Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
File: Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft (raw, json)
Hash identifier: 3UdoLtmBINprRMFjyw6/KfymPONXDAN6kJGWyY8mUkw=
Subject key identifier: 18:AE:D7:07:D1:B8:7F:05:8A:36:D6:16:60:16:18:A6:C1:BE:62:CB
Authority key identifier: 2D:FE:F2:B8:39:AD:07:78:68:33:B1:BE:DC:A8:B0:B1:92:03:E1:11
Certificate issuer: /CN=2dfef2b839ad07786833b1bedca8b0b19203e111
Certificate serial: 019659F013E533DDCA0503FA2B007E84C2DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
Manifest number: 016F
Signing time: Mon 21 Apr 2025 20:00:28 +0000
Manifest this update: Mon 21 Apr 2025 20:00:28 +0000
Manifest next update: Tue 22 Apr 2025 20:00:28 +0000
Files and hashes: 1: 32WtKH3EfM7-S6v7tTmyQcU-a9s.roa (hash: Fn/80HetfWjEwrwQy2saw9cqkA9VjrY/6O3eDGyjCbw=)
2: Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl (hash: 99ipx1qgBkqV1PXH1XK0MU7li8pGCK4xUJNsjZbDZxQ=)
3: ef1K6dC6_lGn3rxGTHxMT8fcB0w.roa (hash: KYKxli5ZRinkaBImEiWWBBcr8lpZPoWAqbzOeddaU7I=)
4: pLMH0ozDSiYZXzqiHdSEzphkheE.roa (hash: CFbM9K2hMJ4HkUaVbEdJq2H47xHqfonXY2RvABtKsw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:f0:13:e5:33:dd:ca:05:03:fa:2b:00:7e:84:c2:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dfef2b839ad07786833b1bedca8b0b19203e111
Validity
Not Before: Apr 21 20:00:28 2025 GMT
Not After : Apr 22 20:00:28 2025 GMT
Subject: CN=18aed707d1b87f058a36d616601618a6c1be62cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:dc:c6:df:1a:13:75:ea:81:df:1b:d9:fb:c8:
48:c6:aa:7e:ae:31:2a:8b:29:65:85:a4:74:df:da:
e2:d0:5e:b3:fd:c2:ef:31:fe:e9:2f:57:4c:18:59:
b3:f1:0f:22:ba:ad:14:f4:c1:7c:94:7e:09:2d:68:
ab:26:a3:97:9e:50:03:ef:be:54:93:f4:1f:4c:fa:
e5:e5:f9:d4:f0:61:c3:bc:e6:eb:ef:fa:44:bc:14:
99:04:f5:e2:24:e8:df:63:64:39:fc:c7:bc:45:5c:
42:06:0f:13:4a:62:01:42:dc:b8:d7:15:55:f7:9f:
eb:57:d2:b3:61:cc:d4:b6:f8:eb:4d:12:74:bb:ec:
00:d6:44:3e:9c:ad:ff:0b:e1:c4:33:cb:c0:17:86:
9c:f0:30:9a:7c:31:57:f6:7d:27:66:11:52:13:22:
d2:d1:94:24:3f:24:2f:e2:30:75:f3:ab:92:e7:d2:
26:53:ed:cb:f5:dd:aa:ba:e4:de:ea:cd:8a:4c:af:
51:e5:63:80:50:51:e1:a5:a7:db:11:97:5d:35:81:
ee:46:f2:04:2b:f7:a5:09:e4:78:c1:eb:30:ee:0a:
56:20:d2:fe:42:69:e0:a8:e8:a9:11:08:d5:35:19:
a0:08:66:5c:7b:f5:fe:02:6b:f0:f9:e6:50:b6:95:
1a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AE:D7:07:D1:B8:7F:05:8A:36:D6:16:60:16:18:A6:C1:BE:62:CB
X509v3 Authority Key Identifier:
keyid:2D:FE:F2:B8:39:AD:07:78:68:33:B1:BE:DC:A8:B0:B1:92:03:E1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:2d:1a:a9:9a:5f:b1:ba:89:91:58:38:62:cf:28:fc:50:37:
ef:17:08:71:4f:af:7c:e7:4b:40:a6:ca:5b:4f:24:a9:a1:c8:
c4:94:f5:ae:b0:d6:21:03:46:51:99:12:1b:c5:b2:6b:1e:77:
08:77:b6:15:2a:62:83:bb:85:fd:05:09:0c:c9:b5:bf:9d:93:
d7:ba:b7:6f:ad:f1:42:7c:61:cd:b7:80:b7:f8:a6:30:dc:f0:
e3:0e:6d:28:05:4f:f2:8f:8f:54:c4:d0:76:99:97:53:1d:45:
cf:ee:7c:b7:80:73:08:6e:13:8b:56:89:b9:a8:5a:e7:83:7d:
a4:21:72:f3:99:78:c3:77:e9:3f:e1:87:59:24:04:d6:a0:ee:
41:9e:f5:c4:19:13:7f:47:27:12:5f:35:2c:a1:24:c9:e1:ef:
b0:0b:6d:a1:14:6b:19:e2:7c:29:ca:6f:f1:c7:9b:ff:a6:66:
23:70:e6:55:42:74:84:7f:c3:97:6b:6f:3e:48:08:14:69:79:
55:9a:d8:d6:97:e4:48:af:fb:e9:ed:1b:9b:7b:a1:bf:6b:8a:
7b:d3:a9:99:e2:e3:a7:76:85:79:3f:56:3e:64:2b:09:56:4e:
4f:fc:a3:e9:0a:93:fe:84:70:1c:4d:55:58:88:8c:d8:a6:c6:
e2:75:f4:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZ8BPlM93KBQP6KwB+hMLeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkZmVmMmI4MzlhZDA3Nzg2ODMzYjFiZWRjYThiMGIxOTIw
M2UxMTEwHhcNMjUwNDIxMjAwMDI4WhcNMjUwNDIyMjAwMDI4WjAzMTEwLwYDVQQD
EygxOGFlZDcwN2QxYjg3ZjA1OGEzNmQ2MTY2MDE2MThhNmMxYmU2MmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9zG3xoTdeqB3xvZ+8hIxqp+rjEq
iyllhaR039ri0F6z/cLvMf7pL1dMGFmz8Q8iuq0U9MF8lH4JLWirJqOXnlAD775U
k/QfTPrl5fnU8GHDvObr7/pEvBSZBPXiJOjfY2Q5/Me8RVxCBg8TSmIBQty41xVV
95/rV9KzYczUtvjrTRJ0u+wA1kQ+nK3/C+HEM8vAF4ac8DCafDFX9n0nZhFSEyLS
0ZQkPyQv4jB186uS59ImU+3L9d2quuTe6s2KTK9R5WOAUFHhpafbEZddNYHuRvIE
K/elCeR4wesw7gpWINL+QmngqOipEQjVNRmgCGZce/X+Amvw+eZQtpUaswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBiu1wfRuH8FijbWFmAWGKbBvmLLMB8GA1UdIwQY
MBaAFC3+8rg5rQd4aDOxvtyosLGSA+ERMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGY3eXVEbXRCM2hvTTdHLTNLaXdzWklENFJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8wMzU3ZTgtM2VhMC00OTY4LTllZjkt
N2Q3MDUxOWI3NmRhLzEvTGY3eXVEbXRCM2hvTTdHLTNLaXdzWklENFJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8wMzU3ZTgtM2VhMC00OTY4LTllZjktN2Q3MDUxOWI3NmRh
LzEvTGY3eXVEbXRCM2hvTTdHLTNLaXdzWklENFJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvy0aqZpf
sbqJkVg4Ys8o/FA37xcIcU+vfOdLQKbKW08kqaHIxJT1rrDWIQNGUZkSG8Wyax53
CHe2FSpig7uF/QUJDMm1v52T17q3b63xQnxhzbeAt/imMNzw4w5tKAVP8o+PVMTQ
dpmXUx1Fz+58t4BzCG4Ti1aJuaha54N9pCFy85l4w3fpP+GHWSQE1qDuQZ71xBkT
f0cnEl81LKEkyeHvsAttoRRrGeJ8Kcpv8ceb/6ZmI3DmVUJ0hH/Dl2tvPkgIFGl5
VZrY1pfkSK/76e0bm3uhv2uKe9OpmeLjp3aFeT9WPmQrCVZOT/yj6QqT/oRwHE1V
WIiM2KbG4nX0iQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 00:02:55 2025 by rpki-client