Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft
File: lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft (raw, json)
Hash identifier: qyNtd392IfUI+ZjNcQQgolW/xWDeOGsXYAl+PO3EDYE=
Subject key identifier: A8:4F:45:13:0D:4F:3B:8F:F9:FF:EB:C3:30:53:32:CC:F2:28:D7:E2
Authority key identifier: 94:28:2A:60:78:BA:98:FB:4A:6E:34:3E:76:03:A9:60:E7:A6:34:42
Certificate issuer: /CN=94282a6078ba98fb4a6e343e7603a960e7a63442
Certificate serial: 019691F1B227B01E04A9FBAF39B03E9AF28D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCgqYHi6mPtKbjQ-dgOpYOemNEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft
Manifest number: 14D8
Signing time: Fri 02 May 2025 17:00:58 +0000
Manifest this update: Fri 02 May 2025 17:00:58 +0000
Manifest next update: Sat 03 May 2025 17:00:58 +0000
Files and hashes: 1: G39ME0xFxZesqQwqos2EdI8n7qo.roa (hash: 8k5VE0uXEGXbMB9ED4RCnZSTVNYbIG3+AEXwxhVpiyI=)
2: lCgqYHi6mPtKbjQ-dgOpYOemNEI.crl (hash: Gmh98rdLz22Zz25z/57f+RWvoiVmipxutGt4oOZfuSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lCgqYHi6mPtKbjQ-dgOpYOemNEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 14:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:f1:b2:27:b0:1e:04:a9:fb:af:39:b0:3e:9a:f2:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94282a6078ba98fb4a6e343e7603a960e7a63442
Validity
Not Before: May 2 17:00:58 2025 GMT
Not After : May 3 17:00:58 2025 GMT
Subject: CN=a84f45130d4f3b8ff9ffebc3305332ccf228d7e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7a:3f:5c:2c:1b:36:be:6d:9e:24:81:7c:f4:
27:59:3e:67:20:31:de:98:4c:66:c5:09:98:ad:f1:
f5:1c:51:4c:28:48:10:24:91:5d:05:90:62:dc:c9:
60:4b:09:41:85:39:14:16:f3:02:61:49:27:4a:69:
f9:13:62:40:67:fa:e6:42:04:9b:65:b9:af:2c:c0:
46:92:3e:88:17:da:bc:6b:66:96:75:ca:71:4e:4e:
a9:c9:60:46:ea:44:46:56:53:27:c4:ac:5b:37:ab:
3a:09:f7:6d:32:b2:11:96:8f:6a:c0:39:99:c2:d0:
60:24:c1:4d:b6:1b:0d:53:57:f3:8a:82:90:cf:28:
71:17:e4:74:5b:e9:0a:f0:ef:0f:ed:f9:48:ab:12:
09:93:ec:cd:b3:14:28:07:b2:81:de:7b:a3:6c:b3:
15:fa:2a:6d:5e:32:37:35:36:75:f4:fb:5a:77:e6:
0d:7d:54:15:3d:5d:94:07:83:c9:77:9f:b4:32:26:
fb:27:d5:71:f4:2d:f9:06:54:dd:ea:d2:62:ba:27:
6f:1a:2b:0d:67:c6:d0:7d:65:10:f8:ce:fb:86:c7:
e7:f8:e1:92:d1:7d:64:f8:28:57:2c:6f:98:30:50:
1d:48:ab:29:e7:22:eb:d7:d0:89:1e:e6:c1:ac:a1:
cf:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4F:45:13:0D:4F:3B:8F:F9:FF:EB:C3:30:53:32:CC:F2:28:D7:E2
X509v3 Authority Key Identifier:
keyid:94:28:2A:60:78:BA:98:FB:4A:6E:34:3E:76:03:A9:60:E7:A6:34:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCgqYHi6mPtKbjQ-dgOpYOemNEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:d5:8d:a1:a6:0d:0d:ae:97:10:d8:22:80:e9:c8:2f:e3:5d:
1d:a2:cb:74:c8:f1:07:5c:17:d6:d3:f5:2d:d5:e9:f0:78:32:
5f:95:4c:69:58:76:bf:f4:65:a8:11:a8:f5:0b:89:65:8b:72:
a7:4e:8e:5e:e8:e5:34:46:16:28:fb:68:ff:36:ce:91:0b:80:
23:e4:7f:83:36:ec:58:43:d1:7c:88:3a:27:d6:f9:b9:12:3d:
ca:94:3d:b1:f2:8c:f0:74:fa:4f:af:cf:83:26:52:10:1f:11:
67:02:69:dc:e7:0b:0a:de:4d:12:9e:0c:de:1b:f5:95:43:af:
79:eb:c5:ca:11:8b:65:9e:5c:8a:dd:14:48:ce:d2:1a:6e:f0:
b9:e0:a5:6e:2f:58:73:13:6a:b2:8b:b3:5d:59:c0:95:1e:c1:
16:d5:1c:22:f3:54:dd:0c:11:b5:70:6b:b8:a7:a7:cd:8d:5a:
e1:e4:ad:5c:5a:dc:37:fa:a5:3a:36:1f:10:aa:5e:f2:d7:3e:
75:3d:09:d8:ae:1d:cf:87:81:68:37:50:de:9a:a6:90:54:32:
02:f8:7f:91:1f:da:90:d1:b7:5c:e3:4e:ec:0d:66:b5:44:b6:
7e:1a:2e:0e:1b:67:67:ef:5b:cc:42:1f:39:76:1a:a1:05:c6:
bd:96:51:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaR8bInsB4EqfuvObA+mvKNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MjgyYTYwNzhiYTk4ZmI0YTZlMzQzZTc2MDNhOTYwZTdh
NjM0NDIwHhcNMjUwNTAyMTcwMDU4WhcNMjUwNTAzMTcwMDU4WjAzMTEwLwYDVQQD
EyhhODRmNDUxMzBkNGYzYjhmZjlmZmViYzMzMDUzMzJjY2YyMjhkN2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXo/XCwbNr5tniSBfPQnWT5nIDHe
mExmxQmYrfH1HFFMKEgQJJFdBZBi3MlgSwlBhTkUFvMCYUknSmn5E2JAZ/rmQgSb
ZbmvLMBGkj6IF9q8a2aWdcpxTk6pyWBG6kRGVlMnxKxbN6s6CfdtMrIRlo9qwDmZ
wtBgJMFNthsNU1fzioKQzyhxF+R0W+kK8O8P7flIqxIJk+zNsxQoB7KB3nujbLMV
+iptXjI3NTZ19Ptad+YNfVQVPV2UB4PJd5+0Mib7J9Vx9C35BlTd6tJiuidvGisN
Z8bQfWUQ+M77hsfn+OGS0X1k+ChXLG+YMFAdSKsp5yLr19CJHubBrKHPjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKhPRRMNTzuP+f/rwzBTMszyKNfiMB8GA1UdIwQY
MBaAFJQoKmB4upj7Sm40PnYDqWDnpjRCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbENncVlIaTZtUHRLYmpRLWRnT3BZT2VtTkVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8yYTk2YjgtMDQ2ZC00YWMzLWIyM2Qt
ZDgxOTc5NGEzMmEzLzEvbENncVlIaTZtUHRLYmpRLWRnT3BZT2VtTkVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi8yYTk2YjgtMDQ2ZC00YWMzLWIyM2QtZDgxOTc5NGEzMmEz
LzEvbENncVlIaTZtUHRLYmpRLWRnT3BZT2VtTkVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm9WNoaYN
Da6XENgigOnIL+NdHaLLdMjxB1wX1tP1LdXp8HgyX5VMaVh2v/RlqBGo9QuJZYty
p06OXujlNEYWKPto/zbOkQuAI+R/gzbsWEPRfIg6J9b5uRI9ypQ9sfKM8HT6T6/P
gyZSEB8RZwJp3OcLCt5NEp4M3hv1lUOveevFyhGLZZ5cit0USM7SGm7wueClbi9Y
cxNqsouzXVnAlR7BFtUcIvNU3QwRtXBruKenzY1a4eStXFrcN/qlOjYfEKpe8tc+
dT0J2K4dz4eBaDdQ3pqmkFQyAvh/kR/akNG3XONO7A1mtUS2fhouDhtnZ+9bzEIf
OXYaoQXGvZZRDA==
-----END CERTIFICATE-----
Generated at Fri May 2 23:27:22 2025 by rpki-client