Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft
File: lCWIuR2pzKgbSeYDqYjiseq93Jg.mft (raw, json)
Hash identifier: wYva/Sj9kpJS7UCTgB2Vdr8F6trrE1Wp0drNJ4cIZCI=
Subject key identifier: 95:38:F5:3E:BB:0D:EE:9B:C8:E2:23:57:90:4B:8F:39:83:B2:C7:76
Authority key identifier: 94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
Certificate issuer: /CN=942588b91da9cca81b49e603a988e2b1eabddc98
Certificate serial: 0196B8FED8E286B3AE034DCB80C44F2E0176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft
Manifest number: 1578
Signing time: Sat 10 May 2025 07:00:31 +0000
Manifest this update: Sat 10 May 2025 07:00:31 +0000
Manifest next update: Sun 11 May 2025 07:00:31 +0000
Files and hashes: 1: lCWIuR2pzKgbSeYDqYjiseq93Jg.crl (hash: I+pWcWF0FwdAmskFKTNb0v0Vxy9A6GmBWPGGU+dwS9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:fe:d8:e2:86:b3:ae:03:4d:cb:80:c4:4f:2e:01:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=942588b91da9cca81b49e603a988e2b1eabddc98
Validity
Not Before: May 10 07:00:31 2025 GMT
Not After : May 11 07:00:31 2025 GMT
Subject: CN=9538f53ebb0dee9bc8e22357904b8f3983b2c776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fb:56:68:c8:50:cf:0a:b2:26:7c:8d:03:8f:
eb:ed:08:a9:db:86:6d:7e:df:ef:0e:4e:1d:b4:b5:
f9:f6:58:2d:98:c6:96:5b:65:be:6b:e3:70:bb:db:
12:c2:5a:2c:3b:c6:da:c1:87:90:01:36:80:05:13:
ef:5d:18:00:74:f4:c2:0e:e6:90:57:30:be:7f:e8:
fd:0d:6b:c7:2f:e8:59:24:45:45:1c:87:fc:52:4d:
a3:77:f9:52:39:1d:11:90:b2:1e:c3:a7:3a:8d:77:
e7:70:ef:ce:5e:3b:3a:9f:d2:6d:72:94:2b:02:f2:
0e:2c:1e:04:e3:98:e6:74:20:35:7b:73:56:e5:ea:
f6:77:8b:fa:40:c4:f7:17:d2:20:c0:60:f4:27:fa:
a6:c2:6e:52:0e:a2:dc:d0:18:dc:13:21:c6:98:e0:
94:36:0a:ab:f6:2d:46:75:af:45:ca:c9:1a:70:51:
0c:4e:ea:3d:fc:fd:63:82:25:84:2a:e1:99:31:62:
a6:62:a1:b6:b2:15:07:3f:a2:f5:4a:76:b4:99:bf:
46:df:9b:17:8a:fe:02:66:4e:c1:f6:ef:08:82:3c:
b7:97:fe:da:54:35:16:a5:04:fd:fa:1d:7f:be:a7:
f2:87:27:cd:a1:e7:af:45:f6:08:c6:15:be:9d:03:
19:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:38:F5:3E:BB:0D:EE:9B:C8:E2:23:57:90:4B:8F:39:83:B2:C7:76
X509v3 Authority Key Identifier:
keyid:94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:80:eb:03:6f:a1:33:fb:95:3d:04:f4:ec:5a:d7:5c:f2:31:
21:e7:3f:06:e2:4c:e8:38:c3:4c:92:58:07:3e:ca:de:bb:fe:
8a:c2:44:9a:8a:0d:21:d5:c3:68:3b:b7:05:25:5a:ea:0b:1e:
e6:0a:75:7d:6c:12:9c:21:ed:84:fc:48:2d:30:29:6f:d2:b1:
6e:ae:e4:1d:5e:74:80:9b:54:7d:82:ea:50:7e:3d:0f:3e:98:
46:59:aa:16:e3:c7:5d:cc:2f:8f:54:a0:36:a1:1c:8b:dd:b9:
98:91:ac:2e:54:df:bb:25:c5:0f:cb:11:2b:5e:4d:e8:43:27:
c7:85:cf:ef:df:a7:c6:ff:88:7c:d6:8a:33:21:92:3f:5c:05:
ad:21:fe:cb:fa:3b:d3:1f:f0:8c:17:f1:2f:e2:66:21:c5:c2:
9c:85:b2:65:05:24:b9:48:46:a3:10:94:fb:e7:b5:70:db:6f:
fa:38:e2:5a:17:0e:74:e7:94:c2:93:57:da:7f:32:9b:8c:46:
fe:70:4e:df:15:60:4c:15:df:f8:73:ef:2a:6f:cd:c5:90:79:
1a:45:06:53:6f:c0:e3:5f:df:22:8c:a3:29:15:33:ec:2e:25:
94:dc:c2:a2:ba:e3:2f:1e:1c:1c:55:4e:63:d1:6e:08:9d:78:
48:e7:de:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4/tjihrOuA03LgMRPLgF2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MjU4OGI5MWRhOWNjYTgxYjQ5ZTYwM2E5ODhlMmIxZWFi
ZGRjOTgwHhcNMjUwNTEwMDcwMDMxWhcNMjUwNTExMDcwMDMxWjAzMTEwLwYDVQQD
Eyg5NTM4ZjUzZWJiMGRlZTliYzhlMjIzNTc5MDRiOGYzOTgzYjJjNzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/tWaMhQzwqyJnyNA4/r7Qip24Zt
ft/vDk4dtLX59lgtmMaWW2W+a+Nwu9sSwlosO8bawYeQATaABRPvXRgAdPTCDuaQ
VzC+f+j9DWvHL+hZJEVFHIf8Uk2jd/lSOR0RkLIew6c6jXfncO/OXjs6n9JtcpQr
AvIOLB4E45jmdCA1e3NW5er2d4v6QMT3F9IgwGD0J/qmwm5SDqLc0BjcEyHGmOCU
Ngqr9i1Gda9FyskacFEMTuo9/P1jgiWEKuGZMWKmYqG2shUHP6L1Sna0mb9G35sX
iv4CZk7B9u8Igjy3l/7aVDUWpQT9+h1/vqfyhyfNoeevRfYIxhW+nQMZGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJU49T67De6byOIjV5BLjzmDssd2MB8GA1UdIwQY
MBaAFJQliLkdqcyoG0nmA6mI4rHqvdyYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbENXSXVSMnB6S2diU2VZRHFZamlzZXE5M0pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC80YmJhN2MtYTgxZi00MGUxLTg4MTQt
NjVkYWFkNjMyOTU3LzEvbENXSXVSMnB6S2diU2VZRHFZamlzZXE5M0pnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC80YmJhN2MtYTgxZi00MGUxLTg4MTQtNjVkYWFkNjMyOTU3
LzEvbENXSXVSMnB6S2diU2VZRHFZamlzZXE5M0pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPIDrA2+h
M/uVPQT07FrXXPIxIec/BuJM6DjDTJJYBz7K3rv+isJEmooNIdXDaDu3BSVa6gse
5gp1fWwSnCHthPxILTApb9Kxbq7kHV50gJtUfYLqUH49Dz6YRlmqFuPHXcwvj1Sg
NqEci925mJGsLlTfuyXFD8sRK15N6EMnx4XP79+nxv+IfNaKMyGSP1wFrSH+y/o7
0x/wjBfxL+JmIcXCnIWyZQUkuUhGoxCU++e1cNtv+jjiWhcOdOeUwpNX2n8ym4xG
/nBO3xVgTBXf+HPvKm/NxZB5GkUGU2/A41/fIoyjKRUz7C4llNzCorrjLx4cHFVO
Y9FuCJ14SOfedg==
-----END CERTIFICATE-----
Generated at Sat May 10 11:34:32 2025 by rpki-client