Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft
File: lvbqdo68ndwGj1aX39dcrt164Qg.mft (raw, json)
Hash identifier: bjjub49EqM5ZISFQyK117MF0DwaJ5ScNOnEAFqc0VdQ=
Subject key identifier: 01:B2:EB:27:63:0A:AE:AA:53:55:4D:BD:AF:3A:2B:5C:DC:DF:EF:53
Authority key identifier: 96:F6:EA:76:8E:BC:9D:DC:06:8F:56:97:DF:D7:5C:AE:DD:7A:E1:08
Certificate issuer: /CN=96f6ea768ebc9ddc068f5697dfd75caedd7ae108
Certificate serial: 0196C5A860E60712929E4765438F545198C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lvbqdo68ndwGj1aX39dcrt164Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft
Manifest number: 0E9F
Signing time: Mon 12 May 2025 18:01:08 +0000
Manifest this update: Mon 12 May 2025 18:01:08 +0000
Manifest next update: Tue 13 May 2025 18:01:08 +0000
Files and hashes: 1: hpkYZsr4ehkRhZoX0PY5vhGw4f0.roa (hash: yIy93XAXh8xhvhofZiP5cDUdE2rbmmhviH4jDOGAZ/g=)
2: lvbqdo68ndwGj1aX39dcrt164Qg.crl (hash: FKxXiRPMaO4GCJbdXh8sBX716K5SlUEUhbqAo5CbNO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lvbqdo68ndwGj1aX39dcrt164Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:a8:60:e6:07:12:92:9e:47:65:43:8f:54:51:98:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96f6ea768ebc9ddc068f5697dfd75caedd7ae108
Validity
Not Before: May 12 18:01:08 2025 GMT
Not After : May 13 18:01:08 2025 GMT
Subject: CN=01b2eb27630aaeaa53554dbdaf3a2b5cdcdfef53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3f:cf:52:ab:21:14:bd:be:0c:1e:c4:9f:af:
7e:e1:d2:a5:81:9b:f7:27:8c:ed:8f:c9:20:12:fb:
3d:28:be:78:aa:9e:25:58:9b:bd:4a:f1:b2:5b:bb:
88:9a:39:a4:48:cd:a2:71:b2:a8:e2:a5:92:05:0e:
5d:58:89:58:5f:4d:2d:42:34:29:dd:b6:15:31:0c:
f0:d3:ca:ad:05:2d:2c:93:c6:e7:e7:0e:5d:f8:08:
9c:ce:96:1c:cf:47:6e:68:79:59:17:d3:f0:2c:3f:
16:56:8d:f6:74:7b:cb:93:94:48:10:d4:05:7b:b7:
13:55:d8:06:e8:a8:f7:b4:fc:7c:6a:cf:5b:c6:c8:
18:50:67:10:77:35:91:f8:00:a1:ba:fa:88:7c:f4:
38:f8:2c:48:13:9e:ae:ca:a9:9c:89:7b:12:2d:73:
0a:29:e4:38:98:4d:3d:84:a7:05:07:5d:dc:d2:09:
d6:d7:5d:59:c3:23:76:b9:9a:8b:80:aa:6d:4e:14:
7a:1e:57:8c:20:32:9c:72:d8:68:a1:25:1a:99:5e:
4a:02:aa:2c:36:68:95:5a:a5:27:59:9a:fa:1a:a7:
e4:f2:20:84:ec:6b:a9:3d:cd:33:b9:6f:af:34:e0:
17:a5:a5:55:4e:4f:85:fe:08:a5:d6:e0:cb:9b:fa:
18:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B2:EB:27:63:0A:AE:AA:53:55:4D:BD:AF:3A:2B:5C:DC:DF:EF:53
X509v3 Authority Key Identifier:
keyid:96:F6:EA:76:8E:BC:9D:DC:06:8F:56:97:DF:D7:5C:AE:DD:7A:E1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvbqdo68ndwGj1aX39dcrt164Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7baa1c-8da1-4f80-babb-b4bfc29e71a3/1/lvbqdo68ndwGj1aX39dcrt164Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:50:d3:7d:11:b9:7d:77:65:53:86:45:da:88:9f:8d:b1:91:
37:bf:1c:d9:0c:2c:76:b7:99:d9:fe:af:b9:5a:48:4a:37:a3:
6c:0c:c4:02:e5:b6:04:ac:3e:f3:75:e8:c8:ce:f8:bc:f4:07:
8b:08:b8:45:fa:66:91:c5:14:b8:23:0c:0e:8c:4c:95:32:04:
4d:30:2c:14:5f:a8:82:6c:dd:48:e8:85:d3:86:4d:31:b0:7d:
3d:82:e9:64:48:9d:0f:dd:a8:f6:d4:c1:6f:e1:c5:81:b2:c6:
3d:0a:03:7d:03:f8:67:ca:df:55:ed:35:b8:22:0f:a8:a8:f2:
7c:d8:16:8f:22:5a:dc:72:85:c7:80:c5:63:a7:50:28:d2:44:
d5:46:d2:f4:c3:af:a4:d7:8b:82:b7:3d:df:a6:0f:33:85:f1:
05:f0:09:fc:6e:4e:fb:04:75:6c:d0:c5:dc:38:8f:c1:fe:a5:
dd:0d:3a:05:76:47:23:c0:d1:28:7d:94:f4:7c:aa:e2:89:48:
42:76:cf:5d:45:63:ee:aa:2a:00:70:7e:e5:2b:6c:cd:44:9b:
44:ec:06:e7:19:98:46:44:ea:e2:e4:da:c5:23:c5:55:5e:c6:
ed:3d:42:6f:f9:a4:b9:fc:0d:0a:48:9a:b7:a7:c6:49:95:f3:
29:df:62:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbFqGDmBxKSnkdlQ49UUZjCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZjZlYTc2OGViYzlkZGMwNjhmNTY5N2RmZDc1Y2FlZGQ3
YWUxMDgwHhcNMjUwNTEyMTgwMTA4WhcNMjUwNTEzMTgwMTA4WjAzMTEwLwYDVQQD
EygwMWIyZWIyNzYzMGFhZWFhNTM1NTRkYmRhZjNhMmI1Y2RjZGZlZjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT/PUqshFL2+DB7En69+4dKlgZv3
J4ztj8kgEvs9KL54qp4lWJu9SvGyW7uImjmkSM2icbKo4qWSBQ5dWIlYX00tQjQp
3bYVMQzw08qtBS0sk8bn5w5d+AiczpYcz0duaHlZF9PwLD8WVo32dHvLk5RIENQF
e7cTVdgG6Kj3tPx8as9bxsgYUGcQdzWR+AChuvqIfPQ4+CxIE56uyqmciXsSLXMK
KeQ4mE09hKcFB13c0gnW111ZwyN2uZqLgKptThR6HleMIDKccthooSUamV5KAqos
NmiVWqUnWZr6Gqfk8iCE7GupPc0zuW+vNOAXpaVVTk+F/gil1uDLm/oYFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAGy6ydjCq6qU1VNva86K1zc3+9TMB8GA1UdIwQY
MBaAFJb26naOvJ3cBo9Wl9/XXK7deuEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHZicWRvNjhuZHdHajFhWDM5ZGNydDE2NFFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83YmFhMWMtOGRhMS00ZjgwLWJhYmIt
YjRiZmMyOWU3MWEzLzEvbHZicWRvNjhuZHdHajFhWDM5ZGNydDE2NFFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS83YmFhMWMtOGRhMS00ZjgwLWJhYmItYjRiZmMyOWU3MWEz
LzEvbHZicWRvNjhuZHdHajFhWDM5ZGNydDE2NFFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU1DTfRG5
fXdlU4ZF2oifjbGRN78c2QwsdreZ2f6vuVpISjejbAzEAuW2BKw+83XoyM74vPQH
iwi4RfpmkcUUuCMMDoxMlTIETTAsFF+ogmzdSOiF04ZNMbB9PYLpZEidD92o9tTB
b+HFgbLGPQoDfQP4Z8rfVe01uCIPqKjyfNgWjyJa3HKFx4DFY6dQKNJE1UbS9MOv
pNeLgrc936YPM4XxBfAJ/G5O+wR1bNDF3DiPwf6l3Q06BXZHI8DRKH2U9Hyq4olI
QnbPXUVj7qoqAHB+5StszUSbROwG5xmYRkTq4uTaxSPFVV7G7T1Cb/mkufwNCkia
t6fGSZXzKd9i5A==
-----END CERTIFICATE-----
Generated at Mon May 12 20:28:35 2025 by rpki-client