Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
File: lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft (raw, json)
Hash identifier: iNr70sx1V177s5OsCmASAv+LmajIFFVCYTIJ8EhrCBM=
Subject key identifier: FD:2D:A5:39:14:1D:DB:6E:52:A1:CD:38:C4:8F:0D:C8:8D:2F:2E:17
Authority key identifier: 94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
Certificate issuer: /CN=94948e5f2fa04b222a6e96883b840f7124531556
Certificate serial: 01964745086958721B5F301F03A5FA150149
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
Manifest number: 1504
Signing time: Fri 18 Apr 2025 05:00:28 +0000
Manifest this update: Fri 18 Apr 2025 05:00:28 +0000
Manifest next update: Sat 19 Apr 2025 05:00:28 +0000
Files and hashes: 1: 6M8HqKSI22ar6eaAcnn8ev1P9AQ.roa (hash: nVlGdB/dQUdpvwsW+Z7Kxz9y2rH9JWzBWwfpv9z8khM=)
2: PKCcLn7gw6Ub1teeDxDVaIyuinc.roa (hash: XdK6goNbx5CXhLqA/axUAjiyoFFcbKjnqngpuHtnyls=)
3: dN1vRCcHRSnbvQADNvtYm9Gw-TM.roa (hash: D+OiPGlBYkixwnt9NBRJj4rRA3Pw0fqCQSZtwrK+kFU=)
4: lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl (hash: UE1gHQf6sbILa26p3k3PSCB6+qKCCY/ZknUWM/VB+pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:47:45:08:69:58:72:1b:5f:30:1f:03:a5:fa:15:01:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94948e5f2fa04b222a6e96883b840f7124531556
Validity
Not Before: Apr 18 05:00:28 2025 GMT
Not After : Apr 19 05:00:28 2025 GMT
Subject: CN=fd2da539141ddb6e52a1cd38c48f0dc88d2f2e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f7:c8:4c:c0:28:cf:93:c7:5d:b6:63:8b:f3:
ba:66:1c:c6:72:3e:99:c5:e6:e4:d5:42:47:70:b2:
c0:75:64:de:9e:f7:a5:90:b9:9a:df:55:3f:ab:f8:
1e:eb:00:09:4d:17:d0:83:98:89:6d:60:a9:5b:ee:
20:11:dd:95:9c:d6:c3:86:a6:57:85:d8:bb:33:44:
5d:66:96:25:da:08:a9:bc:19:d2:52:10:49:97:2d:
3f:70:22:b9:e4:6c:9b:ea:a0:99:05:9a:a2:0d:f6:
75:36:a3:bf:7e:a8:7a:4a:8d:9a:05:45:1b:13:75:
37:2c:8b:17:4a:7d:a9:a8:11:bc:d8:01:6e:97:c6:
d0:e3:d2:fd:87:bc:4e:01:d3:0a:e8:94:4d:88:6c:
08:85:d8:f2:1d:11:05:61:45:b2:3c:fd:51:d1:f1:
7f:e4:31:95:a5:b0:53:33:c5:c3:84:dc:56:7e:5e:
09:e0:ac:57:80:a5:14:f8:b0:3c:04:72:9c:4f:97:
ac:4d:23:08:77:fc:f0:51:d6:f7:83:ad:c2:20:7b:
b5:fd:ac:22:2e:1d:0f:f3:9e:2c:65:ba:67:9f:b1:
5f:7a:cf:ae:7f:4c:dd:7b:60:29:75:44:b0:69:5e:
52:55:31:5b:df:33:dd:57:2d:19:98:1b:33:a2:7e:
16:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:2D:A5:39:14:1D:DB:6E:52:A1:CD:38:C4:8F:0D:C8:8D:2F:2E:17
X509v3 Authority Key Identifier:
keyid:94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:d0:6a:85:e8:d8:07:39:fa:3a:9c:d7:18:6b:36:38:08:79:
c6:ff:c4:7b:b4:fc:e2:30:d7:2c:4a:f7:be:e3:c1:04:2c:02:
da:1f:d8:b6:45:86:39:0d:36:aa:5f:ca:98:e4:35:01:af:8a:
4b:33:a8:7e:62:62:4c:ca:f5:92:03:94:a5:79:00:5e:12:b4:
54:46:f0:1f:4e:a8:ac:ca:19:99:15:7c:bc:00:0c:c0:f4:e9:
99:1b:89:9c:ec:ba:20:0e:1d:c9:66:77:a6:e3:94:d3:38:9a:
d4:9c:22:d8:53:94:af:55:22:bb:08:34:79:c4:01:57:66:9b:
f6:df:39:8f:1d:6a:fb:d5:cd:02:5c:e5:4e:ae:26:88:e6:e6:
85:2c:77:bc:b1:49:be:d0:77:fb:d5:35:45:40:12:8f:74:2c:
67:bb:78:a2:eb:9d:2e:10:9a:c3:55:53:a6:67:41:6e:78:ed:
20:3e:1b:84:bc:24:97:7e:23:4a:93:90:93:0d:06:36:8e:3e:
8e:16:7b:48:d5:b4:e2:0c:1d:32:6a:40:ee:17:bb:97:cd:24:
dc:95:5e:57:06:5f:1f:22:ad:3c:bc:34:d8:22:10:74:43:a3:
ba:16:67:6a:10:e5:37:96:8b:46:ba:43:91:4d:bb:c6:42:a4:
5d:9a:2a:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZHRQhpWHIbXzAfA6X6FQFJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0OTQ4ZTVmMmZhMDRiMjIyYTZlOTY4ODNiODQwZjcxMjQ1
MzE1NTYwHhcNMjUwNDE4MDUwMDI4WhcNMjUwNDE5MDUwMDI4WjAzMTEwLwYDVQQD
EyhmZDJkYTUzOTE0MWRkYjZlNTJhMWNkMzhjNDhmMGRjODhkMmYyZTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPfITMAoz5PHXbZji/O6ZhzGcj6Z
xebk1UJHcLLAdWTenvelkLma31U/q/ge6wAJTRfQg5iJbWCpW+4gEd2VnNbDhqZX
hdi7M0RdZpYl2gipvBnSUhBJly0/cCK55Gyb6qCZBZqiDfZ1NqO/fqh6So2aBUUb
E3U3LIsXSn2pqBG82AFul8bQ49L9h7xOAdMK6JRNiGwIhdjyHREFYUWyPP1R0fF/
5DGVpbBTM8XDhNxWfl4J4KxXgKUU+LA8BHKcT5esTSMId/zwUdb3g63CIHu1/awi
Lh0P854sZbpnn7Ffes+uf0zde2ApdUSwaV5SVTFb3zPdVy0ZmBszon4WSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP0tpTkUHdtuUqHNOMSPDciNLy4XMB8GA1UdIwQY
MBaAFJSUjl8voEsiKm6WiDuED3EkUxVWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEpTT1h5LWdTeUlxYnBhSU80UVBjU1JURlZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9lYzQ4YmUtOTI1MC00ZjdjLTljODct
NjQxYjhlNjBkM2UyLzEvbEpTT1h5LWdTeUlxYnBhSU80UVBjU1JURlZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9lYzQ4YmUtOTI1MC00ZjdjLTljODctNjQxYjhlNjBkM2Uy
LzEvbEpTT1h5LWdTeUlxYnBhSU80UVBjU1JURlZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUtBqhejY
Bzn6OpzXGGs2OAh5xv/Ee7T84jDXLEr3vuPBBCwC2h/YtkWGOQ02ql/KmOQ1Aa+K
SzOofmJiTMr1kgOUpXkAXhK0VEbwH06orMoZmRV8vAAMwPTpmRuJnOy6IA4dyWZ3
puOU0zia1Jwi2FOUr1Uiuwg0ecQBV2ab9t85jx1q+9XNAlzlTq4miObmhSx3vLFJ
vtB3+9U1RUASj3QsZ7t4ouudLhCaw1VTpmdBbnjtID4bhLwkl34jSpOQkw0GNo4+
jhZ7SNW04gwdMmpA7he7l80k3JVeVwZfHyKtPLw02CIQdEOjuhZnahDlN5aLRrpD
kU27xkKkXZoqdA==
-----END CERTIFICATE-----
Generated at Fri Apr 18 07:39:14 2025 by rpki-client