Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.mft
File: luWtU7_HOEDEJXEcAQRTVxBX3CM.mft (raw, json)
Hash identifier: mbwaBh9LmJFSgAe6HG4dT7zd/gXIP6SVCASdIYXJ9e8=
Subject key identifier: 3F:55:63:E2:91:FE:40:D8:AD:58:E6:BD:08:78:81:89:F9:25:01:41
Authority key identifier: 96:E5:AD:53:BF:C7:38:40:C4:25:71:1C:01:04:53:57:10:57:DC:23
Certificate issuer: /CN=96e5ad53bfc73840c425711c010453571057dc23
Certificate serial: 0196C571252977D37A7DDF77A7B7BB476287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/luWtU7_HOEDEJXEcAQRTVxBX3CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.mft
Manifest number: 0421
Signing time: Mon 12 May 2025 17:00:48 +0000
Manifest this update: Mon 12 May 2025 17:00:48 +0000
Manifest next update: Tue 13 May 2025 17:00:48 +0000
Files and hashes: 1: luWtU7_HOEDEJXEcAQRTVxBX3CM.crl (hash: 0qUMjyxF9oOoDeSCEwvoQJsrNYWgA+yEPT2ai6SPbsA=)
2: vu4Plg05nKKxO7-zyqD-UVbYxtw.roa (hash: VNGXTJm2qjOCVOfzY/Ol932aR/HbK5RQpSPZuClIe/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.mft
rsync://rpki.ripe.net/repository/DEFAULT/luWtU7_HOEDEJXEcAQRTVxBX3CM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:71:25:29:77:d3:7a:7d:df:77:a7:b7:bb:47:62:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96e5ad53bfc73840c425711c010453571057dc23
Validity
Not Before: May 12 17:00:48 2025 GMT
Not After : May 13 17:00:48 2025 GMT
Subject: CN=3f5563e291fe40d8ad58e6bd08788189f9250141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:47:6e:da:c0:89:32:42:e7:16:41:59:b8:38:
f5:ea:0c:44:f9:46:93:a5:86:2c:88:fe:a4:ac:2e:
83:bd:07:87:dd:8b:cd:61:1a:60:d7:78:f1:d1:cb:
cd:6f:a2:c1:a2:49:b8:07:b8:20:11:b0:71:d6:d9:
f2:85:15:0a:6d:08:60:82:57:87:08:06:c1:27:9a:
2e:9f:58:2d:a8:d0:69:b4:b9:dd:1a:e0:58:42:be:
42:b8:6b:42:ce:59:89:44:e4:0d:7a:7b:e8:1f:8a:
26:91:15:a0:22:86:e3:c1:b1:70:b1:07:d6:c1:a0:
71:49:d0:2c:db:d3:c3:83:9d:65:16:6a:62:50:cd:
80:34:0c:39:b2:bc:35:1a:f2:3a:cb:21:d6:1d:3b:
97:69:10:4b:6d:f6:36:76:55:4b:3e:7c:3f:78:8c:
4c:4f:fd:6e:76:00:7b:3c:99:e2:76:b4:5d:18:24:
0e:88:39:9e:57:68:93:44:d8:21:49:e2:50:ff:ed:
ff:49:73:3e:8a:e8:d9:71:84:c3:30:38:c0:50:43:
0a:ba:93:80:79:50:2d:65:5b:92:55:9a:c1:00:7a:
29:4b:f5:65:dd:41:f6:4d:30:6f:1e:6f:2f:19:a1:
2b:f9:de:74:81:53:25:87:6b:04:12:c2:10:f9:c1:
8d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:55:63:E2:91:FE:40:D8:AD:58:E6:BD:08:78:81:89:F9:25:01:41
X509v3 Authority Key Identifier:
keyid:96:E5:AD:53:BF:C7:38:40:C4:25:71:1C:01:04:53:57:10:57:DC:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/luWtU7_HOEDEJXEcAQRTVxBX3CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:cd:57:da:2a:b9:c9:dd:f6:32:34:01:d4:6f:c4:8d:5b:01:
99:34:6e:dc:fa:2c:41:d0:2b:6f:50:1f:e2:01:bf:15:74:f4:
97:86:9a:dc:f6:6d:7d:06:ca:05:f4:21:85:82:c3:63:c3:f6:
56:8a:fc:3f:3d:ab:96:73:0b:87:31:f0:65:f4:a0:e5:d1:20:
ad:80:ca:bb:15:f2:f5:7a:fd:8f:e5:87:da:58:ac:f8:e4:75:
3d:11:0c:6d:18:51:f2:89:77:c7:cd:22:80:44:3a:83:1f:58:
57:c0:c2:d2:13:5b:bb:c6:13:8a:83:57:1e:d2:e2:1e:ef:41:
b0:68:f7:ad:7e:4f:fb:a1:ab:0e:26:39:23:df:a7:d3:9d:51:
d6:c5:44:8b:8c:d0:b3:de:3b:04:30:b3:08:8a:7a:ca:9a:a9:
e6:fe:68:ab:61:58:e7:c4:ad:79:08:f2:5e:f1:d5:64:7f:bc:
3d:e3:24:b5:3e:dc:5e:00:61:a8:a5:a4:4e:71:e2:15:14:75:
f0:a5:c1:fd:24:0d:6f:5d:d6:37:44:de:15:8e:53:4a:43:db:
9b:1d:05:a0:0f:40:f6:fb:4f:d7:0c:c0:75:7d:fe:14:04:e2:
b4:26:f9:7b:bb:bf:fa:16:73:b1:64:32:65:8d:f0:8d:fd:53:
c3:bb:4b:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbFcSUpd9N6fd93p7e7R2KHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZTVhZDUzYmZjNzM4NDBjNDI1NzExYzAxMDQ1MzU3MTA1
N2RjMjMwHhcNMjUwNTEyMTcwMDQ4WhcNMjUwNTEzMTcwMDQ4WjAzMTEwLwYDVQQD
EygzZjU1NjNlMjkxZmU0MGQ4YWQ1OGU2YmQwODc4ODE4OWY5MjUwMTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEdu2sCJMkLnFkFZuDj16gxE+UaT
pYYsiP6krC6DvQeH3YvNYRpg13jx0cvNb6LBokm4B7ggEbBx1tnyhRUKbQhggleH
CAbBJ5oun1gtqNBptLndGuBYQr5CuGtCzlmJROQNenvoH4omkRWgIobjwbFwsQfW
waBxSdAs29PDg51lFmpiUM2ANAw5srw1GvI6yyHWHTuXaRBLbfY2dlVLPnw/eIxM
T/1udgB7PJnidrRdGCQOiDmeV2iTRNghSeJQ/+3/SXM+iujZcYTDMDjAUEMKupOA
eVAtZVuSVZrBAHopS/Vl3UH2TTBvHm8vGaEr+d50gVMlh2sEEsIQ+cGN9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD9VY+KR/kDYrVjmvQh4gYn5JQFBMB8GA1UdIwQY
MBaAFJblrVO/xzhAxCVxHAEEU1cQV9wjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHVXdFU3X0hPRURFSlhFY0FRUlRWeEJYM0NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8yZDhlNmMtNjllMi00N2NiLWJmOGQt
ZWY5YTU4NGJkMTEzLzEvbHVXdFU3X0hPRURFSlhFY0FRUlRWeEJYM0NNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8yZDhlNmMtNjllMi00N2NiLWJmOGQtZWY5YTU4NGJkMTEz
LzEvbHVXdFU3X0hPRURFSlhFY0FRUlRWeEJYM0NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPs1X2iq5
yd32MjQB1G/EjVsBmTRu3PosQdArb1Af4gG/FXT0l4aa3PZtfQbKBfQhhYLDY8P2
Vor8Pz2rlnMLhzHwZfSg5dEgrYDKuxXy9Xr9j+WH2lis+OR1PREMbRhR8ol3x80i
gEQ6gx9YV8DC0hNbu8YTioNXHtLiHu9BsGj3rX5P+6GrDiY5I9+n051R1sVEi4zQ
s947BDCzCIp6ypqp5v5oq2FY58SteQjyXvHVZH+8PeMktT7cXgBhqKWkTnHiFRR1
8KXB/SQNb13WN0TeFY5TSkPbmx0FoA9A9vtP1wzAdX3+FATitCb5e7u/+hZzsWQy
ZY3wjf1Tw7tLKg==
-----END CERTIFICATE-----
Generated at Mon May 12 19:07:06 2025 by rpki-client