Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft
File: ln4P5z7udZt3H7cgI8VKecCmFxc.mft (raw, json)
Hash identifier: KZjH2v956kDkBauReUshM/5uA6raRSiAam/zDmIHIu0=
Subject key identifier: 36:85:D6:2B:A6:E5:F8:20:BF:AB:81:01:E5:50:EC:98:90:AF:8D:8D
Authority key identifier: 96:7E:0F:E7:3E:EE:75:9B:77:1F:B7:20:23:C5:4A:79:C0:A6:17:17
Certificate issuer: /CN=967e0fe73eee759b771fb72023c54a79c0a61717
Certificate serial: 0196CE3D4A9C46632FBF4BA18A85616381D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ln4P5z7udZt3H7cgI8VKecCmFxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft
Manifest number: 0315
Signing time: Wed 14 May 2025 10:00:45 +0000
Manifest this update: Wed 14 May 2025 10:00:45 +0000
Manifest next update: Thu 15 May 2025 10:00:45 +0000
Files and hashes: 1: CZTxdymHXJeNj0sHrlYmZG1IiYA.roa (hash: 1N/VlwYAeVpuFdfF49aCJDo/ioVhQJXBgZNT/IfXyjA=)
2: ln4P5z7udZt3H7cgI8VKecCmFxc.crl (hash: h3N+DVtsVT2QJDTzzgN8+mh20BNDBee3eNXOm9wLKGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ln4P5z7udZt3H7cgI8VKecCmFxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 10:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:3d:4a:9c:46:63:2f:bf:4b:a1:8a:85:61:63:81:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=967e0fe73eee759b771fb72023c54a79c0a61717
Validity
Not Before: May 14 10:00:45 2025 GMT
Not After : May 15 10:00:45 2025 GMT
Subject: CN=3685d62ba6e5f820bfab8101e550ec9890af8d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:34:8b:c9:c4:e4:84:da:69:90:e3:7d:a7:38:
b4:f7:5a:90:0b:8f:e2:24:77:61:57:a0:41:ae:6f:
39:9e:1c:c4:49:57:56:f8:46:52:ee:73:45:cc:4a:
06:52:7d:89:fa:67:c3:aa:e2:0b:71:1b:5f:79:58:
ec:bd:a5:e4:ae:ec:55:c6:a2:55:0f:fc:f7:ff:f9:
d1:69:05:4b:40:5d:83:3b:9b:4e:2c:b1:a1:1f:fe:
6b:ad:3e:a5:f6:88:ad:8a:37:64:8e:10:3a:09:13:
5e:0a:33:7b:42:f9:c8:18:f8:65:33:bf:e2:fa:5d:
a6:fa:0d:73:1e:bf:2c:8f:f4:84:09:e0:f1:d7:02:
47:0a:d5:42:70:95:f0:e8:61:ea:86:a2:2e:88:0e:
d7:32:8b:5e:02:71:78:26:2f:fe:b5:f7:14:e5:e5:
47:b6:59:96:32:c7:67:b2:23:d0:0d:a6:9e:c8:a5:
f3:11:81:b6:fb:3c:4d:07:1e:1a:6d:29:35:ee:74:
35:d5:dd:1e:69:85:43:2d:21:d5:78:d9:13:3a:af:
d0:55:d7:dd:e2:27:90:65:0e:42:3f:46:f1:f4:43:
98:9a:7d:db:0a:d5:7f:67:53:07:41:d4:65:3b:e6:
ea:90:93:f3:fb:ab:95:32:fb:ab:eb:39:4e:37:c8:
5a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:85:D6:2B:A6:E5:F8:20:BF:AB:81:01:E5:50:EC:98:90:AF:8D:8D
X509v3 Authority Key Identifier:
keyid:96:7E:0F:E7:3E:EE:75:9B:77:1F:B7:20:23:C5:4A:79:C0:A6:17:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ln4P5z7udZt3H7cgI8VKecCmFxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:f3:1c:2b:7a:75:b2:a0:82:2d:41:63:10:a7:2e:4f:78:fb:
2f:a8:61:a7:69:d6:b9:3c:10:7c:3a:64:4f:80:eb:18:99:cf:
43:80:bc:2f:9e:7a:5a:46:86:ad:bc:f1:5e:79:b9:63:01:3a:
77:33:8b:7c:95:9a:d2:11:09:75:b7:70:97:5c:7c:b0:22:9b:
95:de:47:e6:b9:76:14:40:e3:a3:4c:a2:c0:3f:51:75:1a:9b:
33:77:48:17:ef:3e:bd:a2:e5:3b:be:a2:ca:89:b1:be:27:37:
0c:5a:61:49:1f:b0:5b:3f:36:91:1c:3e:79:24:c3:8f:75:a9:
0e:1f:ea:81:3f:22:69:f1:53:1d:f7:55:11:3c:59:7b:a0:16:
ae:14:22:54:2d:18:b1:44:39:c6:74:5c:74:b2:01:61:5c:db:
df:2c:59:24:91:99:65:b2:ce:0b:ca:67:93:54:aa:12:54:44:
9c:55:9f:33:75:cd:93:c0:b6:6a:32:bc:72:98:4e:42:b7:13:
ff:85:ed:c7:64:af:1a:04:79:78:c9:46:0c:19:53:88:a1:a8:
d9:6f:92:7d:31:e5:50:09:24:ba:0b:04:82:85:33:30:c1:69:
c4:7e:4b:54:cf:1b:b8:51:23:7c:7f:12:e1:c0:ba:7c:f6:ce:
20:45:88:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbOPUqcRmMvv0uhioVhY4HVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2N2UwZmU3M2VlZTc1OWI3NzFmYjcyMDIzYzU0YTc5YzBh
NjE3MTcwHhcNMjUwNTE0MTAwMDQ1WhcNMjUwNTE1MTAwMDQ1WjAzMTEwLwYDVQQD
EygzNjg1ZDYyYmE2ZTVmODIwYmZhYjgxMDFlNTUwZWM5ODkwYWY4ZDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DSLycTkhNppkON9pzi091qQC4/i
JHdhV6BBrm85nhzESVdW+EZS7nNFzEoGUn2J+mfDquILcRtfeVjsvaXkruxVxqJV
D/z3//nRaQVLQF2DO5tOLLGhH/5rrT6l9oitijdkjhA6CRNeCjN7QvnIGPhlM7/i
+l2m+g1zHr8sj/SECeDx1wJHCtVCcJXw6GHqhqIuiA7XMoteAnF4Ji/+tfcU5eVH
tlmWMsdnsiPQDaaeyKXzEYG2+zxNBx4abSk17nQ11d0eaYVDLSHVeNkTOq/QVdfd
4ieQZQ5CP0bx9EOYmn3bCtV/Z1MHQdRlO+bqkJPz+6uVMvur6zlON8haEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDaF1ium5fggv6uBAeVQ7JiQr42NMB8GA1UdIwQY
MBaAFJZ+D+c+7nWbdx+3ICPFSnnAphcXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbG40UDV6N3VkWnQzSDdjZ0k4VktlY0NtRnhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC85NGI3YmEtZDEyZS00ZDkyLThmMzEt
N2FlOTNmZDJhZDA0LzEvbG40UDV6N3VkWnQzSDdjZ0k4VktlY0NtRnhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC85NGI3YmEtZDEyZS00ZDkyLThmMzEtN2FlOTNmZDJhZDA0
LzEvbG40UDV6N3VkWnQzSDdjZ0k4VktlY0NtRnhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHfMcK3p1
sqCCLUFjEKcuT3j7L6hhp2nWuTwQfDpkT4DrGJnPQ4C8L556WkaGrbzxXnm5YwE6
dzOLfJWa0hEJdbdwl1x8sCKbld5H5rl2FEDjo0yiwD9RdRqbM3dIF+8+vaLlO76i
yomxvic3DFphSR+wWz82kRw+eSTDj3WpDh/qgT8iafFTHfdVETxZe6AWrhQiVC0Y
sUQ5xnRcdLIBYVzb3yxZJJGZZbLOC8pnk1SqElREnFWfM3XNk8C2ajK8cphOQrcT
/4Xtx2SvGgR5eMlGDBlTiKGo2W+SfTHlUAkkugsEgoUzMMFpxH5LVM8buFEjfH8S
4cC6fPbOIEWILw==
-----END CERTIFICATE-----
Generated at Wed May 14 15:57:22 2025 by rpki-client