Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
File: lTgJNefooh7DK2Wn_E7X1GgnhSE.mft (raw, json)
Hash identifier: 1DzTJ1y2FfkatOR19lriGoZR8TtT51JuVTTWywfGKb4=
Subject key identifier: 3C:53:E8:E5:7E:A2:08:E7:52:F9:B6:4B:31:BF:CE:A4:8F:8C:9B:A8
Authority key identifier: 95:38:09:35:E7:E8:A2:1E:C3:2B:65:A7:FC:4E:D7:D4:68:27:85:21
Certificate issuer: /CN=95380935e7e8a21ec32b65a7fc4ed7d468278521
Certificate serial: 01964BFDB3B9480838052C7AD907E2C32877
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
Manifest number: 149A
Signing time: Sat 19 Apr 2025 03:00:39 +0000
Manifest this update: Sat 19 Apr 2025 03:00:39 +0000
Manifest next update: Sun 20 Apr 2025 03:00:39 +0000
Files and hashes: 1: lTgJNefooh7DK2Wn_E7X1GgnhSE.crl (hash: IXcgkryOhsmGaRkKwyogjdE1ZDQ9CENIHi0o2S6gGyo=)
2: pWYU_3rSNo7EOhyAYaHN6usNBI0.roa (hash: KeYaihRxFR7GfUW9GuvXnSgoYdgkOnmiGNfHnpBGPBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 03:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fd:b3:b9:48:08:38:05:2c:7a:d9:07:e2:c3:28:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95380935e7e8a21ec32b65a7fc4ed7d468278521
Validity
Not Before: Apr 19 03:00:39 2025 GMT
Not After : Apr 20 03:00:39 2025 GMT
Subject: CN=3c53e8e57ea208e752f9b64b31bfcea48f8c9ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ee:d6:8d:b9:8c:14:31:aa:a6:55:e7:43:ad:
3f:e3:df:02:38:a8:a5:c6:36:60:0c:73:72:07:59:
0e:c0:4a:5e:0d:e8:63:2b:0a:bb:c5:9c:5c:09:a0:
19:d9:07:c3:f3:1e:ee:7f:69:84:31:fb:e4:27:79:
ba:68:c1:72:1a:e2:3c:26:ac:97:1c:9b:d4:ec:c7:
4f:8f:7e:7b:29:a4:ed:ef:27:2c:41:20:9d:f6:f0:
0d:ec:cb:2f:88:52:95:e7:83:32:7c:49:6a:85:17:
5e:7b:06:35:33:8d:53:1a:f6:4e:ff:ad:55:22:47:
84:db:a6:c7:c6:8f:39:76:cf:95:30:d6:5b:cf:73:
8f:50:54:bd:40:21:da:4b:e9:78:6e:90:5c:e5:c9:
ad:bc:8c:d0:3a:ae:a7:0a:e2:cf:86:3f:e2:70:1b:
2d:c0:18:05:ae:2f:9d:a9:18:a4:a6:b0:16:49:68:
c3:bd:90:ef:06:fc:be:69:41:d9:58:bd:2f:bf:96:
8b:48:60:3f:7d:00:0c:f1:92:f6:07:25:ae:75:1f:
0e:d5:4c:c3:41:60:c1:a6:56:b2:06:d1:b9:0a:98:
d7:07:bd:34:99:c8:44:81:20:5c:31:09:d5:3d:93:
6c:8b:7a:c6:a4:f6:ed:15:48:13:fd:9d:8c:a9:a4:
61:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:53:E8:E5:7E:A2:08:E7:52:F9:B6:4B:31:BF:CE:A4:8F:8C:9B:A8
X509v3 Authority Key Identifier:
keyid:95:38:09:35:E7:E8:A2:1E:C3:2B:65:A7:FC:4E:D7:D4:68:27:85:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTgJNefooh7DK2Wn_E7X1GgnhSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62631b-fdf3-413f-8f22-ece088f01827/1/lTgJNefooh7DK2Wn_E7X1GgnhSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:a9:06:3f:4a:49:72:87:82:85:a2:75:79:b9:8e:c6:11:c3:
0f:5a:70:31:c6:44:9e:4e:6f:b6:99:a8:fd:07:bb:67:49:fe:
9f:6a:c9:b7:9b:f2:7a:6c:84:4b:c3:b3:44:4f:7d:7e:69:79:
28:38:4f:ee:79:15:aa:a3:a8:5f:de:b4:16:06:8b:26:cc:e5:
4f:59:0d:b7:16:b3:83:ab:ea:c6:47:36:c1:b6:24:33:02:d1:
53:78:46:ab:f5:0f:bd:f0:86:8c:64:71:ec:3e:05:1a:9f:41:
56:25:0f:71:e2:c5:0b:4a:d8:b8:79:e4:43:6a:0f:7a:1b:e7:
84:a7:b4:19:cf:1c:46:eb:e6:30:61:c4:bc:4e:75:94:7d:b7:
5b:49:16:fb:93:13:a9:5c:2e:4b:ce:4d:6c:3e:ff:8f:f7:4c:
32:49:52:c8:60:a6:14:d1:51:7a:82:8d:b9:1e:f9:b7:79:6e:
1b:5d:dc:19:06:d7:b7:6b:3b:a2:2f:27:c0:0f:96:7c:fe:8a:
05:a5:c0:87:86:ad:50:74:a9:fc:a0:19:6b:14:52:65:09:81:
67:a1:aa:52:23:2b:fb:6c:89:f7:d3:15:53:20:36:5c:69:12:
fe:3f:df:78:17:e0:04:ad:a1:f3:4e:d7:85:27:7c:41:93:a9:
b3:df:0a:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZL/bO5SAg4BSx62Qfiwyh3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MzgwOTM1ZTdlOGEyMWVjMzJiNjVhN2ZjNGVkN2Q0Njgy
Nzg1MjEwHhcNMjUwNDE5MDMwMDM5WhcNMjUwNDIwMDMwMDM5WjAzMTEwLwYDVQQD
EygzYzUzZThlNTdlYTIwOGU3NTJmOWI2NGIzMWJmY2VhNDhmOGM5YmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0e7WjbmMFDGqplXnQ60/498COKil
xjZgDHNyB1kOwEpeDehjKwq7xZxcCaAZ2QfD8x7uf2mEMfvkJ3m6aMFyGuI8JqyX
HJvU7MdPj357KaTt7ycsQSCd9vAN7MsviFKV54MyfElqhRdeewY1M41TGvZO/61V
IkeE26bHxo85ds+VMNZbz3OPUFS9QCHaS+l4bpBc5cmtvIzQOq6nCuLPhj/icBst
wBgFri+dqRikprAWSWjDvZDvBvy+aUHZWL0vv5aLSGA/fQAM8ZL2ByWudR8O1UzD
QWDBplayBtG5CpjXB700mchEgSBcMQnVPZNsi3rGpPbtFUgT/Z2MqaRh7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDxT6OV+ogjnUvm2SzG/zqSPjJuoMB8GA1UdIwQY
MBaAFJU4CTXn6KIewytlp/xO19RoJ4UhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFRnSk5lZm9vaDdESzJXbl9FN1gxR2duaFNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC82MjYzMWItZmRmMy00MTNmLThmMjIt
ZWNlMDg4ZjAxODI3LzEvbFRnSk5lZm9vaDdESzJXbl9FN1gxR2duaFNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC82MjYzMWItZmRmMy00MTNmLThmMjItZWNlMDg4ZjAxODI3
LzEvbFRnSk5lZm9vaDdESzJXbl9FN1gxR2duaFNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQakGP0pJ
coeChaJ1ebmOxhHDD1pwMcZEnk5vtpmo/Qe7Z0n+n2rJt5vyemyES8OzRE99fml5
KDhP7nkVqqOoX960FgaLJszlT1kNtxazg6vqxkc2wbYkMwLRU3hGq/UPvfCGjGRx
7D4FGp9BViUPceLFC0rYuHnkQ2oPehvnhKe0Gc8cRuvmMGHEvE51lH23W0kW+5MT
qVwuS85NbD7/j/dMMklSyGCmFNFReoKNuR75t3luG13cGQbXt2s7oi8nwA+WfP6K
BaXAh4atUHSp/KAZaxRSZQmBZ6GqUiMr+2yJ99MVUyA2XGkS/j/feBfgBK2h807X
hSd8QZOps98K5g==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:37:46 2025 by rpki-client