Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.mft
File: _LwbYj6YBVnjKlodtYD4pzRBdwU.mft (raw, json)
Hash identifier: JaEaBMemJr41VN0UW6HRco3VtKAcWbBMHhZ9feX43c8=
Subject key identifier: E6:EE:99:F0:76:3D:1C:2A:33:B1:AE:84:0B:DA:17:18:5D:A6:74:4C
Authority key identifier: FC:BC:1B:62:3E:98:05:59:E3:2A:5A:1D:B5:80:F8:A7:34:41:77:05
Certificate issuer: /CN=fcbc1b623e980559e32a5a1db580f8a734417705
Certificate serial: 0196789F47074D102964379507EF59470BC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LwbYj6YBVnjKlodtYD4pzRBdwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.mft
Manifest number: 04BB
Signing time: Sun 27 Apr 2025 19:00:26 +0000
Manifest this update: Sun 27 Apr 2025 19:00:26 +0000
Manifest next update: Mon 28 Apr 2025 19:00:26 +0000
Files and hashes: 1: HY2qqakYUKmGxzXSwPgmmaqbnWQ.roa (hash: ijxTXIq4WZ5WszUemCRN8Fg/4BF4CCUnIK9TDQDj4gU=)
2: _LwbYj6YBVnjKlodtYD4pzRBdwU.crl (hash: TyrzN6rzjGY14pAVtl2G5Ix69r23DnezIWkZ89OyFTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_LwbYj6YBVnjKlodtYD4pzRBdwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:47:07:4d:10:29:64:37:95:07:ef:59:47:0b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcbc1b623e980559e32a5a1db580f8a734417705
Validity
Not Before: Apr 27 19:00:26 2025 GMT
Not After : Apr 28 19:00:26 2025 GMT
Subject: CN=e6ee99f0763d1c2a33b1ae840bda17185da6744c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:46:f2:af:ff:7f:69:85:ed:e1:ac:e9:d5:a8:
74:d7:46:4e:29:85:71:71:29:1f:6f:f7:e5:69:29:
c7:fc:26:e8:1b:3c:ce:07:f7:83:ad:60:88:a0:47:
af:11:0d:74:63:bb:61:4a:88:d6:31:9e:b2:82:3b:
ce:db:a6:dd:52:bb:97:18:c3:c3:19:3b:6f:8c:35:
bf:eb:a0:01:a4:a9:a9:1f:0a:ac:22:e9:46:8c:18:
74:88:c9:47:89:af:d3:fc:b1:2a:6c:45:dc:62:b6:
42:ef:73:1f:f1:74:92:64:23:4a:a7:cc:ec:a2:1b:
78:4e:aa:98:40:a8:6c:fc:e2:1d:a3:26:81:dc:40:
13:06:08:61:16:5c:10:81:d3:cb:8b:fd:22:a6:62:
78:78:c9:44:06:91:e6:d7:77:4d:0e:c1:08:7b:36:
e5:be:d7:21:db:66:75:1e:4c:23:bd:6b:dd:5d:db:
ce:3c:c8:67:2d:4a:f8:74:56:27:b0:66:6d:97:78:
b7:54:33:25:65:1f:57:94:ba:87:8a:33:a8:99:0d:
0b:9a:5f:e5:f4:64:43:46:22:37:30:69:c0:a8:e0:
2e:e5:77:a6:27:0b:68:e4:6a:e5:ca:47:2b:89:b3:
ba:63:7f:df:9c:a0:97:66:c1:bb:56:e0:36:40:17:
23:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:EE:99:F0:76:3D:1C:2A:33:B1:AE:84:0B:DA:17:18:5D:A6:74:4C
X509v3 Authority Key Identifier:
keyid:FC:BC:1B:62:3E:98:05:59:E3:2A:5A:1D:B5:80:F8:A7:34:41:77:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LwbYj6YBVnjKlodtYD4pzRBdwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:78:b2:f7:c7:b6:1b:57:9d:27:76:45:85:22:ba:f0:ec:e9:
a9:2a:02:7f:5a:19:db:46:62:37:84:45:02:52:1a:77:2c:8b:
7d:57:0d:ed:fe:f2:fa:0d:a4:79:be:5c:0d:90:32:f5:0a:c7:
08:2f:e5:ce:44:e0:b3:14:91:c3:68:3f:12:cf:c9:95:07:72:
73:a6:f6:1e:9d:c7:34:dd:d8:1f:d4:f8:74:ae:c7:19:0f:5e:
20:26:50:c4:ff:df:1a:03:c7:c0:1f:ab:16:74:2b:47:af:08:
4f:dd:53:ed:b9:7b:ee:44:2f:5d:7e:7a:f9:a8:f4:dd:17:da:
26:1d:09:ce:b0:db:95:3c:c3:26:ed:42:1e:07:e9:04:97:6f:
d4:7a:24:e0:6d:c3:b9:75:c0:00:00:3d:c7:77:9b:d4:e1:e8:
5e:dc:3b:d2:60:26:03:c4:50:da:7e:d0:bc:03:7a:62:90:e7:
49:2f:44:99:c4:b2:e7:03:a9:2a:ef:b4:80:b5:8e:03:3c:c5:
06:6e:8d:e6:8f:9f:ae:a8:79:f7:83:ad:2a:1b:45:d6:98:05:
2e:55:17:45:ce:76:5a:5b:67:82:a7:8e:03:f2:34:0f:8e:7c:
37:a0:e4:63:5e:07:81:45:91:86:16:d0:03:49:41:ee:25:76:
21:cc:91:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ4n0cHTRApZDeVB+9ZRwvGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjYmMxYjYyM2U5ODA1NTllMzJhNWExZGI1ODBmOGE3MzQ0
MTc3MDUwHhcNMjUwNDI3MTkwMDI2WhcNMjUwNDI4MTkwMDI2WjAzMTEwLwYDVQQD
EyhlNmVlOTlmMDc2M2QxYzJhMzNiMWFlODQwYmRhMTcxODVkYTY3NDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkbyr/9/aYXt4azp1ah010ZOKYVx
cSkfb/flaSnH/CboGzzOB/eDrWCIoEevEQ10Y7thSojWMZ6ygjvO26bdUruXGMPD
GTtvjDW/66ABpKmpHwqsIulGjBh0iMlHia/T/LEqbEXcYrZC73Mf8XSSZCNKp8zs
oht4TqqYQKhs/OIdoyaB3EATBghhFlwQgdPLi/0ipmJ4eMlEBpHm13dNDsEIezbl
vtch22Z1HkwjvWvdXdvOPMhnLUr4dFYnsGZtl3i3VDMlZR9XlLqHijOomQ0Lml/l
9GRDRiI3MGnAqOAu5XemJwto5GrlykcribO6Y3/fnKCXZsG7VuA2QBcjtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFObumfB2PRwqM7GuhAvaFxhdpnRMMB8GA1UdIwQY
MBaAFPy8G2I+mAVZ4ypaHbWA+Kc0QXcFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0x3YllqNllCVm5qS2xvZHRZRDRwelJCZHdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8wMzJlYWItYzRjNy00YjZkLTlkNmQt
NzFhNzU0MmE2MDY2LzEvX0x3YllqNllCVm5qS2xvZHRZRDRwelJCZHdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8wMzJlYWItYzRjNy00YjZkLTlkNmQtNzFhNzU0MmE2MDY2
LzEvX0x3YllqNllCVm5qS2xvZHRZRDRwelJCZHdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYniy98e2
G1edJ3ZFhSK68OzpqSoCf1oZ20ZiN4RFAlIadyyLfVcN7f7y+g2keb5cDZAy9QrH
CC/lzkTgsxSRw2g/Es/JlQdyc6b2Hp3HNN3YH9T4dK7HGQ9eICZQxP/fGgPHwB+r
FnQrR68IT91T7bl77kQvXX56+aj03RfaJh0JzrDblTzDJu1CHgfpBJdv1Hok4G3D
uXXAAAA9x3eb1OHoXtw70mAmA8RQ2n7QvAN6YpDnSS9EmcSy5wOpKu+0gLWOAzzF
Bm6N5o+frqh594OtKhtF1pgFLlUXRc52WltngqeOA/I0D458N6DkY14HgUWRhhbQ
A0lB7iV2IcyRWw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 01:09:51 2025 by rpki-client