Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.mft
File: LPAizk3IHwOzswcwpsI-rzQuzF4.mft (raw, json)
Hash identifier: JrpC7MojWkKvIhay7ftIncMuGK4ar7TvER89niZtIGw=
Subject key identifier: 4E:55:F2:0C:FD:97:9D:BD:21:52:5D:06:1C:16:6D:45:A8:11:F4:49
Authority key identifier: 2C:F0:22:CE:4D:C8:1F:03:B3:B3:07:30:A6:C2:3E:AF:34:2E:CC:5E
Certificate issuer: /CN=2cf022ce4dc81f03b3b30730a6c23eaf342ecc5e
Certificate serial: 019659B9242D065D4C23DE4DB84E205FD8F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPAizk3IHwOzswcwpsI-rzQuzF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.mft
Manifest number: 0A21
Signing time: Mon 21 Apr 2025 19:00:27 +0000
Manifest this update: Mon 21 Apr 2025 19:00:27 +0000
Manifest next update: Tue 22 Apr 2025 19:00:27 +0000
Files and hashes: 1: LPAizk3IHwOzswcwpsI-rzQuzF4.crl (hash: 5t0GMbSrwjiJLK44sW+YVQ+qvx4vFnchOYUpRltE/Mo=)
2: SiSRrPcHelaVZsbMdPyYnFpcX7g.roa (hash: MiZDViUeplCOeEov/OOx4T8K/9EA6SimsIwRAIFKwms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LPAizk3IHwOzswcwpsI-rzQuzF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:b9:24:2d:06:5d:4c:23:de:4d:b8:4e:20:5f:d8:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cf022ce4dc81f03b3b30730a6c23eaf342ecc5e
Validity
Not Before: Apr 21 19:00:27 2025 GMT
Not After : Apr 22 19:00:27 2025 GMT
Subject: CN=4e55f20cfd979dbd21525d061c166d45a811f449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6d:9a:0e:1d:86:66:a8:db:bf:2c:aa:70:2c:
17:32:ef:2d:76:5f:a7:be:c1:01:7d:1a:4e:5d:50:
00:95:93:18:c9:40:96:6a:82:a6:ee:fe:da:43:ed:
29:d5:b8:32:c3:4c:fb:7b:d6:a1:7a:55:56:55:e3:
3e:92:f5:0f:11:67:96:00:a7:ad:37:68:72:ae:3f:
ad:cc:5b:5b:7a:a3:07:e5:d6:d8:ab:1e:ca:29:a0:
6d:cb:5e:5a:45:85:82:11:86:11:91:78:b9:41:74:
9b:1c:e4:91:43:5e:72:61:96:ef:d6:18:6e:4b:23:
69:48:f9:32:a7:b5:31:55:f4:00:b8:ab:dc:1e:48:
2f:0a:de:6c:62:1e:61:82:d4:17:9b:10:73:ee:8a:
a4:d4:89:bb:cd:7c:28:7b:2a:9d:72:fa:47:41:72:
ee:88:8e:05:5b:3a:d0:10:db:80:f0:9c:1c:b9:51:
17:25:0c:f9:03:d8:7f:a6:51:e0:2c:91:bf:11:7b:
ae:36:53:de:b1:0a:f2:76:44:51:df:b7:cf:e6:5a:
8c:e3:e1:08:28:dd:fc:e2:a3:ed:70:6f:98:5d:e9:
2b:7e:b9:1b:34:d9:46:a9:fa:8f:9c:ea:cc:4b:4a:
22:81:5e:f9:4d:25:d0:7d:73:8a:b9:84:4e:b0:c2:
9c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:55:F2:0C:FD:97:9D:BD:21:52:5D:06:1C:16:6D:45:A8:11:F4:49
X509v3 Authority Key Identifier:
keyid:2C:F0:22:CE:4D:C8:1F:03:B3:B3:07:30:A6:C2:3E:AF:34:2E:CC:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPAizk3IHwOzswcwpsI-rzQuzF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9307f6-1458-432f-9915-ca4ed8097970/1/LPAizk3IHwOzswcwpsI-rzQuzF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:38:ef:df:f5:a0:1d:e1:46:6e:73:2e:e0:c6:ed:7b:94:6b:
a9:e0:6a:87:fe:c2:78:af:c8:b7:30:55:f1:a9:ba:16:14:b4:
dc:d1:2a:34:da:d7:9a:97:55:2e:a9:09:48:42:ba:2d:fc:ea:
b1:9d:da:41:45:fe:b6:6c:e7:3f:2e:d0:77:52:ab:5a:e0:de:
ac:d2:b2:2a:f4:71:bf:b7:c8:78:fe:a2:d8:23:3f:92:c9:c6:
62:6c:40:c1:1d:e6:87:ad:2f:a5:8e:8b:5a:fa:4d:74:97:b7:
2d:13:08:ae:b2:93:25:04:6a:a7:fa:7d:a8:2b:73:f8:32:8e:
c2:10:bd:1e:73:e2:d3:ab:ff:af:5d:b6:e0:68:21:d2:43:ca:
32:a7:2f:cb:a7:c5:40:bc:a1:43:84:61:72:54:97:ad:ae:18:
c3:1e:4b:4b:11:b9:b1:fd:86:08:8d:be:70:50:41:8f:2c:af:
f1:3b:14:95:16:24:cf:b8:b8:14:3c:c2:17:d8:9e:ca:9d:e9:
4f:f4:df:06:ba:e2:1e:dc:35:01:d4:23:18:58:0b:3d:34:20:
1d:c0:ee:21:ec:42:31:74:f6:ff:22:86:43:ed:29:14:d8:0d:
9e:fa:3a:15:da:77:79:f9:fa:b7:61:65:14:14:a6:b3:6d:89:
48:04:9d:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZuSQtBl1MI95NuE4gX9j0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjZjAyMmNlNGRjODFmMDNiM2IzMDczMGE2YzIzZWFmMzQy
ZWNjNWUwHhcNMjUwNDIxMTkwMDI3WhcNMjUwNDIyMTkwMDI3WjAzMTEwLwYDVQQD
Eyg0ZTU1ZjIwY2ZkOTc5ZGJkMjE1MjVkMDYxYzE2NmQ0NWE4MTFmNDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAom2aDh2GZqjbvyyqcCwXMu8tdl+n
vsEBfRpOXVAAlZMYyUCWaoKm7v7aQ+0p1bgyw0z7e9ahelVWVeM+kvUPEWeWAKet
N2hyrj+tzFtbeqMH5dbYqx7KKaBty15aRYWCEYYRkXi5QXSbHOSRQ15yYZbv1hhu
SyNpSPkyp7UxVfQAuKvcHkgvCt5sYh5hgtQXmxBz7oqk1Im7zXwoeyqdcvpHQXLu
iI4FWzrQENuA8JwcuVEXJQz5A9h/plHgLJG/EXuuNlPesQrydkRR37fP5lqM4+EI
KN384qPtcG+YXekrfrkbNNlGqfqPnOrMS0oigV75TSXQfXOKuYROsMKc1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE5V8gz9l529IVJdBhwWbUWoEfRJMB8GA1UdIwQY
MBaAFCzwIs5NyB8Ds7MHMKbCPq80LsxeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFBBaXprM0lId096c3djd3BzSS1yelF1ekY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC85MzA3ZjYtMTQ1OC00MzJmLTk5MTUt
Y2E0ZWQ4MDk3OTcwLzEvTFBBaXprM0lId096c3djd3BzSS1yelF1ekY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC85MzA3ZjYtMTQ1OC00MzJmLTk5MTUtY2E0ZWQ4MDk3OTcw
LzEvTFBBaXprM0lId096c3djd3BzSS1yelF1ekY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAezjv3/Wg
HeFGbnMu4Mbte5RrqeBqh/7CeK/ItzBV8am6FhS03NEqNNrXmpdVLqkJSEK6Lfzq
sZ3aQUX+tmznPy7Qd1KrWuDerNKyKvRxv7fIeP6i2CM/ksnGYmxAwR3mh60vpY6L
WvpNdJe3LRMIrrKTJQRqp/p9qCtz+DKOwhC9HnPi06v/r1224Ggh0kPKMqcvy6fF
QLyhQ4RhclSXra4Ywx5LSxG5sf2GCI2+cFBBjyyv8TsUlRYkz7i4FDzCF9ieyp3p
T/TfBrriHtw1AdQjGFgLPTQgHcDuIexCMXT2/yKGQ+0pFNgNnvo6Fdp3efn6t2Fl
FBSms22JSASd7Q==
-----END CERTIFICATE-----
Generated at Tue Apr 22 04:56:39 2025 by rpki-client