Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.mft
File: i5LFXos1lQd133Y-dJMNUinJ-gA.mft (raw, json)
Hash identifier: zJlP9d3cj3igH28jzuATU1fJvBz4LC6Ty4rF7Hz69rc=
Subject key identifier: 8B:9B:1F:A5:09:8C:F4:91:B2:CD:76:21:BB:B4:84:F8:0C:AD:9A:FD
Authority key identifier: 8B:92:C5:5E:8B:35:95:07:75:DF:76:3E:74:93:0D:52:29:C9:FA:00
Certificate issuer: /CN=8b92c55e8b35950775df763e74930d5229c9fa00
Certificate serial: 0196556E7C4FC3B31F1A2A557075BFF1D668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5LFXos1lQd133Y-dJMNUinJ-gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.mft
Manifest number: 1491
Signing time: Sun 20 Apr 2025 23:00:26 +0000
Manifest this update: Sun 20 Apr 2025 23:00:26 +0000
Manifest next update: Mon 21 Apr 2025 23:00:26 +0000
Files and hashes: 1: LNuPziOYyIrKubsBwXhoqEItKOI.roa (hash: HVHsB2c8MGUhz2rUlgm+F2HzTtyYnTiTaoLJeI/5tZw=)
2: i5LFXos1lQd133Y-dJMNUinJ-gA.crl (hash: M+zpHHGkAi/jAgRt9Z2EC+U/6OJBCB57k+LkLcd6Zbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5LFXos1lQd133Y-dJMNUinJ-gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:7c:4f:c3:b3:1f:1a:2a:55:70:75:bf:f1:d6:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b92c55e8b35950775df763e74930d5229c9fa00
Validity
Not Before: Apr 20 23:00:26 2025 GMT
Not After : Apr 21 23:00:26 2025 GMT
Subject: CN=8b9b1fa5098cf491b2cd7621bbb484f80cad9afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9c:14:d2:fa:7a:db:15:4f:78:e4:8a:78:57:
a6:3c:55:1a:a8:71:69:72:25:ed:6a:74:5b:cb:94:
17:89:56:18:4c:48:3e:46:0f:4a:da:8f:bc:0e:df:
c5:85:78:72:f7:8b:30:e1:e8:86:50:a5:99:f9:b5:
25:f7:13:b6:3f:19:38:f2:10:55:a3:38:69:27:7a:
f9:ab:87:41:17:e8:57:59:57:1b:1c:bc:ac:0d:26:
51:38:cb:ff:ec:85:c4:35:4b:c2:e9:80:17:f8:24:
76:da:ce:d8:5b:8b:23:8b:a2:55:63:62:32:80:30:
f3:30:f9:8c:de:32:bf:23:50:9a:86:25:fa:14:b3:
b4:74:a9:47:6c:3c:54:94:b3:99:d2:47:37:0b:f3:
e5:d4:a2:67:93:38:6f:21:f9:27:c9:17:8c:d0:bc:
f4:27:ac:3b:70:4d:29:b2:f1:93:27:57:88:ff:d1:
66:0b:51:25:f1:a5:67:60:e4:c1:5f:5f:9a:dd:44:
58:42:71:a0:b0:58:f8:31:1d:f3:bb:1e:a5:d0:13:
44:2e:2d:0b:99:fe:6c:13:c0:7a:8c:f4:39:95:e9:
5f:cd:42:ef:fa:a4:23:09:9d:18:00:ef:11:77:b4:
5e:2d:a4:51:2d:c6:95:43:8c:20:c5:cc:bc:66:54:
71:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9B:1F:A5:09:8C:F4:91:B2:CD:76:21:BB:B4:84:F8:0C:AD:9A:FD
X509v3 Authority Key Identifier:
keyid:8B:92:C5:5E:8B:35:95:07:75:DF:76:3E:74:93:0D:52:29:C9:FA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5LFXos1lQd133Y-dJMNUinJ-gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:57:9f:1e:b8:67:7e:78:cb:ca:17:c9:60:eb:db:4a:ff:6f:
e4:93:11:e1:4d:b8:02:26:59:b2:47:dd:a9:64:06:be:1a:05:
2e:11:df:5d:65:f0:78:dd:a6:f9:8d:40:ab:c1:47:ec:b7:cb:
5e:45:e1:05:d0:f8:71:66:ae:72:b8:78:7d:76:2a:52:69:cf:
45:6d:e5:8a:a8:03:6d:6b:5a:96:20:ce:df:06:7c:e1:de:33:
db:29:8f:69:96:87:f5:3d:d0:5d:c2:00:52:b9:89:88:f3:ff:
8f:ee:31:22:e1:78:6c:64:ae:83:75:43:c9:b4:3a:6c:ab:07:
be:70:ca:6b:1b:51:8e:b6:31:36:b7:7d:92:0c:d8:6e:2c:e3:
24:5b:79:af:fd:38:8b:e8:4e:1f:36:34:51:e0:28:df:87:6b:
59:4f:e6:ee:cf:fd:f4:4f:92:12:25:f0:46:40:13:e9:6b:e9:
8e:5e:03:f3:28:85:20:97:02:2d:03:7b:93:03:2e:9c:f2:33:
d4:95:d4:cf:87:04:02:a8:a5:bc:c6:1c:42:0e:f8:68:c5:da:
ff:6b:56:49:97:15:c2:9e:84:9e:05:51:10:f9:22:85:b9:5a:
72:fd:a8:5f:f6:5c:c3:39:6e:d4:37:9d:9a:74:76:69:fa:e6:
6a:37:a0:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVbnxPw7MfGipVcHW/8dZoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiOTJjNTVlOGIzNTk1MDc3NWRmNzYzZTc0OTMwZDUyMjlj
OWZhMDAwHhcNMjUwNDIwMjMwMDI2WhcNMjUwNDIxMjMwMDI2WjAzMTEwLwYDVQQD
Eyg4YjliMWZhNTA5OGNmNDkxYjJjZDc2MjFiYmI0ODRmODBjYWQ5YWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZwU0vp62xVPeOSKeFemPFUaqHFp
ciXtanRby5QXiVYYTEg+Rg9K2o+8Dt/FhXhy94sw4eiGUKWZ+bUl9xO2Pxk48hBV
ozhpJ3r5q4dBF+hXWVcbHLysDSZROMv/7IXENUvC6YAX+CR22s7YW4sji6JVY2Iy
gDDzMPmM3jK/I1CahiX6FLO0dKlHbDxUlLOZ0kc3C/Pl1KJnkzhvIfknyReM0Lz0
J6w7cE0psvGTJ1eI/9FmC1El8aVnYOTBX1+a3URYQnGgsFj4MR3zux6l0BNELi0L
mf5sE8B6jPQ5lelfzULv+qQjCZ0YAO8Rd7ReLaRRLcaVQ4wgxcy8ZlRxmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIubH6UJjPSRss12Ibu0hPgMrZr9MB8GA1UdIwQY
MBaAFIuSxV6LNZUHdd92PnSTDVIpyfoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTVMRlhvczFsUWQxMzNZLWRKTU5VaW5KLWdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8zMGY3YTQtMzZjOC00OTlkLThkNDMt
YmViYmU0YWE3Y2FiLzEvaTVMRlhvczFsUWQxMzNZLWRKTU5VaW5KLWdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8zMGY3YTQtMzZjOC00OTlkLThkNDMtYmViYmU0YWE3Y2Fi
LzEvaTVMRlhvczFsUWQxMzNZLWRKTU5VaW5KLWdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk1efHrhn
fnjLyhfJYOvbSv9v5JMR4U24AiZZskfdqWQGvhoFLhHfXWXweN2m+Y1Aq8FH7LfL
XkXhBdD4cWaucrh4fXYqUmnPRW3liqgDbWtaliDO3wZ84d4z2ymPaZaH9T3QXcIA
UrmJiPP/j+4xIuF4bGSug3VDybQ6bKsHvnDKaxtRjrYxNrd9kgzYbizjJFt5r/04
i+hOHzY0UeAo34drWU/m7s/99E+SEiXwRkAT6Wvpjl4D8yiFIJcCLQN7kwMunPIz
1JXUz4cEAqilvMYcQg74aMXa/2tWSZcVwp6EngVREPkihblacv2oX/Zcwzlu1Ded
mnR2afrmajeg0A==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:58:30 2025 by rpki-client