Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
File: lw69BGmlxpwQmJccqrNv4DLs4xE.mft (raw, json)
Hash identifier: jKWioSe3Q4QPajHbbYNrkgZAWHnxYZpMBs29cbtZI+o=
Subject key identifier: B8:BD:6E:A6:0B:94:BA:40:D0:D5:45:6B:63:8D:B9:59:FE:19:C1:5A
Authority key identifier: 97:0E:BD:04:69:A5:C6:9C:10:98:97:1C:AA:B3:6F:E0:32:EC:E3:11
Certificate issuer: /CN=970ebd0469a5c69c1098971caab36fe032ece311
Certificate serial: 01969CACCAFE4DB4590B95BC2D46B4955CEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
Manifest number: 1526
Signing time: Sun 04 May 2025 19:01:31 +0000
Manifest this update: Sun 04 May 2025 19:01:31 +0000
Manifest next update: Mon 05 May 2025 19:01:31 +0000
Files and hashes: 1: aRRMx2LpXrXzb91tfKNbEYwqTy4.roa (hash: u9ed+0pIjkL2kAKw6TtOQkn9W9RbAQ792y7vYcRd71M=)
2: eV3A69o5dbmXhkcbRscNdwCcmUw.roa (hash: 1+RfsWC1iIY4uoQdBg4VWebMYcz8BpqPe7dmv43mNg4=)
3: lw69BGmlxpwQmJccqrNv4DLs4xE.crl (hash: f1bdxeEbDpMa2wA6RaZreKXGkKDUXKkPv3EvqDqibGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 19:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9c:ac:ca:fe:4d:b4:59:0b:95:bc:2d:46:b4:95:5c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=970ebd0469a5c69c1098971caab36fe032ece311
Validity
Not Before: May 4 19:01:31 2025 GMT
Not After : May 5 19:01:31 2025 GMT
Subject: CN=b8bd6ea60b94ba40d0d5456b638db959fe19c15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:35:8b:ca:c0:2d:ef:0a:13:7c:e3:40:00:a7:
89:56:40:19:67:8b:16:05:52:94:ea:92:ba:aa:f4:
4c:4b:5b:9c:f4:c9:06:07:9d:20:99:33:ab:7b:27:
90:94:39:f2:43:90:15:1b:b5:47:26:e1:fd:90:40:
8c:63:c5:ee:e0:c0:71:86:f0:2f:92:60:d7:a2:10:
22:23:e8:01:90:a6:6d:b0:e7:db:01:ef:ac:10:ed:
7f:8e:47:4e:30:2a:49:6d:ca:75:41:eb:8c:91:ee:
d4:01:7d:d5:7b:7a:51:59:95:04:0a:92:a6:ac:0a:
c4:ca:1c:cc:bb:e3:56:5b:f4:72:55:33:ae:44:eb:
a6:e1:23:9a:fc:e1:38:4e:97:ee:d3:09:f7:1c:96:
f1:71:22:ab:b6:74:b8:e4:06:98:8b:8c:5c:43:f3:
fa:68:6f:f0:b0:a4:9d:bd:ae:1c:1b:b3:58:aa:37:
17:3e:62:6a:1f:bc:ec:31:cd:f5:e0:e7:4f:cb:3f:
df:7c:84:ec:97:62:7d:7e:ac:cd:db:45:cc:7a:7e:
af:24:ab:84:d7:7a:65:72:8c:03:81:3d:b8:73:a2:
c2:bd:83:b2:59:9d:5f:25:76:9e:58:22:97:30:a1:
0d:fc:98:0b:a2:2f:d9:2a:b2:a9:eb:46:1f:08:2a:
f5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:BD:6E:A6:0B:94:BA:40:D0:D5:45:6B:63:8D:B9:59:FE:19:C1:5A
X509v3 Authority Key Identifier:
keyid:97:0E:BD:04:69:A5:C6:9C:10:98:97:1C:AA:B3:6F:E0:32:EC:E3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:24:f2:78:5a:d8:a9:e8:a9:bf:f0:46:9d:e9:6f:cb:1b:1b:
6b:80:08:2f:16:6a:bf:a4:7d:8b:d5:a3:87:2d:7d:57:c1:cf:
7a:c2:c5:20:46:f3:d0:90:71:cb:df:d0:dd:4d:29:fa:ca:dd:
02:74:14:7b:f5:2a:fd:94:e5:d6:a3:6a:3f:6c:00:00:42:d9:
ad:7d:1c:69:b2:d8:98:17:83:85:15:c5:58:1c:f8:49:bd:94:
85:17:cb:dc:61:37:78:64:80:7b:3a:c2:d4:85:ad:84:b2:9d:
cd:2d:66:33:8b:d0:9a:df:0c:fa:78:c2:a7:ab:0b:89:c5:66:
d3:c7:8b:60:53:80:e6:e3:7b:5b:70:c5:8e:cb:57:2e:31:59:
bf:9e:d8:f4:06:61:ef:a0:83:c2:05:cc:db:bc:97:fb:22:76:
90:c7:56:67:1f:2e:a7:a9:ff:aa:3e:61:9c:fe:24:4d:93:2e:
08:6a:7c:fd:d9:19:46:85:1e:b6:2d:fe:ab:27:4b:9d:20:c6:
c6:20:3a:c0:f5:16:ec:52:0b:c7:97:40:09:72:43:61:7e:c9:
79:07:fd:6c:ba:7a:b0:ba:5f:3c:a5:da:ad:2b:98:19:e9:e4:
11:52:f4:53:99:83:31:48:68:44:e8:54:c6:92:05:da:67:de:
45:6f:20:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZacrMr+TbRZC5W8LUa0lVzqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MGViZDA0NjlhNWM2OWMxMDk4OTcxY2FhYjM2ZmUwMzJl
Y2UzMTEwHhcNMjUwNTA0MTkwMTMxWhcNMjUwNTA1MTkwMTMxWjAzMTEwLwYDVQQD
EyhiOGJkNmVhNjBiOTRiYTQwZDBkNTQ1NmI2MzhkYjk1OWZlMTljMTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTWLysAt7woTfONAAKeJVkAZZ4sW
BVKU6pK6qvRMS1uc9MkGB50gmTOreyeQlDnyQ5AVG7VHJuH9kECMY8Xu4MBxhvAv
kmDXohAiI+gBkKZtsOfbAe+sEO1/jkdOMCpJbcp1QeuMke7UAX3Ve3pRWZUECpKm
rArEyhzMu+NWW/RyVTOuROum4SOa/OE4Tpfu0wn3HJbxcSKrtnS45AaYi4xcQ/P6
aG/wsKSdva4cG7NYqjcXPmJqH7zsMc314OdPyz/ffITsl2J9fqzN20XMen6vJKuE
13plcowDgT24c6LCvYOyWZ1fJXaeWCKXMKEN/JgLoi/ZKrKp60YfCCr1vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLi9bqYLlLpA0NVFa2ONuVn+GcFaMB8GA1UdIwQY
MBaAFJcOvQRppcacEJiXHKqzb+Ay7OMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHc2OUJHbWx4cHdRbUpjY3FyTnY0RExzNHhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS82MjAwMWEtYTMxMy00ZTMzLWJiMDQt
OTE0YjRiMzRmOTgxLzEvbHc2OUJHbWx4cHdRbUpjY3FyTnY0RExzNHhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS82MjAwMWEtYTMxMy00ZTMzLWJiMDQtOTE0YjRiMzRmOTgx
LzEvbHc2OUJHbWx4cHdRbUpjY3FyTnY0RExzNHhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApSTyeFrY
qeipv/BGnelvyxsba4AILxZqv6R9i9Wjhy19V8HPesLFIEbz0JBxy9/Q3U0p+srd
AnQUe/Uq/ZTl1qNqP2wAAELZrX0cabLYmBeDhRXFWBz4Sb2UhRfL3GE3eGSAezrC
1IWthLKdzS1mM4vQmt8M+njCp6sLicVm08eLYFOA5uN7W3DFjstXLjFZv57Y9AZh
76CDwgXM27yX+yJ2kMdWZx8up6n/qj5hnP4kTZMuCGp8/dkZRoUeti3+qydLnSDG
xiA6wPUW7FILx5dACXJDYX7JeQf9bLp6sLpfPKXarSuYGenkEVL0U5mDMUhoROhU
xpIF2mfeRW8gvw==
-----END CERTIFICATE-----
Generated at Mon May 5 05:23:24 2025 by rpki-client