Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
File: LRFywcc_lxqfsuibeRcgDFAO5Ac.mft (raw, json)
Hash identifier: ppPu0OKoiCx/ZDlvpBkllve5+iF6n3oDO7b7uOJ2y8k=
Subject key identifier: C5:3F:6A:34:B7:0E:F9:03:A2:C7:8F:1C:F2:14:1A:B7:7B:E8:8F:1F
Authority key identifier: 2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07
Certificate issuer: /CN=2d1172c1c73f971a9fb2e89b7917200c500ee407
Certificate serial: 0196BC37468EAEADA9675F0FCB9D6821AD35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
Manifest number: 153D
Signing time: Sat 10 May 2025 22:01:01 +0000
Manifest this update: Sat 10 May 2025 22:01:01 +0000
Manifest next update: Sun 11 May 2025 22:01:01 +0000
Files and hashes: 1: CxBTWe0phnLQfEvy14KZrA9LaZk.roa (hash: dM9wG7UCGb2jgf3z7+woCnj6ywdvLeoZBvHOHvMXmvE=)
2: IPPrratubHXAQd-ifZngdpirX5c.roa (hash: I/yflOCWYAytKofslD/06DhDQeYHbVXIxz2aV+s2uxk=)
3: LRFywcc_lxqfsuibeRcgDFAO5Ac.crl (hash: RAwUScv8YfU4ccfc+bG2XsqL/Qkx0Rzxi9wu8IvfLxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:37:46:8e:ae:ad:a9:67:5f:0f:cb:9d:68:21:ad:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1172c1c73f971a9fb2e89b7917200c500ee407
Validity
Not Before: May 10 22:01:01 2025 GMT
Not After : May 11 22:01:01 2025 GMT
Subject: CN=c53f6a34b70ef903a2c78f1cf2141ab77be88f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1c:86:30:99:12:6b:25:1d:48:2b:ad:eb:17:
4d:4c:80:03:dc:6a:d1:f9:5e:e3:1a:d1:85:14:1d:
c4:fd:3a:b2:fa:1a:26:6a:44:42:a0:e2:2c:f0:e3:
77:1e:05:3e:7a:08:db:f1:d5:ee:3c:e5:f0:42:d9:
6b:67:b0:31:7d:f5:85:6d:6d:fd:c8:89:0e:82:d8:
7b:da:4a:77:d2:52:96:59:31:a7:83:c7:d9:87:d7:
4f:61:6f:b2:de:0d:a3:1f:12:e1:f6:2a:92:b4:b3:
d0:e6:ca:f5:97:a1:5d:84:a4:66:3c:19:13:04:92:
d6:50:f3:05:7f:ab:34:89:f0:c1:67:bc:f3:cd:87:
cb:be:c3:3d:11:05:9e:0e:7d:1e:e6:dd:27:c3:06:
e9:89:93:a5:bf:a2:7e:74:1a:f9:a7:11:a9:9c:eb:
74:2f:e2:d9:27:fd:a2:4b:ed:a2:d9:ef:c4:1f:b2:
92:fa:ee:61:ad:1c:e9:7a:9b:56:6f:b0:a6:ca:ee:
07:1d:a7:1f:1a:9e:bb:4d:1d:36:94:1d:e0:83:11:
71:dc:ae:5f:eb:d2:54:78:b5:77:20:19:94:88:9c:
d8:5c:60:71:97:c5:ae:b4:a1:fa:12:e4:34:c0:76:
40:53:dd:a3:0b:cc:f4:15:e7:86:d2:bb:36:56:5c:
99:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:3F:6A:34:B7:0E:F9:03:A2:C7:8F:1C:F2:14:1A:B7:7B:E8:8F:1F
X509v3 Authority Key Identifier:
keyid:2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:5c:fc:03:38:60:66:42:7d:a5:e5:e2:1a:d3:9b:61:65:44:
23:1c:47:d9:62:67:46:3f:84:8f:01:fe:4b:d3:f3:b0:c0:dc:
e9:b1:62:af:0a:80:29:b5:18:9e:31:ee:54:66:0e:14:d5:c3:
25:ac:cd:b8:3c:dc:d3:ce:51:28:2b:e6:eb:fe:fb:27:16:de:
31:98:20:d8:e0:df:c4:da:1e:4c:b9:56:d6:ec:68:da:79:04:
63:48:eb:3f:fc:82:73:b8:0a:4c:05:3f:5a:99:da:fe:9b:15:
57:68:ff:c5:cd:92:74:a2:9a:fe:ac:4c:70:1c:f5:d6:50:50:
f2:fc:c1:13:c9:ba:2b:9c:b3:c7:03:45:99:d2:cc:8f:75:ae:
e6:c5:b0:b8:b3:84:82:70:8c:64:7a:ad:83:03:7c:bf:d3:b1:
a8:22:bc:26:be:36:69:d7:cd:9a:51:c0:9f:43:85:76:fe:e7:
a5:a1:80:2d:87:a6:8f:6c:0d:ec:1a:82:93:67:ef:2c:31:00:
31:90:5c:2e:80:e5:79:ca:8d:b6:35:f3:06:43:23:ae:f2:49:
cf:6e:97:8e:d3:c5:80:43:82:dc:a4:52:6f:7d:f9:0d:e5:4e:
40:d6:4e:7a:fe:80:3a:3e:c6:d9:4d:25:4c:10:9f:43:92:08:
26:27:9d:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa8N0aOrq2pZ18Py51oIa01MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMTE3MmMxYzczZjk3MWE5ZmIyZTg5Yjc5MTcyMDBjNTAw
ZWU0MDcwHhcNMjUwNTEwMjIwMTAxWhcNMjUwNTExMjIwMTAxWjAzMTEwLwYDVQQD
EyhjNTNmNmEzNGI3MGVmOTAzYTJjNzhmMWNmMjE0MWFiNzdiZTg4ZjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhyGMJkSayUdSCut6xdNTIAD3GrR
+V7jGtGFFB3E/Tqy+homakRCoOIs8ON3HgU+egjb8dXuPOXwQtlrZ7AxffWFbW39
yIkOgth72kp30lKWWTGng8fZh9dPYW+y3g2jHxLh9iqStLPQ5sr1l6FdhKRmPBkT
BJLWUPMFf6s0ifDBZ7zzzYfLvsM9EQWeDn0e5t0nwwbpiZOlv6J+dBr5pxGpnOt0
L+LZJ/2iS+2i2e/EH7KS+u5hrRzpeptWb7Cmyu4HHacfGp67TR02lB3ggxFx3K5f
69JUeLV3IBmUiJzYXGBxl8WutKH6EuQ0wHZAU92jC8z0FeeG0rs2VlyZ/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMU/ajS3DvkDosePHPIUGrd76I8fMB8GA1UdIwQY
MBaAFC0RcsHHP5can7Lom3kXIAxQDuQHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFJGeXdjY19seHFmc3VpYmVSY2dERkFPNUFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS83OWFjYTktNTFkZC00ZjIyLWI0MDQt
ZDUzODY2ZTkxODZhLzEvTFJGeXdjY19seHFmc3VpYmVSY2dERkFPNUFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS83OWFjYTktNTFkZC00ZjIyLWI0MDQtZDUzODY2ZTkxODZh
LzEvTFJGeXdjY19seHFmc3VpYmVSY2dERkFPNUFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiVz8Azhg
ZkJ9peXiGtObYWVEIxxH2WJnRj+EjwH+S9PzsMDc6bFirwqAKbUYnjHuVGYOFNXD
JazNuDzc085RKCvm6/77JxbeMZgg2ODfxNoeTLlW1uxo2nkEY0jrP/yCc7gKTAU/
Wpna/psVV2j/xc2SdKKa/qxMcBz11lBQ8vzBE8m6K5yzxwNFmdLMj3Wu5sWwuLOE
gnCMZHqtgwN8v9OxqCK8Jr42adfNmlHAn0OFdv7npaGALYemj2wN7BqCk2fvLDEA
MZBcLoDlecqNtjXzBkMjrvJJz26XjtPFgEOC3KRSb335DeVOQNZOev6AOj7G2U0l
TBCfQ5IIJiedKw==
-----END CERTIFICATE-----
Generated at Sun May 11 07:35:12 2025 by rpki-client