Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
File: LNpfA-r1E6d_LsIN5bsWcsXSeas.mft (raw, json)
Hash identifier: FfLH0iRjopFXcMqJkQZpFjiAu7xoPxziumO2PuQ0rtc=
Subject key identifier: C4:72:CE:7E:99:56:87:5B:50:95:86:DB:46:C0:B8:E3:82:16:51:5B
Authority key identifier: 2C:DA:5F:03:EA:F5:13:A7:7F:2E:C2:0D:E5:BB:16:72:C5:D2:79:AB
Certificate issuer: /CN=2cda5f03eaf513a77f2ec20de5bb1672c5d279ab
Certificate serial: 0196A164358BB72BCCAC7E6BF938788411BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 17:00:21 +0000
Manifest this update: Mon 05 May 2025 17:00:21 +0000
Manifest next update: Tue 06 May 2025 17:00:21 +0000
Files and hashes: 1: I_El3VD2zizuoyNdnUn9kOdcLek.roa (hash: 74aqpCJ0dpEabBMkIS/h3jijqMv/0y3rfXL3oZ/vRAo=)
2: LNpfA-r1E6d_LsIN5bsWcsXSeas.crl (hash: VvpQwBW2QVGN6D8D2fn34x4aSv8KiWprJWmKGRll9ZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:64:35:8b:b7:2b:cc:ac:7e:6b:f9:38:78:84:11:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cda5f03eaf513a77f2ec20de5bb1672c5d279ab
Validity
Not Before: May 5 17:00:21 2025 GMT
Not After : May 6 17:00:21 2025 GMT
Subject: CN=c472ce7e9956875b509586db46c0b8e38216515b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:18:79:1f:de:e1:93:07:23:f4:65:53:da:ca:
19:b3:92:29:28:06:c5:c1:b5:e0:f3:c9:eb:4e:9b:
fb:9a:0c:db:6c:40:51:00:c9:9a:dc:9e:56:60:5f:
46:83:6d:f2:72:81:f4:f1:b5:18:d4:0e:41:79:5f:
32:49:88:f9:67:7f:a0:8c:0e:51:e7:ca:02:be:ea:
3b:85:f5:ad:7f:d0:25:72:6c:c5:88:96:d2:8a:eb:
37:f4:6e:9c:af:0c:41:4e:e6:0c:24:d0:68:91:bd:
db:9d:5f:4d:1d:3a:9c:31:d6:89:52:b8:0a:b2:a5:
9d:1e:18:2f:41:1d:82:78:9e:04:21:27:d4:d1:83:
eb:ce:69:de:a9:5a:bf:39:ae:7c:9f:2d:d2:97:36:
b8:5f:98:2c:e9:28:c8:69:27:7f:6a:39:13:75:83:
fb:32:15:e9:e6:5a:0c:0a:6a:8d:de:56:f7:43:e0:
d5:23:ca:c0:13:fd:2f:76:07:39:93:29:f1:22:21:
b9:83:d1:cd:a7:1d:a4:60:27:97:82:02:28:06:ea:
51:4d:6a:e2:f4:1d:fd:75:81:17:bc:dd:2b:5a:ea:
72:67:a1:9f:b0:f1:e9:9b:9a:3b:71:f0:76:27:a1:
09:20:06:ae:ca:82:03:93:a1:6c:9b:90:c5:b9:4b:
7d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:72:CE:7E:99:56:87:5B:50:95:86:DB:46:C0:B8:E3:82:16:51:5B
X509v3 Authority Key Identifier:
keyid:2C:DA:5F:03:EA:F5:13:A7:7F:2E:C2:0D:E5:BB:16:72:C5:D2:79:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNpfA-r1E6d_LsIN5bsWcsXSeas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3838c4-6e46-49a8-8c14-ae8b8d788700/1/LNpfA-r1E6d_LsIN5bsWcsXSeas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:67:55:5a:94:bb:3e:10:d8:5d:12:75:b4:19:26:af:e0:9e:
19:34:ce:43:b4:b7:90:16:2b:6f:a0:d0:1b:15:a4:ca:3c:10:
28:9f:db:d1:2c:ff:5a:67:5d:9b:53:8d:6e:02:8b:07:65:73:
e1:49:61:fa:71:da:63:79:6a:e8:df:05:a0:bd:97:5b:c7:6f:
fc:b4:c1:d9:9b:f0:be:21:e0:52:e9:43:a3:d7:91:9b:b1:0a:
c0:25:d5:90:31:48:5d:ac:da:61:9e:f9:4f:93:1f:c6:0d:ef:
23:5b:bb:bb:65:ef:9a:b0:51:d5:bf:c4:26:a3:00:b2:65:fd:
94:3b:d3:ce:c5:9e:f6:e3:fc:6c:82:31:8a:4f:5f:a4:7e:37:
fd:27:64:da:6b:74:2a:ab:68:4a:a5:16:31:1a:c2:cc:07:c3:
f8:5d:7d:c0:9d:65:32:9c:ba:bc:c3:11:56:79:6a:7e:1e:39:
16:94:00:bc:1d:3a:e0:d1:ae:03:f6:dc:f8:1a:49:41:9d:d0:
db:78:e0:7b:a6:3f:10:a4:b6:7f:23:60:8c:75:0b:27:07:6f:
cf:f5:22:53:bb:f6:df:37:e1:f4:57:64:21:4c:06:a8:f3:08:
c9:a3:ec:8d:05:56:a5:db:4a:f2:ec:1b:bb:61:d5:95:f1:af:
23:67:97:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZahZDWLtyvMrH5r+Th4hBG+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjZGE1ZjAzZWFmNTEzYTc3ZjJlYzIwZGU1YmIxNjcyYzVk
Mjc5YWIwHhcNMjUwNTA1MTcwMDIxWhcNMjUwNTA2MTcwMDIxWjAzMTEwLwYDVQQD
EyhjNDcyY2U3ZTk5NTY4NzViNTA5NTg2ZGI0NmMwYjhlMzgyMTY1MTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBh5H97hkwcj9GVT2soZs5IpKAbF
wbXg88nrTpv7mgzbbEBRAMma3J5WYF9Gg23ycoH08bUY1A5BeV8ySYj5Z3+gjA5R
58oCvuo7hfWtf9AlcmzFiJbSius39G6crwxBTuYMJNBokb3bnV9NHTqcMdaJUrgK
sqWdHhgvQR2CeJ4EISfU0YPrzmneqVq/Oa58ny3Slza4X5gs6SjIaSd/ajkTdYP7
MhXp5loMCmqN3lb3Q+DVI8rAE/0vdgc5kynxIiG5g9HNpx2kYCeXggIoBupRTWri
9B39dYEXvN0rWupyZ6GfsPHpm5o7cfB2J6EJIAauyoIDk6Fsm5DFuUt9lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMRyzn6ZVodbUJWG20bAuOOCFlFbMB8GA1UdIwQY
MBaAFCzaXwPq9ROnfy7CDeW7FnLF0nmrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTE5wZkEtcjFFNmRfTHNJTjVic1djc1hTZWFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8zODM4YzQtNmU0Ni00OWE4LThjMTQt
YWU4YjhkNzg4NzAwLzEvTE5wZkEtcjFFNmRfTHNJTjVic1djc1hTZWFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS8zODM4YzQtNmU0Ni00OWE4LThjMTQtYWU4YjhkNzg4NzAw
LzEvTE5wZkEtcjFFNmRfTHNJTjVic1djc1hTZWFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa2dVWpS7
PhDYXRJ1tBkmr+CeGTTOQ7S3kBYrb6DQGxWkyjwQKJ/b0Sz/Wmddm1ONbgKLB2Vz
4Ulh+nHaY3lq6N8FoL2XW8dv/LTB2ZvwviHgUulDo9eRm7EKwCXVkDFIXazaYZ75
T5Mfxg3vI1u7u2XvmrBR1b/EJqMAsmX9lDvTzsWe9uP8bIIxik9fpH43/Sdk2mt0
KqtoSqUWMRrCzAfD+F19wJ1lMpy6vMMRVnlqfh45FpQAvB064NGuA/bc+BpJQZ3Q
23jge6Y/EKS2fyNgjHULJwdvz/UiU7v23zfh9FdkIUwGqPMIyaPsjQVWpdtK8uwb
u2HVlfGvI2eXqw==
-----END CERTIFICATE-----
Generated at Mon May 5 19:14:08 2025 by rpki-client