Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
File: LYaVbM1-OrtCkd1U29i0NCv5V8w.mft (raw, json)
Hash identifier: Gy0kc2LOvmJnm5bJaAGuveyeZ4utCCuukueRvFdkfyA=
Subject key identifier: 8B:D3:9B:A7:A9:66:D6:DE:D5:1C:77:41:1F:BE:2B:D9:23:89:BA:70
Authority key identifier: 2D:86:95:6C:CD:7E:3A:BB:42:91:DD:54:DB:D8:B4:34:2B:F9:57:CC
Certificate issuer: /CN=2d86956ccd7e3abb4291dd54dbd8b4342bf957cc
Certificate serial: 0196CBAA1D1BFCAB2DD83F34EA3AB03A2776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
Manifest number: 153F
Signing time: Tue 13 May 2025 22:00:45 +0000
Manifest this update: Tue 13 May 2025 22:00:45 +0000
Manifest next update: Wed 14 May 2025 22:00:45 +0000
Files and hashes: 1: ClcfyiciZMtdgpDBHSxNZ8_ZF9c.roa (hash: dOAWbp1/aTClUEGzmi/WNAdZr626HfWjPgvNWe2YweQ=)
2: LYaVbM1-OrtCkd1U29i0NCv5V8w.crl (hash: 5S+Txc6eC5d4U5nqB4+5pMnihRs6YtzYX7maOjADQyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:aa:1d:1b:fc:ab:2d:d8:3f:34:ea:3a:b0:3a:27:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d86956ccd7e3abb4291dd54dbd8b4342bf957cc
Validity
Not Before: May 13 22:00:45 2025 GMT
Not After : May 14 22:00:45 2025 GMT
Subject: CN=8bd39ba7a966d6ded51c77411fbe2bd92389ba70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f1:fd:cf:18:5f:f6:36:94:cf:6f:61:ee:4b:
ad:f3:91:c6:79:4d:54:cb:0c:12:d3:61:54:f5:de:
77:cb:61:7b:4c:96:9d:41:d9:fa:50:c8:eb:a7:82:
35:07:4b:bf:14:26:fb:09:e3:55:59:bd:80:99:a3:
9d:d5:81:56:ca:bd:ef:19:d1:40:c1:1e:8a:75:68:
6b:55:d7:da:cd:86:35:ae:ae:ae:96:9e:48:6e:b2:
2e:c3:ca:eb:fb:76:7e:d1:c6:3a:8f:f1:99:ac:9a:
6d:b0:ee:f3:19:85:1d:c6:16:95:76:38:fe:7a:d1:
b1:c4:fa:40:36:2f:9a:ba:2a:cf:97:8d:5a:d8:75:
24:44:7e:0f:5d:18:64:fb:c8:a4:a6:ef:35:e3:2c:
d6:e0:b0:db:4c:99:f2:b4:de:d3:46:88:f6:15:14:
24:f0:7d:e2:d4:60:7d:5e:ab:0e:2b:22:38:ec:ff:
0a:51:d0:73:39:85:67:80:9d:39:06:d2:d7:86:fa:
49:b5:ef:c5:04:24:7b:55:22:64:32:41:5d:68:73:
1b:43:27:6f:1c:25:8c:e5:1d:c4:cd:8b:8b:8d:4e:
2e:7e:30:b5:51:b1:4c:38:15:27:b0:cf:d9:92:02:
94:26:2a:ce:c0:55:31:4c:66:c2:ba:c3:2e:04:86:
33:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D3:9B:A7:A9:66:D6:DE:D5:1C:77:41:1F:BE:2B:D9:23:89:BA:70
X509v3 Authority Key Identifier:
keyid:2D:86:95:6C:CD:7E:3A:BB:42:91:DD:54:DB:D8:B4:34:2B:F9:57:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:1d:4f:e1:40:1c:15:32:6c:3e:4c:ae:71:9a:29:6c:5b:07:
ea:c2:ae:ea:fe:39:87:25:39:5e:07:3b:08:05:eb:09:7e:b9:
f1:e8:f6:62:22:15:a8:22:ac:6f:ba:cb:66:2b:d8:82:08:13:
1e:2b:49:fa:fa:42:7d:87:75:45:2c:33:0f:37:b1:f3:25:d5:
00:f7:60:79:90:33:fb:d6:9f:cf:0d:d9:84:82:0d:1f:48:ba:
07:07:5d:48:a4:26:7a:55:cf:70:32:18:ee:d8:44:8b:0d:01:
c6:31:6b:73:9f:3a:da:fb:f6:21:68:32:ff:17:cf:08:12:c8:
07:5b:e8:45:34:07:a5:b8:18:4d:ff:a4:0b:df:74:cf:35:33:
1e:a8:4d:05:eb:0e:19:ef:4f:a4:ac:36:33:58:d1:66:0b:1b:
8d:54:17:28:94:ca:4a:af:0a:f2:bf:07:dd:6f:9c:ea:f8:29:
78:2c:7e:2b:75:06:83:53:a0:6f:bf:39:c2:02:59:bd:7b:8d:
fc:a7:2b:c9:10:d0:54:dd:92:47:8b:42:b8:99:87:d8:80:4f:
c3:bb:cb:16:94:c5:41:78:b7:19:32:72:b5:31:10:f6:77:c6:
8a:b0:13:9e:4b:a0:2e:bb:a7:45:0a:61:cb:00:23:98:f0:9a:
3d:d6:3a:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbLqh0b/Kst2D806jqwOid2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkODY5NTZjY2Q3ZTNhYmI0MjkxZGQ1NGRiZDhiNDM0MmJm
OTU3Y2MwHhcNMjUwNTEzMjIwMDQ1WhcNMjUwNTE0MjIwMDQ1WjAzMTEwLwYDVQQD
Eyg4YmQzOWJhN2E5NjZkNmRlZDUxYzc3NDExZmJlMmJkOTIzODliYTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/H9zxhf9jaUz29h7kut85HGeU1U
ywwS02FU9d53y2F7TJadQdn6UMjrp4I1B0u/FCb7CeNVWb2AmaOd1YFWyr3vGdFA
wR6KdWhrVdfazYY1rq6ulp5IbrIuw8rr+3Z+0cY6j/GZrJptsO7zGYUdxhaVdjj+
etGxxPpANi+auirPl41a2HUkRH4PXRhk+8ikpu814yzW4LDbTJnytN7TRoj2FRQk
8H3i1GB9XqsOKyI47P8KUdBzOYVngJ05BtLXhvpJte/FBCR7VSJkMkFdaHMbQydv
HCWM5R3EzYuLjU4ufjC1UbFMOBUnsM/ZkgKUJirOwFUxTGbCusMuBIYzAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIvTm6epZtbe1Rx3QR++K9kjibpwMB8GA1UdIwQY
MBaAFC2GlWzNfjq7QpHdVNvYtDQr+VfMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFlhVmJNMS1PcnRDa2QxVTI5aTBOQ3Y1Vjh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8wNjRlMzUtODgxNC00M2Y2LWI0OGIt
YTI2ZGUzMTNiMzRkLzEvTFlhVmJNMS1PcnRDa2QxVTI5aTBOQ3Y1Vjh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8wNjRlMzUtODgxNC00M2Y2LWI0OGItYTI2ZGUzMTNiMzRk
LzEvTFlhVmJNMS1PcnRDa2QxVTI5aTBOQ3Y1Vjh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiR1P4UAc
FTJsPkyucZopbFsH6sKu6v45hyU5Xgc7CAXrCX658ej2YiIVqCKsb7rLZivYgggT
HitJ+vpCfYd1RSwzDzex8yXVAPdgeZAz+9afzw3ZhIINH0i6BwddSKQmelXPcDIY
7thEiw0BxjFrc5862vv2IWgy/xfPCBLIB1voRTQHpbgYTf+kC990zzUzHqhNBesO
Ge9PpKw2M1jRZgsbjVQXKJTKSq8K8r8H3W+c6vgpeCx+K3UGg1Ogb785wgJZvXuN
/KcryRDQVN2SR4tCuJmH2IBPw7vLFpTFQXi3GTJytTEQ9nfGirATnkugLrunRQph
ywAjmPCaPdY6tw==
-----END CERTIFICATE-----
Generated at Wed May 14 00:13:28 2025 by rpki-client