Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft
File: LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft (raw, json)
Hash identifier: SoZasfVCxRMlEL+1xwl5ioul7WBvAA/JdEKCyYY4gTc=
Subject key identifier: 48:AB:5D:8C:6B:D0:76:7D:BD:52:C2:19:D4:04:67:01:64:BF:B9:5D
Authority key identifier: 2C:6D:66:12:43:62:88:0F:5E:4C:54:85:2F:83:76:D2:B9:D1:37:F4
Certificate issuer: /CN=2c6d66124362880f5e4c54852f8376d2b9d137f4
Certificate serial: 0196C9F2484ECF7349926C0C05FA51AA29DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LG1mEkNiiA9eTFSFL4N20rnRN_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft
Manifest number: 153E
Signing time: Tue 13 May 2025 14:00:20 +0000
Manifest this update: Tue 13 May 2025 14:00:20 +0000
Manifest next update: Wed 14 May 2025 14:00:20 +0000
Files and hashes: 1: C33FXqC7uQt2qAUvryfzquScd9A.roa (hash: KJa1Z8kamyRIOQx92UokNml/luCMeTJPuGt2M/e0fCo=)
2: LG1mEkNiiA9eTFSFL4N20rnRN_Q.crl (hash: O9baidhJU1rMwnYybwdvhKiJR7Sk5xLnigojZo8Lovs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/LG1mEkNiiA9eTFSFL4N20rnRN_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:f2:48:4e:cf:73:49:92:6c:0c:05:fa:51:aa:29:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c6d66124362880f5e4c54852f8376d2b9d137f4
Validity
Not Before: May 13 14:00:20 2025 GMT
Not After : May 14 14:00:20 2025 GMT
Subject: CN=48ab5d8c6bd0767dbd52c219d404670164bfb95d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:54:59:17:7d:df:0c:63:1b:4b:5c:fa:f4:9f:
20:a4:f8:0f:2c:2b:08:ec:d6:1e:7c:8e:a1:67:e3:
98:2a:11:79:7f:f4:de:29:84:03:b8:00:9c:9f:3d:
2c:ba:e3:60:ed:3e:39:23:07:65:5e:28:9a:ec:24:
03:00:9c:5d:f3:65:c4:f9:f0:f6:1c:ea:f2:f2:80:
71:71:bc:96:ec:44:98:f3:16:c4:f4:7d:68:e2:59:
2a:dd:c4:29:c6:5e:a7:4b:7f:6b:92:bd:8e:28:89:
6c:8d:0d:30:c9:39:e0:dc:a2:8e:83:98:89:84:be:
05:03:f8:43:17:e7:04:28:7e:8e:42:ec:99:68:cf:
e7:85:4d:48:4e:86:40:a2:73:c0:85:07:db:65:b3:
ec:b6:64:5e:b0:fb:12:02:35:97:e0:0d:01:63:65:
53:7b:fc:db:42:f1:19:42:8b:1c:68:ef:97:41:bf:
3e:f8:04:34:ce:3b:6e:83:a6:dd:94:27:c9:95:b1:
66:a4:96:bf:7c:31:6c:52:5f:82:5c:b8:b1:03:95:
c4:c0:da:01:3b:ce:fc:0f:62:de:e7:ef:64:f2:47:
a3:29:84:3c:5e:a6:cb:c5:fd:97:01:be:25:b0:9c:
57:ed:c7:80:69:6f:cb:db:1b:65:65:f9:5f:da:02:
f5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:AB:5D:8C:6B:D0:76:7D:BD:52:C2:19:D4:04:67:01:64:BF:B9:5D
X509v3 Authority Key Identifier:
keyid:2C:6D:66:12:43:62:88:0F:5E:4C:54:85:2F:83:76:D2:B9:D1:37:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LG1mEkNiiA9eTFSFL4N20rnRN_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:b7:9b:d7:59:69:2b:04:35:8e:60:b7:83:b4:75:a6:17:5c:
5b:58:f7:78:39:be:40:dd:6f:d0:6b:5c:02:4d:e3:a9:9f:57:
db:c6:33:96:61:d2:0d:84:3b:21:3f:c2:d2:3f:03:f6:f3:48:
d4:eb:38:ae:71:b7:c0:68:22:20:60:7e:ce:81:e6:f9:78:55:
b9:19:07:00:ee:c9:2b:10:a5:2a:52:07:e9:dc:c1:80:55:0a:
db:69:b8:58:fe:76:b6:c1:79:50:f0:09:50:a5:c6:7e:23:28:
a0:e6:09:a3:e9:28:9a:b5:41:20:fe:77:b9:f4:d8:2c:63:f5:
8a:05:6d:49:4d:96:1e:74:fd:1e:bf:3b:1f:71:f4:09:78:23:
7b:02:95:7e:80:a3:1c:71:94:13:fa:a9:ad:19:2b:1b:9d:fb:
9f:65:6c:f0:c4:69:8c:f8:23:04:8f:78:63:5c:4d:e8:5d:30:
2b:d5:b3:e5:f1:37:5c:2e:54:3f:de:d4:31:0e:52:21:83:d3:
4a:ea:3b:d5:db:7e:36:d1:7a:e0:a1:b4:f8:cd:67:52:fa:5b:
15:a9:66:7d:78:31:8f:8a:f1:98:3c:af:4e:78:1f:3f:69:af:
51:1a:2b:c2:86:49:25:28:c7:55:11:b7:b1:a4:b2:d4:d6:de:
21:9f:a0:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbJ8khOz3NJkmwMBfpRqincMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjNmQ2NjEyNDM2Mjg4MGY1ZTRjNTQ4NTJmODM3NmQyYjlk
MTM3ZjQwHhcNMjUwNTEzMTQwMDIwWhcNMjUwNTE0MTQwMDIwWjAzMTEwLwYDVQQD
Eyg0OGFiNWQ4YzZiZDA3NjdkYmQ1MmMyMTlkNDA0NjcwMTY0YmZiOTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1RZF33fDGMbS1z69J8gpPgPLCsI
7NYefI6hZ+OYKhF5f/TeKYQDuACcnz0suuNg7T45IwdlXiia7CQDAJxd82XE+fD2
HOry8oBxcbyW7ESY8xbE9H1o4lkq3cQpxl6nS39rkr2OKIlsjQ0wyTng3KKOg5iJ
hL4FA/hDF+cEKH6OQuyZaM/nhU1IToZAonPAhQfbZbPstmResPsSAjWX4A0BY2VT
e/zbQvEZQoscaO+XQb8++AQ0zjtug6bdlCfJlbFmpJa/fDFsUl+CXLixA5XEwNoB
O878D2Le5+9k8kejKYQ8XqbLxf2XAb4lsJxX7ceAaW/L2xtlZflf2gL1NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEirXYxr0HZ9vVLCGdQEZwFkv7ldMB8GA1UdIwQY
MBaAFCxtZhJDYogPXkxUhS+DdtK50Tf0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEcxbUVrTmlpQTllVEZTRkw0TjIwcm5STl9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS83MWZlYTEtMzkxOS00MmY3LTllMDMt
ZTQwMzBmYTFiMDRhLzEvTEcxbUVrTmlpQTllVEZTRkw0TjIwcm5STl9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS83MWZlYTEtMzkxOS00MmY3LTllMDMtZTQwMzBmYTFiMDRh
LzEvTEcxbUVrTmlpQTllVEZTRkw0TjIwcm5STl9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARreb11lp
KwQ1jmC3g7R1phdcW1j3eDm+QN1v0GtcAk3jqZ9X28YzlmHSDYQ7IT/C0j8D9vNI
1Os4rnG3wGgiIGB+zoHm+XhVuRkHAO7JKxClKlIH6dzBgFUK22m4WP52tsF5UPAJ
UKXGfiMooOYJo+komrVBIP53ufTYLGP1igVtSU2WHnT9Hr87H3H0CXgjewKVfoCj
HHGUE/qprRkrG537n2Vs8MRpjPgjBI94Y1xN6F0wK9Wz5fE3XC5UP97UMQ5SIYPT
Suo71dt+NtF64KG0+M1nUvpbFalmfXgxj4rxmDyvTngfP2mvURorwoZJJSjHVRG3
saSy1NbeIZ+gYw==
-----END CERTIFICATE-----
Generated at Tue May 13 20:27:47 2025 by rpki-client