Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/19c9e1-8543-4f50-acae-e4045d8cfe8f/1/ljoPxHp632KEWtbc1_t2GmwZ_ts.mft
File: ljoPxHp632KEWtbc1_t2GmwZ_ts.mft (raw, json)
Hash identifier: JlJ5Z6gS7OLCWPI6OW0VGKtuStRFG6jgUF2Dh6i4IuI=
Subject key identifier: 83:9B:33:44:61:D8:CD:B4:13:F5:B1:FA:68:42:BB:EC:DF:25:71:06
Authority key identifier: 96:3A:0F:C4:7A:7A:DF:62:84:5A:D6:DC:D7:FB:76:1A:6C:19:FE:DB
Certificate issuer: /CN=963a0fc47a7adf62845ad6dcd7fb761a6c19fedb
Certificate serial: 01965500C78CE72576B40BFD46DA363E7239
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljoPxHp632KEWtbc1_t2GmwZ_ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/19c9e1-8543-4f50-acae-e4045d8cfe8f/1/ljoPxHp632KEWtbc1_t2GmwZ_ts.mft
Manifest number: 0AFB
Signing time: Sun 20 Apr 2025 21:00:36 +0000
Manifest this update: Sun 20 Apr 2025 21:00:36 +0000
Manifest next update: Mon 21 Apr 2025 21:00:36 +0000
Files and hashes: 1: flK9dI6qS59uuhUTdI9-Lm32F14.roa (hash: zlQ+q1YmxirUq/y5GYQVkTybydvIz392HoitTR1/bAQ=)
2: ljoPxHp632KEWtbc1_t2GmwZ_ts.crl (hash: Fk760RHB0XhGkPMRWXMcx2LOr8WIq308NqUaRXaXzWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/19c9e1-8543-4f50-acae-e4045d8cfe8f/1/ljoPxHp632KEWtbc1_t2GmwZ_ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/19c9e1-8543-4f50-acae-e4045d8cfe8f/1/ljoPxHp632KEWtbc1_t2GmwZ_ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/ljoPxHp632KEWtbc1_t2GmwZ_ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:c7:8c:e7:25:76:b4:0b:fd:46:da:36:3e:72:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=963a0fc47a7adf62845ad6dcd7fb761a6c19fedb
Validity
Not Before: Apr 20 21:00:36 2025 GMT
Not After : Apr 21 21:00:36 2025 GMT
Subject: CN=839b334461d8cdb413f5b1fa6842bbecdf257106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:61:ba:dd:c9:04:f2:ec:70:c6:0f:25:fd:89:
02:3d:0e:aa:98:04:4c:7f:ce:38:68:84:7b:43:bd:
10:78:f1:cd:ab:ad:be:1e:15:e7:ad:bc:70:98:78:
25:88:fa:74:ab:5e:01:51:c2:c8:8a:5d:99:4e:3a:
05:bb:23:65:f4:bd:eb:b7:58:1e:ef:91:7f:00:cd:
88:1f:f5:f3:74:16:1a:f8:88:6d:3f:30:16:31:2e:
0b:c9:14:90:d5:d3:75:01:6e:5f:8f:58:32:17:9b:
91:b1:87:8a:20:93:45:2f:b1:e5:ae:39:b6:ea:88:
ce:9d:28:03:35:bb:75:01:cf:e5:92:46:25:80:81:
38:83:86:85:d4:39:50:01:81:82:48:23:67:fb:fc:
84:ad:80:b2:01:78:f3:c9:11:50:06:c7:f5:0c:29:
fe:72:78:2b:b1:02:fa:34:d6:02:3f:2b:82:b8:e0:
ad:23:1e:98:c3:3e:19:6f:fa:b1:dc:76:d1:cc:12:
74:bb:07:8e:d5:96:e1:ee:b9:11:b9:2d:6d:09:6b:
bf:90:85:10:78:cc:9d:c8:9b:93:3d:56:bd:a2:a2:
f2:58:d4:2b:68:c2:97:ea:92:5b:0a:18:1f:f4:4c:
78:99:d0:90:13:9d:4e:6f:77:16:08:5a:d9:a7:61:
f3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9B:33:44:61:D8:CD:B4:13:F5:B1:FA:68:42:BB:EC:DF:25:71:06
X509v3 Authority Key Identifier:
keyid:96:3A:0F:C4:7A:7A:DF:62:84:5A:D6:DC:D7:FB:76:1A:6C:19:FE:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljoPxHp632KEWtbc1_t2GmwZ_ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/19c9e1-8543-4f50-acae-e4045d8cfe8f/1/ljoPxHp632KEWtbc1_t2GmwZ_ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/19c9e1-8543-4f50-acae-e4045d8cfe8f/1/ljoPxHp632KEWtbc1_t2GmwZ_ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:67:6f:d7:f7:f3:90:d0:6c:8e:61:d6:97:9c:0a:3e:10:e1:
e8:9b:84:4b:ab:46:0a:43:57:39:d5:63:e9:a1:be:57:d3:70:
81:d5:fe:e6:0c:9d:13:4e:40:a5:28:2f:d6:66:a8:41:35:65:
fa:4e:15:84:ec:d0:88:c5:22:be:da:ed:4b:7d:c0:3f:5f:bc:
64:d7:ce:5e:83:01:2d:13:3c:c1:df:9c:2e:6d:01:18:35:81:
81:58:b4:0a:ae:7a:4a:55:12:5b:5c:31:ab:b6:5d:5c:1a:b1:
f8:15:49:3f:9c:64:6a:9b:2c:1a:88:ab:5d:78:67:f9:7a:28:
ed:cd:42:93:db:ed:48:f6:84:06:df:06:69:8f:8d:74:04:2e:
c3:14:82:fe:77:84:c6:af:72:d6:d7:8e:99:1f:79:01:bc:3b:
d2:32:32:d0:6f:59:69:bf:4b:a8:00:ca:85:5b:d3:cb:95:89:
e7:af:41:a5:ee:80:16:8e:00:13:c1:ad:3f:46:6d:2b:01:26:
1a:4a:23:46:b7:4e:45:fa:d0:c7:f9:b8:f4:0c:cc:3d:26:73:
a3:a0:aa:91:01:76:56:49:9d:b7:b0:82:04:ea:d5:7e:37:55:
9d:c2:c0:15:23:83:ae:3f:07:f0:8e:67:cc:bf:17:0f:98:e3:
a8:c3:e0:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVAMeM5yV2tAv9Rto2PnI5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2M2EwZmM0N2E3YWRmNjI4NDVhZDZkY2Q3ZmI3NjFhNmMx
OWZlZGIwHhcNMjUwNDIwMjEwMDM2WhcNMjUwNDIxMjEwMDM2WjAzMTEwLwYDVQQD
Eyg4MzliMzM0NDYxZDhjZGI0MTNmNWIxZmE2ODQyYmJlY2RmMjU3MTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGG63ckE8uxwxg8l/YkCPQ6qmARM
f844aIR7Q70QePHNq62+HhXnrbxwmHgliPp0q14BUcLIil2ZTjoFuyNl9L3rt1ge
75F/AM2IH/XzdBYa+IhtPzAWMS4LyRSQ1dN1AW5fj1gyF5uRsYeKIJNFL7Hlrjm2
6ojOnSgDNbt1Ac/lkkYlgIE4g4aF1DlQAYGCSCNn+/yErYCyAXjzyRFQBsf1DCn+
cngrsQL6NNYCPyuCuOCtIx6Ywz4Zb/qx3HbRzBJ0uweO1Zbh7rkRuS1tCWu/kIUQ
eMydyJuTPVa9oqLyWNQraMKX6pJbChgf9Ex4mdCQE51Ob3cWCFrZp2HznQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIObM0Rh2M20E/Wx+mhCu+zfJXEGMB8GA1UdIwQY
MBaAFJY6D8R6et9ihFrW3Nf7dhpsGf7bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGpvUHhIcDYzMktFV3RiYzFfdDJHbXdaX3RzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8xOWM5ZTEtODU0My00ZjUwLWFjYWUt
ZTQwNDVkOGNmZThmLzEvbGpvUHhIcDYzMktFV3RiYzFfdDJHbXdaX3RzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8xOWM5ZTEtODU0My00ZjUwLWFjYWUtZTQwNDVkOGNmZThm
LzEvbGpvUHhIcDYzMktFV3RiYzFfdDJHbXdaX3RzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX2dv1/fz
kNBsjmHWl5wKPhDh6JuES6tGCkNXOdVj6aG+V9NwgdX+5gydE05ApSgv1maoQTVl
+k4VhOzQiMUivtrtS33AP1+8ZNfOXoMBLRM8wd+cLm0BGDWBgVi0Cq56SlUSW1wx
q7ZdXBqx+BVJP5xkapssGoirXXhn+Xoo7c1Ck9vtSPaEBt8GaY+NdAQuwxSC/neE
xq9y1teOmR95Abw70jIy0G9Zab9LqADKhVvTy5WJ569Bpe6AFo4AE8GtP0ZtKwEm
GkojRrdORfrQx/m49AzMPSZzo6CqkQF2Vkmdt7CCBOrVfjdVncLAFSODrj8H8I5n
zL8XD5jjqMPgjg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:27:52 2025 by rpki-client