Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
File: lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft (raw, json)
Hash identifier: yFEvS9qPEonfU9PQWSz6mQndnS1Qa/tx1VJzEYmHN6c=
Subject key identifier: 6B:25:E7:68:55:DE:24:A0:ED:D6:7C:2F:D4:8F:2F:81:6B:09:20:8D
Authority key identifier: 97:1C:78:B3:05:FB:49:CB:D4:00:5D:44:27:C1:F6:2C:6A:45:5A:68
Certificate issuer: /CN=971c78b305fb49cbd4005d4427c1f62c6a455a68
Certificate serial: 0196BECA23F6E7D78CE6AF9A66E775EEA769
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 10:00:40 +0000
Manifest this update: Sun 11 May 2025 10:00:40 +0000
Manifest next update: Mon 12 May 2025 10:00:40 +0000
Files and hashes: 1: Fs8XEPRvhs2sBrhxNlZzi8XKons.roa (hash: C0hFaordL7p5SUJfrTELAa9KIVrov4I7azhDmZ9FUrw=)
2: lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl (hash: k80VoDiVPGDpAxIWLJtmkxO/GUmcyA0vGZn/GtnZj04=)
3: sId5K04MuNzDrV7JjoafXNRATrU.roa (hash: c9K2d3wbOg2QoEGGWWmmlRXcKof1alf7zD4SEHKIWBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:ca:23:f6:e7:d7:8c:e6:af:9a:66:e7:75:ee:a7:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971c78b305fb49cbd4005d4427c1f62c6a455a68
Validity
Not Before: May 11 10:00:40 2025 GMT
Not After : May 12 10:00:40 2025 GMT
Subject: CN=6b25e76855de24a0edd67c2fd48f2f816b09208d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:28:63:b7:04:e1:86:c2:ca:2d:75:d0:c6:bc:
7c:dc:02:24:0b:01:99:8a:a8:ea:73:4c:e6:ae:29:
09:fb:02:f4:a3:9e:99:eb:9e:35:57:22:47:b1:98:
b1:d1:1b:93:26:46:f8:56:5e:ec:ad:67:cb:81:c4:
f9:a2:dc:36:0c:a0:41:70:90:fc:5b:8d:6d:ed:3d:
d2:c7:0f:0c:3c:51:5f:be:82:84:b9:82:b0:92:8c:
16:26:fb:75:db:55:e0:45:d0:bd:1a:df:7a:36:18:
16:47:bb:25:8c:35:23:66:75:cd:11:00:d7:f5:01:
bb:a7:c3:8b:0f:b4:69:00:e7:9c:f2:1c:9e:90:06:
03:91:21:ca:0c:04:93:d8:ab:5e:9a:de:81:28:56:
21:80:c1:f3:de:79:db:95:bc:f3:f8:d7:3c:64:2a:
2a:3d:5b:3b:ee:f3:9d:c3:85:0c:23:a0:a0:f6:a9:
0b:ae:f1:4c:6d:4f:ce:b0:5d:bc:3f:5a:59:51:03:
ea:96:0d:3b:bf:18:76:8a:d1:dc:2c:f7:86:07:bd:
f7:f6:a8:be:3e:25:ef:3f:4e:e7:3e:62:8c:34:26:
dd:9b:5e:a5:90:5a:1c:7e:04:92:fe:15:cc:93:b4:
f2:1e:56:7f:d0:27:da:d4:7b:9c:51:c1:ae:ca:4e:
79:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:25:E7:68:55:DE:24:A0:ED:D6:7C:2F:D4:8F:2F:81:6B:09:20:8D
X509v3 Authority Key Identifier:
keyid:97:1C:78:B3:05:FB:49:CB:D4:00:5D:44:27:C1:F6:2C:6A:45:5A:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:74:11:d8:48:28:8c:f6:86:3a:cb:4b:5e:b1:4d:f6:9a:97:
37:27:0e:cb:2b:5f:37:99:e5:0a:f3:c3:7a:7e:a4:be:94:f3:
d1:3d:c7:94:7c:4a:6a:28:f6:26:5a:19:6b:48:6f:76:3a:25:
43:7a:62:fa:cc:45:15:3e:e8:74:3a:68:2e:85:d5:b8:27:8c:
a4:9f:e3:99:4f:ab:a3:dc:86:a6:8a:21:fe:9c:8f:73:db:ae:
5c:9d:7b:f8:ba:3f:09:2b:69:71:9f:1a:cf:b9:49:1b:cc:bd:
c7:eb:d2:71:ff:78:bd:72:ae:65:7a:50:4b:65:dd:70:21:e5:
a0:79:6c:36:cd:87:c2:f9:1d:7a:03:86:25:eb:a1:42:00:92:
b9:8b:9c:79:3c:bc:c7:e0:7c:86:ab:be:92:d4:5a:48:b0:f4:
5f:e2:ba:6f:bf:fe:36:40:c6:ff:d9:ac:cb:b4:ad:15:24:7b:
d0:b7:fb:9f:a7:27:23:43:43:59:12:88:18:1f:aa:3f:65:a8:
f3:e3:04:e4:36:1f:7a:cf:a4:89:8e:03:40:85:ae:5a:69:f5:
a4:59:ac:83:b6:c0:4b:62:0e:d6:b5:a6:6e:d5:99:8e:34:ff:
6d:d3:14:3d:84:39:92:8e:b0:22:e6:0e:61:ce:d7:77:b8:60:
41:b7:f3:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa+yiP259eM5q+aZud17qdpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MWM3OGIzMDVmYjQ5Y2JkNDAwNWQ0NDI3YzFmNjJjNmE0
NTVhNjgwHhcNMjUwNTExMTAwMDQwWhcNMjUwNTEyMTAwMDQwWjAzMTEwLwYDVQQD
Eyg2YjI1ZTc2ODU1ZGUyNGEwZWRkNjdjMmZkNDhmMmY4MTZiMDkyMDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvChjtwThhsLKLXXQxrx83AIkCwGZ
iqjqc0zmrikJ+wL0o56Z6541VyJHsZix0RuTJkb4Vl7srWfLgcT5otw2DKBBcJD8
W41t7T3Sxw8MPFFfvoKEuYKwkowWJvt121XgRdC9Gt96NhgWR7sljDUjZnXNEQDX
9QG7p8OLD7RpAOec8hyekAYDkSHKDAST2Ktemt6BKFYhgMHz3nnblbzz+Nc8ZCoq
PVs77vOdw4UMI6Cg9qkLrvFMbU/OsF28P1pZUQPqlg07vxh2itHcLPeGB7339qi+
PiXvP07nPmKMNCbdm16lkFocfgSS/hXMk7TyHlZ/0Cfa1HucUcGuyk551wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGsl52hV3iSg7dZ8L9SPL4FrCSCNMB8GA1UdIwQY
MBaAFJcceLMF+0nL1ABdRCfB9ixqRVpoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHh4NHN3WDdTY3ZVQUYxRUo4SDJMR3BGV21nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9kZjNhMTUtMmU0OS00ZDhlLTg1NWEt
MWMyNzU4NjUxZWZhLzEvbHh4NHN3WDdTY3ZVQUYxRUo4SDJMR3BGV21nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9kZjNhMTUtMmU0OS00ZDhlLTg1NWEtMWMyNzU4NjUxZWZh
LzEvbHh4NHN3WDdTY3ZVQUYxRUo4SDJMR3BGV21nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiHQR2Ego
jPaGOstLXrFN9pqXNycOyytfN5nlCvPDen6kvpTz0T3HlHxKaij2JloZa0hvdjol
Q3pi+sxFFT7odDpoLoXVuCeMpJ/jmU+ro9yGpooh/pyPc9uuXJ17+Lo/CStpcZ8a
z7lJG8y9x+vScf94vXKuZXpQS2XdcCHloHlsNs2HwvkdegOGJeuhQgCSuYuceTy8
x+B8hqu+ktRaSLD0X+K6b7/+NkDG/9msy7StFSR70Lf7n6cnI0NDWRKIGB+qP2Wo
8+ME5DYfes+kiY4DQIWuWmn1pFmsg7bAS2IO1rWmbtWZjjT/bdMUPYQ5ko6wIuYO
Yc7Xd7hgQbfz7g==
-----END CERTIFICATE-----
Generated at Sun May 11 19:59:39 2025 by rpki-client