Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
File: LsEh4VRd8-W7hukYjygl-tdHf3U.mft (raw, json)
Hash identifier: xgIWvJuhkzYg0K5mOqJX2+b1Ksp4299YQUGVKxeDYEM=
Subject key identifier: 45:9E:92:4C:CA:42:20:28:BA:4E:A5:44:AA:D4:07:D0:E2:B1:A6:F0
Authority key identifier: 2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75
Certificate issuer: /CN=2ec121e1545df3e5bb86e9188f2825fad7477f75
Certificate serial: 01967868FDB57C54DD1D7AC20D78D7C6911C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
Manifest number: 1512
Signing time: Sun 27 Apr 2025 18:01:08 +0000
Manifest this update: Sun 27 Apr 2025 18:01:08 +0000
Manifest next update: Mon 28 Apr 2025 18:01:08 +0000
Files and hashes: 1: 0IG7CMPC-7SDKCTiz8anhD3c0zs.roa (hash: fOnGjT4Xyjjotwa9/pecYw3cI1uzEt3+li8tB/lSTXY=)
2: BU0Pzn4hZS4sQu5v8Q1Qbbhp9vM.roa (hash: 9kbaESAN0/YNybQyxy7LooDJN3A5I92At9aUcKOvy/s=)
3: IwlbmFExD2G5c49HgZqQSHA1wZk.roa (hash: 45pPUt5QNz8dN0ylQGV0BCVZpBwOOv2uaieuY/tEzHc=)
4: JH5Q15rYm3yauoa5O0AtnaEF5T8.roa (hash: P8bh12UacYgaXKXWnxHFtSknccP/NWYvpFtt4o+MFnQ=)
5: L1Jr9Ntwc8rL0VyBMGBPBeMOSbU.roa (hash: 2Po6H5pjnfZQ8LGkU3TaUi4GHx7DH6w6vtm+1KWoyVI=)
6: LsEh4VRd8-W7hukYjygl-tdHf3U.crl (hash: 6berIXLHTCucdqCiJdLaEbD/gX49osjnXAVdGJJXcxY=)
7: X1X4I6xtC4Tyzz9jxci5NVZVFuk.roa (hash: Y7rSJ5Le7s/lA/Q7YQ3ZJcSkf2udL6S8lMTSgJ0RabQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:fd:b5:7c:54:dd:1d:7a:c2:0d:78:d7:c6:91:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ec121e1545df3e5bb86e9188f2825fad7477f75
Validity
Not Before: Apr 27 18:01:08 2025 GMT
Not After : Apr 28 18:01:08 2025 GMT
Subject: CN=459e924cca422028ba4ea544aad407d0e2b1a6f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f7:07:f3:51:37:8f:85:0c:15:af:4c:ea:0e:
49:24:15:fd:21:6d:07:f8:ec:82:af:94:7c:89:9e:
30:1d:e8:47:d8:a5:da:13:b6:11:b8:3a:5a:53:59:
7e:9c:bb:07:e9:18:e9:bf:3f:5f:11:3d:4d:75:d9:
b4:71:df:c5:69:07:a6:ee:34:15:bb:5c:d2:4b:8b:
d0:a3:85:98:ff:d3:a6:29:fd:bc:2e:aa:62:c9:20:
35:16:e7:75:fe:98:5b:c0:90:bc:c6:7c:05:fa:76:
50:c2:7b:80:6c:28:5c:0b:c7:d3:e1:17:f5:da:cc:
06:5e:05:46:84:26:54:a9:17:e9:de:5e:70:f3:7a:
fb:75:04:49:11:4b:cc:06:4d:9c:64:7c:a5:93:e5:
fb:a6:d6:de:27:ee:68:9c:76:78:a9:6b:dc:65:30:
4a:3e:57:24:8a:c6:7d:8a:5b:d2:4f:62:51:30:4f:
83:d2:12:7f:ad:49:58:a7:9c:de:b0:72:b0:fa:a5:
cf:53:94:40:14:c0:7c:38:ee:6b:33:52:38:fc:51:
dc:f6:81:85:5e:92:3b:b9:6e:8e:aa:d6:d5:6c:18:
3d:f7:6c:13:98:cc:c2:db:08:d9:1c:76:27:74:cd:
71:77:a1:42:84:aa:98:19:61:eb:bf:65:6d:2a:18:
06:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:9E:92:4C:CA:42:20:28:BA:4E:A5:44:AA:D4:07:D0:E2:B1:A6:F0
X509v3 Authority Key Identifier:
keyid:2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:35:99:b1:fa:38:00:03:a5:41:7a:ae:59:4b:03:d4:ea:6a:
3f:17:69:44:ee:49:7e:08:f4:ad:06:3b:c6:43:8d:29:3a:ae:
0d:ed:4e:39:2e:50:d3:35:00:b0:49:0b:04:1b:65:43:49:cd:
1e:76:1a:81:6b:c5:83:d8:dc:f2:11:9f:cc:7b:af:a9:9b:8a:
76:45:62:85:34:a3:b2:8c:df:4d:9e:73:5e:8d:15:f1:99:e8:
be:80:d5:5a:5b:55:50:5e:1d:62:d5:49:a7:45:7c:8f:c0:64:
46:23:71:50:50:06:20:fa:8a:a3:49:07:dd:aa:9e:e0:f0:f0:
e9:1e:46:db:77:dd:1a:6e:52:42:b9:92:e0:1e:d4:14:fb:4a:
a5:22:61:c7:82:36:87:f5:14:7f:d6:84:7e:d3:d4:e5:43:52:
f0:53:f6:f8:f1:0d:8e:ec:52:db:8d:b1:9c:c7:c9:fe:fe:26:
0e:34:7a:a5:a5:52:8d:fc:07:d0:cf:77:b7:69:d9:d6:8c:31:
93:06:f5:0f:b9:cf:11:61:9d:8a:79:25:a0:40:ae:fa:9a:25:
c5:11:ce:c9:51:cf:cb:ef:14:7c:3b:b2:d6:98:ed:8e:61:d0:
76:a4:65:53:68:7a:1b:03:a4:23:28:93:03:4f:0f:d4:27:55:
d1:79:a8:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ4aP21fFTdHXrCDXjXxpEcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlYzEyMWUxNTQ1ZGYzZTViYjg2ZTkxODhmMjgyNWZhZDc0
NzdmNzUwHhcNMjUwNDI3MTgwMTA4WhcNMjUwNDI4MTgwMTA4WjAzMTEwLwYDVQQD
Eyg0NTllOTI0Y2NhNDIyMDI4YmE0ZWE1NDRhYWQ0MDdkMGUyYjFhNmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5vcH81E3j4UMFa9M6g5JJBX9IW0H
+OyCr5R8iZ4wHehH2KXaE7YRuDpaU1l+nLsH6Rjpvz9fET1Nddm0cd/FaQem7jQV
u1zSS4vQo4WY/9OmKf28LqpiySA1Fud1/phbwJC8xnwF+nZQwnuAbChcC8fT4Rf1
2swGXgVGhCZUqRfp3l5w83r7dQRJEUvMBk2cZHylk+X7ptbeJ+5onHZ4qWvcZTBK
PlckisZ9ilvST2JRME+D0hJ/rUlYp5zesHKw+qXPU5RAFMB8OO5rM1I4/FHc9oGF
XpI7uW6OqtbVbBg992wTmMzC2wjZHHYndM1xd6FChKqYGWHrv2VtKhgG3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEWekkzKQiAouk6lRKrUB9DisabwMB8GA1UdIwQY
MBaAFC7BIeFUXfPlu4bpGI8oJfrXR391MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHNFaDRWUmQ4LVc3aHVrWWp5Z2wtdGRIZjNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8xZWQyN2MtMmQ4Yy00MDgwLWE0NTgt
OWY1MjJhMjg0NTk1LzEvTHNFaDRWUmQ4LVc3aHVrWWp5Z2wtdGRIZjNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC8xZWQyN2MtMmQ4Yy00MDgwLWE0NTgtOWY1MjJhMjg0NTk1
LzEvTHNFaDRWUmQ4LVc3aHVrWWp5Z2wtdGRIZjNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQTWZsfo4
AAOlQXquWUsD1OpqPxdpRO5Jfgj0rQY7xkONKTquDe1OOS5Q0zUAsEkLBBtlQ0nN
HnYagWvFg9jc8hGfzHuvqZuKdkVihTSjsozfTZ5zXo0V8ZnovoDVWltVUF4dYtVJ
p0V8j8BkRiNxUFAGIPqKo0kH3aqe4PDw6R5G23fdGm5SQrmS4B7UFPtKpSJhx4I2
h/UUf9aEftPU5UNS8FP2+PENjuxS242xnMfJ/v4mDjR6paVSjfwH0M93t2nZ1owx
kwb1D7nPEWGdinkloECu+polxRHOyVHPy+8UfDuy1pjtjmHQdqRlU2h6GwOkIyiT
A08P1CdV0XmonQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 20:58:34 2025 by rpki-client