Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft
File: lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft (raw, json)
Hash identifier: 3xYDNJiyT+z7nxyaT00/6PvlsFqNseZpnOasefbQxzs=
Subject key identifier: A9:F5:0C:7A:B4:0C:8A:2D:75:03:6A:8F:05:B3:2F:6A:1E:54:37:44
Authority key identifier: 97:35:A9:4F:31:54:6D:43:7B:89:72:0E:84:4B:2F:12:A5:AB:F2:68
Certificate issuer: /CN=9735a94f31546d437b89720e844b2f12a5abf268
Certificate serial: 019683C7E98D568211F00126A2387E09705F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzWpTzFUbUN7iXIOhEsvEqWr8mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft
Manifest number: 0A48
Signing time: Tue 29 Apr 2025 23:00:38 +0000
Manifest this update: Tue 29 Apr 2025 23:00:38 +0000
Manifest next update: Wed 30 Apr 2025 23:00:38 +0000
Files and hashes: 1: K_2uusZ-ceVYTyxoJbEaCXUaJZ8.roa (hash: ECfU3dqUiHJoycwQ/ZQhx1FlZVv9NEnP+CXvi3oehN0=)
2: lzWpTzFUbUN7iXIOhEsvEqWr8mg.crl (hash: PqwxR96U/6/q79Gol+aZlsAEZ2D5xctqm/6SrcnPKlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lzWpTzFUbUN7iXIOhEsvEqWr8mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:c7:e9:8d:56:82:11:f0:01:26:a2:38:7e:09:70:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9735a94f31546d437b89720e844b2f12a5abf268
Validity
Not Before: Apr 29 23:00:38 2025 GMT
Not After : Apr 30 23:00:38 2025 GMT
Subject: CN=a9f50c7ab40c8a2d75036a8f05b32f6a1e543744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b1:e1:e8:e7:73:40:8d:ea:80:9e:12:2b:b1:
6e:b8:a7:fa:a6:d6:71:8d:00:e2:6e:f2:45:24:0a:
92:10:86:51:30:40:c7:a2:78:26:34:bf:86:bd:b2:
5c:6c:c8:75:b8:f6:d4:c2:cd:c1:fc:81:eb:bb:c5:
9d:4b:0d:ea:1a:a7:53:ee:7a:31:7e:c2:da:2f:93:
40:55:c7:54:6c:cb:91:e2:e1:96:97:05:41:27:8c:
da:38:5c:ff:01:f5:c1:7b:8a:95:62:dc:d6:af:9a:
a3:68:d6:b2:87:8c:6f:db:f9:6a:5f:ae:2f:1c:1b:
62:b4:e3:9f:88:e6:20:ba:88:97:a5:e3:ef:14:10:
f7:8d:b0:0c:c6:6b:5c:8c:74:ea:6d:22:3d:a6:97:
0a:a1:e5:b2:96:9e:5f:3f:68:31:bf:53:0a:76:7a:
15:82:ab:22:85:65:bb:05:c0:d7:38:da:3c:c1:38:
16:d5:fd:99:99:4d:2f:90:86:d2:e3:dc:ff:3b:da:
2f:d2:a8:a6:64:1b:b9:90:03:6b:5d:04:9d:3b:3e:
e5:04:e2:84:f9:b5:d9:3a:16:b3:52:d7:38:62:a2:
e0:b8:84:dc:3c:e1:bf:12:cd:24:a3:c4:25:18:8f:
ba:23:72:62:6c:23:40:3a:d0:0a:4f:5a:54:c3:61:
b3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F5:0C:7A:B4:0C:8A:2D:75:03:6A:8F:05:B3:2F:6A:1E:54:37:44
X509v3 Authority Key Identifier:
keyid:97:35:A9:4F:31:54:6D:43:7B:89:72:0E:84:4B:2F:12:A5:AB:F2:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzWpTzFUbUN7iXIOhEsvEqWr8mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:16:d3:aa:7e:9a:52:97:11:cc:ce:ad:1f:5f:90:6a:2f:5e:
63:16:4c:a0:d3:06:02:ec:e9:be:c9:d0:ca:02:ba:8f:56:41:
b6:e4:95:e6:f2:f5:44:b0:0e:a6:74:d9:be:cf:36:72:7f:1d:
41:55:86:95:22:d8:6a:b0:1d:ce:4a:a2:bc:15:6b:12:c2:a4:
c3:78:90:a6:45:40:f1:dd:20:d1:80:d1:65:90:16:be:f7:4a:
38:b0:f7:4b:c6:dc:3b:a0:e7:0a:24:0a:3f:94:df:7f:bc:5f:
9b:f1:c4:15:06:dd:7e:bd:e7:e8:6d:24:aa:52:9c:17:00:bd:
ab:3f:e8:36:85:e5:15:95:99:4a:4d:f6:24:4e:89:ba:e4:95:
b4:9c:60:2d:16:f5:70:d1:66:28:e5:df:56:84:52:ea:a1:d4:
53:b7:ba:1e:c4:5c:19:85:0c:8f:5a:3a:25:b8:a6:0c:86:bb:
1e:bf:a7:5b:bd:20:82:46:23:0c:21:eb:eb:5a:36:73:02:96:
80:9d:42:ac:d7:a5:4f:15:ac:2e:65:07:e7:62:31:b4:10:5c:
39:1c:26:d3:19:14:57:bd:7c:cc:ac:5d:83:6f:df:92:84:e1:
e4:5b:10:ce:0f:ef:e3:56:43:14:0e:dc:41:82:32:b9:de:64:
32:60:bf:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaDx+mNVoIR8AEmojh+CXBfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MzVhOTRmMzE1NDZkNDM3Yjg5NzIwZTg0NGIyZjEyYTVh
YmYyNjgwHhcNMjUwNDI5MjMwMDM4WhcNMjUwNDMwMjMwMDM4WjAzMTEwLwYDVQQD
EyhhOWY1MGM3YWI0MGM4YTJkNzUwMzZhOGYwNWIzMmY2YTFlNTQzNzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLHh6OdzQI3qgJ4SK7FuuKf6ptZx
jQDibvJFJAqSEIZRMEDHongmNL+GvbJcbMh1uPbUws3B/IHru8WdSw3qGqdT7nox
fsLaL5NAVcdUbMuR4uGWlwVBJ4zaOFz/AfXBe4qVYtzWr5qjaNayh4xv2/lqX64v
HBtitOOfiOYguoiXpePvFBD3jbAMxmtcjHTqbSI9ppcKoeWylp5fP2gxv1MKdnoV
gqsihWW7BcDXONo8wTgW1f2ZmU0vkIbS49z/O9ov0qimZBu5kANrXQSdOz7lBOKE
+bXZOhazUtc4YqLguITcPOG/Es0ko8QlGI+6I3JibCNAOtAKT1pUw2GzXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKn1DHq0DIotdQNqjwWzL2oeVDdEMB8GA1UdIwQY
MBaAFJc1qU8xVG1De4lyDoRLLxKlq/JoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHpXcFR6RlViVU43aVhJT2hFc3ZFcVdyOG1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9jZDQzNTAtYmU3NC00N2UwLTk2YjMt
YjBkYjJlYWE5N2VkLzEvbHpXcFR6RlViVU43aVhJT2hFc3ZFcVdyOG1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9jZDQzNTAtYmU3NC00N2UwLTk2YjMtYjBkYjJlYWE5N2Vk
LzEvbHpXcFR6RlViVU43aVhJT2hFc3ZFcVdyOG1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaBbTqn6a
UpcRzM6tH1+Qai9eYxZMoNMGAuzpvsnQygK6j1ZBtuSV5vL1RLAOpnTZvs82cn8d
QVWGlSLYarAdzkqivBVrEsKkw3iQpkVA8d0g0YDRZZAWvvdKOLD3S8bcO6DnCiQK
P5Tff7xfm/HEFQbdfr3n6G0kqlKcFwC9qz/oNoXlFZWZSk32JE6JuuSVtJxgLRb1
cNFmKOXfVoRS6qHUU7e6HsRcGYUMj1o6JbimDIa7Hr+nW70ggkYjDCHr61o2cwKW
gJ1CrNelTxWsLmUH52IxtBBcORwm0xkUV718zKxdg2/fkoTh5FsQzg/v41ZDFA7c
QYIyud5kMmC/mA==
-----END CERTIFICATE-----
Generated at Wed Apr 30 10:03:12 2025 by rpki-client