Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft
File: lp1GNhtq9yD7mDas7JZbD1L0sJw.mft (raw, json)
Hash identifier: gPniQMAv3d0BtSGfltCmMJRwwZtD0Z/QArPB2U3dbGQ=
Subject key identifier: F0:0E:8C:40:7B:EA:46:52:D1:5F:E1:7D:C5:6C:0E:46:13:63:60:1D
Authority key identifier: 96:9D:46:36:1B:6A:F7:20:FB:98:36:AC:EC:96:5B:0F:52:F4:B0:9C
Certificate issuer: /CN=969d46361b6af720fb9836acec965b0f52f4b09c
Certificate serial: 0196729DAB663201704BFB315A60E3D6B85E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft
Manifest number: 05CA
Signing time: Sat 26 Apr 2025 15:00:57 +0000
Manifest this update: Sat 26 Apr 2025 15:00:57 +0000
Manifest next update: Sun 27 Apr 2025 15:00:57 +0000
Files and hashes: 1: L-GO2FSILXWJDxljpsdHKCOtSS0.roa (hash: X8AEWrGFzjNNichGbK4vjUgssJGu0vzDHcNZ2+2CA7M=)
2: PYDXcamIaGpRrVCii85eg40SIIk.roa (hash: S4jypsWz7TgusH7OG6rWwOPr/XCag30yFohADYU998Q=)
3: lp1GNhtq9yD7mDas7JZbD1L0sJw.crl (hash: w8DuahUAY1cDiwkkKow3D9CdRMZoHXNblMug0dcNr20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:9d:ab:66:32:01:70:4b:fb:31:5a:60:e3:d6:b8:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969d46361b6af720fb9836acec965b0f52f4b09c
Validity
Not Before: Apr 26 15:00:57 2025 GMT
Not After : Apr 27 15:00:57 2025 GMT
Subject: CN=f00e8c407bea4652d15fe17dc56c0e461363601d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bb:fe:eb:ef:11:20:eb:7e:de:4a:3c:5e:8e:
7c:bf:a9:f7:63:c5:58:0f:b2:47:36:ee:56:a0:33:
fb:53:de:ad:f7:31:ec:2e:a1:53:6e:5f:81:e6:57:
d3:36:7d:54:93:5b:a4:e5:07:98:94:4a:67:d7:31:
10:79:05:33:05:78:51:62:03:6f:bb:7b:9e:74:a8:
c7:08:42:07:e5:c9:57:47:a8:ea:d9:a5:08:05:28:
aa:d1:e0:2a:28:33:c8:15:8f:18:89:f7:c2:ff:d3:
24:1d:8f:af:10:08:ea:de:da:0c:f7:d6:1a:3a:bf:
83:2d:b9:90:7f:50:59:ae:88:29:4e:c1:c3:fb:37:
49:d1:6f:8b:41:9c:87:8e:73:cf:87:7f:ca:0d:5a:
48:65:f5:e1:3f:df:56:dd:27:ab:bc:ab:05:29:b8:
70:20:c3:62:f1:61:61:c1:b7:97:46:2b:c8:54:fd:
70:67:fa:49:45:d9:7e:38:c3:e7:68:f5:47:87:57:
0c:03:0f:9c:68:4f:b6:49:e1:ed:ec:0e:f6:62:36:
4f:e0:3a:e8:d9:8a:50:76:96:55:9b:bf:64:40:00:
a1:f6:37:c6:51:0c:90:89:25:fe:d1:05:d6:bc:e3:
25:50:e9:4e:52:2e:46:39:63:d8:15:3a:54:25:82:
28:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:0E:8C:40:7B:EA:46:52:D1:5F:E1:7D:C5:6C:0E:46:13:63:60:1D
X509v3 Authority Key Identifier:
keyid:96:9D:46:36:1B:6A:F7:20:FB:98:36:AC:EC:96:5B:0F:52:F4:B0:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:42:2a:45:47:94:22:60:c4:d8:0e:d3:53:f1:e0:73:04:99:
8d:8e:70:e0:08:ba:49:9d:af:4e:ec:36:e1:e9:40:c8:91:ac:
cd:97:dd:a9:c6:16:73:29:06:77:ab:80:57:d7:05:4a:0d:87:
f3:1b:b4:67:34:17:c1:bd:f0:5a:5c:2c:ca:cd:69:8e:17:d4:
59:74:fc:c4:a6:37:33:fd:cc:44:76:79:bd:bf:d6:7b:34:d6:
3b:70:cc:18:61:ed:43:c9:d4:8e:cd:a6:80:15:6b:e8:22:46:
10:64:72:ea:3a:3c:57:e3:1c:de:a0:7b:db:ec:60:e2:a2:a6:
b5:82:b3:73:c5:ae:f3:b4:db:22:eb:04:ca:2b:3d:b2:b5:b7:
23:1d:cf:24:4f:bb:ff:b2:7a:15:20:08:00:2f:80:26:01:9f:
e8:b2:dc:4a:3f:8f:3d:ba:94:34:b6:00:5e:97:f7:4b:b4:bc:
fc:7c:91:4a:91:14:88:1b:97:f9:d8:72:06:bd:64:c8:45:16:
6a:1b:5a:a7:2c:f9:02:61:5f:8d:0f:2f:f1:2f:e3:86:40:25:
99:bc:42:f9:1f:74:ef:d7:ce:f4:b1:66:42:cc:2d:d1:ce:85:
2c:d1:0d:bc:b2:61:bb:c5:c1:cc:16:2e:8d:37:0e:f2:cb:76:
69:8f:ce:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZynatmMgFwS/sxWmDj1rheMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2OWQ0NjM2MWI2YWY3MjBmYjk4MzZhY2VjOTY1YjBmNTJm
NGIwOWMwHhcNMjUwNDI2MTUwMDU3WhcNMjUwNDI3MTUwMDU3WjAzMTEwLwYDVQQD
EyhmMDBlOGM0MDdiZWE0NjUyZDE1ZmUxN2RjNTZjMGU0NjEzNjM2MDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLv+6+8RIOt+3ko8Xo58v6n3Y8VY
D7JHNu5WoDP7U96t9zHsLqFTbl+B5lfTNn1Uk1uk5QeYlEpn1zEQeQUzBXhRYgNv
u3uedKjHCEIH5clXR6jq2aUIBSiq0eAqKDPIFY8YiffC/9MkHY+vEAjq3toM99Ya
Or+DLbmQf1BZrogpTsHD+zdJ0W+LQZyHjnPPh3/KDVpIZfXhP99W3ServKsFKbhw
IMNi8WFhwbeXRivIVP1wZ/pJRdl+OMPnaPVHh1cMAw+caE+2SeHt7A72YjZP4Dro
2YpQdpZVm79kQACh9jfGUQyQiSX+0QXWvOMlUOlOUi5GOWPYFTpUJYIoywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPAOjEB76kZS0V/hfcVsDkYTY2AdMB8GA1UdIwQY
MBaAFJadRjYbavcg+5g2rOyWWw9S9LCcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHAxR05odHE5eUQ3bURhczdKWmJEMUwwc0p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi81ZmJjYmItMDBmYS00YWQ3LWE4MDEt
NDM2MDAxNzFiOGJkLzEvbHAxR05odHE5eUQ3bURhczdKWmJEMUwwc0p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi81ZmJjYmItMDBmYS00YWQ3LWE4MDEtNDM2MDAxNzFiOGJk
LzEvbHAxR05odHE5eUQ3bURhczdKWmJEMUwwc0p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2UIqRUeU
ImDE2A7TU/HgcwSZjY5w4Ai6SZ2vTuw24elAyJGszZfdqcYWcykGd6uAV9cFSg2H
8xu0ZzQXwb3wWlwsys1pjhfUWXT8xKY3M/3MRHZ5vb/WezTWO3DMGGHtQ8nUjs2m
gBVr6CJGEGRy6jo8V+Mc3qB72+xg4qKmtYKzc8Wu87TbIusEyis9srW3Ix3PJE+7
/7J6FSAIAC+AJgGf6LLcSj+PPbqUNLYAXpf3S7S8/HyRSpEUiBuX+dhyBr1kyEUW
ahtapyz5AmFfjQ8v8S/jhkAlmbxC+R9079fO9LFmQswt0c6FLNENvLJhu8XBzBYu
jTcO8st2aY/O5Q==
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:15:42 2025 by rpki-client