Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
File: licbYtGOSsd8YQlpDqrkzDTQ6bY.mft (raw, json)
Hash identifier: y5ACHMVU79tUypLuCTKVIy+YfecIST1IfWujo8HJM2M=
Subject key identifier: E4:3D:59:81:51:D9:80:61:89:AA:BF:30:AE:09:B3:D2:B9:CC:96:25
Authority key identifier: 96:27:1B:62:D1:8E:4A:C7:7C:61:09:69:0E:AA:E4:CC:34:D0:E9:B6
Certificate issuer: /CN=96271b62d18e4ac77c6109690eaae4cc34d0e9b6
Certificate serial: 0196D43F6DC60253291B0E1C1FE4997CB2F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
Manifest number: 09F5
Signing time: Thu 15 May 2025 14:00:48 +0000
Manifest this update: Thu 15 May 2025 14:00:48 +0000
Manifest next update: Fri 16 May 2025 14:00:48 +0000
Files and hashes: 1: IaAYctjYC9OdNTPcnTixy2ccUzU.roa (hash: eOFbMC4GCXw4TW2u0+c7a73RmqtvjAxvsy3+jqBN21w=)
2: X6SMQ0jEGeZDJ_4uYPtUEXmYusc.roa (hash: FdAgr11itjQmO3uyq8UgNfN1pT9LErTuoVrKYdZ843k=)
3: licbYtGOSsd8YQlpDqrkzDTQ6bY.crl (hash: NZFy6gGvT53UAoHc2CFlb2/OCoPzaELWOteELNYPPEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d4:3f:6d:c6:02:53:29:1b:0e:1c:1f:e4:99:7c:b2:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96271b62d18e4ac77c6109690eaae4cc34d0e9b6
Validity
Not Before: May 15 14:00:48 2025 GMT
Not After : May 16 14:00:48 2025 GMT
Subject: CN=e43d598151d9806189aabf30ae09b3d2b9cc9625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:94:f9:b6:e6:7e:cc:a8:4f:c2:9b:fb:01:12:
8b:59:eb:95:50:0e:10:94:91:97:d6:df:87:18:44:
1e:a5:38:88:0b:34:bc:b8:d1:bd:15:ac:4c:af:49:
4c:7d:f4:63:ca:15:4d:f0:5e:89:7e:65:0a:6b:64:
37:de:d3:6e:82:01:e4:9d:f9:ec:94:f0:29:2a:64:
dc:74:03:c1:56:48:2c:38:27:b6:12:42:86:6f:70:
a1:2d:34:da:f1:09:d1:40:d3:74:19:32:7c:26:ed:
54:e3:a0:93:54:17:1e:b7:10:d3:81:bc:c6:87:da:
38:40:19:5d:2a:c6:0b:22:e5:d6:0e:72:cd:2f:91:
c1:57:69:b3:3e:bc:f6:a3:6e:35:8f:82:f0:04:50:
d9:49:81:05:09:41:88:11:15:9f:39:e7:6a:94:4d:
a1:6d:a4:e0:30:be:60:d4:be:b9:e8:18:00:16:e1:
23:25:6c:4e:b3:cc:46:59:e0:4b:f7:bf:e2:ba:b7:
b0:2b:bc:54:7c:0e:b3:81:c0:c7:d6:58:8f:1f:51:
db:f4:bf:e3:42:27:d6:49:10:af:6a:58:b2:f5:59:
0d:f8:a5:ae:5f:51:cc:c1:c7:79:54:e3:84:00:3b:
7c:88:a1:e2:13:86:52:6b:dd:74:b5:ed:e5:0a:85:
28:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3D:59:81:51:D9:80:61:89:AA:BF:30:AE:09:B3:D2:B9:CC:96:25
X509v3 Authority Key Identifier:
keyid:96:27:1B:62:D1:8E:4A:C7:7C:61:09:69:0E:AA:E4:CC:34:D0:E9:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:80:c5:25:25:6a:59:d0:a3:3a:bc:67:e4:ee:98:d0:37:26:
95:a6:63:52:22:44:af:35:ee:ce:fa:5b:6d:2f:04:e4:ec:99:
19:01:a7:b0:30:cb:a4:c7:b3:9f:6e:30:eb:8b:86:95:6e:f2:
c3:90:78:54:af:71:92:b6:bd:03:d3:62:c0:d3:d5:78:bc:c6:
d1:81:ae:04:c3:4b:0d:87:e2:aa:94:68:ed:4d:ef:79:b5:0e:
e4:78:e0:44:79:f1:96:ed:9d:b0:b2:61:f4:54:c4:92:55:aa:
d6:01:ac:4a:2d:3b:16:dd:1b:14:65:84:09:df:6e:56:c5:8c:
31:f1:11:63:53:5f:f0:7a:4b:1e:9b:83:5f:66:0d:2c:b4:74:
f1:bb:14:c4:46:12:d7:24:4a:d2:c9:f1:c3:1a:65:92:6b:d2:
b6:a3:1a:4f:20:a6:8a:7f:eb:d7:55:d3:a2:d6:1e:d7:be:28:
c2:68:76:29:89:92:bc:5a:4c:9e:fb:3d:95:33:19:dd:95:7e:
bd:61:5f:f6:33:26:0d:0a:4a:69:a7:8a:36:79:0e:ec:eb:9f:
25:09:31:56:5c:13:bc:c1:af:39:20:dc:de:b4:0e:2d:1d:5b:
c4:17:56:4b:9f:03:be:03:27:dd:9f:c1:d6:37:41:d9:f1:50:
a1:f6:6e:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbUP23GAlMpGw4cH+SZfLL4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MjcxYjYyZDE4ZTRhYzc3YzYxMDk2OTBlYWFlNGNjMzRk
MGU5YjYwHhcNMjUwNTE1MTQwMDQ4WhcNMjUwNTE2MTQwMDQ4WjAzMTEwLwYDVQQD
EyhlNDNkNTk4MTUxZDk4MDYxODlhYWJmMzBhZTA5YjNkMmI5Y2M5NjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5T5tuZ+zKhPwpv7ARKLWeuVUA4Q
lJGX1t+HGEQepTiICzS8uNG9FaxMr0lMffRjyhVN8F6JfmUKa2Q33tNuggHknfns
lPApKmTcdAPBVkgsOCe2EkKGb3ChLTTa8QnRQNN0GTJ8Ju1U46CTVBcetxDTgbzG
h9o4QBldKsYLIuXWDnLNL5HBV2mzPrz2o241j4LwBFDZSYEFCUGIERWfOedqlE2h
baTgML5g1L656BgAFuEjJWxOs8xGWeBL97/iurewK7xUfA6zgcDH1liPH1Hb9L/j
QifWSRCvaliy9VkN+KWuX1HMwcd5VOOEADt8iKHiE4ZSa910te3lCoUowwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOQ9WYFR2YBhiaq/MK4Js9K5zJYlMB8GA1UdIwQY
MBaAFJYnG2LRjkrHfGEJaQ6q5Mw00Om2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGljYll0R09Tc2Q4WVFscERxcmt6RFRRNmJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mNmI2MGItNTgwOC00OGEyLTgyMDMt
MWNhM2ZiYmZiYTNmLzEvbGljYll0R09Tc2Q4WVFscERxcmt6RFRRNmJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9mNmI2MGItNTgwOC00OGEyLTgyMDMtMWNhM2ZiYmZiYTNm
LzEvbGljYll0R09Tc2Q4WVFscERxcmt6RFRRNmJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD4DFJSVq
WdCjOrxn5O6Y0DcmlaZjUiJErzXuzvpbbS8E5OyZGQGnsDDLpMezn24w64uGlW7y
w5B4VK9xkra9A9NiwNPVeLzG0YGuBMNLDYfiqpRo7U3vebUO5HjgRHnxlu2dsLJh
9FTEklWq1gGsSi07Ft0bFGWECd9uVsWMMfERY1Nf8HpLHpuDX2YNLLR08bsUxEYS
1yRK0snxwxplkmvStqMaTyCmin/r11XTotYe174owmh2KYmSvFpMnvs9lTMZ3ZV+
vWFf9jMmDQpKaaeKNnkO7OufJQkxVlwTvMGvOSDc3rQOLR1bxBdWS58DvgMn3Z/B
1jdB2fFQofZuOw==
-----END CERTIFICATE-----
Generated at Thu May 15 18:02:28 2025 by rpki-client