Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/320ef9-3541-4321-80ff-f85c60be340d/1/lWmTFkJJYHEcLo7LU2vdArxyT60.mft
File: lWmTFkJJYHEcLo7LU2vdArxyT60.mft (raw, json)
Hash identifier: IKm+o6fUoW0zbmPSSZwS6+r5VGv0BTgNQCxhcpQeceo=
Subject key identifier: 21:FE:49:38:D3:BC:1A:A8:A5:B0:1B:C1:58:93:8F:8A:51:86:35:0A
Authority key identifier: 95:69:93:16:42:49:60:71:1C:2E:8E:CB:53:6B:DD:02:BC:72:4F:AD
Certificate issuer: /CN=95699316424960711c2e8ecb536bdd02bc724fad
Certificate serial: 0196789F32A31C65A5227229E77F60AB7D47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWmTFkJJYHEcLo7LU2vdArxyT60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/320ef9-3541-4321-80ff-f85c60be340d/1/lWmTFkJJYHEcLo7LU2vdArxyT60.mft
Manifest number: 0389
Signing time: Sun 27 Apr 2025 19:00:21 +0000
Manifest this update: Sun 27 Apr 2025 19:00:21 +0000
Manifest next update: Mon 28 Apr 2025 19:00:21 +0000
Files and hashes: 1: QlwSz5QY3CNReEwoqy5_qdcxp7E.roa (hash: J1QwLI9Oak3umoZp+VK8k+3z4SfC016Ed6Yx+Y0FOX0=)
2: lWmTFkJJYHEcLo7LU2vdArxyT60.crl (hash: 2ohBy2UJiBDuQMhdcBse4VETuUn91OZSNGRNo/+8d5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/320ef9-3541-4321-80ff-f85c60be340d/1/lWmTFkJJYHEcLo7LU2vdArxyT60.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/320ef9-3541-4321-80ff-f85c60be340d/1/lWmTFkJJYHEcLo7LU2vdArxyT60.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWmTFkJJYHEcLo7LU2vdArxyT60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 19:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:32:a3:1c:65:a5:22:72:29:e7:7f:60:ab:7d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95699316424960711c2e8ecb536bdd02bc724fad
Validity
Not Before: Apr 27 19:00:21 2025 GMT
Not After : Apr 28 19:00:21 2025 GMT
Subject: CN=21fe4938d3bc1aa8a5b01bc158938f8a5186350a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3a:3e:1f:ed:1f:03:73:39:46:94:c2:b3:c1:
f3:45:f9:bc:20:94:a2:aa:d4:9e:d7:d5:9d:79:41:
42:67:27:c4:05:86:ab:56:90:e0:e7:e2:20:8c:12:
81:19:5e:18:a2:db:96:f7:e8:26:c9:1d:ad:58:48:
d6:0a:1f:30:52:aa:a3:cd:e8:93:89:3b:e5:92:5b:
1b:ee:09:44:19:b1:3f:6b:3b:5e:72:7c:fd:5d:48:
08:5f:7c:19:44:a2:57:27:7b:d1:ee:d9:be:ec:bf:
2d:5e:63:61:3e:5b:19:c1:32:96:ac:85:dc:d5:cb:
92:08:cb:c5:f3:bb:ff:84:ee:51:2c:a4:d0:73:d9:
6b:ee:0b:39:93:94:51:9d:66:a9:8d:ed:d5:5d:bb:
ba:86:ed:27:84:5b:a1:67:49:66:2e:fb:f7:5a:32:
7c:41:1b:3a:54:6b:5f:4b:31:8d:04:fb:a4:18:20:
79:09:40:2f:93:ec:e9:c8:31:cd:51:0c:c6:19:a0:
37:2d:16:1c:2e:a0:6b:d4:7e:6d:a2:06:34:e9:58:
5b:03:38:15:c6:ad:67:cb:2d:06:39:81:83:66:b7:
b2:75:f4:00:8e:50:22:58:8c:44:04:7e:46:d4:82:
fb:06:f6:16:c4:ea:15:58:88:1d:12:1c:d6:be:1c:
fa:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FE:49:38:D3:BC:1A:A8:A5:B0:1B:C1:58:93:8F:8A:51:86:35:0A
X509v3 Authority Key Identifier:
keyid:95:69:93:16:42:49:60:71:1C:2E:8E:CB:53:6B:DD:02:BC:72:4F:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWmTFkJJYHEcLo7LU2vdArxyT60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/320ef9-3541-4321-80ff-f85c60be340d/1/lWmTFkJJYHEcLo7LU2vdArxyT60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/320ef9-3541-4321-80ff-f85c60be340d/1/lWmTFkJJYHEcLo7LU2vdArxyT60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:01:b0:bf:48:89:16:1b:6f:67:80:f1:a3:b0:ec:a6:8c:01:
47:cc:6e:ad:37:35:bc:59:79:d4:c7:6c:83:1c:75:50:b5:0e:
f5:26:09:fc:7a:55:b7:ba:59:d3:96:44:70:29:de:d9:68:d2:
0d:52:03:0a:75:29:f0:84:ff:1f:fd:d9:2b:09:13:73:06:b1:
61:d2:01:c6:e2:e6:f5:8d:d1:e0:32:7a:df:fe:a1:63:62:6b:
85:b3:96:02:8f:5d:16:ff:ec:0b:92:e6:17:08:04:91:6c:79:
71:a1:e8:2c:7a:3c:6f:0f:2d:19:94:bd:75:59:cf:26:67:18:
20:51:15:bc:6b:91:5e:43:56:18:31:c4:b0:85:72:14:70:25:
b0:1c:3f:67:e8:40:d8:76:35:ed:67:d0:17:97:33:6e:c4:bb:
4c:c4:0a:7d:eb:48:89:21:77:d3:06:9b:0b:0a:58:83:40:1c:
d0:28:04:12:d0:da:f5:d2:7d:db:2d:66:25:cd:f1:6b:f0:3f:
91:d9:74:41:83:69:78:e4:68:64:1c:3b:ee:0c:02:2f:55:11:
15:47:6e:a9:c1:31:e0:d5:21:09:7f:9f:74:cd:f1:61:98:49:
a8:25:24:8f:a2:ee:f9:ec:c3:dc:ee:ea:1a:d9:81:da:22:0a:
5b:de:22:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ4nzKjHGWlInIp539gq31HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1Njk5MzE2NDI0OTYwNzExYzJlOGVjYjUzNmJkZDAyYmM3
MjRmYWQwHhcNMjUwNDI3MTkwMDIxWhcNMjUwNDI4MTkwMDIxWjAzMTEwLwYDVQQD
EygyMWZlNDkzOGQzYmMxYWE4YTViMDFiYzE1ODkzOGY4YTUxODYzNTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzo+H+0fA3M5RpTCs8HzRfm8IJSi
qtSe19WdeUFCZyfEBYarVpDg5+IgjBKBGV4YotuW9+gmyR2tWEjWCh8wUqqjzeiT
iTvlklsb7glEGbE/aztecnz9XUgIX3wZRKJXJ3vR7tm+7L8tXmNhPlsZwTKWrIXc
1cuSCMvF87v/hO5RLKTQc9lr7gs5k5RRnWapje3VXbu6hu0nhFuhZ0lmLvv3WjJ8
QRs6VGtfSzGNBPukGCB5CUAvk+zpyDHNUQzGGaA3LRYcLqBr1H5togY06VhbAzgV
xq1nyy0GOYGDZreydfQAjlAiWIxEBH5G1IL7BvYWxOoVWIgdEhzWvhz6DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCH+STjTvBqopbAbwViTj4pRhjUKMB8GA1UdIwQY
MBaAFJVpkxZCSWBxHC6Oy1Nr3QK8ck+tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFdtVEZrSkpZSEVjTG83TFUydmRBcnh5VDYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zMjBlZjktMzU0MS00MzIxLTgwZmYt
Zjg1YzYwYmUzNDBkLzEvbFdtVEZrSkpZSEVjTG83TFUydmRBcnh5VDYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8zMjBlZjktMzU0MS00MzIxLTgwZmYtZjg1YzYwYmUzNDBk
LzEvbFdtVEZrSkpZSEVjTG83TFUydmRBcnh5VDYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQQGwv0iJ
FhtvZ4Dxo7DspowBR8xurTc1vFl51Mdsgxx1ULUO9SYJ/HpVt7pZ05ZEcCne2WjS
DVIDCnUp8IT/H/3ZKwkTcwaxYdIBxuLm9Y3R4DJ63/6hY2JrhbOWAo9dFv/sC5Lm
FwgEkWx5caHoLHo8bw8tGZS9dVnPJmcYIFEVvGuRXkNWGDHEsIVyFHAlsBw/Z+hA
2HY17WfQF5czbsS7TMQKfetIiSF30wabCwpYg0Ac0CgEEtDa9dJ92y1mJc3xa/A/
kdl0QYNpeORoZBw77gwCL1URFUduqcEx4NUhCX+fdM3xYZhJqCUkj6Lu+ezD3O7q
GtmB2iIKW94iFw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 03:40:13 2025 by rpki-client