Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.mft
File: 0LkE317sIhazQwFsXLJLuQpD06Q.mft (raw, json)
Hash identifier: 6LCeTZRxBq8gWCZ0i9718U2/D9x8pIxpmlBzmNCGnfk=
Subject key identifier: 97:5E:70:B1:3F:1F:23:E7:61:FE:D9:EF:7A:81:14:4F:65:89:86:0C
Authority key identifier: D0:B9:04:DF:5E:EC:22:16:B3:43:01:6C:5C:B2:4B:B9:0A:43:D3:A4
Certificate issuer: /CN=d0b904df5eec2216b343016c5cb24bb90a43d3a4
Certificate serial: 019674C259EBB9B8A4C56A48F652622B5AF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LkE317sIhazQwFsXLJLuQpD06Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.mft
Manifest number: 150B
Signing time: Sun 27 Apr 2025 01:00:16 +0000
Manifest this update: Sun 27 Apr 2025 01:00:16 +0000
Manifest next update: Mon 28 Apr 2025 01:00:16 +0000
Files and hashes: 1: 0LkE317sIhazQwFsXLJLuQpD06Q.crl (hash: f20QbZtBuefnBzPKk3lsTwTJVhB+hc15Cybf/PH+4Lc=)
2: NrSqEKUOU2XauV-i5XcFK6G4SDE.roa (hash: QbfLyNgfhw89ncOBcXtsqNeuurH1zO/6qaF1UEA+u6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LkE317sIhazQwFsXLJLuQpD06Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:59:eb:b9:b8:a4:c5:6a:48:f6:52:62:2b:5a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b904df5eec2216b343016c5cb24bb90a43d3a4
Validity
Not Before: Apr 27 01:00:16 2025 GMT
Not After : Apr 28 01:00:16 2025 GMT
Subject: CN=975e70b13f1f23e761fed9ef7a81144f6589860c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:17:de:f6:23:50:f4:04:7d:ee:34:92:45:59:
1e:cb:29:c2:09:9c:e6:86:33:06:31:38:6d:36:ed:
f3:de:0d:22:fb:bd:73:4d:97:1d:40:96:88:a8:e0:
9d:52:d3:c2:ee:26:b0:89:e5:e7:10:92:60:2b:2f:
4c:39:1f:bb:9b:bc:9f:19:5c:81:17:da:7b:64:73:
80:ef:fb:8f:3b:9f:c5:5b:63:50:ab:b1:d3:cc:72:
a9:4c:9a:e5:2d:70:d5:43:f7:e5:d8:62:59:57:21:
2a:3c:58:bb:02:16:bb:57:fe:91:c7:de:cd:a9:a3:
05:fd:ac:4e:46:fb:ee:59:de:7e:67:a7:11:23:55:
bd:38:9b:61:ed:c4:c1:a4:70:25:71:75:2b:9f:a2:
30:c7:89:d8:56:d7:86:c1:a5:f1:4b:3b:47:39:a3:
3f:7c:29:cf:56:f1:4f:72:d8:76:f6:67:e2:c2:7c:
d5:2c:50:ca:19:d5:8f:f0:58:4d:56:1d:b4:f8:71:
f0:50:a2:f1:1f:20:22:d6:96:9e:87:42:8c:7b:42:
41:77:e7:cb:af:41:28:63:2c:48:78:dd:a7:eb:a0:
78:88:95:b1:67:6e:6e:3d:49:9e:ac:14:5f:b5:85:
fe:83:86:ba:89:1c:c0:cf:3b:86:58:79:d0:83:a0:
fb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:5E:70:B1:3F:1F:23:E7:61:FE:D9:EF:7A:81:14:4F:65:89:86:0C
X509v3 Authority Key Identifier:
keyid:D0:B9:04:DF:5E:EC:22:16:B3:43:01:6C:5C:B2:4B:B9:0A:43:D3:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LkE317sIhazQwFsXLJLuQpD06Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6a7c93-87b4-4a4c-a21e-41a84f419ac5/1/0LkE317sIhazQwFsXLJLuQpD06Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:f4:31:6b:b8:0c:fc:1c:34:a1:91:73:2b:fe:3e:45:be:6c:
52:ff:53:cb:e5:34:54:d7:8e:12:fb:15:8d:28:41:d2:07:3b:
d8:9b:c1:02:80:e6:53:8b:6c:e4:54:00:b2:61:03:4d:37:53:
8d:25:ac:16:43:99:7a:eb:1b:bf:08:2c:8a:8a:3a:9c:35:24:
26:c9:fd:f2:44:d6:2b:90:d2:d6:d4:27:51:ef:3f:54:77:07:
c9:f9:36:61:5b:7b:63:01:33:ab:9b:24:50:bd:f8:56:0d:0a:
2c:d9:c3:88:8d:b6:a0:ed:11:54:1d:9d:f1:ea:87:93:8c:44:
47:d8:23:c5:34:43:6a:8f:6f:5e:e9:3c:d9:b2:00:ce:1d:a6:
0c:04:b1:63:d3:17:cd:cf:72:ec:cc:ab:f8:e3:d9:0b:d3:5c:
16:bd:2a:73:27:6c:aa:47:3c:0d:11:15:f2:97:c9:9e:d4:f4:
42:83:0c:3c:54:44:f5:81:78:36:19:35:63:ca:eb:3e:d3:a2:
c3:b4:1b:d9:f2:f5:50:a9:c1:e7:6d:46:3c:a1:87:89:ff:8d:
cb:fd:80:b6:18:7a:04:a4:ac:85:c0:a6:19:66:ef:e9:81:6c:
11:ed:9a:6e:a3:46:5a:5c:b7:12:b0:a8:c1:ff:f9:fe:d8:7c:
08:0d:3a:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0wlnrubikxWpI9lJiK1rzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwYjkwNGRmNWVlYzIyMTZiMzQzMDE2YzVjYjI0YmI5MGE0
M2QzYTQwHhcNMjUwNDI3MDEwMDE2WhcNMjUwNDI4MDEwMDE2WjAzMTEwLwYDVQQD
Eyg5NzVlNzBiMTNmMWYyM2U3NjFmZWQ5ZWY3YTgxMTQ0ZjY1ODk4NjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8hfe9iNQ9AR97jSSRVkeyynCCZzm
hjMGMThtNu3z3g0i+71zTZcdQJaIqOCdUtPC7iawieXnEJJgKy9MOR+7m7yfGVyB
F9p7ZHOA7/uPO5/FW2NQq7HTzHKpTJrlLXDVQ/fl2GJZVyEqPFi7Aha7V/6Rx97N
qaMF/axORvvuWd5+Z6cRI1W9OJth7cTBpHAlcXUrn6Iwx4nYVteGwaXxSztHOaM/
fCnPVvFPcth29mfiwnzVLFDKGdWP8FhNVh20+HHwUKLxHyAi1paeh0KMe0JBd+fL
r0EoYyxIeN2n66B4iJWxZ25uPUmerBRftYX+g4a6iRzAzzuGWHnQg6D7vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJdecLE/HyPnYf7Z73qBFE9liYYMMB8GA1UdIwQY
MBaAFNC5BN9e7CIWs0MBbFyyS7kKQ9OkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMExrRTMxN3NJaGF6UXdGc1hMSkx1UXBEMDZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi82YTdjOTMtODdiNC00YTRjLWEyMWUt
NDFhODRmNDE5YWM1LzEvMExrRTMxN3NJaGF6UXdGc1hMSkx1UXBEMDZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi82YTdjOTMtODdiNC00YTRjLWEyMWUtNDFhODRmNDE5YWM1
LzEvMExrRTMxN3NJaGF6UXdGc1hMSkx1UXBEMDZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKfQxa7gM
/Bw0oZFzK/4+Rb5sUv9Ty+U0VNeOEvsVjShB0gc72JvBAoDmU4ts5FQAsmEDTTdT
jSWsFkOZeusbvwgsioo6nDUkJsn98kTWK5DS1tQnUe8/VHcHyfk2YVt7YwEzq5sk
UL34Vg0KLNnDiI22oO0RVB2d8eqHk4xER9gjxTRDao9vXuk82bIAzh2mDASxY9MX
zc9y7Myr+OPZC9NcFr0qcydsqkc8DREV8pfJntT0QoMMPFRE9YF4Nhk1Y8rrPtOi
w7Qb2fL1UKnB521GPKGHif+Ny/2Athh6BKSshcCmGWbv6YFsEe2abqNGWly3ErCo
wf/5/th8CA06cA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:17:17 2025 by rpki-client