Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
File: LWmLr5_z7uvmYoSIn79onU5oPIE.mft (raw, json)
Hash identifier: Nfn7nv+cTbPGMFqlZGdPSvTXXPgXp3oYkzyexjk6zpM=
Subject key identifier: AC:73:49:7C:ED:95:26:8B:6F:80:D0:AC:F9:82:6B:CC:56:D0:DB:B1
Authority key identifier: 2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81
Certificate issuer: /CN=2d698baf9ff3eeebe66284889fbf689d4e683c81
Certificate serial: 0196A01AB157514F4E06D3BEAA808A226EF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
Manifest number: 0DAE
Signing time: Mon 05 May 2025 11:00:25 +0000
Manifest this update: Mon 05 May 2025 11:00:25 +0000
Manifest next update: Tue 06 May 2025 11:00:25 +0000
Files and hashes: 1: LWmLr5_z7uvmYoSIn79onU5oPIE.crl (hash: U/t93RY24wRK+2dQU+r4q4uY6mtOgLuUDKz1RHrhxuk=)
2: k4aTxBF_DmBio83fOwNHIHkeyiA.roa (hash: IVVbmDsKyhVLGaHbxiyIMsj1K/TNy+QiBpkicXXI0O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:1a:b1:57:51:4f:4e:06:d3:be:aa:80:8a:22:6e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d698baf9ff3eeebe66284889fbf689d4e683c81
Validity
Not Before: May 5 11:00:25 2025 GMT
Not After : May 6 11:00:25 2025 GMT
Subject: CN=ac73497ced95268b6f80d0acf9826bcc56d0dbb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:01:48:18:13:d3:24:04:5d:6f:58:8e:c6:07:
83:ce:18:77:c3:86:3f:8c:e1:66:ec:98:89:9b:95:
de:7d:0c:e5:5a:d7:fc:ac:c6:2c:b6:bd:d0:a7:56:
b5:84:4b:e3:a8:ed:e6:a6:5c:84:63:a9:10:21:40:
de:11:70:93:c7:43:29:94:a7:df:73:55:d8:03:a4:
9c:fa:bb:92:e6:36:67:b8:9c:85:64:28:b2:17:be:
66:59:b5:a8:42:26:fb:71:d8:35:03:07:39:d1:bd:
ad:88:2a:78:36:e1:cf:58:24:dc:92:c6:c9:7a:d9:
31:2c:aa:5f:1e:b1:08:c3:ec:8a:d8:9a:63:79:cd:
24:b3:a8:26:05:ce:20:01:7d:ea:a9:79:48:34:8d:
06:75:71:ab:8b:67:a2:b3:1b:02:26:a9:56:38:18:
a2:3f:cf:ec:f2:d3:bb:ea:9b:dd:42:de:45:61:d8:
b6:61:f0:02:a1:78:b6:e3:a5:ea:b5:dd:29:3f:f1:
20:09:40:3a:99:53:bd:a3:d1:97:39:98:1b:d2:52:
d4:56:c9:06:10:27:fe:8f:ce:35:97:a6:4a:79:d7:
e5:4c:3f:c3:c9:de:2b:54:a9:07:ba:f2:64:df:4f:
47:78:26:b1:e5:3c:66:62:ae:08:f1:61:f4:8d:0e:
bc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:73:49:7C:ED:95:26:8B:6F:80:D0:AC:F9:82:6B:CC:56:D0:DB:B1
X509v3 Authority Key Identifier:
keyid:2D:69:8B:AF:9F:F3:EE:EB:E6:62:84:88:9F:BF:68:9D:4E:68:3C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWmLr5_z7uvmYoSIn79onU5oPIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/572a98-3bb7-4276-9d39-dff5a09a82cb/1/LWmLr5_z7uvmYoSIn79onU5oPIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:ce:35:66:44:dc:57:49:77:06:b2:90:54:db:af:93:e9:c4:
83:91:35:59:3c:a0:87:99:e9:f3:94:ca:89:8c:02:c9:75:d7:
d6:02:c0:c5:f3:b4:6a:ec:d5:8a:de:3f:d8:b5:06:0a:d9:bd:
24:54:4d:d2:7a:5e:05:48:7f:80:94:85:9b:4a:1e:80:74:d7:
49:22:8d:9a:eb:26:de:fd:83:e2:93:25:af:4b:b5:ff:59:12:
8d:6b:33:74:d3:93:a5:60:04:c6:5b:0b:21:2e:44:90:95:c9:
ce:36:11:00:db:6b:53:64:68:7e:3d:19:ed:41:b3:f0:70:ca:
a5:71:4b:cc:bd:63:40:86:f5:7b:6c:f2:94:55:94:3d:d6:cd:
6d:67:d9:ff:f4:7f:9f:21:10:e2:9d:f4:14:b8:59:b6:af:83:
53:08:56:fa:27:a3:d3:3a:47:de:f5:04:41:ca:0c:4d:57:cc:
a7:70:7e:ec:e5:1d:e3:28:dc:3d:69:c7:f5:1a:57:65:8f:f9:
44:54:74:5a:8a:28:f9:12:b1:e5:0d:98:32:f4:59:27:f0:26:
48:1a:3e:b5:a3:73:29:0b:a4:17:85:79:b8:c4:76:dd:3e:a8:
97:b8:2f:d3:92:b7:3c:f0:74:a1:c4:de:b7:ca:cc:79:93:21:
1f:7c:71:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZagGrFXUU9OBtO+qoCKIm7wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNjk4YmFmOWZmM2VlZWJlNjYyODQ4ODlmYmY2ODlkNGU2
ODNjODEwHhcNMjUwNTA1MTEwMDI1WhcNMjUwNTA2MTEwMDI1WjAzMTEwLwYDVQQD
EyhhYzczNDk3Y2VkOTUyNjhiNmY4MGQwYWNmOTgyNmJjYzU2ZDBkYmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAFIGBPTJARdb1iOxgeDzhh3w4Y/
jOFm7JiJm5XefQzlWtf8rMYstr3Qp1a1hEvjqO3mplyEY6kQIUDeEXCTx0MplKff
c1XYA6Sc+ruS5jZnuJyFZCiyF75mWbWoQib7cdg1Awc50b2tiCp4NuHPWCTcksbJ
etkxLKpfHrEIw+yK2Jpjec0ks6gmBc4gAX3qqXlINI0GdXGri2eisxsCJqlWOBii
P8/s8tO76pvdQt5FYdi2YfACoXi246Xqtd0pP/EgCUA6mVO9o9GXOZgb0lLUVskG
ECf+j841l6ZKedflTD/Dyd4rVKkHuvJk309HeCax5TxmYq4I8WH0jQ68cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKxzSXztlSaLb4DQrPmCa8xW0NuxMB8GA1UdIwQY
MBaAFC1pi6+f8+7r5mKEiJ+/aJ1OaDyBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFdtTHI1X3o3dXZtWW9TSW43OW9uVTVvUElFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS81NzJhOTgtM2JiNy00Mjc2LTlkMzkt
ZGZmNWEwOWE4MmNiLzEvTFdtTHI1X3o3dXZtWW9TSW43OW9uVTVvUElFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS81NzJhOTgtM2JiNy00Mjc2LTlkMzktZGZmNWEwOWE4MmNi
LzEvTFdtTHI1X3o3dXZtWW9TSW43OW9uVTVvUElFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAss41ZkTc
V0l3BrKQVNuvk+nEg5E1WTygh5np85TKiYwCyXXX1gLAxfO0auzVit4/2LUGCtm9
JFRN0npeBUh/gJSFm0oegHTXSSKNmusm3v2D4pMlr0u1/1kSjWszdNOTpWAExlsL
IS5EkJXJzjYRANtrU2Rofj0Z7UGz8HDKpXFLzL1jQIb1e2zylFWUPdbNbWfZ//R/
nyEQ4p30FLhZtq+DUwhW+iej0zpH3vUEQcoMTVfMp3B+7OUd4yjcPWnH9RpXZY/5
RFR0Wooo+RKx5Q2YMvRZJ/AmSBo+taNzKQukF4V5uMR23T6ol7gv05K3PPB0ocTe
t8rMeZMhH3xx4w==
-----END CERTIFICATE-----
Generated at Mon May 5 21:12:32 2025 by rpki-client