Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/435a3b-0b05-4571-bd2d-f03ce824c76d/1/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.mft
File: LfqfBo7bn8Q2NU0abZu0Ib_2MNU.mft (raw, json)
Hash identifier: dMzq7ba/58kAU/vpzWSPEHrTHr1K7Uu/LTn4Lo6Sy/4=
Subject key identifier: 53:85:90:64:B8:8F:B4:FB:02:2D:49:70:4B:18:24:06:36:41:8A:C3
Authority key identifier: 2D:FA:9F:06:8E:DB:9F:C4:36:35:4D:1A:6D:9B:B4:21:BF:F6:30:D5
Certificate issuer: /CN=2dfa9f068edb9fc436354d1a6d9bb421bff630d5
Certificate serial: 0196ACC406D3C354B9D84D0FA6C67DFA2C95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/435a3b-0b05-4571-bd2d-f03ce824c76d/1/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.mft
Manifest number: 057C
Signing time: Wed 07 May 2025 22:00:50 +0000
Manifest this update: Wed 07 May 2025 22:00:50 +0000
Manifest next update: Thu 08 May 2025 22:00:50 +0000
Files and hashes: 1: HK2Vi8L-VSUrFJS43CFHzQJcbz8.roa (hash: E5YSpnMWbKYKY1PUN7i5gprBfIcHK0dY28fjbucPCYI=)
2: LfqfBo7bn8Q2NU0abZu0Ib_2MNU.crl (hash: C3Cn8YNNV/Nw62V0csgyJHV9wO3VvHtRX4Iber+7OI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/435a3b-0b05-4571-bd2d-f03ce824c76d/1/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/435a3b-0b05-4571-bd2d-f03ce824c76d/1/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:c4:06:d3:c3:54:b9:d8:4d:0f:a6:c6:7d:fa:2c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dfa9f068edb9fc436354d1a6d9bb421bff630d5
Validity
Not Before: May 7 22:00:50 2025 GMT
Not After : May 8 22:00:50 2025 GMT
Subject: CN=53859064b88fb4fb022d49704b18240636418ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ac:5c:84:8d:db:75:93:99:96:60:88:13:14:
87:d3:90:85:77:12:3e:88:95:05:c3:f5:46:62:e4:
2b:a4:42:2e:1b:f6:b5:f1:a3:da:64:b9:3f:23:9f:
42:97:80:f2:53:6e:0a:73:b8:61:38:a9:03:4a:19:
b6:0d:aa:9e:bd:ec:59:f2:c6:d1:e3:1e:23:96:6b:
92:dd:1c:cf:f1:41:6e:4a:de:f7:d6:c5:7e:c5:aa:
ce:fc:c0:3a:45:3f:4a:bb:c4:65:c1:de:bc:11:a6:
45:33:14:db:97:e0:ff:21:73:7d:52:39:88:72:02:
88:6e:31:13:5b:69:23:94:5f:59:a3:91:de:6c:c2:
b4:16:6f:b7:50:ab:6e:34:cf:0b:98:9f:2c:54:a0:
87:59:84:9b:91:81:94:3f:7a:4e:52:2c:6f:00:b8:
c7:4f:f3:7b:f2:79:69:b2:15:f7:78:ff:d3:62:43:
88:32:e4:3a:4b:34:1f:33:15:7a:74:2a:04:77:db:
85:32:da:30:c5:c6:17:17:47:0d:a0:67:e2:55:7c:
4b:04:45:9c:14:35:9b:2e:46:96:bc:6b:54:25:c2:
b8:c4:7c:a8:71:48:1b:6a:63:48:09:98:e2:f9:ea:
1d:1c:32:db:7b:24:61:11:fb:d5:58:9e:fd:4f:1c:
ad:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:85:90:64:B8:8F:B4:FB:02:2D:49:70:4B:18:24:06:36:41:8A:C3
X509v3 Authority Key Identifier:
keyid:2D:FA:9F:06:8E:DB:9F:C4:36:35:4D:1A:6D:9B:B4:21:BF:F6:30:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/435a3b-0b05-4571-bd2d-f03ce824c76d/1/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/435a3b-0b05-4571-bd2d-f03ce824c76d/1/LfqfBo7bn8Q2NU0abZu0Ib_2MNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c5:6a:61:35:c8:e4:dc:25:c3:40:bf:5e:35:8e:00:d4:f8:
26:71:77:e4:6e:cf:73:bc:38:d2:51:0e:8e:6f:7b:52:63:0a:
fa:9a:a1:51:a9:af:e2:59:75:f1:05:54:ab:ae:b6:bf:fa:dd:
39:bd:a0:5a:43:ba:05:b4:75:43:fb:de:1f:be:db:ec:49:74:
11:9c:d2:3f:29:54:ae:ac:ed:e9:55:a7:a7:1a:a0:45:59:a3:
81:19:83:2f:13:37:cd:39:a7:34:2d:ea:d7:c9:76:5d:27:01:
b7:2e:63:ba:3f:d8:7b:5f:b7:f7:c0:54:78:18:5f:27:6b:38:
5c:35:0a:e6:dc:b5:2c:5b:bd:34:69:10:28:fa:74:7d:a0:da:
d7:48:c7:52:4f:7e:db:9f:b0:8e:92:5b:40:f5:e8:db:49:08:
a1:7e:13:1c:9c:c5:b1:02:d7:eb:38:df:1f:e7:c7:c3:51:68:
e4:2b:48:28:ce:b3:9d:d0:e6:91:1f:60:a1:16:51:92:5f:9a:
84:39:20:fb:c5:1a:1a:ae:2e:dd:19:91:0d:b5:58:90:05:32:
aa:61:ea:a1:50:2e:c1:30:f9:82:46:70:8f:fa:c9:65:e5:3b:
b6:a3:ab:e4:dd:6c:60:74:b9:29:38:94:b7:ff:31:58:43:71:
1d:75:42:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZasxAbTw1S52E0PpsZ9+iyVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkZmE5ZjA2OGVkYjlmYzQzNjM1NGQxYTZkOWJiNDIxYmZm
NjMwZDUwHhcNMjUwNTA3MjIwMDUwWhcNMjUwNTA4MjIwMDUwWjAzMTEwLwYDVQQD
Eyg1Mzg1OTA2NGI4OGZiNGZiMDIyZDQ5NzA0YjE4MjQwNjM2NDE4YWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6xchI3bdZOZlmCIExSH05CFdxI+
iJUFw/VGYuQrpEIuG/a18aPaZLk/I59Cl4DyU24Kc7hhOKkDShm2DaqevexZ8sbR
4x4jlmuS3RzP8UFuSt731sV+xarO/MA6RT9Ku8Rlwd68EaZFMxTbl+D/IXN9UjmI
cgKIbjETW2kjlF9Zo5HebMK0Fm+3UKtuNM8LmJ8sVKCHWYSbkYGUP3pOUixvALjH
T/N78nlpshX3eP/TYkOIMuQ6SzQfMxV6dCoEd9uFMtowxcYXF0cNoGfiVXxLBEWc
FDWbLkaWvGtUJcK4xHyocUgbamNICZji+eodHDLbeyRhEfvVWJ79TxytkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFOFkGS4j7T7Ai1JcEsYJAY2QYrDMB8GA1UdIwQY
MBaAFC36nwaO25/ENjVNGm2btCG/9jDVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGZxZkJvN2JuOFEyTlUwYWJadTBJYl8yTU5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy80MzVhM2ItMGIwNS00NTcxLWJkMmQt
ZjAzY2U4MjRjNzZkLzEvTGZxZkJvN2JuOFEyTlUwYWJadTBJYl8yTU5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy80MzVhM2ItMGIwNS00NTcxLWJkMmQtZjAzY2U4MjRjNzZk
LzEvTGZxZkJvN2JuOFEyTlUwYWJadTBJYl8yTU5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIcVqYTXI
5Nwlw0C/XjWOANT4JnF35G7Pc7w40lEOjm97UmMK+pqhUamv4ll18QVUq662v/rd
Ob2gWkO6BbR1Q/veH77b7El0EZzSPylUrqzt6VWnpxqgRVmjgRmDLxM3zTmnNC3q
18l2XScBty5juj/Ye1+398BUeBhfJ2s4XDUK5ty1LFu9NGkQKPp0faDa10jHUk9+
25+wjpJbQPXo20kIoX4THJzFsQLX6zjfH+fHw1Fo5CtIKM6zndDmkR9goRZRkl+a
hDkg+8UaGq4u3RmRDbVYkAUyqmHqoVAuwTD5gkZwj/rJZeU7tqOr5N1sYHS5KTiU
t/8xWENxHXVCfg==
-----END CERTIFICATE-----
Generated at Thu May 8 00:46:00 2025 by rpki-client