Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
File: LdOuI8tG7pwhlQ78tg3voJS6VUg.mft (raw, json)
Hash identifier: kJhbnAO+Iuwhy6oKg0WD02XnYLlKri+oFKqGcMjN4cQ=
Subject key identifier: B1:28:38:37:87:FE:9B:D9:1A:C8:67:B9:53:C2:F7:A7:81:18:D6:89
Authority key identifier: 2D:D3:AE:23:CB:46:EE:9C:21:95:0E:FC:B6:0D:EF:A0:94:BA:55:48
Certificate issuer: /CN=2dd3ae23cb46ee9c21950efcb60defa094ba5548
Certificate serial: 019697BCC1D9966484497E280E40FEA12882
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
Manifest number: 1521
Signing time: Sat 03 May 2025 20:00:52 +0000
Manifest this update: Sat 03 May 2025 20:00:52 +0000
Manifest next update: Sun 04 May 2025 20:00:52 +0000
Files and hashes: 1: LdOuI8tG7pwhlQ78tg3voJS6VUg.crl (hash: iMhxAGPa4RSx3CAFfgpb+NVCPuHt/bPQGptc0N20Los=)
2: NR5q24H1ufzbYF2XouLHFu4YVgE.roa (hash: P7YBV+TAXY1ntVvPbNeFWy4DC2dZewmJse8AyIIurOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:97:bc:c1:d9:96:64:84:49:7e:28:0e:40:fe:a1:28:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dd3ae23cb46ee9c21950efcb60defa094ba5548
Validity
Not Before: May 3 20:00:52 2025 GMT
Not After : May 4 20:00:52 2025 GMT
Subject: CN=b128383787fe9bd91ac867b953c2f7a78118d689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7b:af:55:a9:dd:fa:1f:15:61:ee:ca:72:a7:
d7:6c:34:31:1b:d9:f7:02:15:bf:f2:84:aa:ad:3b:
29:75:28:76:60:c5:88:3a:29:d5:ff:2f:cc:6a:6a:
d8:a7:62:1f:4a:ca:ab:47:de:88:01:3a:04:ca:91:
50:df:b8:74:ab:69:ab:9a:69:a0:56:30:a7:b4:6a:
81:72:80:fd:8e:91:e4:8e:db:2e:d0:75:15:2a:96:
91:69:e3:eb:a9:4f:1b:a3:bf:1d:f9:4e:36:7c:56:
14:83:ef:4b:09:d0:22:3f:bb:ac:a0:11:a9:f3:2e:
c6:0d:10:30:42:0c:ad:5d:2a:e4:8d:80:5c:8a:ba:
c8:dc:b9:01:cc:94:6a:c8:b5:57:85:2e:4f:46:36:
b1:fd:c9:29:28:7f:40:d0:21:bc:31:e6:f9:f7:ae:
d5:3f:bc:29:0b:14:3d:6a:b4:85:f4:85:f7:95:3a:
35:e9:6c:22:fc:8d:56:bf:f6:54:e0:e8:a8:60:6c:
ca:3d:4a:af:0f:13:f2:15:c3:37:a7:cf:66:40:cc:
be:d9:a2:c7:37:0b:40:19:fa:36:e4:5a:64:20:d9:
a7:04:e1:f4:5b:df:6f:5a:bd:f1:8c:2c:02:f4:86:
60:93:f7:de:10:95:05:88:c4:61:48:56:0e:63:b9:
1f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:28:38:37:87:FE:9B:D9:1A:C8:67:B9:53:C2:F7:A7:81:18:D6:89
X509v3 Authority Key Identifier:
keyid:2D:D3:AE:23:CB:46:EE:9C:21:95:0E:FC:B6:0D:EF:A0:94:BA:55:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdOuI8tG7pwhlQ78tg3voJS6VUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/319d61-560a-44fd-aa25-49671acdf486/1/LdOuI8tG7pwhlQ78tg3voJS6VUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:2a:b8:3c:da:f4:9a:52:88:70:3a:34:ff:14:56:0d:f1:78:
e6:84:76:33:a1:13:36:bc:34:ed:ba:33:27:47:16:22:3d:e6:
f4:29:bb:8b:56:7c:e8:42:c2:62:33:a1:3f:39:89:77:1c:2d:
5b:3b:45:52:a0:e6:b1:bd:f5:fd:23:eb:ea:fc:a2:f6:40:dc:
70:a1:10:1f:fb:1c:a2:7a:16:74:b5:bd:f6:78:d9:f5:cb:83:
c4:b1:30:8b:10:d8:90:49:ab:79:56:a5:a8:e5:ee:b3:a5:5c:
47:5e:5e:50:b8:ef:b4:42:c5:c5:4a:72:bf:37:22:15:51:56:
29:1f:fd:e0:27:d3:b2:49:c3:70:7e:58:a5:ba:50:0a:f3:97:
45:5d:80:23:eb:fe:0e:f8:30:04:ec:96:be:92:71:a3:2b:f5:
5b:d4:10:92:40:3b:29:14:48:d7:1e:2f:ee:ff:d9:ca:9b:01:
66:aa:9c:ab:0f:4b:bd:df:36:97:46:f0:f8:2d:f2:0a:06:06:
fa:25:10:f8:79:a2:c0:25:87:78:91:15:20:9b:6e:e1:5e:34:
4b:40:a2:bf:6e:c0:a2:d9:54:aa:f8:c2:3a:32:97:27:2b:92:
30:3a:9e:b3:81:c1:b2:44:a2:61:65:fa:13:cc:06:ae:37:9b:
40:a6:b0:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaXvMHZlmSESX4oDkD+oSiCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkZDNhZTIzY2I0NmVlOWMyMTk1MGVmY2I2MGRlZmEwOTRi
YTU1NDgwHhcNMjUwNTAzMjAwMDUyWhcNMjUwNTA0MjAwMDUyWjAzMTEwLwYDVQQD
EyhiMTI4MzgzNzg3ZmU5YmQ5MWFjODY3Yjk1M2MyZjdhNzgxMThkNjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXuvVand+h8VYe7KcqfXbDQxG9n3
AhW/8oSqrTspdSh2YMWIOinV/y/MamrYp2IfSsqrR96IAToEypFQ37h0q2mrmmmg
VjCntGqBcoD9jpHkjtsu0HUVKpaRaePrqU8bo78d+U42fFYUg+9LCdAiP7usoBGp
8y7GDRAwQgytXSrkjYBcirrI3LkBzJRqyLVXhS5PRjax/ckpKH9A0CG8Meb5967V
P7wpCxQ9arSF9IX3lTo16Wwi/I1Wv/ZU4OioYGzKPUqvDxPyFcM3p89mQMy+2aLH
NwtAGfo25FpkINmnBOH0W99vWr3xjCwC9IZgk/feEJUFiMRhSFYOY7kfBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLEoODeH/pvZGshnuVPC96eBGNaJMB8GA1UdIwQY
MBaAFC3TriPLRu6cIZUO/LYN76CUulVIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGRPdUk4dEc3cHdobFE3OHRnM3ZvSlM2VlVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zMTlkNjEtNTYwYS00NGZkLWFhMjUt
NDk2NzFhY2RmNDg2LzEvTGRPdUk4dEc3cHdobFE3OHRnM3ZvSlM2VlVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8zMTlkNjEtNTYwYS00NGZkLWFhMjUtNDk2NzFhY2RmNDg2
LzEvTGRPdUk4dEc3cHdobFE3OHRnM3ZvSlM2VlVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgiq4PNr0
mlKIcDo0/xRWDfF45oR2M6ETNrw07bozJ0cWIj3m9Cm7i1Z86ELCYjOhPzmJdxwt
WztFUqDmsb31/SPr6vyi9kDccKEQH/sconoWdLW99njZ9cuDxLEwixDYkEmreVal
qOXus6VcR15eULjvtELFxUpyvzciFVFWKR/94CfTsknDcH5YpbpQCvOXRV2AI+v+
DvgwBOyWvpJxoyv1W9QQkkA7KRRI1x4v7v/ZypsBZqqcqw9Lvd82l0bw+C3yCgYG
+iUQ+HmiwCWHeJEVIJtu4V40S0Civ27AotlUqvjCOjKXJyuSMDqes4HBskSiYWX6
E8wGrjebQKawrQ==
-----END CERTIFICATE-----
Generated at Sun May 4 04:08:22 2025 by rpki-client