Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.mft
File: lsVsXqVHj003sw82guQ7fi75DZg.mft (raw, json)
Hash identifier: yZmzefInZ950WSDxHOenKkHg+keG4d9swl13/+L2aXs=
Subject key identifier: 0B:EE:F8:4F:0A:6E:48:F6:B4:B3:44:4C:D1:EE:46:5B:6C:29:41:68
Authority key identifier: 96:C5:6C:5E:A5:47:8F:4D:37:B3:0F:36:82:E4:3B:7E:2E:F9:0D:98
Certificate issuer: /CN=96c56c5ea5478f4d37b30f3682e43b7e2ef90d98
Certificate serial: 0196CA973BC7735C244068662C4A6C8C9340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsVsXqVHj003sw82guQ7fi75DZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.mft
Manifest number: 09A7
Signing time: Tue 13 May 2025 17:00:30 +0000
Manifest this update: Tue 13 May 2025 17:00:30 +0000
Manifest next update: Wed 14 May 2025 17:00:30 +0000
Files and hashes: 1: Jfp2BkUryUy6473OSd5t9xfZXek.roa (hash: /yj9OMbKiB1Ji+Udov4fFjS1PqdNa09sKJHlaeP3Vq8=)
2: lsVsXqVHj003sw82guQ7fi75DZg.crl (hash: TL3LlumSG/maHYiaLb8F5tuO2jRyWowA2uCtAOUTT7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lsVsXqVHj003sw82guQ7fi75DZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 17:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:97:3b:c7:73:5c:24:40:68:66:2c:4a:6c:8c:93:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96c56c5ea5478f4d37b30f3682e43b7e2ef90d98
Validity
Not Before: May 13 17:00:30 2025 GMT
Not After : May 14 17:00:30 2025 GMT
Subject: CN=0beef84f0a6e48f6b4b3444cd1ee465b6c294168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b4:45:95:47:a3:c1:03:91:08:ff:9d:65:bf:
80:35:60:ed:2e:73:2c:44:c5:a3:82:87:84:4a:15:
62:70:9b:81:40:e7:4b:0d:71:ca:3d:9e:10:ac:1a:
c3:02:45:b2:a5:6b:46:64:a5:37:2e:d7:cb:fc:88:
f9:cb:97:ce:07:12:9e:e0:3e:84:ed:f1:5a:2f:b8:
62:1b:0d:44:7b:f5:ae:50:b5:bf:1e:6d:db:97:3c:
3d:55:61:41:c8:37:b7:63:41:07:54:25:58:c2:bf:
b7:c2:65:16:47:c0:a9:93:98:50:02:58:0f:82:59:
e9:c7:ee:4f:a7:3f:bb:f2:5b:50:ff:28:3c:a2:2e:
07:df:68:4e:e2:3d:48:f8:77:66:4d:f3:c0:a7:c7:
f7:74:d5:a9:71:b3:91:d1:87:41:c9:07:52:70:00:
c4:d4:58:fb:cc:b3:18:45:8f:6a:ec:10:5e:de:05:
12:1b:01:e9:55:09:f1:09:42:95:51:d8:cb:30:a2:
d1:10:89:54:a6:ed:5c:7f:60:29:d4:d1:2c:97:54:
ed:24:9a:98:59:f5:f2:bd:91:08:5a:aa:08:38:e3:
d0:aa:48:d6:2d:c7:e6:4f:2f:fc:76:4d:41:6b:03:
90:62:f6:84:80:1e:40:5d:fb:b6:41:80:8b:55:73:
f2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:EE:F8:4F:0A:6E:48:F6:B4:B3:44:4C:D1:EE:46:5B:6C:29:41:68
X509v3 Authority Key Identifier:
keyid:96:C5:6C:5E:A5:47:8F:4D:37:B3:0F:36:82:E4:3B:7E:2E:F9:0D:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsVsXqVHj003sw82guQ7fi75DZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/98aca3-0c7c-4f05-8d03-35c78e70199e/1/lsVsXqVHj003sw82guQ7fi75DZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:d9:3e:a7:ab:de:fa:3b:7c:d1:69:7f:69:c5:33:4c:19:18:
00:90:1c:98:e7:b4:af:05:b8:e7:f1:76:4b:84:9b:01:b2:85:
c0:df:7e:ab:a3:f2:40:3c:82:1a:fa:9e:37:16:23:0a:0d:65:
53:a9:d3:5e:98:d6:c7:af:eb:05:12:0f:88:ac:e9:05:06:4c:
d1:8e:1c:56:11:9c:ff:36:3f:cc:a9:85:4a:d2:b3:b1:52:4c:
74:f1:3f:e6:61:49:15:c5:12:e0:c2:14:bd:9f:e0:fd:ac:40:
24:24:a3:32:00:03:a0:bd:63:80:10:54:79:0a:90:10:e0:c3:
b4:4f:32:f8:b2:8e:e2:a0:8c:a2:6d:95:4d:1b:7d:f5:d0:23:
71:1b:71:f2:b2:77:1d:69:a4:c5:8c:26:c8:c5:9d:fc:3a:e7:
04:61:6b:38:9e:15:1d:6c:2b:5e:62:58:34:2d:f5:53:39:8a:
31:b9:a0:1b:91:e8:c1:64:03:26:a5:92:02:b1:2d:71:ba:4e:
e1:a7:91:44:6c:eb:c9:ef:56:4a:af:83:c1:6f:70:b5:9b:73:
a1:1f:4a:15:0a:ce:17:85:b0:63:f2:f7:b6:9e:eb:d0:99:4e:
bf:e4:63:cd:86:f0:1c:61:d9:84:93:c1:11:70:d5:13:72:8b:
90:37:37:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbKlzvHc1wkQGhmLEpsjJNAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2YzU2YzVlYTU0NzhmNGQzN2IzMGYzNjgyZTQzYjdlMmVm
OTBkOTgwHhcNMjUwNTEzMTcwMDMwWhcNMjUwNTE0MTcwMDMwWjAzMTEwLwYDVQQD
EygwYmVlZjg0ZjBhNmU0OGY2YjRiMzQ0NGNkMWVlNDY1YjZjMjk0MTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLRFlUejwQORCP+dZb+ANWDtLnMs
RMWjgoeEShVicJuBQOdLDXHKPZ4QrBrDAkWypWtGZKU3LtfL/Ij5y5fOBxKe4D6E
7fFaL7hiGw1Ee/WuULW/Hm3blzw9VWFByDe3Y0EHVCVYwr+3wmUWR8Cpk5hQAlgP
glnpx+5Ppz+78ltQ/yg8oi4H32hO4j1I+HdmTfPAp8f3dNWpcbOR0YdByQdScADE
1Fj7zLMYRY9q7BBe3gUSGwHpVQnxCUKVUdjLMKLREIlUpu1cf2Ap1NEsl1TtJJqY
WfXyvZEIWqoIOOPQqkjWLcfmTy/8dk1BawOQYvaEgB5AXfu2QYCLVXPyuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAvu+E8Kbkj2tLNETNHuRltsKUFoMB8GA1UdIwQY
MBaAFJbFbF6lR49NN7MPNoLkO34u+Q2YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHNWc1hxVkhqMDAzc3c4Mmd1UTdmaTc1RFpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS85OGFjYTMtMGM3Yy00ZjA1LThkMDMt
MzVjNzhlNzAxOTllLzEvbHNWc1hxVkhqMDAzc3c4Mmd1UTdmaTc1RFpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS85OGFjYTMtMGM3Yy00ZjA1LThkMDMtMzVjNzhlNzAxOTll
LzEvbHNWc1hxVkhqMDAzc3c4Mmd1UTdmaTc1RFpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAttk+p6ve
+jt80Wl/acUzTBkYAJAcmOe0rwW45/F2S4SbAbKFwN9+q6PyQDyCGvqeNxYjCg1l
U6nTXpjWx6/rBRIPiKzpBQZM0Y4cVhGc/zY/zKmFStKzsVJMdPE/5mFJFcUS4MIU
vZ/g/axAJCSjMgADoL1jgBBUeQqQEODDtE8y+LKO4qCMom2VTRt99dAjcRtx8rJ3
HWmkxYwmyMWd/DrnBGFrOJ4VHWwrXmJYNC31UzmKMbmgG5HowWQDJqWSArEtcbpO
4aeRRGzrye9WSq+DwW9wtZtzoR9KFQrOF4WwY/L3tp7r0JlOv+RjzYbwHGHZhJPB
EXDVE3KLkDc3bA==
-----END CERTIFICATE-----
Generated at Wed May 14 03:01:05 2025 by rpki-client