Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
File: lTrJeoHHeU5iCA41ueh7QdSxho8.mft (raw, json)
Hash identifier: ePkOABJrS0F8OrqwyJAbNwJmI3gxOS3aVYQlaSLP3oA=
Subject key identifier: 62:1E:B6:F5:2E:76:4C:71:C9:2D:16:3B:3F:9D:C1:4B:83:51:18:FE
Authority key identifier: 95:3A:C9:7A:81:C7:79:4E:62:08:0E:35:B9:E8:7B:41:D4:B1:86:8F
Certificate issuer: /CN=953ac97a81c7794e62080e35b9e87b41d4b1868f
Certificate serial: 01968B4B24CFC6238E37D7EC128919CA9678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
Manifest number: 14AE
Signing time: Thu 01 May 2025 10:01:19 +0000
Manifest this update: Thu 01 May 2025 10:01:19 +0000
Manifest next update: Fri 02 May 2025 10:01:19 +0000
Files and hashes: 1: D7v-i2Em1A95E4k4o6lvGCl8mqk.roa (hash: xqtDWFhhoatEtwCz7HFHDZQmIK3iuhE2AzGVbExJo/4=)
2: lTrJeoHHeU5iCA41ueh7QdSxho8.crl (hash: +oIg0NbJik1bIe7ZLVaz0oWOc7PRYVizyGuUhWDHfs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:4b:24:cf:c6:23:8e:37:d7:ec:12:89:19:ca:96:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=953ac97a81c7794e62080e35b9e87b41d4b1868f
Validity
Not Before: May 1 10:01:19 2025 GMT
Not After : May 2 10:01:19 2025 GMT
Subject: CN=621eb6f52e764c71c92d163b3f9dc14b835118fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:40:77:56:b2:67:11:b6:bb:fb:2c:a5:ad:8b:
ee:57:16:7d:6a:d7:aa:a2:74:d8:e5:7e:3f:a8:14:
f0:e3:59:af:f4:59:a2:96:47:59:23:e1:91:ab:94:
10:c0:0e:31:60:63:4c:f1:fd:cb:8a:4c:75:a8:b8:
88:3a:88:30:5f:c2:4b:85:9f:d2:75:f6:bd:e6:0c:
25:f4:60:da:d9:59:52:ba:0e:4a:7a:a4:92:7b:98:
1d:b1:84:72:85:c8:e3:9e:e4:69:00:68:d8:1f:57:
1c:50:e1:4a:09:25:64:12:db:8f:30:bd:98:96:48:
3c:38:7c:6f:e1:dd:9d:e0:f0:bf:41:0b:e8:50:2c:
20:6e:dc:4b:03:85:0b:8a:60:df:7b:26:f2:03:52:
81:1d:51:88:14:84:e0:69:b5:d1:1f:3c:0b:c6:44:
2d:0d:91:48:fe:88:d7:38:dd:c0:df:fd:ee:e5:33:
98:36:b7:c4:13:8f:97:03:a6:5d:0c:5d:c2:49:ca:
6c:f9:e6:09:46:06:d4:93:16:f4:ea:e3:8b:31:d2:
fb:99:25:be:e7:70:8c:79:ad:c7:34:b4:4c:32:9b:
ee:a5:54:fa:b8:34:03:2b:fe:f9:2e:2f:61:75:80:
3f:87:d2:e4:f4:06:8f:a4:5a:0e:49:aa:b3:ba:10:
9a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:1E:B6:F5:2E:76:4C:71:C9:2D:16:3B:3F:9D:C1:4B:83:51:18:FE
X509v3 Authority Key Identifier:
keyid:95:3A:C9:7A:81:C7:79:4E:62:08:0E:35:B9:E8:7B:41:D4:B1:86:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTrJeoHHeU5iCA41ueh7QdSxho8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/edd939-f18a-4165-b728-91a32eff6ccd/1/lTrJeoHHeU5iCA41ueh7QdSxho8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:e4:e2:80:87:a4:61:94:36:af:26:77:2a:8c:33:b4:e9:83:
52:1d:12:30:94:49:c0:34:ad:58:d1:e1:75:d6:92:e9:f0:cf:
b6:15:af:ac:76:1f:61:6b:75:6f:6c:06:35:02:78:02:5a:33:
91:bf:cb:14:22:31:64:da:62:38:93:c5:c7:28:24:28:e4:3b:
f8:89:8e:20:2e:d6:cf:bc:bb:cd:e5:e2:67:aa:a5:e2:e4:98:
06:2d:63:25:56:3c:1c:f5:e5:e7:a6:f7:f4:c8:99:02:89:31:
7d:4f:87:85:c2:b8:3f:e4:71:2f:d1:8c:e3:bf:c8:e5:31:e2:
cc:93:23:4a:28:c9:d7:61:3e:bd:41:00:07:ea:64:60:f9:f1:
44:ba:be:ae:84:75:51:d5:19:be:ba:87:bf:b6:a7:bf:3e:93:
13:e8:86:c8:22:d7:28:8c:a5:5f:ad:51:a2:64:61:03:f1:2d:
e5:11:51:6c:2b:b4:e1:55:01:94:96:59:9a:8c:0f:01:1d:f1:
3f:5d:ab:1b:ee:d1:3f:12:1b:b1:d0:2b:f2:2e:54:c8:92:d2:
08:50:38:2a:e1:37:02:12:65:c5:5f:88:f8:73:f8:2b:d7:7f:
16:5b:c3:78:d8:da:1b:77:ab:73:d2:d3:07:ba:ba:72:e7:ee:
82:e0:27:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaLSyTPxiOON9fsEokZypZ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1M2FjOTdhODFjNzc5NGU2MjA4MGUzNWI5ZTg3YjQxZDRi
MTg2OGYwHhcNMjUwNTAxMTAwMTE5WhcNMjUwNTAyMTAwMTE5WjAzMTEwLwYDVQQD
Eyg2MjFlYjZmNTJlNzY0YzcxYzkyZDE2M2IzZjlkYzE0YjgzNTExOGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0B3VrJnEba7+yylrYvuVxZ9ateq
onTY5X4/qBTw41mv9FmilkdZI+GRq5QQwA4xYGNM8f3Likx1qLiIOogwX8JLhZ/S
dfa95gwl9GDa2VlSug5KeqSSe5gdsYRyhcjjnuRpAGjYH1ccUOFKCSVkEtuPML2Y
lkg8OHxv4d2d4PC/QQvoUCwgbtxLA4ULimDfeybyA1KBHVGIFITgabXRHzwLxkQt
DZFI/ojXON3A3/3u5TOYNrfEE4+XA6ZdDF3CScps+eYJRgbUkxb06uOLMdL7mSW+
53CMea3HNLRMMpvupVT6uDQDK/75Li9hdYA/h9Lk9AaPpFoOSaqzuhCaSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGIetvUudkxxyS0WOz+dwUuDURj+MB8GA1UdIwQY
MBaAFJU6yXqBx3lOYggONbnoe0HUsYaPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFRySmVvSEhlVTVpQ0E0MXVlaDdRZFN4aG84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9lZGQ5MzktZjE4YS00MTY1LWI3Mjgt
OTFhMzJlZmY2Y2NkLzEvbFRySmVvSEhlVTVpQ0E0MXVlaDdRZFN4aG84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9lZGQ5MzktZjE4YS00MTY1LWI3MjgtOTFhMzJlZmY2Y2Nk
LzEvbFRySmVvSEhlVTVpQ0E0MXVlaDdRZFN4aG84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUeTigIek
YZQ2ryZ3KowztOmDUh0SMJRJwDStWNHhddaS6fDPthWvrHYfYWt1b2wGNQJ4Aloz
kb/LFCIxZNpiOJPFxygkKOQ7+ImOIC7Wz7y7zeXiZ6ql4uSYBi1jJVY8HPXl56b3
9MiZAokxfU+HhcK4P+RxL9GM47/I5THizJMjSijJ12E+vUEAB+pkYPnxRLq+roR1
UdUZvrqHv7anvz6TE+iGyCLXKIylX61RomRhA/Et5RFRbCu04VUBlJZZmowPAR3x
P12rG+7RPxIbsdAr8i5UyJLSCFA4KuE3AhJlxV+I+HP4K9d/FlvDeNjaG3erc9LT
B7q6cufuguAnPw==
-----END CERTIFICATE-----
Generated at Thu May 1 16:39:22 2025 by rpki-client