Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
File: LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft (raw, json)
Hash identifier: VMc3PmCRA8C+6kt9MoAVk1paAtOFbrPgoWMWby5WSEk=
Subject key identifier: 81:EA:1C:AD:05:1F:AD:0A:73:05:C9:37:D2:00:FE:51:79:A9:16:43
Authority key identifier: 2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
Certificate issuer: /CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Certificate serial: 0196AF2040D4CD4742B06F5A782CF68F3274
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
Manifest number: 051E
Signing time: Thu 08 May 2025 09:00:48 +0000
Manifest this update: Thu 08 May 2025 09:00:48 +0000
Manifest next update: Fri 09 May 2025 09:00:48 +0000
Files and hashes: 1: CW_LnyX1zugkzNOIUd8XzpBN5Bw.roa (hash: fnDAooAgubqCaqW4AjdSJ+J1ErpgOuY9lVFJ+sN2CYg=)
2: LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl (hash: NNFRPc6cVPWVSSZQGa0JcbXsrZNXMiIyKJ4vanETr5E=)
3: eQf0fzT1TpCrCtQpX64ANEQyzhI.roa (hash: HlHU7MK+aLw3ArQHYGvb135KcLlwl9X+zO2+NofGyyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 09:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:20:40:d4:cd:47:42:b0:6f:5a:78:2c:f6:8f:32:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Validity
Not Before: May 8 09:00:48 2025 GMT
Not After : May 9 09:00:48 2025 GMT
Subject: CN=81ea1cad051fad0a7305c937d200fe5179a91643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:72:60:7d:48:cb:df:42:cc:f5:05:c6:77:77:
9d:5e:a9:fd:23:8e:44:2e:25:f8:6b:a1:2c:c9:d0:
87:a9:8c:55:6d:1d:16:44:e0:44:0c:54:0b:48:ba:
9a:09:c7:20:bb:0e:57:bf:ac:5a:8f:c3:7f:38:70:
83:27:07:24:71:8d:86:3e:eb:7c:53:ec:01:68:e2:
69:be:9c:5a:b9:6b:af:cd:ea:45:97:74:59:8e:72:
4c:5f:e0:fe:fb:f8:cf:d0:59:03:de:b9:c1:d7:3c:
71:37:1b:99:87:1b:f5:5b:40:47:64:79:7f:46:c3:
fb:bd:e0:f0:cd:df:76:46:a0:3a:4e:6f:f1:59:c5:
77:40:5c:9e:d3:12:71:f7:54:a6:a9:8d:91:12:ba:
9c:b4:93:b8:2e:6d:46:0a:5c:c8:f2:57:46:c5:90:
78:f6:5a:ca:95:65:83:0c:fb:f1:06:fd:12:84:c9:
d1:68:0f:9e:5e:8e:44:4a:e9:41:47:7b:0f:d2:a5:
d3:83:78:dc:90:60:23:09:e4:34:65:c4:ed:29:09:
e2:91:4f:77:4e:9b:53:d5:e0:d7:a1:3d:73:43:cc:
63:eb:ea:35:aa:8e:11:e9:f5:69:49:f0:2d:0b:7f:
b9:35:55:50:fe:62:c4:53:a1:c7:f0:0a:86:be:23:
b4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:EA:1C:AD:05:1F:AD:0A:73:05:C9:37:D2:00:FE:51:79:A9:16:43
X509v3 Authority Key Identifier:
keyid:2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:44:94:e5:3a:df:bf:f0:47:81:bd:48:8d:13:e4:f4:f1:e0:
dc:aa:af:d0:1f:76:44:97:c4:06:8e:db:d5:f1:5e:60:4d:cf:
f6:fc:7e:e5:2e:b5:e0:d2:49:17:13:04:fd:de:f5:4a:fb:8c:
d2:40:e4:0f:bd:96:ec:e3:d1:7a:ae:87:88:0c:51:05:2b:b6:
a8:a0:e7:48:4c:3a:38:1b:ae:84:8c:e6:a9:82:8c:a8:04:65:
72:08:95:39:34:12:ae:49:7d:a4:1e:19:df:1d:bf:3f:bf:64:
80:a3:fa:33:da:22:36:75:d7:3c:f7:3f:f3:23:31:53:64:16:
47:60:f9:7e:6b:98:58:d3:c9:95:a9:f8:48:41:c3:56:9a:19:
d5:69:75:d9:b5:7b:f1:79:7b:49:e1:f4:29:1d:39:06:d2:ed:
a2:5a:4a:78:f4:65:39:59:db:6a:35:cc:27:41:65:c1:73:cf:
7a:c3:87:32:c9:34:09:f6:56:a1:c4:81:9e:3e:01:b8:e0:d8:
8f:f2:88:32:a5:e8:6d:47:94:66:93:02:19:9a:94:b7:22:8d:
2e:85:2b:b9:c9:d4:34:a2:c8:8a:24:75:56:f1:71:c8:61:0d:
3f:dd:c3:2c:71:8f:d4:d3:dc:48:69:44:aa:25:01:35:70:6c:
1f:f7:08:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZavIEDUzUdCsG9aeCz2jzJ0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMGQ2MjEyOWQwMjA2M2Q0MDllYmZiMDFjNjQ4ZDQ2ZjM0
ODg5ZTAwHhcNMjUwNTA4MDkwMDQ4WhcNMjUwNTA5MDkwMDQ4WjAzMTEwLwYDVQQD
Eyg4MWVhMWNhZDA1MWZhZDBhNzMwNWM5MzdkMjAwZmU1MTc5YTkxNjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXJgfUjL30LM9QXGd3edXqn9I45E
LiX4a6EsydCHqYxVbR0WROBEDFQLSLqaCccguw5Xv6xaj8N/OHCDJwckcY2GPut8
U+wBaOJpvpxauWuvzepFl3RZjnJMX+D++/jP0FkD3rnB1zxxNxuZhxv1W0BHZHl/
RsP7veDwzd92RqA6Tm/xWcV3QFye0xJx91SmqY2RErqctJO4Lm1GClzI8ldGxZB4
9lrKlWWDDPvxBv0ShMnRaA+eXo5ESulBR3sP0qXTg3jckGAjCeQ0ZcTtKQnikU93
TptT1eDXoT1zQ8xj6+o1qo4R6fVpSfAtC3+5NVVQ/mLEU6HH8AqGviO0hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIHqHK0FH60KcwXJN9IA/lF5qRZDMB8GA1UdIwQY
MBaAFC0NYhKdAgY9QJ6/sBxkjUbzSIngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFExaUVwMENCajFBbnItd0hHU05Sdk5JaWVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wNjBmN2UtOGNmMC00ZWMyLWFmN2Et
MWRhZWE0YmM5NGIzLzEvTFExaUVwMENCajFBbnItd0hHU05Sdk5JaWVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8wNjBmN2UtOGNmMC00ZWMyLWFmN2EtMWRhZWE0YmM5NGIz
LzEvTFExaUVwMENCajFBbnItd0hHU05Sdk5JaWVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAESU5Trf
v/BHgb1IjRPk9PHg3Kqv0B92RJfEBo7b1fFeYE3P9vx+5S614NJJFxME/d71SvuM
0kDkD72W7OPReq6HiAxRBSu2qKDnSEw6OBuuhIzmqYKMqARlcgiVOTQSrkl9pB4Z
3x2/P79kgKP6M9oiNnXXPPc/8yMxU2QWR2D5fmuYWNPJlan4SEHDVpoZ1Wl12bV7
8Xl7SeH0KR05BtLtolpKePRlOVnbajXMJ0FlwXPPesOHMsk0CfZWocSBnj4BuODY
j/KIMqXobUeUZpMCGZqUtyKNLoUrucnUNKLIiiR1VvFxyGENP93DLHGP1NPcSGlE
qiUBNXBsH/cIDQ==
-----END CERTIFICATE-----
Generated at Thu May 8 19:28:11 2025 by rpki-client