Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
File: lkM1Vj2bb54-KN42jYWYi8FBNx4.mft (raw, json)
Hash identifier: uc5BX2wzE2ryVTA6yUsG7dbgEGDjQQc6pF25tkaCkI8=
Subject key identifier: 22:CD:37:C7:46:64:24:71:A1:0B:05:05:9A:39:A0:22:72:A9:14:23
Authority key identifier: 96:43:35:56:3D:9B:6F:9E:3E:28:DE:36:8D:85:98:8B:C1:41:37:1E
Certificate issuer: /CN=964335563d9b6f9e3e28de368d85988bc141371e
Certificate serial: 0196C5A7F08FFAA4875FF427ABCF8C7C6C4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
Manifest number: 1380
Signing time: Mon 12 May 2025 18:00:39 +0000
Manifest this update: Mon 12 May 2025 18:00:39 +0000
Manifest next update: Tue 13 May 2025 18:00:39 +0000
Files and hashes: 1: J5AX7Ye4ZjtlJFShqhgdOlDreek.roa (hash: A32lKX9VWGahKxeBlyvikvJD4hfkRzNyARSGOop4E+w=)
2: i4xZsK__v3rFAdp2I4QUrGdulkA.roa (hash: 7y/IXk7zUN3UVxHCXKQjh1FoBdjvSc3K/G/mRr6+6Gg=)
3: lkM1Vj2bb54-KN42jYWYi8FBNx4.crl (hash: tUAdDiIIVBEpCbK24RL7GZ0m+NWpxe1Xa1VrPQWPIrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 18:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:a7:f0:8f:fa:a4:87:5f:f4:27:ab:cf:8c:7c:6c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=964335563d9b6f9e3e28de368d85988bc141371e
Validity
Not Before: May 12 18:00:39 2025 GMT
Not After : May 13 18:00:39 2025 GMT
Subject: CN=22cd37c746642471a10b05059a39a02272a91423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:07:fe:9c:c4:76:64:ad:b0:83:96:81:4b:a9:
1d:97:7c:32:87:2a:ad:a6:e9:be:c8:de:28:1b:d6:
3a:24:d0:04:6f:92:b6:e3:13:41:61:3b:d0:f5:d2:
63:2d:f1:f3:75:e9:91:f8:3a:12:41:c5:3f:01:a4:
59:fb:9e:54:c8:62:2d:b9:96:ae:43:87:d7:f9:9a:
69:a0:57:11:a1:2e:62:17:3f:6a:03:a0:ef:70:78:
37:e8:df:0b:16:01:3f:c1:f0:62:e4:3c:63:ba:2d:
b7:01:fa:0f:d1:5f:01:5b:6a:cf:6d:82:6b:8d:ee:
b0:93:d7:32:bd:48:8d:7e:cc:ae:d5:8d:0f:c4:e4:
e3:91:87:bd:ba:e2:9a:6a:a6:df:a4:8d:f3:42:67:
27:30:13:18:03:bb:a4:fa:6a:d6:1e:31:cd:2b:c7:
9a:47:ca:bd:91:12:96:f0:12:c5:2b:09:a2:dc:87:
47:91:52:d1:2b:a7:30:74:2f:e3:0c:be:e3:45:fc:
36:63:ee:c5:6a:e4:cd:a3:95:a4:ab:5d:12:0c:06:
9a:68:d0:e5:14:22:e8:e2:75:48:37:10:5c:4d:3c:
9b:6d:9f:33:ea:74:27:c8:f1:ad:95:55:55:05:64:
4a:b1:b5:dd:a7:b2:8f:ab:f2:d9:47:2d:bc:0e:fd:
01:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:CD:37:C7:46:64:24:71:A1:0B:05:05:9A:39:A0:22:72:A9:14:23
X509v3 Authority Key Identifier:
keyid:96:43:35:56:3D:9B:6F:9E:3E:28:DE:36:8D:85:98:8B:C1:41:37:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lkM1Vj2bb54-KN42jYWYi8FBNx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/186a93-8e93-4652-9289-7ed51ca5af51/1/lkM1Vj2bb54-KN42jYWYi8FBNx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:75:13:22:5e:b4:84:ce:93:9d:58:a5:de:b1:1a:13:ef:7c:
41:14:34:9f:7d:f4:e3:b9:a5:36:ff:54:e8:69:5d:2f:a1:99:
47:9f:99:63:20:de:20:28:83:75:dc:2a:f6:b1:3f:71:70:ce:
82:de:6f:ef:29:4c:b4:1e:f3:62:f6:89:28:42:9e:d9:91:89:
43:02:17:27:d7:85:e7:33:8c:e5:91:ff:af:0d:93:0e:b0:d0:
9a:fb:01:16:9c:fb:c2:8b:2a:e5:66:49:bd:b6:b8:3a:64:f9:
07:0a:dd:6e:02:c6:6a:bf:b5:c3:0f:e0:00:bb:e0:09:13:c8:
8c:c1:4a:81:c2:bf:3e:5a:e2:b4:6a:f3:1e:10:f2:0e:2a:c7:
1c:34:d6:9f:19:53:ae:af:35:cf:f8:9a:08:74:eb:ea:22:e7:
8d:f6:99:9b:db:32:b5:9e:77:f7:40:cf:78:33:d9:b7:1a:db:
6e:fd:5d:18:e7:3c:98:d3:2c:a0:02:c3:c2:e9:32:a1:2d:4f:
f4:28:5b:b0:32:0e:89:c4:fe:5a:37:00:42:f1:35:7e:ee:db:
ae:9a:14:d0:22:6c:f3:55:27:c6:4f:a1:e0:72:f4:d5:d9:be:
e9:f0:78:59:b0:60:c4:fd:a5:96:41:55:e1:49:6c:07:48:67:
f9:c8:97:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbFp/CP+qSHX/Qnq8+MfGxNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2NDMzNTU2M2Q5YjZmOWUzZTI4ZGUzNjhkODU5ODhiYzE0
MTM3MWUwHhcNMjUwNTEyMTgwMDM5WhcNMjUwNTEzMTgwMDM5WjAzMTEwLwYDVQQD
EygyMmNkMzdjNzQ2NjQyNDcxYTEwYjA1MDU5YTM5YTAyMjcyYTkxNDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAf+nMR2ZK2wg5aBS6kdl3wyhyqt
pum+yN4oG9Y6JNAEb5K24xNBYTvQ9dJjLfHzdemR+DoSQcU/AaRZ+55UyGItuZau
Q4fX+ZppoFcRoS5iFz9qA6DvcHg36N8LFgE/wfBi5Dxjui23AfoP0V8BW2rPbYJr
je6wk9cyvUiNfsyu1Y0PxOTjkYe9uuKaaqbfpI3zQmcnMBMYA7uk+mrWHjHNK8ea
R8q9kRKW8BLFKwmi3IdHkVLRK6cwdC/jDL7jRfw2Y+7FauTNo5Wkq10SDAaaaNDl
FCLo4nVINxBcTTybbZ8z6nQnyPGtlVVVBWRKsbXdp7KPq/LZRy28Dv0BwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLNN8dGZCRxoQsFBZo5oCJyqRQjMB8GA1UdIwQY
MBaAFJZDNVY9m2+ePijeNo2FmIvBQTceMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGtNMVZqMmJiNTQtS040MmpZV1lpOEZCTng0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8xODZhOTMtOGU5My00NjUyLTkyODkt
N2VkNTFjYTVhZjUxLzEvbGtNMVZqMmJiNTQtS040MmpZV1lpOEZCTng0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC8xODZhOTMtOGU5My00NjUyLTkyODktN2VkNTFjYTVhZjUx
LzEvbGtNMVZqMmJiNTQtS040MmpZV1lpOEZCTng0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj3UTIl60
hM6TnVil3rEaE+98QRQ0n33047mlNv9U6GldL6GZR5+ZYyDeICiDddwq9rE/cXDO
gt5v7ylMtB7zYvaJKEKe2ZGJQwIXJ9eF5zOM5ZH/rw2TDrDQmvsBFpz7wosq5WZJ
vba4OmT5BwrdbgLGar+1ww/gALvgCRPIjMFKgcK/PlritGrzHhDyDirHHDTWnxlT
rq81z/iaCHTr6iLnjfaZm9sytZ5390DPeDPZtxrbbv1dGOc8mNMsoALDwukyoS1P
9ChbsDIOicT+WjcAQvE1fu7brpoU0CJs81Unxk+h4HL01dm+6fB4WbBgxP2llkFV
4UlsB0hn+ciXlg==
-----END CERTIFICATE-----
Generated at Tue May 13 02:26:25 2025 by rpki-client