Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
File: LiSXk-WSSp8l86Co3ZlLN065N9I.mft (raw, json)
Hash identifier: yXfbgETY/J2Yxe3CLgMJuTSK9H7Kxkt330xwbFqAeDo=
Subject key identifier: 49:D9:C3:4A:6E:4C:A9:0F:F9:14:6D:71:2B:71:2F:A3:AD:93:47:96
Authority key identifier: 2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2
Certificate issuer: /CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2
Certificate serial: 019641E8D17BEE06F531F6B739D2E8F50D52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
Manifest number: 14CC
Signing time: Thu 17 Apr 2025 04:01:38 +0000
Manifest this update: Thu 17 Apr 2025 04:01:38 +0000
Manifest next update: Fri 18 Apr 2025 04:01:38 +0000
Files and hashes: 1: FP9KPtAPudwifvNA1yXNkNCFOFY.roa (hash: ocGzp/8Fhd1lCI2svcm4GtNlcaUMkqz9rj4sgodMzFo=)
2: LiSXk-WSSp8l86Co3ZlLN065N9I.crl (hash: cM89kbRTO0DayIKS6m4saIy7jsan9aeK4Rt64srk2n4=)
3: gzJT4-cX5kiA_JxRqpqJmyeN7rM.roa (hash: j7soth2EwPp+uzVpjpNq3DRnu+ZloTBjkFjkTsLwX1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 04:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:41:e8:d1:7b:ee:06:f5:31:f6:b7:39:d2:e8:f5:0d:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2
Validity
Not Before: Apr 17 04:01:38 2025 GMT
Not After : Apr 18 04:01:38 2025 GMT
Subject: CN=49d9c34a6e4ca90ff9146d712b712fa3ad934796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:64:11:7b:39:a1:ef:f6:72:bd:84:2c:67:de:
77:67:87:99:5c:ba:39:60:22:fb:a3:82:e2:59:9e:
f4:4b:9f:07:09:ae:f0:84:d0:8f:b0:9c:67:2b:b7:
9c:59:00:d1:6e:05:c3:32:99:b1:da:54:3f:9c:f5:
f3:c0:18:6d:ef:87:07:33:d3:68:9f:fc:f6:f4:02:
55:d3:4c:5d:77:c4:97:8f:cf:fd:6d:47:68:ae:a8:
2b:33:2d:50:c8:73:1e:b8:78:85:78:99:23:df:a3:
b2:d1:d0:da:a5:39:25:15:da:75:46:d8:97:a9:06:
b7:d3:b9:0f:5f:d3:df:36:b5:ab:d9:67:70:15:b3:
17:b6:34:66:6f:ca:25:d6:71:b1:80:be:fa:22:f6:
d8:d8:19:3a:da:1b:f7:39:8d:6c:3b:79:fa:3f:2b:
5b:fa:01:4a:a0:59:d2:e7:ef:3d:ce:64:01:e8:4c:
44:e6:16:36:3e:32:1e:13:3a:fc:4a:5a:44:22:d7:
b0:41:2a:12:52:33:7e:b3:24:70:2f:b6:19:c7:44:
29:5e:21:45:53:1c:aa:48:de:76:dc:21:1f:62:a4:
99:04:5e:48:ce:ff:d9:23:8b:a8:f9:a5:ed:be:4e:
7d:2b:f1:8b:69:0e:e1:85:5e:8a:7d:66:4a:1c:69:
1e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D9:C3:4A:6E:4C:A9:0F:F9:14:6D:71:2B:71:2F:A3:AD:93:47:96
X509v3 Authority Key Identifier:
keyid:2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:fc:3b:e6:9d:9e:63:20:cd:dc:80:21:d7:07:a3:0f:95:51:
27:29:2d:57:28:3b:e8:02:c3:f9:1b:4d:66:70:5a:68:72:4a:
bc:e6:26:f3:44:92:b0:96:e5:f0:e4:22:90:5e:0a:01:bd:03:
6c:68:93:0c:2c:77:4a:61:f2:05:89:0f:03:4a:a6:9b:28:c5:
58:65:3d:33:a9:96:23:7d:b8:1e:ba:52:63:78:32:a0:f2:1f:
a8:46:ed:71:11:66:ec:1f:a1:5e:7d:9f:e9:50:b4:54:94:4e:
4b:c4:6d:b2:4c:30:7a:6d:4b:bb:5e:5a:65:84:dc:f8:92:2a:
84:85:f1:65:d5:48:96:8d:f2:be:15:c3:f8:6c:43:73:d0:b3:
e5:c1:74:f0:5a:06:a2:e1:5f:6a:38:db:a1:bf:6d:52:ce:78:
7b:9c:6e:7e:44:e3:77:73:f9:2f:0a:32:85:d4:a7:0a:d1:98:
d8:63:b1:26:c3:b5:c9:c7:75:c9:ec:48:6e:a8:77:0b:89:c5:
8e:a2:dd:24:f0:78:0e:e4:1a:67:4b:ba:3e:ce:12:d1:6e:7d:
40:34:50:80:be:13:b3:2c:7a:4a:0e:09:62:92:05:47:cf:3a:
62:d3:f5:0c:c9:bb:13:70:63:9e:e0:d3:56:cc:75:16:ba:bd:
a1:8d:10:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZB6NF77gb1Mfa3OdLo9Q1SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMjQ5NzkzZTU5MjRhOWYyNWYzYTBhOGRkOTk0YjM3NGVi
OTM3ZDIwHhcNMjUwNDE3MDQwMTM4WhcNMjUwNDE4MDQwMTM4WjAzMTEwLwYDVQQD
Eyg0OWQ5YzM0YTZlNGNhOTBmZjkxNDZkNzEyYjcxMmZhM2FkOTM0Nzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2QRezmh7/ZyvYQsZ953Z4eZXLo5
YCL7o4LiWZ70S58HCa7whNCPsJxnK7ecWQDRbgXDMpmx2lQ/nPXzwBht74cHM9No
n/z29AJV00xdd8SXj8/9bUdorqgrMy1QyHMeuHiFeJkj36Oy0dDapTklFdp1RtiX
qQa307kPX9PfNrWr2WdwFbMXtjRmb8ol1nGxgL76IvbY2Bk62hv3OY1sO3n6Pytb
+gFKoFnS5+89zmQB6ExE5hY2PjIeEzr8SlpEItewQSoSUjN+syRwL7YZx0QpXiFF
UxyqSN523CEfYqSZBF5Izv/ZI4uo+aXtvk59K/GLaQ7hhV6KfWZKHGke7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEnZw0puTKkP+RRtcStxL6Otk0eWMB8GA1UdIwQY
MBaAFC4kl5PlkkqfJfOgqN2ZSzdOuTfSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGlTWGstV1NTcDhsODZDbzNabExOMDY1TjlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9iZmJjOGUtZWFiNS00ZjIwLThlZWEt
OTZiZjE0M2ViNDUyLzEvTGlTWGstV1NTcDhsODZDbzNabExOMDY1TjlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9iZmJjOGUtZWFiNS00ZjIwLThlZWEtOTZiZjE0M2ViNDUy
LzEvTGlTWGstV1NTcDhsODZDbzNabExOMDY1TjlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS/w75p2e
YyDN3IAh1wejD5VRJyktVyg76ALD+RtNZnBaaHJKvOYm80SSsJbl8OQikF4KAb0D
bGiTDCx3SmHyBYkPA0qmmyjFWGU9M6mWI324HrpSY3gyoPIfqEbtcRFm7B+hXn2f
6VC0VJROS8Rtskwwem1Lu15aZYTc+JIqhIXxZdVIlo3yvhXD+GxDc9Cz5cF08FoG
ouFfajjbob9tUs54e5xufkTjd3P5LwoyhdSnCtGY2GOxJsO1ycd1yexIbqh3C4nF
jqLdJPB4DuQaZ0u6Ps4S0W59QDRQgL4Tsyx6Sg4JYpIFR886YtP1DMm7E3BjnuDT
Vsx1Frq9oY0QNg==
-----END CERTIFICATE-----
Generated at Thu Apr 17 13:38:52 2025 by rpki-client