTG6es.crl (hash: ZMRzviCRiMZZOnQdmkyICyHUHooNBUdqQhJP3NoFLcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:18:b5:cd:19:34:5d:4f:2e:19:1d:99:1d:ad:0f:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96124f25246a5409fbee11b5372dd8be24c6e9eb
Validity
Not Before: May 14 14:00:25 2025 GMT
Not After : May 15 14:00:25 2025 GMT
Subject: CN=a7f09a74448d3295edac55ab9e09d09530dddcae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2a:f2:96:95:07:a6:8c:ec:64:46:4c:8f:9a:
bd:2f:20:3a:b0:ea:e9:f0:e0:48:11:d2:8d:df:44:
95:0f:70:bb:6d:1f:3c:29:91:42:ce:38:99:aa:d9:
f3:50:bc:bb:c1:2c:d7:23:00:7a:64:c1:44:3a:17:
e5:ae:9e:95:44:05:67:09:4f:c1:19:8d:62:15:42:
de:1b:0f:fa:98:78:d7:8c:6f:17:ff:b3:4e:29:9f:
4d:6a:87:bb:c7:66:66:cd:ed:dd:d4:c0:a9:c3:ac:
ef:d3:c9:ec:44:b6:83:f4:69:4d:ef:92:3e:dd:92:
08:dc:ad:7b:8c:f6:60:41:36:5e:02:9a:e8:ab:f3:
95:c3:23:64:0a:e9:e8:1c:63:22:9a:fe:17:5e:f1:
9d:db:cf:ef:77:12:f9:62:01:8e:70:16:9d:93:e1:
2e:17:69:b0:ff:26:f5:dc:ee:25:98:0d:38:f8:3c:
b9:eb:f4:59:7d:ec:30:10:78:f2:c7:03:e2:1d:4b:
ff:f6:0e:eb:50:90:bd:c2:3d:92:6b:97:87:42:a7:
e2:46:57:65:b8:7a:87:b6:d0:3e:98:15:6a:3f:4c:
e3:93:dc:36:ff:02:5f:20:31:36:ec:a9:54:03:af:
76:dc:84:69:bb:2f:26:be:eb:ef:2b:1b:17:67:37:
31:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F0:9A:74:44:8D:32:95:ED:AC:55:AB:9E:09:D0:95:30:DD:DC:AE
X509v3 Authority Key Identifier:
keyid:96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:33:68:95:03:da:2e:a2:7c:49:97:b9:ff:62:0c:d3:f7:0d:
f9:3b:87:d8:cb:d7:e7:71:ad:d5:53:cd:6b:b7:38:41:b2:0a:
e0:80:b8:5e:6c:ed:db:bf:af:a5:b8:e1:c9:52:ed:78:ea:95:
b2:98:63:28:30:a4:09:c8:a0:64:e0:2e:f5:f5:b3:61:b3:fc:
b9:4b:78:83:1e:25:5b:7e:e4:18:dc:d9:fb:c2:0e:5e:03:b9:
6e:06:a0:92:33:c8:5b:40:f2:bf:5f:36:f2:e1:9f:bc:c3:15:
70:2f:2c:2c:f1:da:5c:30:f3:f8:4e:ef:18:b2:ba:44:20:00:
99:a5:ce:cf:0c:36:87:52:51:62:dc:b8:a7:dc:b6:8c:ac:0f:
97:93:ab:ef:b5:87:41:94:d3:46:59:d6:a3:aa:82:2c:55:72:
2e:77:b7:02:f8:f1:67:a2:bd:00:27:23:0b:c7:03:62:28:e0:
3b:b3:9a:f1:03:de:3a:5b:a6:33:77:55:f1:15:6b:25:33:aa:
31:42:2c:4f:5b:44:c4:b2:fc:11:ac:4c:0d:a7:6b:bf:1d:64:
04:5f:b7:ab:64:4c:99:17:34:f0:7a:48:17:77:cd:aa:9e:1c:
4b:15:06:b6:23:ea:ec:9d:0d:a6:30:7c:6a:10:66:46:83:8b:
90:67:05:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbPGLXNGTRdTy4ZHZkdrQ+5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MTI0ZjI1MjQ2YTU0MDlmYmVlMTFiNTM3MmRkOGJlMjRj
NmU5ZWIwHhcNMjUwNTE0MTQwMDI1WhcNMjUwNTE1MTQwMDI1WjAzMTEwLwYDVQQD
EyhhN2YwOWE3NDQ0OGQzMjk1ZWRhYzU1YWI5ZTA5ZDA5NTMwZGRkY2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSrylpUHpozsZEZMj5q9LyA6sOrp
8OBIEdKN30SVD3C7bR88KZFCzjiZqtnzULy7wSzXIwB6ZMFEOhflrp6VRAVnCU/B
GY1iFULeGw/6mHjXjG8X/7NOKZ9Naoe7x2Zmze3d1MCpw6zv08nsRLaD9GlN75I+
3ZII3K17jPZgQTZeAproq/OVwyNkCunoHGMimv4XXvGd28/vdxL5YgGOcBadk+Eu
F2mw/yb13O4lmA04+Dy56/RZfewwEHjyxwPiHUv/9g7rUJC9wj2Sa5eHQqfiRldl
uHqHttA+mBVqP0zjk9w2/wJfIDE27KlUA6923IRpuy8mvuvvKxsXZzcxRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKfwmnREjTKV7axVq54J0JUw3dyuMB8GA1UdIwQY
MBaAFJYSTyUkalQJ++4RtTct2L4kxunrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGhKUEpTUnFWQW43N2hHMU55M1l2aVRHNmVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8xNGI1OGQtYTFhMy00NmMxLWFjNjIt
OGVlZmI5NTJkOGMxLzEvbGhKUEpTUnFWQW43N2hHMU55M1l2aVRHNmVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8xNGI1OGQtYTFhMy00NmMxLWFjNjItOGVlZmI5NTJkOGMx
LzEvbGhKUEpTUnFWQW43N2hHMU55M1l2aVRHNmVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXTNolQPa
LqJ8SZe5/2IM0/cN+TuH2MvX53Gt1VPNa7c4QbIK4IC4Xmzt27+vpbjhyVLteOqV
sphjKDCkCcigZOAu9fWzYbP8uUt4gx4lW37kGNzZ+8IOXgO5bgagkjPIW0Dyv182
8uGfvMMVcC8sLPHaXDDz+E7vGLK6RCAAmaXOzww2h1JRYty4p9y2jKwPl5Or77WH
QZTTRlnWo6qCLFVyLne3AvjxZ6K9ACcjC8cDYijgO7Oa8QPeOlumM3dV8RVrJTOq
MUIsT1tExLL8EaxMDadrvx1kBF+3q2RMmRc08HpIF3fNqp4cSxUGtiPq7J0NpjB8
ahBmRoOLkGcFhA==
-----END CERTIFICATE-----
Generated at Wed May 14 22:02:55 2025 by rpki-client