Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
File: lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft (raw, json)
Hash identifier: EfjELXQWw03i1uCGPgH7GAe7Tns7XdK8aGHSB6jyGiw=
Subject key identifier: 0E:68:25:A7:CD:47:27:E3:E6:95:20:F6:5B:57:1C:29:17:87:37:40
Authority key identifier: 94:16:D8:E0:2B:5A:1A:75:85:9F:64:A0:5C:5A:8D:77:C8:4C:50:F1
Certificate issuer: /CN=9416d8e02b5a1a75859f64a05c5a8d77c84c50f1
Certificate serial: 0196729D6A7450BFD4F41CACE83D73D51240
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
Manifest number: 1209
Signing time: Sat 26 Apr 2025 15:00:41 +0000
Manifest this update: Sat 26 Apr 2025 15:00:41 +0000
Manifest next update: Sun 27 Apr 2025 15:00:41 +0000
Files and hashes: 1: 9xCRY7VEPmKHf0lyxzNpSutTsGY.roa (hash: 6rDekGO16wwWHoKHJkHXXHa8TG0Fv3Oiiu1rkWGfPt4=)
2: Z37vhTOIgXT7YFHlN3w9aL-lk5Y.roa (hash: iMlS4GRDszRpO6wfa87ZF07OseqOmumWVqUeyx1wi4Y=)
3: lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl (hash: jMSGcxrKVkSd5ntzzIqJpfWkqHhm3rqONvhew0qAxzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:9d:6a:74:50:bf:d4:f4:1c:ac:e8:3d:73:d5:12:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9416d8e02b5a1a75859f64a05c5a8d77c84c50f1
Validity
Not Before: Apr 26 15:00:41 2025 GMT
Not After : Apr 27 15:00:41 2025 GMT
Subject: CN=0e6825a7cd4727e3e69520f65b571c2917873740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3a:91:f4:fa:da:0c:23:95:22:c1:8c:e6:3b:
89:ac:29:d0:f7:ef:91:b3:65:af:02:6b:22:6e:bc:
ed:89:44:1f:02:b4:7c:10:80:00:02:7e:5d:5b:6f:
62:30:b6:77:02:5d:62:19:0c:ee:8e:d8:15:15:72:
02:31:bf:3c:6c:86:1f:e1:78:b3:27:be:f2:61:16:
38:af:65:07:f4:80:1c:93:bd:e6:2d:99:a3:fb:74:
61:ef:2f:cb:4d:65:d9:d3:da:07:f3:29:db:2f:62:
3d:de:cd:60:17:7d:e8:92:dd:f0:15:ef:63:9e:6f:
25:84:4f:7b:76:2a:83:36:2e:bc:a2:75:f5:92:fa:
55:25:66:0e:ba:54:99:07:e6:e0:b1:64:da:fa:b6:
86:5a:5e:be:6b:6f:65:55:53:4f:48:1a:ac:64:84:
a3:09:6e:55:c2:a7:2f:17:7c:22:cd:39:b3:f2:0c:
42:2f:a0:b5:87:c2:75:8d:5c:a6:bb:d9:5a:cd:34:
a2:05:75:f7:c1:21:1f:bc:83:74:0a:39:08:ce:0a:
9a:8b:3a:4c:fa:aa:82:b1:73:44:e7:f1:bc:e3:ce:
86:84:84:96:c8:f5:d3:c8:27:7b:40:3c:22:90:70:
6c:72:01:a7:9a:9a:ae:ab:cc:b0:2e:e7:51:2e:84:
53:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:68:25:A7:CD:47:27:E3:E6:95:20:F6:5B:57:1C:29:17:87:37:40
X509v3 Authority Key Identifier:
keyid:94:16:D8:E0:2B:5A:1A:75:85:9F:64:A0:5C:5A:8D:77:C8:4C:50:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:bc:31:4b:ef:bd:c2:c5:51:ee:c4:f2:19:8b:11:c1:19:f3:
42:05:7a:b2:0f:f3:90:de:96:56:f1:23:ea:7e:0f:25:c0:d7:
18:a1:f8:20:08:69:c0:91:aa:2f:83:66:e3:b7:be:d7:f4:fc:
7f:e8:3e:4f:54:90:4e:fc:77:cf:f8:47:45:56:1b:25:de:5f:
9b:ee:6b:94:72:de:b6:52:0a:cd:4b:85:be:cf:78:c8:58:d1:
4c:e8:f0:b4:54:d1:af:00:23:f1:17:cb:c6:49:fe:f9:3c:af:
e7:98:62:22:12:2b:e4:d0:26:9d:fe:89:e3:ab:4e:98:bc:5c:
8f:9c:44:48:22:17:5c:99:b6:fa:88:6e:06:f9:4d:64:3e:9b:
50:e1:40:fd:f4:0f:39:0c:ff:4a:e4:f0:89:76:0a:56:ff:c0:
13:6a:06:ec:fb:93:0d:95:82:fb:db:ed:5a:bd:01:da:3e:2a:
9c:fb:c6:27:e1:e5:ed:52:0e:32:fd:42:9d:2b:6f:1e:73:c9:
09:e0:87:e8:bf:d6:2f:94:ea:df:49:84:27:12:df:b2:ad:f3:
a0:5b:bf:ac:0f:5e:8c:a0:60:ec:10:aa:83:ff:83:d0:06:7b:
4e:81:1f:3a:ce:1c:91:83:14:3d:03:a6:54:e9:69:cd:bf:27:
48:44:8d:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZynWp0UL/U9Bys6D1z1RJAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MTZkOGUwMmI1YTFhNzU4NTlmNjRhMDVjNWE4ZDc3Yzg0
YzUwZjEwHhcNMjUwNDI2MTUwMDQxWhcNMjUwNDI3MTUwMDQxWjAzMTEwLwYDVQQD
EygwZTY4MjVhN2NkNDcyN2UzZTY5NTIwZjY1YjU3MWMyOTE3ODczNzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDqR9PraDCOVIsGM5juJrCnQ9++R
s2WvAmsibrztiUQfArR8EIAAAn5dW29iMLZ3Al1iGQzujtgVFXICMb88bIYf4Xiz
J77yYRY4r2UH9IAck73mLZmj+3Rh7y/LTWXZ09oH8ynbL2I93s1gF33okt3wFe9j
nm8lhE97diqDNi68onX1kvpVJWYOulSZB+bgsWTa+raGWl6+a29lVVNPSBqsZISj
CW5VwqcvF3wizTmz8gxCL6C1h8J1jVymu9lazTSiBXX3wSEfvIN0CjkIzgqaizpM
+qqCsXNE5/G8486GhISWyPXTyCd7QDwikHBscgGnmpquq8ywLudRLoRTkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA5oJafNRyfj5pUg9ltXHCkXhzdAMB8GA1UdIwQY
MBaAFJQW2OArWhp1hZ9koFxajXfITFDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEJiWTRDdGFHbldGbjJTZ1hGcU5kOGhNVVBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wMTNjOTktN2Q3YS00ODJiLWJiNTEt
ZWI0ZTEzYmU1MDZhLzEvbEJiWTRDdGFHbldGbjJTZ1hGcU5kOGhNVVBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8wMTNjOTktN2Q3YS00ODJiLWJiNTEtZWI0ZTEzYmU1MDZh
LzEvbEJiWTRDdGFHbldGbjJTZ1hGcU5kOGhNVVBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAirwxS++9
wsVR7sTyGYsRwRnzQgV6sg/zkN6WVvEj6n4PJcDXGKH4IAhpwJGqL4Nm47e+1/T8
f+g+T1SQTvx3z/hHRVYbJd5fm+5rlHLetlIKzUuFvs94yFjRTOjwtFTRrwAj8RfL
xkn++Tyv55hiIhIr5NAmnf6J46tOmLxcj5xESCIXXJm2+ohuBvlNZD6bUOFA/fQP
OQz/SuTwiXYKVv/AE2oG7PuTDZWC+9vtWr0B2j4qnPvGJ+Hl7VIOMv1CnStvHnPJ
CeCH6L/WL5Tq30mEJxLfsq3zoFu/rA9ejKBg7BCqg/+D0AZ7ToEfOs4ckYMUPQOm
VOlpzb8nSESN0g==
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:06:11 2025 by rpki-client