Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
File: 1lRDbtMkK925b98TmhJT3rmG39A.mft (raw, json)
Hash identifier: L8xX5FV6Y1ZUE9dJC69gdHKhSvbs57Upmbx6TtsRGRg=
Subject key identifier: 6E:05:3A:C7:EA:E2:7E:A9:A3:56:B2:6D:37:C4:3C:EF:D7:AF:FF:45
Authority key identifier: D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0
Certificate issuer: /CN=d654436ed3242bddb96fdf139a1253deb986dfd0
Certificate serial: 0196986147AACDF0D21D43B400A1493BB032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
Manifest number: 1525
Signing time: Sat 03 May 2025 23:00:34 +0000
Manifest this update: Sat 03 May 2025 23:00:34 +0000
Manifest next update: Sun 04 May 2025 23:00:34 +0000
Files and hashes: 1: 1lRDbtMkK925b98TmhJT3rmG39A.crl (hash: Y0fU9sT2+/CuAjXntURyyUY1P9HG6Kat0nJ7LHcegr0=)
2: _kWvdqNfB5Qi_pth9OeMu1E5uoI.roa (hash: NWHqYOJDwR6XeYKKHls7B7q+f2asHmCl+FEc/+iucHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:98:61:47:aa:cd:f0:d2:1d:43:b4:00:a1:49:3b:b0:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d654436ed3242bddb96fdf139a1253deb986dfd0
Validity
Not Before: May 3 23:00:34 2025 GMT
Not After : May 4 23:00:34 2025 GMT
Subject: CN=6e053ac7eae27ea9a356b26d37c43cefd7afff45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:53:33:22:09:02:37:9e:b0:13:c7:1c:15:91:
a9:50:f8:fc:eb:2c:88:d5:24:e6:24:c5:4e:8b:81:
98:b7:dd:a5:93:7d:e2:92:e3:a0:c7:a6:37:92:6c:
4f:64:93:59:ff:13:14:8d:1a:fc:9a:e5:6c:af:1a:
9e:31:cd:45:fe:0e:21:55:c6:30:55:be:78:ff:c9:
6e:1a:76:5b:64:36:38:1f:b6:e5:30:d9:19:0e:ba:
42:88:ee:a3:6c:7e:41:5a:61:ff:0f:ae:44:96:b9:
d9:8f:8f:0b:d4:4c:ee:fc:6c:de:b4:e9:f6:7e:cb:
53:2d:aa:74:65:d9:45:61:ae:33:89:5d:0f:85:f5:
cf:7d:cc:70:51:17:57:70:7e:d0:3f:3f:eb:01:5e:
74:fc:f9:6b:0f:a6:86:5c:14:51:c9:a9:05:5e:b7:
5d:f8:6e:8f:eb:99:14:3d:bc:22:03:1d:a2:dd:cf:
41:3c:ea:a7:b2:d3:99:4d:c9:9c:2b:d4:12:0f:39:
fa:6b:2b:da:f1:88:3a:c0:ef:f0:42:a3:55:59:89:
21:c2:78:2e:ae:11:7a:bc:f7:1b:62:c6:40:fd:8a:
ea:c7:ad:41:91:9b:84:c3:48:75:0d:86:db:d1:d7:
0e:4e:9d:8d:c3:42:8f:a7:94:f4:e9:6c:a9:b2:d3:
e7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:05:3A:C7:EA:E2:7E:A9:A3:56:B2:6D:37:C4:3C:EF:D7:AF:FF:45
X509v3 Authority Key Identifier:
keyid:D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:0d:54:57:d8:0d:1d:1c:92:e5:65:88:9a:f7:11:48:f9:73:
25:16:d1:15:26:39:32:ab:87:d5:25:d3:88:5c:49:fb:fb:ed:
c4:63:89:36:4c:43:60:f1:55:e4:b9:7e:5c:77:70:5b:50:20:
6d:4f:75:db:cb:4f:b2:7b:51:f8:ae:39:12:e8:19:aa:47:ea:
5c:e1:26:0e:48:4a:67:45:27:12:7d:9e:16:55:1a:b0:71:1c:
89:85:c7:93:48:60:aa:b6:40:ac:99:60:9a:ff:db:80:76:ac:
a6:c0:db:68:da:41:2c:04:78:d1:bd:f5:cf:4f:58:a1:f3:9f:
36:1c:04:d2:85:3f:cf:b6:ce:df:36:08:6e:0d:a1:83:74:48:
72:6a:1e:2a:89:3c:b0:70:2c:ba:56:8a:4f:9d:23:b4:c4:f7:
76:18:5e:bc:12:f3:4e:3e:be:d3:02:90:fd:cd:b2:7d:44:5c:
1a:b8:99:a3:a7:eb:0e:72:5b:02:52:2b:5c:96:47:e9:41:f2:
cd:57:ec:a4:44:ed:0b:65:96:ab:c7:5b:f0:c3:d3:29:94:01:
17:36:fb:07:71:60:87:01:12:38:09:f3:2a:f8:8a:f1:6e:49:
31:c3:61:21:74:d4:22:20:ff:6c:b1:82:e0:f1:cf:ee:61:e3:
47:ec:0e:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaYYUeqzfDSHUO0AKFJO7AyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NTQ0MzZlZDMyNDJiZGRiOTZmZGYxMzlhMTI1M2RlYjk4
NmRmZDAwHhcNMjUwNTAzMjMwMDM0WhcNMjUwNTA0MjMwMDM0WjAzMTEwLwYDVQQD
Eyg2ZTA1M2FjN2VhZTI3ZWE5YTM1NmIyNmQzN2M0M2NlZmQ3YWZmZjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5lMzIgkCN56wE8ccFZGpUPj86yyI
1STmJMVOi4GYt92lk33ikuOgx6Y3kmxPZJNZ/xMUjRr8muVsrxqeMc1F/g4hVcYw
Vb54/8luGnZbZDY4H7blMNkZDrpCiO6jbH5BWmH/D65ElrnZj48L1Ezu/GzetOn2
fstTLap0ZdlFYa4ziV0PhfXPfcxwURdXcH7QPz/rAV50/PlrD6aGXBRRyakFXrdd
+G6P65kUPbwiAx2i3c9BPOqnstOZTcmcK9QSDzn6ayva8Yg6wO/wQqNVWYkhwngu
rhF6vPcbYsZA/Yrqx61BkZuEw0h1DYbb0dcOTp2Nw0KPp5T06WypstPnpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG4FOsfq4n6po1aybTfEPO/Xr/9FMB8GA1UdIwQY
MBaAFNZUQ27TJCvduW/fE5oSU965ht/QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWxSRGJ0TWtLOTI1Yjk4VG1oSlQzcm1HMzlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zZGU5NGEtMWU2MC00ZWI4LTlhNWUt
YTE0MjA4N2NlODkwLzEvMWxSRGJ0TWtLOTI1Yjk4VG1oSlQzcm1HMzlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8zZGU5NGEtMWU2MC00ZWI4LTlhNWUtYTE0MjA4N2NlODkw
LzEvMWxSRGJ0TWtLOTI1Yjk4VG1oSlQzcm1HMzlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIg1UV9gN
HRyS5WWImvcRSPlzJRbRFSY5MquH1SXTiFxJ+/vtxGOJNkxDYPFV5Ll+XHdwW1Ag
bU9128tPsntR+K45EugZqkfqXOEmDkhKZ0UnEn2eFlUasHEciYXHk0hgqrZArJlg
mv/bgHaspsDbaNpBLAR40b31z09YofOfNhwE0oU/z7bO3zYIbg2hg3RIcmoeKok8
sHAsulaKT50jtMT3dhhevBLzTj6+0wKQ/c2yfURcGriZo6frDnJbAlIrXJZH6UHy
zVfspETtC2WWq8db8MPTKZQBFzb7B3FghwESOAnzKviK8W5JMcNhIXTUIiD/bLGC
4PHP7mHjR+wO9g==
-----END CERTIFICATE-----
Generated at Sun May 4 00:54:38 2025 by rpki-client