Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft
File: LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft (raw, json)
Hash identifier: Zs4HXrXhcEHsxID0KDC/dP6oLDL77l6XtSVu6QdN6Fo=
Subject key identifier: 4D:4D:DF:C6:74:DC:39:AE:E2:B3:2F:BB:2F:70:B8:6D:FA:82:FE:D7
Authority key identifier: 2C:FA:A2:2B:D6:5C:AC:82:85:8E:A0:91:68:6D:5B:3B:4B:E3:BD:39
Certificate issuer: /CN=2cfaa22bd65cac82858ea091686d5b3b4be3bd39
Certificate serial: 019674C27825174FF05EB7DEFA6E7518135C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft
Manifest number: 100C
Signing time: Sun 27 Apr 2025 01:00:23 +0000
Manifest this update: Sun 27 Apr 2025 01:00:23 +0000
Manifest next update: Mon 28 Apr 2025 01:00:23 +0000
Files and hashes: 1: 6HQFKIaH-doszFtkd3GkDQ1Wxaw.roa (hash: 1OXXKiYa8WQkCMkAZRnTwQi7yeY/wqvng1D/8Z8Ivmg=)
2: LPqiK9ZcrIKFjqCRaG1bO0vjvTk.crl (hash: 3j3gEwek/2i7T9sqveMpWz2kk3km0298fYzHvccYSxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:78:25:17:4f:f0:5e:b7:de:fa:6e:75:18:13:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cfaa22bd65cac82858ea091686d5b3b4be3bd39
Validity
Not Before: Apr 27 01:00:23 2025 GMT
Not After : Apr 28 01:00:23 2025 GMT
Subject: CN=4d4ddfc674dc39aee2b32fbb2f70b86dfa82fed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:69:22:b8:14:a7:72:c5:16:59:fa:c0:a1:6f:
2a:b6:bf:40:31:8c:bd:42:48:78:97:ee:e2:0c:42:
c0:2e:8f:65:66:16:4a:1f:7d:89:44:b9:86:fc:8b:
5b:b3:3e:1a:46:52:d5:6b:c6:92:41:42:57:86:46:
3d:cd:de:07:d1:f0:85:97:82:7b:3e:bc:4a:ae:68:
5f:e0:b4:74:1b:cd:04:98:a3:b4:20:c8:fc:df:e3:
51:e5:13:ce:58:62:d2:aa:8d:59:10:a3:c5:8f:d7:
f6:e5:af:d1:2d:5b:a5:e4:19:26:05:17:64:2c:26:
79:28:69:21:f7:3b:b5:c5:30:03:29:1a:b1:1a:02:
83:10:a3:37:cc:cf:81:95:09:ca:b0:5c:56:59:51:
5d:e2:6d:03:b3:bd:d4:1e:21:5a:a0:0b:5d:93:86:
98:5b:58:61:ce:1b:4c:6c:ee:32:30:83:f9:4b:f4:
2f:6e:81:23:3c:20:3f:d5:7a:b1:a7:36:ee:12:28:
17:45:e3:0f:9e:09:3c:78:aa:eb:85:91:e0:1b:5b:
2a:0b:ad:fc:79:8f:a7:fa:cb:ad:f1:e7:e6:9a:1a:
d9:32:ea:f5:6e:91:6b:76:bd:2f:f3:1b:7d:d0:89:
1b:73:e5:6d:f6:e8:e7:3d:08:82:f6:43:7a:f0:dd:
1c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4D:DF:C6:74:DC:39:AE:E2:B3:2F:BB:2F:70:B8:6D:FA:82:FE:D7
X509v3 Authority Key Identifier:
keyid:2C:FA:A2:2B:D6:5C:AC:82:85:8E:A0:91:68:6D:5B:3B:4B:E3:BD:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:21:a9:1b:04:84:2b:a8:df:3e:c4:61:9d:ea:7a:2d:c5:a0:
9d:3a:45:6f:3b:2f:cd:3c:66:26:2d:c0:53:22:a7:59:7c:eb:
cc:4c:a4:21:7b:4a:b0:e9:93:73:ac:60:26:74:d3:0a:f8:a4:
92:11:7f:3e:2f:97:f4:9a:14:c9:3f:7e:f9:e8:2b:f0:d1:1b:
9b:7f:15:5e:f4:f5:81:73:f0:e8:4f:59:b6:8e:7f:02:ab:89:
90:96:d1:0f:57:37:a9:e2:56:55:46:c0:52:bb:94:fe:3f:d9:
11:82:92:a1:e4:24:23:ab:32:47:9e:84:e1:1e:c7:ec:49:50:
87:37:98:da:1c:cd:2e:fd:5f:b7:7d:bf:0e:bf:e1:d1:64:c4:
8e:ef:bd:f2:16:fc:b9:0f:33:71:ad:09:4d:2f:38:6c:a5:c6:
11:5f:1b:0e:91:52:ab:d6:15:f7:cd:e5:27:94:8a:ac:7d:98:
07:4b:24:87:71:c2:9b:42:39:a7:6f:d9:fd:ca:11:a4:61:19:
1e:ff:00:1d:88:b6:4c:79:bb:77:9b:3e:12:d8:07:a4:13:c0:
1e:fa:9f:e4:d3:01:eb:8a:48:24:2c:d0:7c:93:a1:31:53:ee:
1f:39:c4:eb:39:2d:fe:d1:02:40:1e:41:47:40:95:e6:37:fb:
b7:b1:a2:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0wnglF0/wXrfe+m51GBNcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjZmFhMjJiZDY1Y2FjODI4NThlYTA5MTY4NmQ1YjNiNGJl
M2JkMzkwHhcNMjUwNDI3MDEwMDIzWhcNMjUwNDI4MDEwMDIzWjAzMTEwLwYDVQQD
Eyg0ZDRkZGZjNjc0ZGMzOWFlZTJiMzJmYmIyZjcwYjg2ZGZhODJmZWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWkiuBSncsUWWfrAoW8qtr9AMYy9
Qkh4l+7iDELALo9lZhZKH32JRLmG/Itbsz4aRlLVa8aSQUJXhkY9zd4H0fCFl4J7
PrxKrmhf4LR0G80EmKO0IMj83+NR5RPOWGLSqo1ZEKPFj9f25a/RLVul5BkmBRdk
LCZ5KGkh9zu1xTADKRqxGgKDEKM3zM+BlQnKsFxWWVFd4m0Ds73UHiFaoAtdk4aY
W1hhzhtMbO4yMIP5S/QvboEjPCA/1XqxpzbuEigXReMPngk8eKrrhZHgG1sqC638
eY+n+sut8efmmhrZMur1bpFrdr0v8xt90Ikbc+Vt9ujnPQiC9kN68N0c2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE1N38Z03Dmu4rMvuy9wuG36gv7XMB8GA1UdIwQY
MBaAFCz6oivWXKyChY6gkWhtWztL4705MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFBxaUs5WmNySUtGanFDUmFHMWJPMHZqdlRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS81YmU0NGMtYTRmMi00YmQwLWI1YTct
YjQ2ODgzOGM3ZmRmLzEvTFBxaUs5WmNySUtGanFDUmFHMWJPMHZqdlRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS81YmU0NGMtYTRmMi00YmQwLWI1YTctYjQ2ODgzOGM3ZmRm
LzEvTFBxaUs5WmNySUtGanFDUmFHMWJPMHZqdlRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZiGpGwSE
K6jfPsRhnep6LcWgnTpFbzsvzTxmJi3AUyKnWXzrzEykIXtKsOmTc6xgJnTTCvik
khF/Pi+X9JoUyT9++egr8NEbm38VXvT1gXPw6E9Zto5/AquJkJbRD1c3qeJWVUbA
UruU/j/ZEYKSoeQkI6syR56E4R7H7ElQhzeY2hzNLv1ft32/Dr/h0WTEju+98hb8
uQ8zca0JTS84bKXGEV8bDpFSq9YV983lJ5SKrH2YB0skh3HCm0I5p2/Z/coRpGEZ
Hv8AHYi2THm7d5s+EtgHpBPAHvqf5NMB64pIJCzQfJOhMVPuHznE6zkt/tECQB5B
R0CV5jf7t7Gi7g==
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:16:05 2025 by rpki-client