Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
File: lPNHF_8y_ix2RK610O6iMBYX8SQ.mft (raw, json)
Hash identifier: qI7tp8pfMIHQVKcn4G1/JbAiEdCNF2N5xAmkwpv3798=
Subject key identifier: 31:9F:02:28:C6:75:DF:26:1D:B7:72:44:CA:87:E9:1E:C2:25:9A:BE
Authority key identifier: 94:F3:47:17:FF:32:FE:2C:76:44:AE:B5:D0:EE:A2:30:16:17:F1:24
Certificate issuer: /CN=94f34717ff32fe2c7644aeb5d0eea2301617f124
Certificate serial: 01967530305473679F4F9AD8BF8E9383B007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
Manifest number: 0490
Signing time: Sun 27 Apr 2025 03:00:14 +0000
Manifest this update: Sun 27 Apr 2025 03:00:14 +0000
Manifest next update: Mon 28 Apr 2025 03:00:14 +0000
Files and hashes: 1: lPNHF_8y_ix2RK610O6iMBYX8SQ.crl (hash: yjEND6rk2Cu6zn/zEEZX1ksgErIz3UIK181SjluvkLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:30:54:73:67:9f:4f:9a:d8:bf:8e:93:83:b0:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f34717ff32fe2c7644aeb5d0eea2301617f124
Validity
Not Before: Apr 27 03:00:14 2025 GMT
Not After : Apr 28 03:00:14 2025 GMT
Subject: CN=319f0228c675df261db77244ca87e91ec2259abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4d:c5:15:83:e7:78:0e:f8:7c:bf:28:ed:c7:
0e:3d:58:ce:1e:0a:04:ee:ea:d6:a7:ee:2a:7f:c1:
c4:6e:ef:e4:55:a3:92:09:42:ed:e8:03:02:74:d4:
fd:13:34:86:0a:8b:9b:8d:9e:9a:66:77:94:df:e7:
da:1a:eb:6f:20:5b:8f:e2:09:ba:ab:1f:40:1e:d6:
35:95:52:92:24:5b:94:bb:74:b6:f3:8c:de:ed:3e:
e4:9a:1c:18:6d:af:e5:10:e0:98:8d:e2:7d:7c:33:
18:85:ee:fc:03:f4:a2:c6:03:24:3a:49:64:20:2d:
34:5c:be:fc:e4:5e:9b:43:cc:4d:a7:6f:00:ea:51:
31:47:2b:b4:d8:c5:12:9f:9b:74:83:07:19:e4:9b:
ba:86:a5:9a:23:00:5b:99:ac:7e:79:ef:21:75:a3:
a8:75:e7:5d:45:38:c0:24:8a:9d:68:d1:44:5d:16:
24:b0:de:d8:d4:1c:82:99:75:f0:0a:16:f7:23:64:
36:89:99:83:ed:7c:bb:d8:c2:32:c4:a4:be:44:62:
39:5e:b3:1e:f0:0c:a6:33:08:dc:9f:da:ff:df:9a:
07:4e:5c:54:90:cf:15:87:48:09:94:99:25:2e:a3:
57:a6:7c:c7:ad:93:fa:2f:fa:64:7d:c7:c7:92:d9:
0e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:9F:02:28:C6:75:DF:26:1D:B7:72:44:CA:87:E9:1E:C2:25:9A:BE
X509v3 Authority Key Identifier:
keyid:94:F3:47:17:FF:32:FE:2C:76:44:AE:B5:D0:EE:A2:30:16:17:F1:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPNHF_8y_ix2RK610O6iMBYX8SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cab198-3e84-4b01-bfba-82b9e5fe9b06/1/lPNHF_8y_ix2RK610O6iMBYX8SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:3a:80:0f:7e:dd:35:cc:ed:d3:98:7d:d9:de:24:14:26:67:
49:34:30:4e:38:20:4d:e0:4c:fb:0f:45:26:ee:d4:b7:b6:a6:
94:46:b0:8d:c4:b0:6d:35:09:4e:50:c6:02:44:7a:e5:63:00:
98:53:b2:d8:9b:9f:df:68:21:69:79:76:cc:e5:6a:22:1b:dc:
94:94:4b:6f:3c:4e:2c:a7:17:e9:71:34:d6:b5:54:2a:8a:f5:
34:24:1f:4f:c6:da:7e:bf:14:e9:b5:13:77:27:07:9a:ce:80:
60:58:62:b1:80:a8:49:c8:95:56:13:c2:84:4b:53:e1:37:d1:
66:d9:7c:b9:cd:15:1a:26:42:e6:ac:da:ec:78:3b:eb:ef:35:
57:a2:32:67:83:06:ac:ee:0c:2d:6b:23:3f:fe:05:54:2b:44:
45:c5:85:ea:b1:86:1d:ef:cd:68:39:6b:ca:8c:57:8b:24:0d:
d5:c9:37:82:da:ea:26:cb:31:fd:ab:bd:47:a6:39:dd:50:7a:
ff:35:2a:54:ce:f2:b7:65:6f:90:4a:55:a7:04:39:89:a8:18:
b7:03:bd:00:e5:bd:06:26:38:81:14:94:c8:3d:b3:64:1f:97:
84:b8:77:ec:d8:2d:02:c7:df:31:c4:de:0f:1e:fb:5c:72:2d:
2a:14:62:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ1MDBUc2efT5rYv46Tg7AHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ZjM0NzE3ZmYzMmZlMmM3NjQ0YWViNWQwZWVhMjMwMTYx
N2YxMjQwHhcNMjUwNDI3MDMwMDE0WhcNMjUwNDI4MDMwMDE0WjAzMTEwLwYDVQQD
EygzMTlmMDIyOGM2NzVkZjI2MWRiNzcyNDRjYTg3ZTkxZWMyMjU5YWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk3FFYPneA74fL8o7ccOPVjOHgoE
7urWp+4qf8HEbu/kVaOSCULt6AMCdNT9EzSGCoubjZ6aZneU3+faGutvIFuP4gm6
qx9AHtY1lVKSJFuUu3S284ze7T7kmhwYba/lEOCYjeJ9fDMYhe78A/SixgMkOklk
IC00XL785F6bQ8xNp28A6lExRyu02MUSn5t0gwcZ5Ju6hqWaIwBbmax+ee8hdaOo
deddRTjAJIqdaNFEXRYksN7Y1ByCmXXwChb3I2Q2iZmD7Xy72MIyxKS+RGI5XrMe
8AymMwjcn9r/35oHTlxUkM8Vh0gJlJklLqNXpnzHrZP6L/pkfcfHktkOPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDGfAijGdd8mHbdyRMqH6R7CJZq+MB8GA1UdIwQY
MBaAFJTzRxf/Mv4sdkSutdDuojAWF/EkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFBOSEZfOHlfaXgyUks2MTBPNmlNQllYOFNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jYWIxOTgtM2U4NC00YjAxLWJmYmEt
ODJiOWU1ZmU5YjA2LzEvbFBOSEZfOHlfaXgyUks2MTBPNmlNQllYOFNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9jYWIxOTgtM2U4NC00YjAxLWJmYmEtODJiOWU1ZmU5YjA2
LzEvbFBOSEZfOHlfaXgyUks2MTBPNmlNQllYOFNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqzqAD37d
Nczt05h92d4kFCZnSTQwTjggTeBM+w9FJu7Ut7amlEawjcSwbTUJTlDGAkR65WMA
mFOy2Juf32ghaXl2zOVqIhvclJRLbzxOLKcX6XE01rVUKor1NCQfT8bafr8U6bUT
dycHms6AYFhisYCoSciVVhPChEtT4TfRZtl8uc0VGiZC5qza7Hg76+81V6IyZ4MG
rO4MLWsjP/4FVCtERcWF6rGGHe/NaDlryoxXiyQN1ck3gtrqJssx/au9R6Y53VB6
/zUqVM7yt2VvkEpVpwQ5iagYtwO9AOW9BiY4gRSUyD2zZB+XhLh37NgtAsffMcTe
Dx77XHItKhRiXw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:02:17 2025 by rpki-client