Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft
File: lRZkUh1QOVkhL1WypZrsbSB7Cig.mft (raw, json)
Hash identifier: G2wutKKvHOSmqmIvVpJlnyBuo5I1rJo2yvEKdpg8tC8=
Subject key identifier: 7C:56:0A:52:0F:06:4F:D1:95:B5:87:FE:05:79:A3:0A:B0:B6:3B:E1
Authority key identifier: 95:16:64:52:1D:50:39:59:21:2F:55:B2:A5:9A:EC:6D:20:7B:0A:28
Certificate issuer: /CN=951664521d503959212f55b2a59aec6d207b0a28
Certificate serial: 0196B258E03BCB414B19C33B6426C6D32D1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRZkUh1QOVkhL1WypZrsbSB7Cig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft
Manifest number: 152C
Signing time: Fri 09 May 2025 00:01:31 +0000
Manifest this update: Fri 09 May 2025 00:01:31 +0000
Manifest next update: Sat 10 May 2025 00:01:31 +0000
Files and hashes: 1: IPg6gK3cvCBZgriElu-X9QULHhI.roa (hash: KfBBSFaoabvdCiHx1hEd3tUcsuSp0LUQmRosJtF9Y6s=)
2: lRZkUh1QOVkhL1WypZrsbSB7Cig.crl (hash: 1TtnEsX6aYR5Ew26FKzyKOc2EBgVF9kueF7SuixcTyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRZkUh1QOVkhL1WypZrsbSB7Cig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:58:e0:3b:cb:41:4b:19:c3:3b:64:26:c6:d3:2d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=951664521d503959212f55b2a59aec6d207b0a28
Validity
Not Before: May 9 00:01:31 2025 GMT
Not After : May 10 00:01:31 2025 GMT
Subject: CN=7c560a520f064fd195b587fe0579a30ab0b63be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:76:79:4b:df:19:a1:f8:19:fb:7c:b8:02:4d:
83:56:d8:d3:ae:7c:5f:f1:33:92:7a:73:a0:44:d2:
44:d7:b1:98:f7:bc:ec:91:e5:9c:ef:ea:77:0f:6b:
42:cb:26:7b:a2:18:22:31:d4:31:2e:f6:e2:a4:a6:
29:16:f6:e3:84:5a:28:49:54:88:c3:f6:c0:d3:80:
6f:62:db:f7:fa:94:a3:bd:3d:16:5c:9b:57:a5:6f:
ec:ef:74:71:37:79:ba:ae:33:e5:94:92:7b:d3:dc:
fd:41:01:e4:41:9d:eb:0b:d1:c2:3e:37:66:85:61:
da:a5:6f:5e:4e:b9:5d:73:6f:0c:78:e3:b3:8f:1f:
10:28:65:a3:18:b9:e7:e7:1b:bb:7e:87:2d:12:94:
3b:f0:d4:be:11:ac:b8:82:0b:8e:63:2d:3e:dd:ee:
9f:eb:74:2c:8a:26:12:4d:cc:b4:ed:c7:0c:fe:67:
eb:ad:88:61:5e:0f:4c:9d:92:af:68:da:d6:bf:c2:
be:7a:f0:ba:81:e4:5f:29:46:94:f2:22:05:9d:ae:
7b:fe:cd:f7:8c:56:25:5c:db:ce:ec:91:4c:91:7b:
15:bd:0e:20:e3:60:80:e0:56:bf:24:b8:03:4f:4c:
66:b1:c8:33:a6:27:98:49:ad:9c:54:4c:cc:ba:9f:
39:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:56:0A:52:0F:06:4F:D1:95:B5:87:FE:05:79:A3:0A:B0:B6:3B:E1
X509v3 Authority Key Identifier:
keyid:95:16:64:52:1D:50:39:59:21:2F:55:B2:A5:9A:EC:6D:20:7B:0A:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRZkUh1QOVkhL1WypZrsbSB7Cig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:ed:ef:cc:b5:51:33:40:f0:78:00:9d:5a:20:53:5c:18:b8:
0a:fd:c1:24:60:b2:95:04:01:bc:eb:b8:eb:27:a8:c8:42:0e:
aa:4f:ba:42:f1:ee:eb:03:7d:64:b3:65:5c:19:61:d7:b4:3d:
ee:25:96:80:6b:ed:3d:8a:73:1e:0d:1e:00:6c:40:e8:f0:76:
77:e4:6d:d5:33:64:45:53:17:e3:df:1c:1e:20:03:44:83:95:
3c:7d:ff:40:f4:e8:75:4c:16:fb:b5:6e:fa:3e:43:2a:70:15:
70:87:9b:7a:6e:18:66:ae:9f:34:33:e0:ea:a0:54:76:7d:5c:
e7:a0:5e:f6:eb:90:35:3c:13:ef:93:06:03:4f:6f:34:9d:0f:
a1:af:a5:06:59:24:b8:19:f1:71:eb:96:34:fb:30:74:2d:3b:
13:fa:db:0c:4b:12:52:02:e4:27:b6:76:df:87:2c:85:8f:64:
56:50:56:df:58:0a:d4:d3:2c:dc:0b:cd:fd:6e:58:52:b1:ba:
22:b7:8c:26:31:8b:6c:4b:bf:ab:a3:f1:7d:cf:ef:54:56:60:
0c:2b:26:c4:2e:ee:61:98:18:07:fb:f5:24:7e:69:07:1e:04:
44:8a:83:b0:3c:7d:1c:b7:0d:94:aa:ee:16:e7:cf:61:3a:19:
4c:3a:aa:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZayWOA7y0FLGcM7ZCbG0y0aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MTY2NDUyMWQ1MDM5NTkyMTJmNTViMmE1OWFlYzZkMjA3
YjBhMjgwHhcNMjUwNTA5MDAwMTMxWhcNMjUwNTEwMDAwMTMxWjAzMTEwLwYDVQQD
Eyg3YzU2MGE1MjBmMDY0ZmQxOTViNTg3ZmUwNTc5YTMwYWIwYjYzYmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHZ5S98ZofgZ+3y4Ak2DVtjTrnxf
8TOSenOgRNJE17GY97zskeWc7+p3D2tCyyZ7ohgiMdQxLvbipKYpFvbjhFooSVSI
w/bA04BvYtv3+pSjvT0WXJtXpW/s73RxN3m6rjPllJJ709z9QQHkQZ3rC9HCPjdm
hWHapW9eTrldc28MeOOzjx8QKGWjGLnn5xu7foctEpQ78NS+Eay4gguOYy0+3e6f
63QsiiYSTcy07ccM/mfrrYhhXg9MnZKvaNrWv8K+evC6geRfKUaU8iIFna57/s33
jFYlXNvO7JFMkXsVvQ4g42CA4Fa/JLgDT0xmscgzpieYSa2cVEzMup85RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHxWClIPBk/RlbWH/gV5owqwtjvhMB8GA1UdIwQY
MBaAFJUWZFIdUDlZIS9VsqWa7G0gewooMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFJaa1VoMVFPVmtoTDFXeXBacnNiU0I3Q2lnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8yYzM2MTktMmM1OS00NmQyLWFhYWUt
ZWY3NDUzYWQwOTlmLzEvbFJaa1VoMVFPVmtoTDFXeXBacnNiU0I3Q2lnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8yYzM2MTktMmM1OS00NmQyLWFhYWUtZWY3NDUzYWQwOTlm
LzEvbFJaa1VoMVFPVmtoTDFXeXBacnNiU0I3Q2lnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnu3vzLVR
M0DweACdWiBTXBi4Cv3BJGCylQQBvOu46yeoyEIOqk+6QvHu6wN9ZLNlXBlh17Q9
7iWWgGvtPYpzHg0eAGxA6PB2d+Rt1TNkRVMX498cHiADRIOVPH3/QPTodUwW+7Vu
+j5DKnAVcIebem4YZq6fNDPg6qBUdn1c56Be9uuQNTwT75MGA09vNJ0Poa+lBlkk
uBnxceuWNPswdC07E/rbDEsSUgLkJ7Z234cshY9kVlBW31gK1NMs3AvN/W5YUrG6
IreMJjGLbEu/q6Pxfc/vVFZgDCsmxC7uYZgYB/v1JH5pBx4ERIqDsDx9HLcNlKru
FufPYToZTDqqTg==
-----END CERTIFICATE-----
Generated at Fri May 9 02:45:06 2025 by rpki-client