Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
File: LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft (raw, json)
Hash identifier: yy3ZXyiznLgCN+s7SK/pXxiqc87QHU2sVUsorOE+2II=
Subject key identifier: 03:CE:C1:C8:C2:DE:53:DB:F7:46:91:E2:EE:38:6F:C2:D9:2C:D5:9C
Authority key identifier: 2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
Certificate issuer: /CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Certificate serial: 0196B8FF41E00323C7D31BA0D19D4DC9D6A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
Manifest number: 045D
Signing time: Sat 10 May 2025 07:00:58 +0000
Manifest this update: Sat 10 May 2025 07:00:58 +0000
Manifest next update: Sun 11 May 2025 07:00:58 +0000
Files and hashes: 1: 9ByEybCE9CIwuPyP4jebxsupnkU.roa (hash: 73w7qQJmQNDu4a4ozvHyeU3dD07eczn+JHcfhr0D3rk=)
2: LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl (hash: rgwCJzgn55hOot3jdwTm1lt9GSPb81jgMlvPSmCtbKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:ff:41:e0:03:23:c7:d3:1b:a0:d1:9d:4d:c9:d6:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Validity
Not Before: May 10 07:00:58 2025 GMT
Not After : May 11 07:00:58 2025 GMT
Subject: CN=03cec1c8c2de53dbf74691e2ee386fc2d92cd59c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:3d:79:9d:48:c3:85:dd:d5:b8:b6:d2:80:39:
f1:cd:58:69:68:1f:6b:bd:91:ce:fb:d3:c8:24:aa:
f9:48:06:cd:89:d0:85:77:e9:1c:c4:47:51:4a:6e:
33:f2:6d:5c:b3:17:00:43:8f:7a:20:ae:db:32:84:
23:f5:82:99:89:7c:de:10:66:7c:fe:0b:12:6c:71:
fc:20:41:56:de:ac:f2:13:ec:e3:05:11:ff:b8:ee:
b7:2c:e0:ff:d2:0b:6d:73:08:85:f4:c7:45:7e:ec:
16:e2:23:88:23:cd:07:0b:7e:1d:be:40:82:c4:09:
bf:e9:45:60:f3:ac:37:c8:c8:54:9b:a7:dc:7a:a4:
fe:86:71:19:00:65:47:b4:5f:6b:8d:e4:28:e0:59:
69:e1:f7:d6:b2:62:32:6b:bf:d7:7d:58:7c:8b:0d:
1f:2d:04:c5:95:77:40:5c:cf:fb:56:32:8a:15:8c:
58:f4:5f:53:69:4f:9e:74:4b:90:fc:21:44:e3:a7:
a7:28:3b:50:f9:43:78:e9:ac:a9:26:30:ca:7e:19:
e5:5d:ef:49:c6:3b:b0:c8:2c:99:57:b4:53:58:56:
8e:bd:3c:1a:a0:f2:8e:3f:2c:00:6f:13:c3:a2:b2:
2d:cd:7d:a7:f4:0a:45:26:0f:73:9e:07:b4:b1:7c:
f9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CE:C1:C8:C2:DE:53:DB:F7:46:91:E2:EE:38:6F:C2:D9:2C:D5:9C
X509v3 Authority Key Identifier:
keyid:2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:26:e5:45:d9:aa:93:c5:fb:95:f0:0c:73:41:da:3a:cb:a0:
71:9d:4d:83:f7:79:3c:3c:a3:75:e0:c5:e3:5d:a9:61:9e:90:
35:0a:3c:e9:99:7a:27:9d:fb:3a:f3:bd:cd:28:76:88:6e:15:
46:99:8b:96:55:5e:c7:26:0f:06:60:13:ea:19:19:b5:b8:b6:
a9:c0:d5:db:50:69:fb:6c:fd:d0:56:3f:45:d6:ae:06:73:4d:
a0:fc:13:37:8e:63:a2:9a:49:fe:90:28:9c:46:ae:e8:ae:c9:
c2:bc:d8:4e:7c:5c:3a:57:3c:c8:d1:b5:45:ff:a1:e4:eb:6c:
a0:4f:85:37:f8:3a:0a:09:74:06:ec:af:52:77:76:17:7f:11:
76:7e:16:d3:fb:fc:ee:88:62:d5:f2:1e:e0:86:af:a0:f2:6f:
b1:0b:20:a5:57:a3:88:d9:11:e9:2a:de:31:2d:96:ea:a1:cf:
a1:89:4b:43:25:b8:fb:4d:32:c3:b4:23:84:0e:71:77:3f:b7:
e3:18:fd:fb:bb:6f:1a:68:14:dd:39:db:88:44:fc:32:58:1a:
23:8a:ba:3c:67:76:a6:26:e7:c3:4c:10:3a:4a:3e:76:4c:07:
16:8a:c7:eb:df:26:61:51:d6:58:aa:79:40:a9:07:29:f8:60:
fa:65:2a:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4/0HgAyPH0xug0Z1NydamMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMzQ4N2RhNjVlODVlODdiZGFjNGY1ZjY3NThkYzZjMjBl
Zjk3NjMwHhcNMjUwNTEwMDcwMDU4WhcNMjUwNTExMDcwMDU4WjAzMTEwLwYDVQQD
EygwM2NlYzFjOGMyZGU1M2RiZjc0NjkxZTJlZTM4NmZjMmQ5MmNkNTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7j15nUjDhd3VuLbSgDnxzVhpaB9r
vZHO+9PIJKr5SAbNidCFd+kcxEdRSm4z8m1csxcAQ496IK7bMoQj9YKZiXzeEGZ8
/gsSbHH8IEFW3qzyE+zjBRH/uO63LOD/0gttcwiF9MdFfuwW4iOII80HC34dvkCC
xAm/6UVg86w3yMhUm6fceqT+hnEZAGVHtF9rjeQo4Flp4ffWsmIya7/XfVh8iw0f
LQTFlXdAXM/7VjKKFYxY9F9TaU+edEuQ/CFE46enKDtQ+UN46aypJjDKfhnlXe9J
xjuwyCyZV7RTWFaOvTwaoPKOPywAbxPDorItzX2n9ApFJg9znge0sXz53QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAPOwcjC3lPb90aR4u44b8LZLNWcMB8GA1UdIwQY
MBaAFC40h9pl6F6HvaxPX2dY3Gwg75djMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGpTSDJtWG9Yb2U5ckU5ZloxamNiQ0R2bDJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8yZmUwOTQtMzczYy00NGY2LTkzZTAt
ZDBhZWNkNWQ3MDQyLzEvTGpTSDJtWG9Yb2U5ckU5ZloxamNiQ0R2bDJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8yZmUwOTQtMzczYy00NGY2LTkzZTAtZDBhZWNkNWQ3MDQy
LzEvTGpTSDJtWG9Yb2U5ckU5ZloxamNiQ0R2bDJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASCblRdmq
k8X7lfAMc0HaOsugcZ1Ng/d5PDyjdeDF412pYZ6QNQo86Zl6J537OvO9zSh2iG4V
RpmLllVexyYPBmAT6hkZtbi2qcDV21Bp+2z90FY/RdauBnNNoPwTN45joppJ/pAo
nEau6K7JwrzYTnxcOlc8yNG1Rf+h5OtsoE+FN/g6Cgl0BuyvUnd2F38Rdn4W0/v8
7ohi1fIe4IavoPJvsQsgpVejiNkR6SreMS2W6qHPoYlLQyW4+00yw7QjhA5xdz+3
4xj9+7tvGmgU3TnbiET8MlgaI4q6PGd2pibnw0wQOko+dkwHForH698mYVHWWKp5
QKkHKfhg+mUq0w==
-----END CERTIFICATE-----
Generated at Sat May 10 14:40:18 2025 by rpki-client