Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft
File: lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft (raw, json)
Hash identifier: KP3NlA/rGVrKTYGMATIh5e5d2EvwGP29Se9tBKHFkEo=
Subject key identifier: E9:0A:58:95:41:2E:CD:52:3F:19:68:19:88:B0:10:83:7C:AC:64:BC
Authority key identifier: 95:52:46:B1:B6:5C:95:04:62:59:C2:24:8C:1D:30:6F:F1:35:B9:84
Certificate issuer: /CN=955246b1b65c95046259c2248c1d306ff135b984
Certificate serial: 01968022170569B9FE3E50BD8E701C8EC547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lVJGsbZclQRiWcIkjB0wb_E1uYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft
Manifest number: 1058
Signing time: Tue 29 Apr 2025 06:00:39 +0000
Manifest this update: Tue 29 Apr 2025 06:00:39 +0000
Manifest next update: Wed 30 Apr 2025 06:00:39 +0000
Files and hashes: 1: d62eL6CZy4sqfG2HJBBtw2_a_Xo.roa (hash: VQJVLEqVpBvW0EhwHp75V7iW+dHN3GO38t078QYSo/g=)
2: lVJGsbZclQRiWcIkjB0wb_E1uYQ.crl (hash: kIOPFrgePNGot3blb0rO7B5IbFMuoBrtEJhliN9tR9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lVJGsbZclQRiWcIkjB0wb_E1uYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:22:17:05:69:b9:fe:3e:50:bd:8e:70:1c:8e:c5:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=955246b1b65c95046259c2248c1d306ff135b984
Validity
Not Before: Apr 29 06:00:39 2025 GMT
Not After : Apr 30 06:00:39 2025 GMT
Subject: CN=e90a5895412ecd523f19681988b010837cac64bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:43:7c:4d:64:98:ae:ef:56:af:3e:5d:f3:e2:
20:32:ea:0c:e8:f5:03:da:1a:64:fb:6d:3d:f3:40:
65:f1:16:43:20:7e:18:c8:30:f7:5b:82:ee:9e:65:
dd:d8:e4:c1:ac:45:3e:eb:54:d6:c2:d9:d8:f1:54:
b4:93:3b:13:eb:70:5b:9f:e9:5e:f6:02:7f:77:33:
bd:e5:41:45:a9:46:0a:69:03:1d:a3:8b:54:93:db:
9d:2e:d3:80:80:05:66:81:76:04:41:74:f7:30:89:
71:05:84:e4:86:e9:56:f6:50:98:36:75:fe:06:56:
4f:10:1d:bb:5d:d4:13:f3:f0:cb:c5:59:b7:b5:60:
2b:0d:c8:6a:70:4c:82:64:2a:41:10:13:2b:21:36:
d8:32:b3:05:96:a1:99:78:98:bb:17:37:ad:58:e7:
8c:55:0d:09:22:cf:6a:5b:9a:cc:eb:25:05:71:06:
24:df:1d:9a:74:9c:b5:9d:76:4d:53:d6:13:cf:33:
a2:1a:29:3c:d6:40:69:ff:98:a3:65:94:2b:ad:d0:
97:5a:36:12:29:44:de:7a:fc:44:34:e1:8a:9f:fa:
17:9b:84:40:75:80:f9:17:8a:9c:98:2d:63:65:b7:
44:70:79:97:ca:d3:c1:26:5f:74:a7:d0:c4:fe:0c:
ba:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:0A:58:95:41:2E:CD:52:3F:19:68:19:88:B0:10:83:7C:AC:64:BC
X509v3 Authority Key Identifier:
keyid:95:52:46:B1:B6:5C:95:04:62:59:C2:24:8C:1D:30:6F:F1:35:B9:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lVJGsbZclQRiWcIkjB0wb_E1uYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a7c8d0-c92d-45d0-91a3-28c22abf08d0/1/lVJGsbZclQRiWcIkjB0wb_E1uYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:4d:06:05:9f:be:6e:cf:0b:c2:05:b9:ec:cf:4c:e8:fe:33:
39:8c:7b:45:d6:53:fe:d8:f0:3f:4e:66:f6:43:eb:ed:ee:23:
46:90:dc:7b:4d:54:c9:e2:29:02:06:62:91:01:7c:ec:79:ae:
b7:f9:29:eb:6b:3d:9f:aa:3e:ca:c8:1d:51:bd:b5:bf:65:a0:
ac:47:45:5f:6b:85:e3:28:a9:1d:5c:0d:8a:b7:64:58:ad:3b:
6a:52:f9:25:83:bd:2a:27:ef:07:a9:ae:f3:a6:ed:99:09:02:
5b:2f:d4:7b:e5:fc:39:de:88:73:be:e4:52:11:cb:f0:98:a5:
66:a5:92:73:db:51:0b:42:9e:6c:72:74:51:09:41:28:0c:b6:
e8:47:fa:9c:28:bb:c8:b7:7d:db:e4:cc:bf:63:d3:7c:45:23:
24:36:50:1f:c8:9b:12:93:d7:21:08:0a:da:b7:03:45:f2:ab:
ef:19:66:fc:70:c4:10:77:c5:5f:aa:a4:b2:d7:a4:81:6c:f6:
91:fb:d7:19:02:6d:41:ca:97:af:a3:32:87:0b:f4:86:9c:84:
ab:06:5b:62:9d:f4:2c:16:b7:e1:cb:b1:5a:50:0c:7e:d2:86:
fe:ba:4a:65:0a:8d:6e:f5:43:6d:82:71:0b:e7:8a:f1:e9:67:
00:92:79:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaAIhcFabn+PlC9jnAcjsVHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NTI0NmIxYjY1Yzk1MDQ2MjU5YzIyNDhjMWQzMDZmZjEz
NWI5ODQwHhcNMjUwNDI5MDYwMDM5WhcNMjUwNDMwMDYwMDM5WjAzMTEwLwYDVQQD
EyhlOTBhNTg5NTQxMmVjZDUyM2YxOTY4MTk4OGIwMTA4MzdjYWM2NGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0N8TWSYru9Wrz5d8+IgMuoM6PUD
2hpk+20980Bl8RZDIH4YyDD3W4LunmXd2OTBrEU+61TWwtnY8VS0kzsT63Bbn+le
9gJ/dzO95UFFqUYKaQMdo4tUk9udLtOAgAVmgXYEQXT3MIlxBYTkhulW9lCYNnX+
BlZPEB27XdQT8/DLxVm3tWArDchqcEyCZCpBEBMrITbYMrMFlqGZeJi7FzetWOeM
VQ0JIs9qW5rM6yUFcQYk3x2adJy1nXZNU9YTzzOiGik81kBp/5ijZZQrrdCXWjYS
KUTeevxENOGKn/oXm4RAdYD5F4qcmC1jZbdEcHmXytPBJl90p9DE/gy6PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOkKWJVBLs1SPxloGYiwEIN8rGS8MB8GA1UdIwQY
MBaAFJVSRrG2XJUEYlnCJIwdMG/xNbmEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFZKR3NiWmNsUVJpV2NJa2pCMHdiX0UxdVlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9hN2M4ZDAtYzkyZC00NWQwLTkxYTMt
MjhjMjJhYmYwOGQwLzEvbFZKR3NiWmNsUVJpV2NJa2pCMHdiX0UxdVlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9hN2M4ZDAtYzkyZC00NWQwLTkxYTMtMjhjMjJhYmYwOGQw
LzEvbFZKR3NiWmNsUVJpV2NJa2pCMHdiX0UxdVlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT00GBZ++
bs8LwgW57M9M6P4zOYx7RdZT/tjwP05m9kPr7e4jRpDce01UyeIpAgZikQF87Hmu
t/kp62s9n6o+ysgdUb21v2WgrEdFX2uF4yipHVwNirdkWK07alL5JYO9KifvB6mu
86btmQkCWy/Ue+X8Od6Ic77kUhHL8JilZqWSc9tRC0KebHJ0UQlBKAy26Ef6nCi7
yLd92+TMv2PTfEUjJDZQH8ibEpPXIQgK2rcDRfKr7xlm/HDEEHfFX6qkstekgWz2
kfvXGQJtQcqXr6Myhwv0hpyEqwZbYp30LBa34cuxWlAMftKG/rpKZQqNbvVDbYJx
C+eK8elnAJJ5XQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 14:29:36 2025 by rpki-client