Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
File: lELO0S17sEnNHN-N97palXZVOGw.mft (raw, json)
Hash identifier: I5xbeYOF5VRZewDMwAQQPbwe++JaXTMP2xXKOKh8W6c=
Subject key identifier: EB:B1:B5:66:9D:BD:13:D0:DF:DC:86:B9:EE:BD:71:C5:C6:05:52:B4
Authority key identifier: 94:42:CE:D1:2D:7B:B0:49:CD:1C:DF:8D:F7:BA:5A:95:76:55:38:6C
Certificate issuer: /CN=9442ced12d7bb049cd1cdf8df7ba5a957655386c
Certificate serial: 019691F19D402024118F3ED5CD96FE39924A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
Manifest number: 151C
Signing time: Fri 02 May 2025 17:00:52 +0000
Manifest this update: Fri 02 May 2025 17:00:52 +0000
Manifest next update: Sat 03 May 2025 17:00:52 +0000
Files and hashes: 1: lELO0S17sEnNHN-N97palXZVOGw.crl (hash: TVuq6ob9Mn7LhzCca5Kyy6WQMMGbFBtEHIpUz8MFLrY=)
2: y1M_0IPPUhADZVWuik8Z4f_wo9M.roa (hash: eHKjTvDyh23zI8FCfLLfE/ibDHPOekWU95t2XI4Bzzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:f1:9d:40:20:24:11:8f:3e:d5:cd:96:fe:39:92:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9442ced12d7bb049cd1cdf8df7ba5a957655386c
Validity
Not Before: May 2 17:00:52 2025 GMT
Not After : May 3 17:00:52 2025 GMT
Subject: CN=ebb1b5669dbd13d0dfdc86b9eebd71c5c60552b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a4:fc:03:ef:53:dc:16:f7:d9:8f:a2:71:21:
78:2d:3e:e6:c0:95:49:13:21:4f:66:82:53:fb:aa:
0f:0d:f4:4d:02:aa:cb:b3:db:68:c5:8c:c6:e9:3f:
74:c6:c3:cc:08:15:bc:7a:4a:87:30:80:e0:cd:65:
8e:b6:60:9a:0e:a8:84:e4:9b:bd:0a:d4:66:6a:f6:
3f:44:1e:21:f3:50:04:fb:44:e0:8a:01:1d:a8:20:
18:48:94:56:12:58:fd:8f:25:49:8e:1f:bd:ee:81:
d5:55:c4:1a:7d:5f:3d:06:62:05:f6:28:f1:0f:d0:
4b:bb:db:5f:63:f4:29:1e:eb:12:93:92:f3:9a:ac:
4d:e6:86:a3:9e:c2:b5:50:36:ad:1e:92:c6:cd:00:
10:9f:50:7f:93:62:c8:43:3a:d1:f5:3d:2e:b1:ce:
0a:75:e3:a7:0b:99:d2:42:d5:0b:dc:43:50:7f:d8:
1e:19:02:0a:43:30:2d:0a:e6:f7:a0:df:3f:da:cb:
c2:30:03:b7:78:57:bd:60:20:60:77:79:bb:d0:1e:
9c:f3:d8:61:ac:0c:45:d7:56:09:7e:fc:0a:5d:75:
67:b7:f0:b3:4b:d5:d5:db:ad:7d:8f:43:c4:82:62:
12:84:66:22:db:ab:a9:d4:24:25:38:41:a1:f1:bb:
a3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B1:B5:66:9D:BD:13:D0:DF:DC:86:B9:EE:BD:71:C5:C6:05:52:B4
X509v3 Authority Key Identifier:
keyid:94:42:CE:D1:2D:7B:B0:49:CD:1C:DF:8D:F7:BA:5A:95:76:55:38:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lELO0S17sEnNHN-N97palXZVOGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9f2ffa-237b-474b-8880-46fd46d6b547/1/lELO0S17sEnNHN-N97palXZVOGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:cd:13:7e:67:34:74:25:40:73:76:84:23:30:4a:54:0e:4d:
05:ad:74:82:e8:60:ec:2a:39:3f:0f:3d:27:5e:23:2b:7f:f9:
fa:a0:56:d4:93:90:c2:c3:e7:b2:e4:ef:25:12:16:f2:61:3b:
cc:d2:95:47:70:78:ee:24:3b:15:6f:08:2f:75:a9:fe:6c:81:
81:ac:ff:01:6d:6c:57:9c:69:3d:f3:2d:9e:00:d4:65:bf:33:
51:02:c0:4f:45:9c:af:1f:a7:3c:78:36:a7:3b:a1:0f:80:c1:
40:1a:f7:aa:0e:bb:be:bc:8c:c0:01:97:f7:8c:d3:67:7d:e8:
ae:f5:d3:78:36:52:b8:78:36:f6:af:35:c8:3e:7d:ca:02:7d:
55:0c:60:bd:6e:43:f6:08:ec:67:2f:26:19:9a:15:f7:34:19:
ff:18:36:04:e1:6d:65:48:b5:a7:98:a8:07:34:ed:ec:f6:1c:
16:f4:94:d1:aa:2d:42:5b:98:61:c5:e7:98:64:79:4a:3e:2d:
58:78:b8:4c:28:31:6b:82:a4:ac:7d:df:5c:2b:ed:16:18:2a:
b8:de:15:bc:b6:6b:3d:ee:36:22:7a:00:55:e2:f8:97:87:f8:
c2:9d:18:be:36:89:48:c6:21:1e:35:03:14:5a:2c:fa:a7:ed:
30:2f:cc:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaR8Z1AICQRjz7VzZb+OZJKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NDJjZWQxMmQ3YmIwNDljZDFjZGY4ZGY3YmE1YTk1NzY1
NTM4NmMwHhcNMjUwNTAyMTcwMDUyWhcNMjUwNTAzMTcwMDUyWjAzMTEwLwYDVQQD
EyhlYmIxYjU2NjlkYmQxM2QwZGZkYzg2YjllZWJkNzFjNWM2MDU1MmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6T8A+9T3Bb32Y+icSF4LT7mwJVJ
EyFPZoJT+6oPDfRNAqrLs9toxYzG6T90xsPMCBW8ekqHMIDgzWWOtmCaDqiE5Ju9
CtRmavY/RB4h81AE+0TgigEdqCAYSJRWElj9jyVJjh+97oHVVcQafV89BmIF9ijx
D9BLu9tfY/QpHusSk5LzmqxN5oajnsK1UDatHpLGzQAQn1B/k2LIQzrR9T0usc4K
deOnC5nSQtUL3ENQf9geGQIKQzAtCub3oN8/2svCMAO3eFe9YCBgd3m70B6c89hh
rAxF11YJfvwKXXVnt/CzS9XV2619j0PEgmIShGYi26up1CQlOEGh8bujUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOuxtWadvRPQ39yGue69ccXGBVK0MB8GA1UdIwQY
MBaAFJRCztEte7BJzRzfjfe6WpV2VThsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEVMTzBTMTdzRW5OSE4tTjk3cGFsWFpWT0d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi85ZjJmZmEtMjM3Yi00NzRiLTg4ODAt
NDZmZDQ2ZDZiNTQ3LzEvbEVMTzBTMTdzRW5OSE4tTjk3cGFsWFpWT0d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi85ZjJmZmEtMjM3Yi00NzRiLTg4ODAtNDZmZDQ2ZDZiNTQ3
LzEvbEVMTzBTMTdzRW5OSE4tTjk3cGFsWFpWT0d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFc0Tfmc0
dCVAc3aEIzBKVA5NBa10guhg7Co5Pw89J14jK3/5+qBW1JOQwsPnsuTvJRIW8mE7
zNKVR3B47iQ7FW8IL3Wp/myBgaz/AW1sV5xpPfMtngDUZb8zUQLAT0Wcrx+nPHg2
pzuhD4DBQBr3qg67vryMwAGX94zTZ33orvXTeDZSuHg29q81yD59ygJ9VQxgvW5D
9gjsZy8mGZoV9zQZ/xg2BOFtZUi1p5ioBzTt7PYcFvSU0aotQluYYcXnmGR5Sj4t
WHi4TCgxa4KkrH3fXCvtFhgquN4VvLZrPe42InoAVeL4l4f4wp0YvjaJSMYhHjUD
FFos+qftMC/MCA==
-----END CERTIFICATE-----
Generated at Fri May 2 19:38:07 2025 by rpki-client