Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.mft
File: lMpZU4VQVFW4yx2Q6UbvewtvXT8.mft (raw, json)
Hash identifier: U2MqiKFZG/Ga2t/aXbzfiwBFQRvRAVJlwDoyuqr4Fus=
Subject key identifier: 37:4A:20:90:E9:F2:63:D8:CC:C5:53:2F:FD:42:28:05:77:D6:AC:50
Authority key identifier: 94:CA:59:53:85:50:54:55:B8:CB:1D:90:E9:46:EF:7B:0B:6F:5D:3F
Certificate issuer: /CN=94ca595385505455b8cb1d90e946ef7b0b6f5d3f
Certificate serial: 0196873678D6355D3781E3E4C51980C33B31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lMpZU4VQVFW4yx2Q6UbvewtvXT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.mft
Manifest number: 12BA
Signing time: Wed 30 Apr 2025 15:00:16 +0000
Manifest this update: Wed 30 Apr 2025 15:00:16 +0000
Manifest next update: Thu 01 May 2025 15:00:16 +0000
Files and hashes: 1: 3rgYqGqnZPklgITV-WBujJljFBU.roa (hash: Tp2azEsxKTsu2hz5GpPNvovvsk7VOiHcGA1gooaCoRs=)
2: lMpZU4VQVFW4yx2Q6UbvewtvXT8.crl (hash: YWvjRe9SSUlnraaAckdZ5SIGvoKzsVFJ0leePT2aT4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lMpZU4VQVFW4yx2Q6UbvewtvXT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:36:78:d6:35:5d:37:81:e3:e4:c5:19:80:c3:3b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94ca595385505455b8cb1d90e946ef7b0b6f5d3f
Validity
Not Before: Apr 30 15:00:16 2025 GMT
Not After : May 1 15:00:16 2025 GMT
Subject: CN=374a2090e9f263d8ccc5532ffd42280577d6ac50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:83:26:46:a4:51:ad:f3:c9:b7:d6:62:b4:19:
26:66:b3:c0:c0:c2:52:b9:ac:d7:e7:31:04:bd:b2:
82:b0:1f:00:04:58:39:bd:80:65:c1:64:7c:a8:a2:
7f:82:7e:f8:b6:74:81:0d:f4:93:bf:fe:d6:91:aa:
2c:1a:22:c8:4d:a3:8e:cd:54:dd:74:43:ab:13:b6:
c7:63:1a:29:cb:5a:4e:1b:cf:0f:46:31:bd:e9:c7:
b0:d0:66:ba:26:33:46:8d:2a:c6:08:b9:da:64:7b:
ce:cb:66:53:07:6d:c8:81:58:fe:cb:4e:24:15:1e:
83:b3:77:a7:9e:54:c4:20:59:03:46:62:a0:41:2a:
23:55:b9:df:3a:fe:80:c6:cd:5f:d3:8a:d8:b2:ce:
a4:42:c2:ed:14:71:51:b2:a7:25:28:4e:be:2f:c4:
f8:3c:c6:09:98:2d:75:03:7c:41:3e:b2:d5:40:4d:
4e:70:05:c7:cc:04:62:72:b5:dd:3d:d8:b0:37:ba:
85:7e:27:ec:aa:e7:0a:c0:8a:d5:18:7e:8b:7a:8a:
41:c3:a8:e2:a9:ff:56:47:8d:08:4a:6f:aa:29:78:
3b:e1:a9:c9:94:69:9c:7d:e6:0f:5c:96:ba:e6:f8:
1f:39:62:31:53:fd:6d:b5:0b:1c:3d:40:e4:7a:d9:
ff:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4A:20:90:E9:F2:63:D8:CC:C5:53:2F:FD:42:28:05:77:D6:AC:50
X509v3 Authority Key Identifier:
keyid:94:CA:59:53:85:50:54:55:B8:CB:1D:90:E9:46:EF:7B:0B:6F:5D:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lMpZU4VQVFW4yx2Q6UbvewtvXT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:6b:4a:7c:6b:f4:a9:ce:7c:5e:42:99:fc:5b:4c:ee:8c:22:
ba:9e:cc:64:f8:41:0d:80:1d:2d:a3:67:c8:5a:13:59:49:04:
74:0a:51:c1:c4:6f:c0:4a:98:91:bc:c3:39:c6:18:3e:6e:40:
80:b0:3d:d2:8a:a9:ff:14:56:d8:40:4c:20:0c:79:85:26:1a:
95:be:38:64:ef:77:ed:6e:50:d8:3f:eb:ca:07:bb:dc:b8:db:
b1:52:3b:1f:3e:b5:9a:e6:58:69:3b:0a:26:fd:c8:e7:5c:9d:
d0:bc:87:1a:3b:8d:d7:b3:30:f3:ce:25:d1:f7:5b:0d:94:61:
ea:df:34:54:d4:5d:fb:e1:dc:d6:24:a6:d0:fe:d9:62:71:b4:
be:1a:f8:aa:5f:07:6e:6f:98:3f:aa:d8:5a:99:7d:26:5d:a8:
59:7e:a0:cf:ba:a4:3b:f3:1d:c9:1f:2d:d2:ae:6d:61:08:a5:
f0:37:1d:f8:14:e7:ad:a8:f7:b4:66:c3:d4:38:0e:f1:fd:98:
b6:4c:ad:78:83:b8:2c:1f:b2:c6:1a:67:e8:1b:c5:ae:73:0a:
0d:22:92:e7:73:1f:1b:f2:79:1e:5c:21:b8:7d:0b:8e:73:20:
87:9a:9f:ef:fc:ae:45:85:ac:d1:e0:f0:7b:85:cd:3d:6b:05:
c0:af:a1:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaHNnjWNV03gePkxRmAwzsxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0Y2E1OTUzODU1MDU0NTViOGNiMWQ5MGU5NDZlZjdiMGI2
ZjVkM2YwHhcNMjUwNDMwMTUwMDE2WhcNMjUwNTAxMTUwMDE2WjAzMTEwLwYDVQQD
EygzNzRhMjA5MGU5ZjI2M2Q4Y2NjNTUzMmZmZDQyMjgwNTc3ZDZhYzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYMmRqRRrfPJt9ZitBkmZrPAwMJS
uazX5zEEvbKCsB8ABFg5vYBlwWR8qKJ/gn74tnSBDfSTv/7WkaosGiLITaOOzVTd
dEOrE7bHYxopy1pOG88PRjG96cew0Ga6JjNGjSrGCLnaZHvOy2ZTB23IgVj+y04k
FR6Ds3ennlTEIFkDRmKgQSojVbnfOv6Axs1f04rYss6kQsLtFHFRsqclKE6+L8T4
PMYJmC11A3xBPrLVQE1OcAXHzARicrXdPdiwN7qFfifsqucKwIrVGH6LeopBw6ji
qf9WR40ISm+qKXg74anJlGmcfeYPXJa65vgfOWIxU/1ttQscPUDketn/1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDdKIJDp8mPYzMVTL/1CKAV31qxQMB8GA1UdIwQY
MBaAFJTKWVOFUFRVuMsdkOlG73sLb10/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbE1wWlU0VlFWRlc0eXgyUTZVYnZld3R2WFQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS81ODkyZDEtNmY1MS00Y2IzLTkzZTIt
MGYwNDk0Y2E2ZDJjLzEvbE1wWlU0VlFWRlc0eXgyUTZVYnZld3R2WFQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS81ODkyZDEtNmY1MS00Y2IzLTkzZTItMGYwNDk0Y2E2ZDJj
LzEvbE1wWlU0VlFWRlc0eXgyUTZVYnZld3R2WFQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMWtKfGv0
qc58XkKZ/FtM7owiup7MZPhBDYAdLaNnyFoTWUkEdApRwcRvwEqYkbzDOcYYPm5A
gLA90oqp/xRW2EBMIAx5hSYalb44ZO937W5Q2D/ryge73LjbsVI7Hz61muZYaTsK
Jv3I51yd0LyHGjuN17Mw884l0fdbDZRh6t80VNRd++Hc1iSm0P7ZYnG0vhr4ql8H
bm+YP6rYWpl9Jl2oWX6gz7qkO/MdyR8t0q5tYQil8Dcd+BTnraj3tGbD1DgO8f2Y
tkyteIO4LB+yxhpn6BvFrnMKDSKS53MfG/J5HlwhuH0LjnMgh5qf7/yuRYWs0eDw
e4XNPWsFwK+hBg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:52:42 2025 by rpki-client