Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.mft
File: LrlwnvMbddaOIgiqvyosPD2Hb8E.mft (raw, json)
Hash identifier: MeV4Ivrh8shYV4jutv0liL8aYD++jM4S8TYvRqH1zmI=
Subject key identifier: 46:39:CA:05:3A:5B:3D:11:87:4A:7A:FE:8A:0E:6D:13:37:9B:1B:0F
Authority key identifier: 2E:B9:70:9E:F3:1B:75:D6:8E:22:08:AA:BF:2A:2C:3C:3D:87:6F:C1
Certificate issuer: /CN=2eb9709ef31b75d68e2208aabf2a2c3c3d876fc1
Certificate serial: 0196458D81D70FF4C111960CADB95CC7F6AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrlwnvMbddaOIgiqvyosPD2Hb8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.mft
Manifest number: 14F3
Signing time: Thu 17 Apr 2025 21:00:23 +0000
Manifest this update: Thu 17 Apr 2025 21:00:23 +0000
Manifest next update: Fri 18 Apr 2025 21:00:23 +0000
Files and hashes: 1: LrlwnvMbddaOIgiqvyosPD2Hb8E.crl (hash: UXcKGupzW5fsHkwaNnxCo5v6JBUa9DV+cBLMvJyUEN8=)
2: y4nRX2MR29nhRNB-8qKuPT5GKso.roa (hash: KPjY3F6wNY99Qei7P9FnZL2mNKxujn8hAQHxPf7AHds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/LrlwnvMbddaOIgiqvyosPD2Hb8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:8d:81:d7:0f:f4:c1:11:96:0c:ad:b9:5c:c7:f6:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eb9709ef31b75d68e2208aabf2a2c3c3d876fc1
Validity
Not Before: Apr 17 21:00:23 2025 GMT
Not After : Apr 18 21:00:23 2025 GMT
Subject: CN=4639ca053a5b3d11874a7afe8a0e6d13379b1b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9e:1e:75:b3:b9:27:76:6a:d1:4a:10:fd:91:
8d:d2:12:d4:45:a3:e3:18:7c:fb:a8:ab:8e:6f:32:
fe:4e:3a:e4:d2:3b:47:af:b0:4d:3d:43:f0:4c:56:
28:cb:27:2b:13:f9:18:9c:e9:b8:43:a9:e9:49:0b:
07:c6:c4:15:6e:92:4f:a7:d3:95:03:1a:d2:c6:c8:
c1:6f:74:67:52:90:70:bf:e8:bf:cf:ae:e1:e9:dc:
32:7c:37:0a:d9:f4:57:b2:08:dd:0a:91:8e:44:72:
f0:ff:7a:14:cc:c6:b8:4d:6d:03:3b:34:3f:63:53:
25:f4:9c:c5:c3:74:62:ce:85:5c:2c:d6:5a:a9:13:
de:c0:93:98:99:98:34:8d:2e:59:18:6c:ed:06:2d:
c9:0b:69:15:70:a1:64:da:c6:55:4e:d9:34:11:13:
4a:52:05:65:29:ce:ff:b4:f1:ae:6c:e1:b7:e1:ad:
ed:48:2a:5d:c1:dd:b5:dd:c0:ec:28:04:df:8d:20:
a4:ff:ab:0d:94:e9:1e:9f:8f:c2:33:1f:f6:53:9b:
89:b4:6e:e5:5b:12:22:64:95:6c:f6:17:21:e1:a6:
15:a3:fd:8a:a0:31:87:fb:db:03:fc:67:59:06:1b:
dc:a4:ce:c6:c9:f7:34:50:7b:db:1c:e9:2d:af:7e:
fb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:39:CA:05:3A:5B:3D:11:87:4A:7A:FE:8A:0E:6D:13:37:9B:1B:0F
X509v3 Authority Key Identifier:
keyid:2E:B9:70:9E:F3:1B:75:D6:8E:22:08:AA:BF:2A:2C:3C:3D:87:6F:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrlwnvMbddaOIgiqvyosPD2Hb8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:c9:c0:05:28:20:bd:66:6e:98:51:93:2f:4b:ad:a3:a7:76:
53:8c:84:a4:23:17:fe:21:dc:f2:91:d8:36:6b:db:14:a7:7d:
d9:e8:c2:f8:bb:80:c6:91:48:1c:8d:1e:4a:1a:5e:c1:33:7a:
ca:e8:25:c6:23:c1:9b:3d:74:ba:e6:d2:25:40:9a:73:97:8c:
23:56:aa:0e:c4:54:4e:39:38:b4:a3:88:dc:a7:91:87:ec:76:
3b:87:87:22:ab:2b:23:b6:01:a3:13:67:a9:d6:91:4d:75:c7:
36:3f:68:5c:ff:29:f9:b2:86:57:e0:e9:2d:5c:19:8a:bb:43:
29:27:b2:c5:27:66:49:20:5d:84:99:ca:d3:69:0b:f9:46:83:
a5:52:2b:9a:ca:7c:cc:05:88:ac:73:ab:47:fc:52:eb:db:2c:
15:c7:8b:7c:34:d3:90:07:b0:bb:65:ef:00:2a:a7:8c:de:1f:
3b:fb:15:81:95:94:5f:f2:e7:3a:bf:32:a8:6d:ab:1c:0f:fb:
7e:e6:aa:cb:ad:c5:d3:6a:23:1d:b6:85:77:07:bc:e9:ca:73:
9f:54:7a:e2:9f:f7:68:88:70:59:e1:c2:27:3b:7c:81:a9:e4:
02:e3:f4:2e:b8:30:fe:83:54:4e:03:4d:22:4a:a5:76:0b:47:
b6:dc:ac:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZFjYHXD/TBEZYMrblcx/atMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlYjk3MDllZjMxYjc1ZDY4ZTIyMDhhYWJmMmEyYzNjM2Q4
NzZmYzEwHhcNMjUwNDE3MjEwMDIzWhcNMjUwNDE4MjEwMDIzWjAzMTEwLwYDVQQD
Eyg0NjM5Y2EwNTNhNWIzZDExODc0YTdhZmU4YTBlNmQxMzM3OWIxYjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnp4edbO5J3Zq0UoQ/ZGN0hLURaPj
GHz7qKuObzL+Tjrk0jtHr7BNPUPwTFYoyycrE/kYnOm4Q6npSQsHxsQVbpJPp9OV
AxrSxsjBb3RnUpBwv+i/z67h6dwyfDcK2fRXsgjdCpGORHLw/3oUzMa4TW0DOzQ/
Y1Ml9JzFw3RizoVcLNZaqRPewJOYmZg0jS5ZGGztBi3JC2kVcKFk2sZVTtk0ERNK
UgVlKc7/tPGubOG34a3tSCpdwd213cDsKATfjSCk/6sNlOken4/CMx/2U5uJtG7l
WxIiZJVs9hch4aYVo/2KoDGH+9sD/GdZBhvcpM7Gyfc0UHvbHOktr377swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEY5ygU6Wz0Rh0p6/ooObRM3mxsPMB8GA1UdIwQY
MBaAFC65cJ7zG3XWjiIIqr8qLDw9h2/BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHJsd252TWJkZGFPSWdpcXZ5b3NQRDJIYjhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84ZDNjM2ItNjA2OS00Y2QxLTg5YjEt
Y2VjMzVjNDUzYzVlLzEvTHJsd252TWJkZGFPSWdpcXZ5b3NQRDJIYjhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi84ZDNjM2ItNjA2OS00Y2QxLTg5YjEtY2VjMzVjNDUzYzVl
LzEvTHJsd252TWJkZGFPSWdpcXZ5b3NQRDJIYjhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATcnABSgg
vWZumFGTL0uto6d2U4yEpCMX/iHc8pHYNmvbFKd92ejC+LuAxpFIHI0eShpewTN6
yuglxiPBmz10uubSJUCac5eMI1aqDsRUTjk4tKOI3KeRh+x2O4eHIqsrI7YBoxNn
qdaRTXXHNj9oXP8p+bKGV+DpLVwZirtDKSeyxSdmSSBdhJnK02kL+UaDpVIrmsp8
zAWIrHOrR/xS69ssFceLfDTTkAewu2XvACqnjN4fO/sVgZWUX/LnOr8yqG2rHA/7
fuaqy63F02ojHbaFdwe86cpzn1R64p/3aIhwWeHCJzt8gankAuP0Lrgw/oNUTgNN
IkqldgtHttyscw==
-----END CERTIFICATE-----
Generated at Fri Apr 18 00:34:33 2025 by rpki-client