Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft
File: lCWIuR2pzKgbSeYDqYjiseq93Jg.mft (raw, json)
Hash identifier: yIOYVF1SBXh7NMTo0HbtiI8TI1yuajEFZN/wroRZG5s=
Subject key identifier: A1:16:77:1A:94:7A:E9:E7:2D:37:53:4C:7F:EA:EF:23:43:F9:6A:C1
Authority key identifier: 94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
Certificate issuer: /CN=942588b91da9cca81b49e603a988e2b1eabddc98
Certificate serial: 019684DAB31723090B6BFA6B97DED34A771D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft
Manifest number: 155D
Signing time: Wed 30 Apr 2025 04:00:47 +0000
Manifest this update: Wed 30 Apr 2025 04:00:47 +0000
Manifest next update: Thu 01 May 2025 04:00:47 +0000
Files and hashes: 1: lCWIuR2pzKgbSeYDqYjiseq93Jg.crl (hash: TD3VES9UZm6WroSI2PRMJs+QrgfcBOMuNcPwW2LPK/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:da:b3:17:23:09:0b:6b:fa:6b:97:de:d3:4a:77:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=942588b91da9cca81b49e603a988e2b1eabddc98
Validity
Not Before: Apr 30 04:00:47 2025 GMT
Not After : May 1 04:00:47 2025 GMT
Subject: CN=a116771a947ae9e72d37534c7feaef2343f96ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:34:16:6a:c3:bd:02:0e:e8:a3:af:83:a7:d4:
b4:f4:b4:dc:a8:1e:62:15:16:e6:53:f3:8b:b8:79:
5e:57:78:64:28:02:4d:99:05:fd:bd:a5:7a:b1:cd:
ab:03:90:cd:f0:5f:b5:7e:19:83:f8:d5:94:84:79:
a1:32:59:5f:b3:4a:55:ee:d9:2a:57:46:75:8f:31:
0e:1a:d7:cf:25:ae:6f:cd:e9:94:69:c1:5c:34:77:
e6:e7:4e:48:07:5c:27:9c:84:55:c7:7c:4d:46:a5:
2a:c4:37:23:5a:75:99:53:56:57:c0:9d:1b:9f:57:
23:1c:19:40:f1:3a:9a:3f:28:30:4b:a0:09:61:bb:
03:94:bb:cb:11:0e:4e:85:b6:24:96:d9:7f:79:95:
e6:55:54:ec:13:ae:a4:a9:5a:c4:8c:a9:b6:68:d2:
9f:f1:21:0d:d0:85:0b:8b:23:97:7f:2a:ce:45:6a:
15:55:e6:5b:f5:42:e5:ad:b4:ff:4a:d0:a7:ca:c9:
7c:73:a4:65:9b:85:a6:71:14:22:7b:27:95:80:ff:
0d:d7:02:13:15:e7:ec:27:6a:06:a9:74:61:16:73:
c9:9b:61:35:e6:e6:6d:12:fe:4a:7a:19:d9:bf:68:
74:ef:8d:2c:8a:64:d0:7f:3d:80:2a:1e:7b:ec:f4:
d5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:16:77:1A:94:7A:E9:E7:2D:37:53:4C:7F:EA:EF:23:43:F9:6A:C1
X509v3 Authority Key Identifier:
keyid:94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:9a:6b:22:a7:99:bd:79:bb:bc:39:96:e9:b2:83:c9:f7:5e:
cf:27:da:4f:47:5c:4f:05:af:42:c5:3f:90:96:db:b9:6f:d2:
90:a0:ee:58:34:18:19:f0:00:6d:2a:53:1b:c0:9e:3b:5e:89:
5e:b4:d4:b2:4b:8a:39:05:bc:3b:ff:2a:ac:b6:1f:26:63:a8:
06:a1:31:dd:16:1c:a9:f4:72:9b:e7:e5:0a:e4:3d:be:ac:be:
fe:85:d5:28:35:23:e7:67:d7:3a:c7:79:1b:4d:68:b8:10:ed:
f8:46:06:7b:35:21:2a:45:e6:88:b1:f3:27:1e:75:61:81:76:
82:ad:fd:1c:9e:89:95:f3:c5:4d:d0:81:33:2c:36:9e:35:da:
5c:72:0c:49:b2:d0:33:8c:fc:db:9c:19:b5:9a:98:ba:69:0d:
5e:04:2f:b6:19:a8:8a:0f:95:e4:9b:14:c2:db:fd:36:e5:eb:
b9:df:e1:53:32:0f:14:d5:d4:eb:6b:78:af:23:53:56:f5:f6:
b4:20:cb:d6:91:a1:2c:78:cb:59:63:f3:53:94:38:4e:8c:97:
06:09:1c:a4:6c:0d:52:2c:a8:d2:2c:04:5f:6a:8b:c4:03:5a:
a6:88:53:71:9b:1c:4c:55:57:cd:e3:12:05:e5:96:54:1e:bb:
74:46:27:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaE2rMXIwkLa/prl97TSncdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MjU4OGI5MWRhOWNjYTgxYjQ5ZTYwM2E5ODhlMmIxZWFi
ZGRjOTgwHhcNMjUwNDMwMDQwMDQ3WhcNMjUwNTAxMDQwMDQ3WjAzMTEwLwYDVQQD
EyhhMTE2NzcxYTk0N2FlOWU3MmQzNzUzNGM3ZmVhZWYyMzQzZjk2YWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTQWasO9Ag7oo6+Dp9S09LTcqB5i
FRbmU/OLuHleV3hkKAJNmQX9vaV6sc2rA5DN8F+1fhmD+NWUhHmhMllfs0pV7tkq
V0Z1jzEOGtfPJa5vzemUacFcNHfm505IB1wnnIRVx3xNRqUqxDcjWnWZU1ZXwJ0b
n1cjHBlA8TqaPygwS6AJYbsDlLvLEQ5OhbYkltl/eZXmVVTsE66kqVrEjKm2aNKf
8SEN0IULiyOXfyrORWoVVeZb9ULlrbT/StCnysl8c6Rlm4WmcRQieyeVgP8N1wIT
FefsJ2oGqXRhFnPJm2E15uZtEv5KehnZv2h0740simTQfz2AKh577PTV5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKEWdxqUeunnLTdTTH/q7yND+WrBMB8GA1UdIwQY
MBaAFJQliLkdqcyoG0nmA6mI4rHqvdyYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbENXSXVSMnB6S2diU2VZRHFZamlzZXE5M0pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC80YmJhN2MtYTgxZi00MGUxLTg4MTQt
NjVkYWFkNjMyOTU3LzEvbENXSXVSMnB6S2diU2VZRHFZamlzZXE5M0pnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC80YmJhN2MtYTgxZi00MGUxLTg4MTQtNjVkYWFkNjMyOTU3
LzEvbENXSXVSMnB6S2diU2VZRHFZamlzZXE5M0pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHJprIqeZ
vXm7vDmW6bKDyfdezyfaT0dcTwWvQsU/kJbbuW/SkKDuWDQYGfAAbSpTG8CeO16J
XrTUskuKOQW8O/8qrLYfJmOoBqEx3RYcqfRym+flCuQ9vqy+/oXVKDUj52fXOsd5
G01ouBDt+EYGezUhKkXmiLHzJx51YYF2gq39HJ6JlfPFTdCBMyw2njXaXHIMSbLQ
M4z825wZtZqYumkNXgQvthmoig+V5JsUwtv9NuXrud/hUzIPFNXU62t4ryNTVvX2
tCDL1pGhLHjLWWPzU5Q4ToyXBgkcpGwNUiyo0iwEX2qLxANapohTcZscTFVXzeMS
BeWWVB67dEYnPA==
-----END CERTIFICATE-----
Generated at Wed Apr 30 05:34:37 2025 by rpki-client