Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
File: 1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft (raw, json)
Hash identifier: 1PSrqO5zG+P5vrXCol6taw4VrRG4wCs7IxTUid8kpdU=
Subject key identifier: 12:DE:B1:47:7B:91:52:D1:B1:27:0A:91:E6:DF:DC:6E:F8:03:E8:AF
Authority key identifier: F8:B8:DA:60:81:37:F8:4E:45:45:32:0B:4A:3B:B0:49:61:D2:B1:2B
Certificate issuer: /CN=f8b8da608137f84e4545320b4a3bb04961d2b12b
Certificate serial: 01965123DC2BBD56B0F4C8408E5ADF9A015C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
Manifest number: 03DA
Signing time: Sun 20 Apr 2025 03:00:26 +0000
Manifest this update: Sun 20 Apr 2025 03:00:26 +0000
Manifest next update: Mon 21 Apr 2025 03:00:26 +0000
Files and hashes: 1: 1-LjaYIE3-E5FRTILSjuwSWHSsSs.crl (hash: MI3acOFHPI7YvzAdWw1O5K0ZlEhXURosbtZyGapKnoI=)
2: GwUYPxJQaw648raZgaiMud0BTgo.roa (hash: LGJZt6ikz8yBfuTCs6jZTUAALLEYDfmbRQi7+ExvBNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 03:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:23:dc:2b:bd:56:b0:f4:c8:40:8e:5a:df:9a:01:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b8da608137f84e4545320b4a3bb04961d2b12b
Validity
Not Before: Apr 20 03:00:26 2025 GMT
Not After : Apr 21 03:00:26 2025 GMT
Subject: CN=12deb1477b9152d1b1270a91e6dfdc6ef803e8af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:28:e9:75:ba:37:a7:02:31:f9:9c:43:47:0e:
05:66:95:61:39:b7:18:ae:3d:7b:3c:7d:95:9e:e7:
e5:d1:83:b9:3f:9d:28:96:fa:86:03:ac:56:73:60:
43:d7:3f:22:60:5d:35:6c:d6:d5:e4:24:32:51:9b:
63:83:d3:78:4f:e1:f9:5d:e1:bc:63:b0:78:df:d0:
29:9c:5c:8d:4f:29:30:be:ee:b7:b3:c7:a9:83:76:
3e:e6:d3:93:81:52:74:e0:20:47:2c:fd:77:1e:f4:
34:72:1d:ce:d1:3c:cf:a8:c5:dd:68:eb:c0:20:4a:
74:eb:2a:e5:48:f3:65:36:47:ec:8d:6c:c6:d6:68:
9e:53:f2:a8:6c:fe:52:57:32:8e:4e:90:19:9a:66:
8f:44:41:11:d7:0d:d7:49:59:1b:ac:ce:cf:1a:68:
c5:a6:2e:81:43:c8:1c:d6:bd:1d:de:f4:e4:75:4f:
db:d0:a3:5e:b7:0b:21:d3:1d:ab:f7:ef:f5:67:51:
44:ca:7b:6b:db:78:f8:2b:06:42:b2:b4:3b:9b:3d:
0c:d5:16:38:27:bf:4b:70:03:aa:72:54:22:0b:6c:
63:7c:e7:51:f9:60:73:cb:7e:9a:08:fe:68:fd:2c:
f2:b8:15:e3:f1:2e:28:69:dc:2e:6d:24:45:52:1d:
01:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:DE:B1:47:7B:91:52:D1:B1:27:0A:91:E6:DF:DC:6E:F8:03:E8:AF
X509v3 Authority Key Identifier:
keyid:F8:B8:DA:60:81:37:F8:4E:45:45:32:0B:4A:3B:B0:49:61:D2:B1:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LjaYIE3-E5FRTILSjuwSWHSsSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/805533-dbc5-42c0-bc78-575b03344cb1/1/1-LjaYIE3-E5FRTILSjuwSWHSsSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:a8:1e:b5:9e:67:73:ad:46:1f:8c:bd:ff:f1:37:60:9e:45:
d7:e1:b3:e5:d5:1a:d1:58:20:6f:99:83:90:63:cd:93:d0:3e:
74:46:57:65:03:93:70:91:c4:5b:94:ca:2f:83:8e:65:11:45:
97:ee:9f:a8:b3:d8:4f:30:87:39:66:d7:47:59:39:f9:ef:9b:
c8:1f:27:00:5d:57:0b:98:d7:e1:91:c9:3f:38:65:07:a0:4a:
90:bf:78:c1:c1:b5:a3:85:14:3d:62:d0:a9:c4:b2:e8:11:04:
5a:4f:3a:c8:d9:1c:ac:a0:de:2f:48:ee:ef:de:f8:36:85:44:
4c:15:af:40:26:35:4b:19:cf:a8:23:21:7d:bd:bc:14:ff:e0:
a4:5a:2d:20:01:3f:85:0f:87:c7:0b:ce:bc:e4:8b:75:4b:68:
b9:fa:ce:ca:f0:3f:41:1b:54:5f:48:2c:f3:3e:6a:a7:46:27:
a6:ad:25:49:89:cb:93:27:23:fd:5f:d6:a1:89:a7:1b:06:33:
ab:52:ff:77:6c:ac:e6:c7:4f:25:f2:0d:62:51:9f:cc:9c:ca:
ca:2e:1b:63:53:7c:16:b8:5c:07:f3:02:8c:f6:6a:78:a0:35:
eb:16:06:a8:33:15:c1:3b:91:ee:ae:3d:67:c4:9d:cc:be:44:
ab:f5:27:e0
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZZRI9wrvVaw9MhAjlrfmgFcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YjhkYTYwODEzN2Y4NGU0NTQ1MzIwYjRhM2JiMDQ5NjFk
MmIxMmIwHhcNMjUwNDIwMDMwMDI2WhcNMjUwNDIxMDMwMDI2WjAzMTEwLwYDVQQD
EygxMmRlYjE0NzdiOTE1MmQxYjEyNzBhOTFlNmRmZGM2ZWY4MDNlOGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyjpdbo3pwIx+ZxDRw4FZpVhObcY
rj17PH2Vnufl0YO5P50olvqGA6xWc2BD1z8iYF01bNbV5CQyUZtjg9N4T+H5XeG8
Y7B439ApnFyNTykwvu63s8epg3Y+5tOTgVJ04CBHLP13HvQ0ch3O0TzPqMXdaOvA
IEp06yrlSPNlNkfsjWzG1mieU/KobP5SVzKOTpAZmmaPREER1w3XSVkbrM7PGmjF
pi6BQ8gc1r0d3vTkdU/b0KNetwsh0x2r9+/1Z1FEyntr23j4KwZCsrQ7mz0M1RY4
J79LcAOqclQiC2xjfOdR+WBzy36aCP5o/SzyuBXj8S4oadwubSRFUh0BCQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFBLesUd7kVLRsScKkebf3G74A+ivMB8GA1UdIwQY
MBaAFPi42mCBN/hORUUyC0o7sElh0rErMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1MamFZSUUzLUU1RlJUSUxTanV3U1dIU3NTcy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvODA1NTMzLWRiYzUtNDJjMC1iYzc4
LTU3NWIwMzM0NGNiMS8xLzEtTGphWUlFMy1FNUZSVElMU2p1d1NXSFNzU3MubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzI0LzgwNTUzMy1kYmM1LTQyYzAtYmM3OC01NzViMDMzNDRj
YjEvMS8xLUxqYVlJRTMtRTVGUlRJTFNqdXdTV0hTc1NzLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ6ge
tZ5nc61GH4y9//E3YJ5F1+Gz5dUa0Vggb5mDkGPNk9A+dEZXZQOTcJHEW5TKL4OO
ZRFFl+6fqLPYTzCHOWbXR1k5+e+byB8nAF1XC5jX4ZHJPzhlB6BKkL94wcG1o4UU
PWLQqcSy6BEEWk86yNkcrKDeL0ju7974NoVETBWvQCY1SxnPqCMhfb28FP/gpFot
IAE/hQ+HxwvOvOSLdUtoufrOyvA/QRtUX0gs8z5qp0Ynpq0lSYnLkycj/V/WoYmn
GwYzq1L/d2ys5sdPJfINYlGfzJzKyi4bY1N8FrhcB/MCjPZqeKA16xYGqDMVwTuR
7q49Z8SdzL5Eq/Un4A==
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:11:04 2025 by rpki-client