Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
File: lEethLhLrsR9ViHi91Yj8-rxOWA.mft (raw, json)
Hash identifier: VUOvGRJVPKzMFUYLrWC0czKKvVbNmwrQHfX21UdysAo=
Subject key identifier: C2:82:07:3B:F5:DB:0B:EF:4B:FF:E6:EE:B7:91:3A:25:36:DB:1F:32
Authority key identifier: 94:47:AD:84:B8:4B:AE:C4:7D:56:21:E2:F7:56:23:F3:EA:F1:39:60
Certificate issuer: /CN=9447ad84b84baec47d5621e2f75623f3eaf13960
Certificate serial: 0196BE936C61CB5DF222862FC9912D6AEE4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
Manifest number: 010D
Signing time: Sun 11 May 2025 09:00:54 +0000
Manifest this update: Sun 11 May 2025 09:00:54 +0000
Manifest next update: Mon 12 May 2025 09:00:54 +0000
Files and hashes: 1: OvZQb1hcjOkIMnQrBwzGm-WLCpQ.roa (hash: AP7pBk7gh//un0koiUryrNu346ceJkk+whaQUXPWQDs=)
2: UWt_XRc9JV9FMCdsAcTPRdiOUNo.roa (hash: cl2cUuSvySYimCpyWJxO/6NE4GT3NHF6FS5npGysPcU=)
3: lEethLhLrsR9ViHi91Yj8-rxOWA.crl (hash: SBGYRN2wKEsts1QouvOKUl0Z8xTjnKMK0DgDdABrE9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:93:6c:61:cb:5d:f2:22:86:2f:c9:91:2d:6a:ee:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9447ad84b84baec47d5621e2f75623f3eaf13960
Validity
Not Before: May 11 09:00:54 2025 GMT
Not After : May 12 09:00:54 2025 GMT
Subject: CN=c282073bf5db0bef4bffe6eeb7913a2536db1f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:39:0d:1b:4c:f4:bd:65:c9:bb:f1:85:d4:d0:
69:f6:a4:26:cc:79:9d:85:58:9d:28:b7:87:41:36:
5c:86:46:d8:6e:a4:3b:4d:e1:e9:6c:e0:ca:61:fc:
b8:09:44:6c:fd:1e:84:d7:f5:de:e6:5e:45:5a:fe:
00:cb:fc:34:e9:4f:3e:77:17:ba:d2:4a:43:e4:94:
18:88:58:7f:28:f4:ab:c2:31:9b:c5:51:b2:8a:13:
6b:f0:30:9c:de:5f:a6:ca:b1:d6:c7:3b:7c:24:ba:
b3:8e:b1:e4:63:a9:61:63:a8:da:58:63:38:d9:65:
65:15:4d:22:66:d2:5f:4b:ba:17:f0:89:59:20:94:
35:bd:5f:8f:2f:04:96:f4:fc:25:5b:01:ee:5f:6a:
77:ba:92:61:65:9f:35:a4:45:ac:86:a3:a8:a7:e7:
06:c9:81:07:8f:55:4a:ab:0e:1f:c4:b2:12:3d:60:
8e:f0:b3:ff:c0:60:80:23:9b:50:63:00:2e:bc:87:
59:c9:4c:31:e1:97:09:d1:e5:25:d6:17:d3:ad:00:
38:0f:ee:a2:ea:de:d4:d0:d0:14:3f:a7:81:44:4c:
6c:90:06:c6:e2:36:eb:f6:45:94:04:96:9f:27:a2:
8b:af:df:20:61:81:83:07:04:05:ea:c4:a4:0e:ca:
b1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:82:07:3B:F5:DB:0B:EF:4B:FF:E6:EE:B7:91:3A:25:36:DB:1F:32
X509v3 Authority Key Identifier:
keyid:94:47:AD:84:B8:4B:AE:C4:7D:56:21:E2:F7:56:23:F3:EA:F1:39:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:d7:8e:66:73:42:20:24:f2:0e:7a:78:54:db:be:7f:9b:da:
29:66:dc:c8:27:f1:cc:80:a1:89:5a:da:23:4e:c3:f8:14:bc:
a1:e6:a7:27:b6:a0:fc:6a:98:33:44:61:e9:19:1c:5f:76:99:
ca:68:68:28:85:9d:cb:e7:98:a3:6a:c1:a5:82:64:87:66:76:
86:04:26:e9:45:00:e5:ab:29:56:e2:36:2b:25:24:53:60:0f:
f9:99:af:72:94:4f:58:78:53:a2:93:e5:ab:cf:fe:0a:ef:1b:
63:dd:de:d9:31:4c:06:30:23:29:24:5e:aa:66:22:0b:17:5d:
6c:99:ed:42:50:5f:ca:9b:0b:96:48:d6:4e:f0:62:4c:cd:9a:
a4:c1:01:f8:d5:29:57:ac:a3:a2:1f:a7:a8:e8:5c:d5:36:0c:
67:28:e9:b7:24:f0:58:f2:64:b6:2e:c6:b3:80:69:e9:85:31:
cd:71:8a:54:4b:07:4a:09:93:70:23:37:24:b4:d5:e9:ba:ef:
44:32:9e:5c:d2:a7:7b:2a:86:99:04:a5:c1:f3:79:d6:9d:fb:
30:c8:c8:b1:73:d5:ac:f8:d2:05:28:4c:71:ed:77:fc:c9:3e:
5f:85:f7:53:3b:23:dc:9d:a0:5a:d6:59:77:ad:04:16:d1:17:
d4:52:16:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa+k2xhy13yIoYvyZEtau5MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NDdhZDg0Yjg0YmFlYzQ3ZDU2MjFlMmY3NTYyM2YzZWFm
MTM5NjAwHhcNMjUwNTExMDkwMDU0WhcNMjUwNTEyMDkwMDU0WjAzMTEwLwYDVQQD
EyhjMjgyMDczYmY1ZGIwYmVmNGJmZmU2ZWViNzkxM2EyNTM2ZGIxZjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jkNG0z0vWXJu/GF1NBp9qQmzHmd
hVidKLeHQTZchkbYbqQ7TeHpbODKYfy4CURs/R6E1/Xe5l5FWv4Ay/w06U8+dxe6
0kpD5JQYiFh/KPSrwjGbxVGyihNr8DCc3l+myrHWxzt8JLqzjrHkY6lhY6jaWGM4
2WVlFU0iZtJfS7oX8IlZIJQ1vV+PLwSW9PwlWwHuX2p3upJhZZ81pEWshqOop+cG
yYEHj1VKqw4fxLISPWCO8LP/wGCAI5tQYwAuvIdZyUwx4ZcJ0eUl1hfTrQA4D+6i
6t7U0NAUP6eBRExskAbG4jbr9kWUBJafJ6KLr98gYYGDBwQF6sSkDsqxtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMKCBzv12wvvS//m7reROiU22x8yMB8GA1UdIwQY
MBaAFJRHrYS4S67EfVYh4vdWI/Pq8TlgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEVldGhMaExyc1I5VmlIaTkxWWo4LXJ4T1dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8yMzhjNTYtYzI1ZS00ZmQ2LWI5MTYt
NWIzMThjMzQ5OWZiLzEvbEVldGhMaExyc1I5VmlIaTkxWWo4LXJ4T1dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS8yMzhjNTYtYzI1ZS00ZmQ2LWI5MTYtNWIzMThjMzQ5OWZi
LzEvbEVldGhMaExyc1I5VmlIaTkxWWo4LXJ4T1dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANNeOZnNC
ICTyDnp4VNu+f5vaKWbcyCfxzIChiVraI07D+BS8oeanJ7ag/GqYM0Rh6RkcX3aZ
ymhoKIWdy+eYo2rBpYJkh2Z2hgQm6UUA5aspVuI2KyUkU2AP+ZmvcpRPWHhTopPl
q8/+Cu8bY93e2TFMBjAjKSReqmYiCxddbJntQlBfypsLlkjWTvBiTM2apMEB+NUp
V6yjoh+nqOhc1TYMZyjptyTwWPJkti7Gs4Bp6YUxzXGKVEsHSgmTcCM3JLTV6brv
RDKeXNKneyqGmQSlwfN51p37MMjIsXPVrPjSBShMce13/Mk+X4X3Uzsj3J2gWtZZ
d60EFtEX1FIWPw==
-----END CERTIFICATE-----
Generated at Sun May 11 15:17:26 2025 by rpki-client