Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
File: L0yd_nsacqVRu6FamZpsGTM__5Y.mft (raw, json)
Hash identifier: mQh7lHFHVVapzWqrDVMViOZDqtx+7D3VsE8COFBBpQU=
Subject key identifier: D5:01:ED:0C:FA:20:ED:64:D3:B0:A4:6D:69:EE:52:7C:89:0C:C2:65
Authority key identifier: 2F:4C:9D:FE:7B:1A:72:A5:51:BB:A1:5A:99:9A:6C:19:33:3F:FF:96
Certificate issuer: /CN=2f4c9dfe7b1a72a551bba15a999a6c19333fff96
Certificate serial: 0196575CFFF103142C9F4788F5CF579D9551
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
Manifest number: 1241
Signing time: Mon 21 Apr 2025 08:00:34 +0000
Manifest this update: Mon 21 Apr 2025 08:00:34 +0000
Manifest next update: Tue 22 Apr 2025 08:00:34 +0000
Files and hashes: 1: L0yd_nsacqVRu6FamZpsGTM__5Y.crl (hash: /ScQp4DyioGiKIiUshiyVhRbrj7O0nNUYynbLffpfew=)
2: _D7djxZolRxCx5AgywEsR673Vyc.roa (hash: lkosjygsw/gw6j4Ql0QUbhSbmAPEpo1du5WppRl3Xeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:5c:ff:f1:03:14:2c:9f:47:88:f5:cf:57:9d:95:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f4c9dfe7b1a72a551bba15a999a6c19333fff96
Validity
Not Before: Apr 21 08:00:34 2025 GMT
Not After : Apr 22 08:00:34 2025 GMT
Subject: CN=d501ed0cfa20ed64d3b0a46d69ee527c890cc265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:11:40:e9:7a:a1:08:b2:a4:66:11:b8:77:33:
42:98:2e:53:98:4d:f2:2b:95:79:94:cd:3c:60:23:
0e:73:e8:58:a4:e8:d4:bb:15:e8:3e:8f:81:44:f4:
1e:18:99:4a:61:a4:a6:61:1c:cc:29:82:a8:34:ed:
23:5c:fd:e5:a4:6a:de:04:a3:d5:40:e7:73:f3:d5:
cd:df:fa:a1:b5:14:0e:a3:5f:a5:cc:72:49:09:e5:
a8:4f:96:35:26:34:a7:24:3c:29:92:2e:df:4a:72:
17:5e:ec:d5:b2:40:0e:83:8c:cf:bb:c9:cc:80:c3:
83:50:40:0b:87:d2:41:fa:5d:66:b4:85:51:fd:6e:
9a:db:33:a6:54:81:76:04:09:4d:e7:86:3d:6e:56:
59:63:7a:51:c2:aa:5b:04:8e:02:63:28:f9:32:06:
a1:b9:20:18:b7:19:9f:bd:46:7e:0e:d8:e4:2f:eb:
90:00:97:a0:86:06:99:35:37:77:54:7f:2b:57:3d:
de:d0:6b:30:45:6e:c8:0b:e8:c0:ab:14:27:da:25:
81:65:0c:4c:80:b3:91:bc:9e:c2:a2:f6:78:fe:f7:
d9:79:7c:50:07:f6:d7:53:12:cf:59:09:07:af:56:
bf:17:29:bd:ec:9d:b1:ba:5c:9a:ed:cc:59:6a:7c:
7f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:01:ED:0C:FA:20:ED:64:D3:B0:A4:6D:69:EE:52:7C:89:0C:C2:65
X509v3 Authority Key Identifier:
keyid:2F:4C:9D:FE:7B:1A:72:A5:51:BB:A1:5A:99:9A:6C:19:33:3F:FF:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e8:12:5d:7c:f5:a1:9b:33:3e:d8:d5:3a:10:cc:1d:89:70:
29:19:a3:78:a6:ca:b7:1e:be:88:93:3c:44:c7:6d:64:ce:2a:
63:8a:90:e4:99:bb:83:89:fc:d2:32:d5:e2:82:71:00:0e:73:
64:ae:dd:2a:fa:86:c9:0e:e1:a1:71:47:b6:b9:fd:25:ba:ee:
48:d8:e6:d9:2b:65:da:a6:57:2f:cf:83:21:1e:bd:e8:43:db:
cd:98:f9:b6:60:ee:d8:04:7c:0c:50:70:21:fb:e8:cd:83:61:
d8:c9:d1:a5:32:ab:23:d4:44:36:bf:a3:1f:a5:4c:db:da:9f:
08:cd:3a:39:c2:ea:ed:31:71:25:fa:61:1a:bc:73:31:25:58:
3b:d7:5e:e4:92:36:6d:7c:b2:72:09:08:62:72:33:56:0f:c5:
e9:a1:52:b3:56:c5:ab:73:78:c8:21:69:61:25:c3:60:f8:26:
23:b4:51:15:32:81:81:e6:cc:b3:f9:56:2f:4e:98:7e:7f:6c:
d8:d7:50:7a:62:e0:33:01:e5:f6:de:59:e4:0d:f8:8c:ce:52:
7b:f8:2f:2a:1a:df:8c:48:7d:25:2b:cd:c2:7e:c8:b6:5f:43:
f1:a5:b5:49:ce:d7:78:45:87:6f:96:e3:f4:c4:1e:e4:bc:11:
9d:43:54:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZXXP/xAxQsn0eI9c9XnZVRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNGM5ZGZlN2IxYTcyYTU1MWJiYTE1YTk5OWE2YzE5MzMz
ZmZmOTYwHhcNMjUwNDIxMDgwMDM0WhcNMjUwNDIyMDgwMDM0WjAzMTEwLwYDVQQD
EyhkNTAxZWQwY2ZhMjBlZDY0ZDNiMGE0NmQ2OWVlNTI3Yzg5MGNjMjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxFA6XqhCLKkZhG4dzNCmC5TmE3y
K5V5lM08YCMOc+hYpOjUuxXoPo+BRPQeGJlKYaSmYRzMKYKoNO0jXP3lpGreBKPV
QOdz89XN3/qhtRQOo1+lzHJJCeWoT5Y1JjSnJDwpki7fSnIXXuzVskAOg4zPu8nM
gMODUEALh9JB+l1mtIVR/W6a2zOmVIF2BAlN54Y9blZZY3pRwqpbBI4CYyj5Mgah
uSAYtxmfvUZ+DtjkL+uQAJeghgaZNTd3VH8rVz3e0GswRW7IC+jAqxQn2iWBZQxM
gLORvJ7CovZ4/vfZeXxQB/bXUxLPWQkHr1a/Fym97J2xulya7cxZanx/IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNUB7Qz6IO1k07CkbWnuUnyJDMJlMB8GA1UdIwQY
MBaAFC9Mnf57GnKlUbuhWpmabBkzP/+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDB5ZF9uc2FjcVZSdTZGYW1acHNHVE1fXzVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9lZmEwMDItMDBiNS00NzZiLTg1Y2Yt
ZTllMzg4ODEyNzUyLzEvTDB5ZF9uc2FjcVZSdTZGYW1acHNHVE1fXzVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9lZmEwMDItMDBiNS00NzZiLTg1Y2YtZTllMzg4ODEyNzUy
LzEvTDB5ZF9uc2FjcVZSdTZGYW1acHNHVE1fXzVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfOgSXXz1
oZszPtjVOhDMHYlwKRmjeKbKtx6+iJM8RMdtZM4qY4qQ5Jm7g4n80jLV4oJxAA5z
ZK7dKvqGyQ7hoXFHtrn9JbruSNjm2Stl2qZXL8+DIR696EPbzZj5tmDu2AR8DFBw
IfvozYNh2MnRpTKrI9RENr+jH6VM29qfCM06OcLq7TFxJfphGrxzMSVYO9de5JI2
bXyycgkIYnIzVg/F6aFSs1bFq3N4yCFpYSXDYPgmI7RRFTKBgebMs/lWL06Yfn9s
2NdQemLgMwHl9t5Z5A34jM5Se/gvKhrfjEh9JSvNwn7Itl9D8aW1Sc7XeEWHb5bj
9MQe5LwRnUNUqw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:53:10 2025 by rpki-client