Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b1b128-4f10-486e-a1ee-952f6fc02672/1/ltTArxW-ONL8XjD-NFdHXTS3g5o.mft
File: ltTArxW-ONL8XjD-NFdHXTS3g5o.mft (raw, json)
Hash identifier: /0fm0yMpeKQgvVyRHJOtdC7q+U/d6N3E+UhMyEAYydM=
Subject key identifier: 1A:05:40:83:4E:70:27:EA:49:11:81:C1:85:60:88:17:41:1E:0B:9E
Authority key identifier: 96:D4:C0:AF:15:BE:38:D2:FC:5E:30:FE:34:57:47:5D:34:B7:83:9A
Certificate issuer: /CN=96d4c0af15be38d2fc5e30fe3457475d34b7839a
Certificate serial: 0196C34BE412A391325DE7192ADD49620C54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltTArxW-ONL8XjD-NFdHXTS3g5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b1b128-4f10-486e-a1ee-952f6fc02672/1/ltTArxW-ONL8XjD-NFdHXTS3g5o.mft
Manifest number: 11A7
Signing time: Mon 12 May 2025 07:00:52 +0000
Manifest this update: Mon 12 May 2025 07:00:52 +0000
Manifest next update: Tue 13 May 2025 07:00:52 +0000
Files and hashes: 1: ltTArxW-ONL8XjD-NFdHXTS3g5o.crl (hash: ibH1OfuxmJVVzzkZobP+2LWO7sxgI5a27B4VFNv1KQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b1b128-4f10-486e-a1ee-952f6fc02672/1/ltTArxW-ONL8XjD-NFdHXTS3g5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b1b128-4f10-486e-a1ee-952f6fc02672/1/ltTArxW-ONL8XjD-NFdHXTS3g5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ltTArxW-ONL8XjD-NFdHXTS3g5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4b:e4:12:a3:91:32:5d:e7:19:2a:dd:49:62:0c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d4c0af15be38d2fc5e30fe3457475d34b7839a
Validity
Not Before: May 12 07:00:52 2025 GMT
Not After : May 13 07:00:52 2025 GMT
Subject: CN=1a0540834e7027ea491181c185608817411e0b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:08:4b:aa:fa:e8:6c:96:73:74:5a:d6:11:f9:
34:30:ed:3a:53:4f:b0:62:b0:79:a4:85:24:71:84:
b7:e5:31:e7:17:77:ac:35:fc:05:a2:38:da:9e:b2:
f8:1c:ed:e4:5e:30:b2:4f:eb:a1:9f:4c:8e:ab:2f:
b0:91:f8:ba:09:dc:6e:16:c5:81:2a:67:1c:3f:0b:
83:ee:a3:15:14:84:6f:53:81:d9:1d:ba:96:d8:60:
7d:11:7e:54:cb:67:9f:51:1a:19:27:fc:9a:b9:50:
49:36:3c:cf:2d:0b:fe:c9:5f:38:40:fa:98:8b:0c:
97:e6:02:5e:d3:58:d2:0c:d8:7c:84:6f:53:1c:6e:
ed:3a:98:2c:e2:99:24:0c:67:b9:71:18:72:40:51:
20:ef:8d:f8:89:46:ce:36:9a:41:2b:98:b6:fd:76:
52:54:ff:69:15:32:4c:1a:ac:5d:ea:c5:b0:1c:50:
d3:35:0e:a4:f9:37:5a:e3:75:14:be:be:58:e0:6f:
e2:93:b3:ff:e3:fa:4a:74:2a:22:f8:31:77:c9:72:
fe:04:9c:ec:f1:dc:30:ce:38:3f:e9:20:2a:57:ec:
d6:e6:f5:59:8c:8a:2d:b8:3b:2f:80:1f:4e:cb:94:
3c:00:04:5a:25:86:02:ec:f5:fa:86:33:fe:78:80:
51:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:05:40:83:4E:70:27:EA:49:11:81:C1:85:60:88:17:41:1E:0B:9E
X509v3 Authority Key Identifier:
keyid:96:D4:C0:AF:15:BE:38:D2:FC:5E:30:FE:34:57:47:5D:34:B7:83:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltTArxW-ONL8XjD-NFdHXTS3g5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b1b128-4f10-486e-a1ee-952f6fc02672/1/ltTArxW-ONL8XjD-NFdHXTS3g5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b1b128-4f10-486e-a1ee-952f6fc02672/1/ltTArxW-ONL8XjD-NFdHXTS3g5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:4d:24:ee:6a:f2:1a:92:79:27:df:d5:ad:ef:c2:71:91:d7:
06:51:01:d0:50:69:be:5c:ee:ac:f1:63:fc:4e:9d:51:2a:2d:
07:52:b5:2c:b2:10:20:8b:65:66:aa:2e:3e:69:34:ef:91:9e:
dc:fb:af:5a:92:80:49:4c:ed:c3:07:95:0c:3f:13:9c:5f:8a:
27:23:d2:22:b6:9c:28:be:8e:04:54:41:5c:fb:0c:3f:5f:e0:
81:ea:ef:9d:d4:8b:38:5e:45:21:19:5c:00:18:dc:27:6b:72:
7d:fa:aa:dc:0b:93:91:b2:19:1b:6f:1a:ad:98:5d:16:98:8c:
89:58:b0:b3:27:8f:6b:7c:30:54:1b:75:f4:fc:a6:17:7d:2d:
1e:be:07:04:3a:4a:fa:83:74:12:ed:10:54:6f:e8:24:65:40:
22:30:a7:55:5c:f1:af:fb:81:a2:05:a4:c1:40:01:8c:4a:5d:
56:55:08:90:b7:0d:67:ac:94:79:10:63:5e:cf:d6:89:8f:6c:
fe:dc:09:83:31:e9:17:ab:ac:64:89:b2:8d:9d:b3:98:be:26:
a4:58:46:ea:d6:dd:ce:f5:cb:e8:b7:7c:a4:85:73:46:fc:66:
0a:ab:29:51:1b:4a:37:a1:69:fb:c2:34:61:63:e1:99:dd:2c:
b9:93:67:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbDS+QSo5EyXecZKt1JYgxUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZDRjMGFmMTViZTM4ZDJmYzVlMzBmZTM0NTc0NzVkMzRi
NzgzOWEwHhcNMjUwNTEyMDcwMDUyWhcNMjUwNTEzMDcwMDUyWjAzMTEwLwYDVQQD
EygxYTA1NDA4MzRlNzAyN2VhNDkxMTgxYzE4NTYwODgxNzQxMWUwYjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwhLqvrobJZzdFrWEfk0MO06U0+w
YrB5pIUkcYS35THnF3esNfwFojjanrL4HO3kXjCyT+uhn0yOqy+wkfi6CdxuFsWB
KmccPwuD7qMVFIRvU4HZHbqW2GB9EX5Uy2efURoZJ/yauVBJNjzPLQv+yV84QPqY
iwyX5gJe01jSDNh8hG9THG7tOpgs4pkkDGe5cRhyQFEg7434iUbONppBK5i2/XZS
VP9pFTJMGqxd6sWwHFDTNQ6k+Tda43UUvr5Y4G/ik7P/4/pKdCoi+DF3yXL+BJzs
8dwwzjg/6SAqV+zW5vVZjIotuDsvgB9Oy5Q8AARaJYYC7PX6hjP+eIBRUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBoFQINOcCfqSRGBwYVgiBdBHgueMB8GA1UdIwQY
MBaAFJbUwK8VvjjS/F4w/jRXR100t4OaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHRUQXJ4Vy1PTkw4WGpELU5GZEhYVFMzZzVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iMWIxMjgtNGYxMC00ODZlLWExZWUt
OTUyZjZmYzAyNjcyLzEvbHRUQXJ4Vy1PTkw4WGpELU5GZEhYVFMzZzVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9iMWIxMjgtNGYxMC00ODZlLWExZWUtOTUyZjZmYzAyNjcy
LzEvbHRUQXJ4Vy1PTkw4WGpELU5GZEhYVFMzZzVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFE0k7mry
GpJ5J9/Vre/CcZHXBlEB0FBpvlzurPFj/E6dUSotB1K1LLIQIItlZqouPmk075Ge
3PuvWpKASUztwweVDD8TnF+KJyPSIracKL6OBFRBXPsMP1/ggervndSLOF5FIRlc
ABjcJ2tyffqq3AuTkbIZG28arZhdFpiMiViwsyePa3wwVBt19PymF30tHr4HBDpK
+oN0Eu0QVG/oJGVAIjCnVVzxr/uBogWkwUABjEpdVlUIkLcNZ6yUeRBjXs/WiY9s
/twJgzHpF6usZImyjZ2zmL4mpFhG6tbdzvXL6Ld8pIVzRvxmCqspURtKN6Fp+8I0
YWPhmd0suZNnNQ==
-----END CERTIFICATE-----
Generated at Mon May 12 10:37:29 2025 by rpki-client