Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
File: lVcdiLU5ZafQgfOx2CicvCh3W4g.mft (raw, json)
Hash identifier: kASXIRRKcAPWLCQCy4jnAa+s3oTxBgJ+9xE49P7CXpI=
Subject key identifier: 1A:81:6E:F9:B1:D8:3E:B4:0B:E5:E8:C4:A7:D8:90:FE:B4:7E:00:B4
Authority key identifier: 95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88
Certificate issuer: /CN=95571d88b53965a7d081f3b1d8289cbc28775b88
Certificate serial: 019685488FE82585FF832559D3782963B761
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
Manifest number: 1517
Signing time: Wed 30 Apr 2025 06:00:47 +0000
Manifest this update: Wed 30 Apr 2025 06:00:47 +0000
Manifest next update: Thu 01 May 2025 06:00:47 +0000
Files and hashes: 1: e5DeESZZoV9ugwD2DDetvmmqaNQ.roa (hash: oBItgFG7VmwghbXnqb4YDSc7wHHSkFpawBFKEQ4ggoU=)
2: lVcdiLU5ZafQgfOx2CicvCh3W4g.crl (hash: V6OD6dcH2p9yfNPmsOKITtl0/HqoPY7ICkoVERtWwaA=)
3: pusRxy9QftUa2YYJz6wip986r9U.roa (hash: RNMs7mYaUX06i+bmjYIm1r/crAvFi8r8tzeB1u4p4Jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:48:8f:e8:25:85:ff:83:25:59:d3:78:29:63:b7:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95571d88b53965a7d081f3b1d8289cbc28775b88
Validity
Not Before: Apr 30 06:00:47 2025 GMT
Not After : May 1 06:00:47 2025 GMT
Subject: CN=1a816ef9b1d83eb40be5e8c4a7d890feb47e00b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4d:2d:56:76:4c:01:49:ca:02:f5:15:d6:bd:
aa:c9:24:a0:45:5f:70:8a:22:1f:af:2d:88:5d:a7:
9a:63:78:91:f4:90:a0:a5:ef:e7:9a:d9:7a:64:14:
02:13:dd:b0:9e:e4:76:c4:5f:2e:97:c4:d8:33:7a:
dd:f0:a4:03:51:30:a8:06:d5:29:20:1c:d0:e1:c1:
f0:c1:fc:f8:1f:eb:55:eb:fe:c0:09:50:d8:ea:6a:
4e:52:9d:c9:4d:83:57:b9:d3:71:73:ae:13:bb:15:
5a:f2:fe:e2:56:41:ae:18:a4:c0:77:5f:29:3f:73:
63:a2:69:71:e4:61:a3:4e:36:1c:0a:88:bc:1c:4f:
ea:5e:dd:79:25:14:bf:8d:58:60:f2:80:80:28:16:
c0:48:e1:03:37:54:65:38:ef:c3:c7:d1:8e:97:43:
2d:46:fe:aa:5e:6a:f8:b2:4b:9e:c5:d6:50:67:cb:
57:68:98:ba:81:67:28:0f:7a:ff:e3:eb:62:37:32:
03:7f:43:7f:04:15:98:dd:9a:2a:ef:9b:9b:f2:00:
49:24:d6:1e:cd:ea:0c:04:1f:ef:bc:63:b7:ae:c5:
7d:e6:2c:47:3e:1c:bb:b1:d0:71:f7:f8:f0:82:b1:
6c:fa:e3:ad:c7:59:ec:53:bc:fd:49:d3:c5:16:e5:
f0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:81:6E:F9:B1:D8:3E:B4:0B:E5:E8:C4:A7:D8:90:FE:B4:7E:00:B4
X509v3 Authority Key Identifier:
keyid:95:57:1D:88:B5:39:65:A7:D0:81:F3:B1:D8:28:9C:BC:28:77:5B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lVcdiLU5ZafQgfOx2CicvCh3W4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b3f993-d03b-4b13-81af-aa6229698461/1/lVcdiLU5ZafQgfOx2CicvCh3W4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:42:1d:45:37:7f:fb:33:b2:99:98:c2:f0:2f:a3:ef:f0:d5:
1a:e0:9f:07:49:32:bb:88:d8:98:d2:bd:1b:59:27:6a:e6:b2:
d0:49:3e:9b:e8:b3:c2:c4:80:02:77:21:10:43:4e:61:fc:72:
c0:b9:c2:da:9a:ef:a5:ec:1c:3d:e4:10:19:52:e2:ed:19:b0:
4f:04:d0:1e:21:ad:77:50:e3:31:e0:c2:17:c5:e4:a0:2b:91:
56:55:62:2f:3f:e0:df:27:45:86:1b:9d:e7:78:7f:f2:1d:2a:
57:8c:9f:e8:73:d1:56:00:b9:f6:4e:ed:82:52:48:67:d7:c8:
41:6c:bd:1e:7d:a7:ec:4d:ed:e3:3e:7b:8a:5c:cc:c3:51:10:
44:f2:c8:a2:79:16:ed:3f:04:4f:8b:d6:0e:69:ad:8d:63:a2:
a3:8d:c8:23:d9:4c:00:bd:bb:ab:cf:76:b6:98:d1:7f:62:71:
1e:99:a2:6c:70:1e:af:15:d9:fe:bc:5f:87:c8:f0:7a:55:61:
39:08:d3:de:f5:f9:89:b7:f5:14:11:86:b0:7d:03:1f:b6:af:
35:34:1e:75:9e:b3:aa:36:8e:1f:2b:50:d5:5f:0b:f7:5d:a1:
0a:96:8e:dc:04:58:db:6d:f8:20:39:d8:f7:ff:5e:b4:41:3c:
78:c1:84:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaFSI/oJYX/gyVZ03gpY7dhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NTcxZDg4YjUzOTY1YTdkMDgxZjNiMWQ4Mjg5Y2JjMjg3
NzViODgwHhcNMjUwNDMwMDYwMDQ3WhcNMjUwNTAxMDYwMDQ3WjAzMTEwLwYDVQQD
EygxYTgxNmVmOWIxZDgzZWI0MGJlNWU4YzRhN2Q4OTBmZWI0N2UwMGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzk0tVnZMAUnKAvUV1r2qySSgRV9w
iiIfry2IXaeaY3iR9JCgpe/nmtl6ZBQCE92wnuR2xF8ul8TYM3rd8KQDUTCoBtUp
IBzQ4cHwwfz4H+tV6/7ACVDY6mpOUp3JTYNXudNxc64TuxVa8v7iVkGuGKTAd18p
P3Njomlx5GGjTjYcCoi8HE/qXt15JRS/jVhg8oCAKBbASOEDN1RlOO/Dx9GOl0Mt
Rv6qXmr4skuexdZQZ8tXaJi6gWcoD3r/4+tiNzIDf0N/BBWY3Zoq75ub8gBJJNYe
zeoMBB/vvGO3rsV95ixHPhy7sdBx9/jwgrFs+uOtx1nsU7z9SdPFFuXw/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBqBbvmx2D60C+XoxKfYkP60fgC0MB8GA1UdIwQY
MBaAFJVXHYi1OWWn0IHzsdgonLwod1uIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFZjZGlMVTVaYWZRZ2ZPeDJDaWN2Q2gzVzRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9iM2Y5OTMtZDAzYi00YjEzLTgxYWYt
YWE2MjI5Njk4NDYxLzEvbFZjZGlMVTVaYWZRZ2ZPeDJDaWN2Q2gzVzRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9iM2Y5OTMtZDAzYi00YjEzLTgxYWYtYWE2MjI5Njk4NDYx
LzEvbFZjZGlMVTVaYWZRZ2ZPeDJDaWN2Q2gzVzRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATUIdRTd/
+zOymZjC8C+j7/DVGuCfB0kyu4jYmNK9G1knauay0Ek+m+izwsSAAnchEENOYfxy
wLnC2prvpewcPeQQGVLi7RmwTwTQHiGtd1DjMeDCF8XkoCuRVlViLz/g3ydFhhud
53h/8h0qV4yf6HPRVgC59k7tglJIZ9fIQWy9Hn2n7E3t4z57ilzMw1EQRPLIonkW
7T8ET4vWDmmtjWOio43II9lMAL27q892tpjRf2JxHpmibHAerxXZ/rxfh8jwelVh
OQjT3vX5ibf1FBGGsH0DH7avNTQedZ6zqjaOHytQ1V8L912hCpaO3ARY2234IDnY
9/9etEE8eMGEFQ==
-----END CERTIFICATE-----
Generated at Wed Apr 30 13:33:10 2025 by rpki-client