Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
File: lAoQolZyjxGku6rcMgS38KNaUAA.mft (raw, json)
Hash identifier: q31tlt/2FXljoUCXJc+fGlZo7pGVURFhmqMRcH93YZw=
Subject key identifier: 15:62:20:DF:17:6C:8E:27:47:F4:9D:0C:D6:10:5F:7F:6A:F6:6A:A2
Authority key identifier: 94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
Certificate issuer: /CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Certificate serial: 01967341D4B6F0577267AC556CF467AE4A29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
Manifest number: 151C
Signing time: Sat 26 Apr 2025 18:00:16 +0000
Manifest this update: Sat 26 Apr 2025 18:00:16 +0000
Manifest next update: Sun 27 Apr 2025 18:00:16 +0000
Files and hashes: 1: 96CoHDqUFKRWLMKpuPNky2AThV0.roa (hash: 2dbkXGtx2Y2iGJ3uWXJRyOKWK4j+bBsW6iNp6F1vwRk=)
2: Zv6rhEtfx_jSCXc_S8UyXA0vo2U.roa (hash: upx9rJYDv3PHx1B1uURg+ybXETCTfjV8bsr8SvgJ3XM=)
3: biGYeNx8PlSGKHRmVucthKOSlnY.roa (hash: YxlSQax5Hky2oIIKAGXfmWIsjyjpaMRbBxvVdrI+BSI=)
4: g1Zk3nIRea2SYaHqoN92Ss1LCL8.roa (hash: aHQejC3hHy18rRg2jbGxWbnzx0KaJtZTncqKQ8jXn3M=)
5: lAoQolZyjxGku6rcMgS38KNaUAA.crl (hash: v1ar41e0G9JZp2j1tjy5JDJk1J91uGpBkDbyDd3u02Y=)
6: mmvuqSKrxCIOK5dTOpgllxAuYB8.roa (hash: cXrhSBrwqA5XppxSkBQnZWJRKIyKnPJRdZjf9M/iItg=)
7: rZuO-15UbHThyJRmeryxRpgLk2M.roa (hash: /ED0vNPFUaV7PRvXzqX2jHZ983s8HtxjtsJuRuMtCvI=)
8: ucC9i3XEX6RhZkWqb6NvZwx0--U.roa (hash: 2+uO/5ecRW47tQiINeeU4pOO33FM+U1i9JrXKMVUjI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:41:d4:b6:f0:57:72:67:ac:55:6c:f4:67:ae:4a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Validity
Not Before: Apr 26 18:00:16 2025 GMT
Not After : Apr 27 18:00:16 2025 GMT
Subject: CN=156220df176c8e2747f49d0cd6105f7f6af66aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9f:a2:aa:50:22:40:84:a6:83:f4:20:63:42:
07:14:f7:11:bb:5d:c5:09:87:98:13:45:86:3d:ef:
cf:b7:6f:c6:f4:22:c0:46:35:31:26:e0:15:a0:9e:
f4:22:5b:1e:d4:3d:04:fd:bd:bb:48:88:62:e9:2e:
68:b6:5e:98:b0:fd:f2:ed:d1:fd:b7:3b:c4:11:20:
47:f0:f5:f2:ce:6a:95:c0:ea:78:16:42:a4:e8:2a:
b3:3b:60:6f:e1:34:a9:40:76:c0:8e:06:b0:63:d4:
f0:b2:4e:06:8a:63:8f:56:84:d7:3e:13:40:6e:43:
fc:13:26:7b:66:fb:9e:03:ae:2a:1c:79:81:27:23:
0f:ff:47:b6:94:fc:97:4c:aa:95:82:6a:0d:db:2d:
8f:fe:4b:4d:8e:b0:95:36:03:d6:e8:ba:18:43:aa:
04:37:e2:36:19:27:d4:a1:23:52:57:71:85:f2:bd:
4a:e8:87:86:db:2c:36:c8:c8:c1:d9:04:3b:ec:21:
4b:f8:53:16:ad:09:d2:6e:83:02:2b:d1:d7:ca:85:
9a:da:bd:de:f6:25:4d:a2:37:ae:c2:93:3f:08:d3:
4b:8f:80:9c:14:48:c4:c2:e7:9e:89:7c:39:3c:a9:
70:58:bc:13:69:e6:32:e2:1a:02:72:ff:18:d0:29:
6d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:62:20:DF:17:6C:8E:27:47:F4:9D:0C:D6:10:5F:7F:6A:F6:6A:A2
X509v3 Authority Key Identifier:
keyid:94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:f1:ea:3c:09:76:8d:46:47:84:33:a7:ce:fb:f9:ca:3f:a4:
b1:c3:04:d5:52:8e:cc:43:e4:be:cd:c0:82:6d:de:19:92:b9:
7f:f0:16:b4:fd:96:60:e5:ab:c4:01:74:5e:96:76:dd:e8:35:
9c:73:b9:bd:ef:c8:e3:c2:a0:1c:e8:e8:a1:b3:be:0e:ce:5d:
a8:9b:ba:85:69:4c:d8:00:bc:db:d2:82:f9:cf:ba:2c:89:64:
4a:62:39:54:f4:e4:29:06:d1:f1:df:5b:db:9c:35:92:5b:ab:
99:68:75:81:7d:1b:0d:78:4a:fe:fb:16:23:f6:1d:7c:32:78:
7b:98:80:d4:0d:90:65:ff:22:33:26:6e:c3:26:a1:09:20:cd:
f1:da:68:3c:e2:6a:cc:10:7c:65:6f:80:8c:7d:62:1c:e6:3d:
5b:67:c6:21:95:02:01:c1:ec:03:62:6c:1f:d3:8a:3b:e3:c9:
c4:0d:01:ab:27:d5:9a:98:76:24:16:0d:8d:53:5d:01:40:db:
b0:66:dd:00:64:69:d2:73:80:56:6e:9a:b1:1b:d6:05:99:10:
fb:f4:ac:04:5f:ca:90:b8:6e:25:7e:b1:4a:32:4c:d2:1e:42:
64:92:9b:7d:69:f8:29:e7:1c:e2:1f:dd:25:f5:df:c3:00:e3:
59:75:e8:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZzQdS28FdyZ6xVbPRnrkopMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MGExMGEyNTY3MjhmMTFhNGJiYWFkYzMyMDRiN2YwYTM1
YTUwMDAwHhcNMjUwNDI2MTgwMDE2WhcNMjUwNDI3MTgwMDE2WjAzMTEwLwYDVQQD
EygxNTYyMjBkZjE3NmM4ZTI3NDdmNDlkMGNkNjEwNWY3ZjZhZjY2YWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Z+iqlAiQISmg/QgY0IHFPcRu13F
CYeYE0WGPe/Pt2/G9CLARjUxJuAVoJ70Ilse1D0E/b27SIhi6S5otl6YsP3y7dH9
tzvEESBH8PXyzmqVwOp4FkKk6CqzO2Bv4TSpQHbAjgawY9Twsk4GimOPVoTXPhNA
bkP8EyZ7ZvueA64qHHmBJyMP/0e2lPyXTKqVgmoN2y2P/ktNjrCVNgPW6LoYQ6oE
N+I2GSfUoSNSV3GF8r1K6IeG2yw2yMjB2QQ77CFL+FMWrQnSboMCK9HXyoWa2r3e
9iVNojeuwpM/CNNLj4CcFEjEwueeiXw5PKlwWLwTaeYy4hoCcv8Y0CltrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBViIN8XbI4nR/SdDNYQX39q9mqiMB8GA1UdIwQY
MBaAFJQKEKJWco8RpLuq3DIEt/CjWlAAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEFvUW9sWnlqeEdrdTZyY01nUzM4S05hVUFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hMWFlNzUtMmQ2Yi00Y2M2LWFjZWYt
ZGNlNmQ2OTA5MjQ3LzEvbEFvUW9sWnlqeEdrdTZyY01nUzM4S05hVUFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9hMWFlNzUtMmQ2Yi00Y2M2LWFjZWYtZGNlNmQ2OTA5MjQ3
LzEvbEFvUW9sWnlqeEdrdTZyY01nUzM4S05hVUFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzPHqPAl2
jUZHhDOnzvv5yj+kscME1VKOzEPkvs3Agm3eGZK5f/AWtP2WYOWrxAF0XpZ23eg1
nHO5ve/I48KgHOjoobO+Ds5dqJu6hWlM2AC829KC+c+6LIlkSmI5VPTkKQbR8d9b
25w1klurmWh1gX0bDXhK/vsWI/YdfDJ4e5iA1A2QZf8iMyZuwyahCSDN8dpoPOJq
zBB8ZW+AjH1iHOY9W2fGIZUCAcHsA2JsH9OKO+PJxA0BqyfVmph2JBYNjVNdAUDb
sGbdAGRp0nOAVm6asRvWBZkQ+/SsBF/KkLhuJX6xSjJM0h5CZJKbfWn4Kecc4h/d
JfXfwwDjWXXooA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 02:07:08 2025 by rpki-client