Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft
File: lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft (raw, json)
Hash identifier: 8sSgV+rxjIyZXwwcFRzfi4OThxf0fiRTllrOXw7mI5U=
Subject key identifier: BC:25:1E:D6:78:45:B0:08:19:7A:46:42:BA:E8:9D:43:00:BD:BA:52
Authority key identifier: 95:1D:49:3B:1B:C0:A8:C8:52:DD:11:CF:C9:37:89:1D:AC:3F:07:C2
Certificate issuer: /CN=951d493b1bc0a8c852dd11cfc937891dac3f07c2
Certificate serial: 0196797B39E26940C109F0369BEE9043CDDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lR1JOxvAqMhS3RHPyTeJHaw_B8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft
Manifest number: 1517
Signing time: Sun 27 Apr 2025 23:00:40 +0000
Manifest this update: Sun 27 Apr 2025 23:00:40 +0000
Manifest next update: Mon 28 Apr 2025 23:00:40 +0000
Files and hashes: 1: lR1JOxvAqMhS3RHPyTeJHaw_B8I.crl (hash: AJ4fpcCORW25oRkcbj7Hn2C4VvoTod8ggutpwZY50QM=)
2: sQyECaaIBBJuTWR_GAKRUGY2zLs.roa (hash: a7MHGEIK7Syni3DpYI0UPL4y49isayDX/P6hkOd4qq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/lR1JOxvAqMhS3RHPyTeJHaw_B8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:7b:39:e2:69:40:c1:09:f0:36:9b:ee:90:43:cd:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=951d493b1bc0a8c852dd11cfc937891dac3f07c2
Validity
Not Before: Apr 27 23:00:40 2025 GMT
Not After : Apr 28 23:00:40 2025 GMT
Subject: CN=bc251ed67845b008197a4642bae89d4300bdba52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7a:62:77:ad:c9:80:6e:8f:76:d5:38:7f:0c:
05:6a:a1:a9:80:27:b7:71:69:ce:d6:91:6b:9d:61:
a9:e8:4c:2a:bb:11:3f:93:a6:f7:79:f2:46:67:33:
e5:b4:63:f8:ff:be:d7:1b:0d:67:15:22:3b:a8:15:
cb:b7:98:e6:83:96:82:58:d4:b2:7e:8d:39:b0:b9:
c9:cf:35:72:7c:11:c7:0f:40:23:c1:dd:18:a5:e7:
c6:8e:76:09:ef:d8:96:ad:d7:8f:42:27:1e:4e:65:
a9:e8:6e:cb:e6:e2:da:81:60:0b:20:e8:ad:7e:54:
36:13:d4:c6:d4:c3:46:45:68:8b:4c:10:86:bb:fc:
89:da:6a:cd:00:14:0b:82:66:68:d3:2d:13:2f:ae:
1c:6b:1e:e9:8d:b2:37:00:50:cf:18:83:29:78:9d:
18:25:33:4a:04:d3:6b:0d:83:f7:8f:cb:82:19:38:
d5:75:d9:9e:de:e2:b6:a8:bf:2d:e2:e2:a1:a5:cc:
1b:d5:c7:8e:17:1f:c5:a7:86:b3:92:c6:8d:22:52:
29:03:0a:23:1e:f3:6f:8f:78:81:2c:3d:be:4b:ab:
8f:38:6a:40:a8:68:53:90:28:d4:12:85:0a:11:bb:
af:c5:fe:0c:6b:ad:61:48:4a:a3:51:23:4f:77:c4:
6d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:25:1E:D6:78:45:B0:08:19:7A:46:42:BA:E8:9D:43:00:BD:BA:52
X509v3 Authority Key Identifier:
keyid:95:1D:49:3B:1B:C0:A8:C8:52:DD:11:CF:C9:37:89:1D:AC:3F:07:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lR1JOxvAqMhS3RHPyTeJHaw_B8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:a8:b3:fe:0a:f8:77:36:44:d9:4f:6e:2e:70:4f:5b:0e:f2:
95:7a:cf:d7:2b:20:04:a2:74:6f:12:a8:4e:59:df:77:01:72:
eb:c0:08:07:6b:25:89:08:72:22:f8:f8:99:55:4b:d6:a1:da:
06:43:c5:1e:28:00:91:8b:8c:88:d0:5d:ee:b6:02:fc:12:3e:
04:cc:90:80:2d:ff:76:65:29:de:c8:27:dc:aa:53:8a:83:ad:
47:55:5b:09:c3:dc:5e:07:43:90:e0:62:ac:7a:c1:ae:61:9d:
6e:dc:da:0f:a0:24:2f:67:7c:a2:e6:bd:af:c9:af:bc:cc:30:
df:db:00:a8:81:77:29:05:00:b8:1b:70:0b:8a:83:b2:50:9c:
22:3c:c1:07:d8:fc:c3:21:85:f0:ce:06:ab:05:67:b9:48:8a:
cc:b6:c9:7f:6c:0d:fd:4c:00:7a:50:09:f8:f0:dd:07:f4:72:
b4:ff:bd:f6:2b:e7:83:d5:b9:90:76:ed:a8:16:89:28:b5:19:
fc:15:9e:bb:12:88:bb:8a:c1:e3:5f:20:61:d6:fd:d6:27:ac:
3b:f5:b4:36:de:40:0e:51:ba:5e:21:66:0a:75:79:1e:51:4b:
e3:98:71:8b:a8:c5:55:50:d9:53:74:be:71:47:31:0a:3d:b7:
fc:95:11:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ5ezniaUDBCfA2m+6QQ83cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MWQ0OTNiMWJjMGE4Yzg1MmRkMTFjZmM5Mzc4OTFkYWMz
ZjA3YzIwHhcNMjUwNDI3MjMwMDQwWhcNMjUwNDI4MjMwMDQwWjAzMTEwLwYDVQQD
EyhiYzI1MWVkNjc4NDViMDA4MTk3YTQ2NDJiYWU4OWQ0MzAwYmRiYTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3pid63JgG6PdtU4fwwFaqGpgCe3
cWnO1pFrnWGp6EwquxE/k6b3efJGZzPltGP4/77XGw1nFSI7qBXLt5jmg5aCWNSy
fo05sLnJzzVyfBHHD0Ajwd0YpefGjnYJ79iWrdePQiceTmWp6G7L5uLagWALIOit
flQ2E9TG1MNGRWiLTBCGu/yJ2mrNABQLgmZo0y0TL64cax7pjbI3AFDPGIMpeJ0Y
JTNKBNNrDYP3j8uCGTjVddme3uK2qL8t4uKhpcwb1ceOFx/Fp4azksaNIlIpAwoj
HvNvj3iBLD2+S6uPOGpAqGhTkCjUEoUKEbuvxf4Ma61hSEqjUSNPd8RtSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLwlHtZ4RbAIGXpGQrronUMAvbpSMB8GA1UdIwQY
MBaAFJUdSTsbwKjIUt0Rz8k3iR2sPwfCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFIxSk94dkFxTWhTM1JIUHlUZUpIYXdfQjhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi84OWJmM2EtYmY5MC00NjdhLWE5MGIt
MjJlMjQ4ZWQyMDE0LzEvbFIxSk94dkFxTWhTM1JIUHlUZUpIYXdfQjhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi84OWJmM2EtYmY5MC00NjdhLWE5MGItMjJlMjQ4ZWQyMDE0
LzEvbFIxSk94dkFxTWhTM1JIUHlUZUpIYXdfQjhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARqiz/gr4
dzZE2U9uLnBPWw7ylXrP1ysgBKJ0bxKoTlnfdwFy68AIB2sliQhyIvj4mVVL1qHa
BkPFHigAkYuMiNBd7rYC/BI+BMyQgC3/dmUp3sgn3KpTioOtR1VbCcPcXgdDkOBi
rHrBrmGdbtzaD6AkL2d8oua9r8mvvMww39sAqIF3KQUAuBtwC4qDslCcIjzBB9j8
wyGF8M4GqwVnuUiKzLbJf2wN/UwAelAJ+PDdB/RytP+99ivng9W5kHbtqBaJKLUZ
/BWeuxKIu4rB418gYdb91iesO/W0Nt5ADlG6XiFmCnV5HlFL45hxi6jFVVDZU3S+
cUcxCj23/JURXw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 00:55:46 2025 by rpki-client