Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
File: lZmz54I3DcKBT1JcHW7OhNj3DzY.mft (raw, json)
Hash identifier: u9LUtPTQgkoJkX3ZR+F7ZA5Wew+k17c0G3QtNOjyqjQ=
Subject key identifier: A6:78:91:02:1A:C4:5A:12:88:0D:74:43:CE:A2:81:0C:2C:6C:5B:A6
Authority key identifier: 95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36
Certificate issuer: /CN=9599b3e782370dc2814f525c1d6ece84d8f70f36
Certificate serial: 01967F462C3C3C259FF1B52E1476FC600AFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
Manifest number: 01B4
Signing time: Tue 29 Apr 2025 02:00:27 +0000
Manifest this update: Tue 29 Apr 2025 02:00:27 +0000
Manifest next update: Wed 30 Apr 2025 02:00:27 +0000
Files and hashes: 1: 0VA_9HQvgavGjx805ubmo2Lo5H0.roa (hash: LdNiPcj48/zXBSO9oEQ4RJjrS+zHAsqfBOtXhy9k8x4=)
2: VrF_JXAYi7cHSdA7vOtQcy0-na0.roa (hash: T3vCer2CYjMD216ESnj/Jeswzt56af8ZdG15R1wMajk=)
3: lZmz54I3DcKBT1JcHW7OhNj3DzY.crl (hash: md3nNA+48QjW8c9cXU/SWyxqRAfag6k0VsGPqtVP4ME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:46:2c:3c:3c:25:9f:f1:b5:2e:14:76:fc:60:0a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9599b3e782370dc2814f525c1d6ece84d8f70f36
Validity
Not Before: Apr 29 02:00:27 2025 GMT
Not After : Apr 30 02:00:27 2025 GMT
Subject: CN=a67891021ac45a12880d7443cea2810c2c6c5ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:02:c2:77:6c:5e:03:e8:5a:db:2c:2e:c7:cd:
7c:b6:f0:7d:74:30:74:63:13:12:67:03:a8:6d:f5:
0d:25:d4:36:55:c7:fe:ef:78:5c:73:ab:5b:e2:d4:
91:62:b5:2c:f3:ba:9d:c3:4e:79:42:3b:8e:85:6b:
78:d4:52:35:24:13:b1:ab:21:f0:66:c5:4c:a8:60:
ea:08:65:1f:e7:66:e3:28:bf:36:9d:9d:1f:22:95:
b3:84:1e:f9:fd:5e:de:c2:90:a9:2b:60:80:50:73:
a6:8d:06:b1:39:25:a4:3d:cc:70:29:3d:a4:2f:13:
1f:85:ff:1b:5f:47:da:6e:92:4a:5f:43:6d:1b:a9:
8e:e2:ed:60:f9:3a:5f:76:9b:9f:75:d5:ea:ae:be:
53:a5:25:48:60:c0:0a:7d:60:7b:6a:8c:10:90:26:
de:1d:68:36:fa:5b:a0:40:08:7e:58:5b:95:9d:a8:
8e:ac:2c:2d:e3:63:67:eb:25:a7:1e:01:e4:8d:81:
87:55:bb:94:26:96:d7:61:0a:fa:23:54:a3:56:f9:
34:15:16:42:cb:33:d4:45:8c:56:e4:c8:87:af:5e:
63:6d:ea:a9:73:2f:f7:b0:7b:bb:d8:14:3d:e3:b9:
d3:d5:41:08:9d:b6:48:b0:a3:2d:ab:43:84:75:b1:
2b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:78:91:02:1A:C4:5A:12:88:0D:74:43:CE:A2:81:0C:2C:6C:5B:A6
X509v3 Authority Key Identifier:
keyid:95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:bc:b4:2a:6e:33:58:45:69:9b:b1:f8:56:e3:4f:c7:dd:7b:
8b:84:ea:06:0e:3e:70:3e:9e:31:37:5b:9f:9d:2c:98:b9:91:
70:59:02:21:46:9b:68:cf:68:00:df:86:42:55:41:7b:a2:59:
7d:01:65:f9:b9:47:ad:93:11:42:75:19:2e:78:f1:c7:98:fe:
d5:76:ae:08:d3:13:a4:0d:5f:ec:9f:6f:ac:25:b6:9f:ff:43:
e5:3c:04:8c:a2:40:f1:e8:11:bf:33:96:0f:b5:25:cf:3f:03:
1f:40:7d:5b:08:8b:55:93:ff:bf:4f:2a:04:56:4b:74:13:0b:
c0:49:ea:ae:72:a9:63:27:fa:4b:e5:7b:1f:e5:eb:68:e7:d3:
7f:4d:e4:8f:2f:8b:36:f9:e8:df:a3:00:d5:02:69:3b:ed:a2:
cb:82:20:ef:2d:12:c6:1e:5f:b1:b2:d2:9e:d4:99:24:b4:b8:
6b:64:c1:e9:73:dd:62:3d:ea:ec:e6:33:04:0c:62:f2:4c:89:
34:74:42:a3:ef:42:95:af:5c:0f:7f:61:9d:f8:a8:28:ac:97:
c7:97:88:0e:de:4a:a2:20:c7:86:fd:cf:50:65:36:6f:9e:55:
87:d9:d1:65:0d:fa:f9:a6:1b:f3:6a:ea:d5:46:63:79:dc:d9:
da:dd:d2:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/Riw8PCWf8bUuFHb8YAr9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1OTliM2U3ODIzNzBkYzI4MTRmNTI1YzFkNmVjZTg0ZDhm
NzBmMzYwHhcNMjUwNDI5MDIwMDI3WhcNMjUwNDMwMDIwMDI3WjAzMTEwLwYDVQQD
EyhhNjc4OTEwMjFhYzQ1YTEyODgwZDc0NDNjZWEyODEwYzJjNmM1YmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuALCd2xeA+ha2ywux818tvB9dDB0
YxMSZwOobfUNJdQ2Vcf+73hcc6tb4tSRYrUs87qdw055QjuOhWt41FI1JBOxqyHw
ZsVMqGDqCGUf52bjKL82nZ0fIpWzhB75/V7ewpCpK2CAUHOmjQaxOSWkPcxwKT2k
LxMfhf8bX0fabpJKX0NtG6mO4u1g+TpfdpufddXqrr5TpSVIYMAKfWB7aowQkCbe
HWg2+lugQAh+WFuVnaiOrCwt42Nn6yWnHgHkjYGHVbuUJpbXYQr6I1SjVvk0FRZC
yzPURYxW5MiHr15jbeqpcy/3sHu72BQ947nT1UEInbZIsKMtq0OEdbErIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZ4kQIaxFoSiA10Q86igQwsbFumMB8GA1UdIwQY
MBaAFJWZs+eCNw3CgU9SXB1uzoTY9w82MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFptejU0STNEY0tCVDFKY0hXN09oTmozRHpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi80MGExMDItZWZjZC00ZmQyLTkzNzMt
ZDA2YWE1MThhYTZkLzEvbFptejU0STNEY0tCVDFKY0hXN09oTmozRHpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi80MGExMDItZWZjZC00ZmQyLTkzNzMtZDA2YWE1MThhYTZk
LzEvbFptejU0STNEY0tCVDFKY0hXN09oTmozRHpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACby0Km4z
WEVpm7H4VuNPx917i4TqBg4+cD6eMTdbn50smLmRcFkCIUabaM9oAN+GQlVBe6JZ
fQFl+blHrZMRQnUZLnjxx5j+1XauCNMTpA1f7J9vrCW2n/9D5TwEjKJA8egRvzOW
D7Ulzz8DH0B9WwiLVZP/v08qBFZLdBMLwEnqrnKpYyf6S+V7H+XraOfTf03kjy+L
Nvno36MA1QJpO+2iy4Ig7y0Sxh5fsbLSntSZJLS4a2TB6XPdYj3q7OYzBAxi8kyJ
NHRCo+9Cla9cD39hnfioKKyXx5eIDt5KoiDHhv3PUGU2b55Vh9nRZQ36+aYb82rq
1UZjedzZ2t3SxQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:13:34 2025 by rpki-client