Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft
File: lSC_jHciaj-ojr4RzI8RacxWCnk.mft (raw, json)
Hash identifier: BaDcxYWrGyrciURj3CxVOmC0/7fzb5+TprOVoZOqumk=
Subject key identifier: 18:84:25:FE:91:29:78:F9:34:5B:5C:A8:DE:5F:83:67:A4:D9:38:59
Authority key identifier: 95:20:BF:8C:77:22:6A:3F:A8:8E:BE:11:CC:8F:11:69:CC:56:0A:79
Certificate issuer: /CN=9520bf8c77226a3fa88ebe11cc8f1169cc560a79
Certificate serial: 0196CB3C5144C73C5205CCCEEAF6AE863AC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSC_jHciaj-ojr4RzI8RacxWCnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft
Manifest number: 0C55
Signing time: Tue 13 May 2025 20:00:49 +0000
Manifest this update: Tue 13 May 2025 20:00:49 +0000
Manifest next update: Wed 14 May 2025 20:00:49 +0000
Files and hashes: 1: 5_9mocxdNZ9MQ0g3lwcXXvM4yBI.roa (hash: QFa9yzo72h2sHM5VVVFbluHjiQ4dadLFT4v/+o9O32g=)
2: lSC_jHciaj-ojr4RzI8RacxWCnk.crl (hash: A/b74CaiZ0TKkd/uCEkmEeE8QVNfGzTQrLxZKs3B0Go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSC_jHciaj-ojr4RzI8RacxWCnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 20:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:3c:51:44:c7:3c:52:05:cc:ce:ea:f6:ae:86:3a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9520bf8c77226a3fa88ebe11cc8f1169cc560a79
Validity
Not Before: May 13 20:00:49 2025 GMT
Not After : May 14 20:00:49 2025 GMT
Subject: CN=188425fe912978f9345b5ca8de5f8367a4d93859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2c:d2:1b:dc:d2:fa:1f:02:9b:9d:ff:c7:d6:
5f:9b:82:13:d3:23:05:84:89:23:f8:22:b6:ff:e6:
5b:26:b0:e8:52:eb:2f:46:52:c6:60:62:2d:70:c2:
6d:3a:10:d8:b5:34:31:d7:1e:b3:42:c4:60:a8:65:
67:95:67:6a:fe:9f:35:e9:7e:07:f6:85:3c:96:40:
4f:4c:7c:90:fc:70:10:e0:2f:a8:3c:b0:fb:3b:9b:
82:21:7a:3d:fd:eb:6c:11:ca:73:c8:55:f5:01:2a:
35:d6:01:3e:e1:ad:12:76:d1:90:45:73:02:cd:e2:
e2:38:a4:bf:f9:8e:2d:58:7a:d3:90:9d:82:e4:f0:
31:e5:82:e4:29:71:2f:88:2f:e5:99:77:cf:16:dd:
d6:81:aa:a8:0c:88:b2:3a:a1:6f:d2:93:ae:95:e1:
cc:16:84:40:ae:27:ad:51:ce:8d:2f:c7:0e:60:63:
ef:50:21:a0:92:3b:41:9d:3e:da:2f:16:1b:02:33:
9c:65:ed:4f:30:46:c6:5a:48:88:d9:3a:8d:7a:26:
bc:12:73:b6:1f:ba:9f:fd:e1:04:a3:33:a3:88:8a:
65:12:4f:01:f3:01:d4:14:21:f7:b8:22:23:ee:76:
b0:9c:96:95:11:86:9f:0c:00:6f:5e:02:7f:d8:28:
f4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:84:25:FE:91:29:78:F9:34:5B:5C:A8:DE:5F:83:67:A4:D9:38:59
X509v3 Authority Key Identifier:
keyid:95:20:BF:8C:77:22:6A:3F:A8:8E:BE:11:CC:8F:11:69:CC:56:0A:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSC_jHciaj-ojr4RzI8RacxWCnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f09a7f-5761-45a7-9ccb-1f3ed6d881b8/1/lSC_jHciaj-ojr4RzI8RacxWCnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:8c:62:9b:dd:3d:dd:be:da:44:d3:a3:1e:4e:c4:7b:85:73:
11:2c:31:be:9b:46:59:c4:31:67:71:24:20:5a:2e:f4:e7:5a:
4d:ac:8e:55:2f:4d:70:2d:22:39:cc:3f:10:a7:90:ad:ac:87:
8e:e8:54:54:db:ca:9f:63:69:bc:6e:85:7a:21:d2:ed:88:37:
88:76:72:04:dd:68:b4:f5:10:66:52:a2:6b:29:f8:f2:51:43:
71:c7:61:46:56:3d:13:25:65:19:4e:b1:e2:85:3b:54:35:33:
1e:39:16:a7:e0:9a:b1:9c:f1:ab:b8:f8:a2:72:8e:9d:72:59:
ac:e1:3f:5f:fd:1e:a1:c5:17:e9:d2:47:fd:57:8e:2a:96:39:
70:32:66:57:59:a9:06:11:d8:21:43:2a:37:c8:e0:42:6c:8f:
a7:11:90:09:03:cc:ee:53:70:8e:fe:df:4e:c1:a5:e3:fa:c3:
dc:22:92:32:15:e9:35:73:22:f5:f3:49:df:4c:de:17:91:79:
88:ab:5e:71:96:65:1f:2d:21:f5:29:46:23:ea:66:b8:d1:7e:
4b:f7:4b:c3:c8:4c:ac:83:9f:a7:10:3c:9e:46:01:64:25:06:
20:b6:c1:55:e9:fb:1d:1d:ef:13:0f:53:ec:d6:c5:5c:2e:48:
ff:38:26:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbLPFFExzxSBczO6vauhjrFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MjBiZjhjNzcyMjZhM2ZhODhlYmUxMWNjOGYxMTY5Y2M1
NjBhNzkwHhcNMjUwNTEzMjAwMDQ5WhcNMjUwNTE0MjAwMDQ5WjAzMTEwLwYDVQQD
EygxODg0MjVmZTkxMjk3OGY5MzQ1YjVjYThkZTVmODM2N2E0ZDkzODU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCzSG9zS+h8Cm53/x9Zfm4IT0yMF
hIkj+CK2/+ZbJrDoUusvRlLGYGItcMJtOhDYtTQx1x6zQsRgqGVnlWdq/p816X4H
9oU8lkBPTHyQ/HAQ4C+oPLD7O5uCIXo9/etsEcpzyFX1ASo11gE+4a0SdtGQRXMC
zeLiOKS/+Y4tWHrTkJ2C5PAx5YLkKXEviC/lmXfPFt3WgaqoDIiyOqFv0pOuleHM
FoRArietUc6NL8cOYGPvUCGgkjtBnT7aLxYbAjOcZe1PMEbGWkiI2TqNeia8EnO2
H7qf/eEEozOjiIplEk8B8wHUFCH3uCIj7nawnJaVEYafDABvXgJ/2Cj0IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBiEJf6RKXj5NFtcqN5fg2ek2ThZMB8GA1UdIwQY
MBaAFJUgv4x3Imo/qI6+EcyPEWnMVgp5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFNDX2pIY2lhai1vanI0UnpJOFJhY3hXQ25rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9mMDlhN2YtNTc2MS00NWE3LTljY2It
MWYzZWQ2ZDg4MWI4LzEvbFNDX2pIY2lhai1vanI0UnpJOFJhY3hXQ25rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9mMDlhN2YtNTc2MS00NWE3LTljY2ItMWYzZWQ2ZDg4MWI4
LzEvbFNDX2pIY2lhai1vanI0UnpJOFJhY3hXQ25rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqoxim909
3b7aRNOjHk7Ee4VzESwxvptGWcQxZ3EkIFou9OdaTayOVS9NcC0iOcw/EKeQrayH
juhUVNvKn2NpvG6FeiHS7Yg3iHZyBN1otPUQZlKiayn48lFDccdhRlY9EyVlGU6x
4oU7VDUzHjkWp+CasZzxq7j4onKOnXJZrOE/X/0eocUX6dJH/VeOKpY5cDJmV1mp
BhHYIUMqN8jgQmyPpxGQCQPM7lNwjv7fTsGl4/rD3CKSMhXpNXMi9fNJ30zeF5F5
iKtecZZlHy0h9SlGI+pmuNF+S/dLw8hMrIOfpxA8nkYBZCUGILbBVen7HR3vEw9T
7NbFXC5I/zgmWQ==
-----END CERTIFICATE-----
Generated at Wed May 14 02:21:59 2025 by rpki-client