Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.mft
File: LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.mft (raw, json)
Hash identifier: u7OPZnBGye/wGu1b+U+xstO1X4itVfaOOWruwp30uuE=
Subject key identifier: 84:E7:A5:9E:14:E8:2A:D2:9D:7B:C5:89:DD:96:F8:E3:C3:DA:CB:D9
Authority key identifier: 2D:58:B6:BE:9C:6C:03:3B:3B:12:6F:27:7D:02:BC:05:44:99:FC:FB
Certificate issuer: /CN=2d58b6be9c6c033b3b126f277d02bc054499fcfb
Certificate serial: 0196168FA3884256D9040A5B17B56A22D31C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.mft
Manifest number: 0413
Signing time: Tue 08 Apr 2025 18:00:34 +0000
Manifest this update: Tue 08 Apr 2025 18:00:34 +0000
Manifest next update: Wed 09 Apr 2025 18:00:34 +0000
Files and hashes: 1: LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.crl (hash: dIp5ioMHpL/VwbjKVJhzwFCMWmsDGxZbvmCelavolP0=)
2: sL3129FsiQ9EOiD-6Y-oRWZ0HUI.roa (hash: OeP8VcF7txOpzsrTuc07O34NirN/Zqlu2vZ40ZPG7ls=)
3: vnYIdpkDdS6bRMveVXglLZHbY50.roa (hash: RbsMHBbR5PlZx+oytvnpiwybpf9Mt1fYmOVDql1MbsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:16:8f:a3:88:42:56:d9:04:0a:5b:17:b5:6a:22:d3:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d58b6be9c6c033b3b126f277d02bc054499fcfb
Validity
Not Before: Apr 8 18:00:34 2025 GMT
Not After : Apr 9 18:00:34 2025 GMT
Subject: CN=84e7a59e14e82ad29d7bc589dd96f8e3c3dacbd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:06:ab:8b:e2:c0:4e:ac:e1:3f:ed:58:76:14:
0f:2e:1f:6b:02:1b:2a:3b:1d:bf:16:e0:14:3a:5f:
5f:a5:d7:27:14:c4:96:25:26:79:a3:e3:02:20:ba:
08:87:4d:cf:64:9b:22:b8:79:ab:5f:54:fc:8a:64:
a9:39:e6:bf:31:ea:6d:74:48:f8:d0:2f:d0:cd:26:
2b:e6:92:41:b6:a5:11:ad:99:13:10:97:64:ca:3f:
3b:6b:6d:3c:79:11:ea:d7:d8:98:24:4e:f6:d2:08:
5e:1d:76:6a:7f:c0:bd:8c:93:0c:3a:67:ac:50:91:
23:c6:03:dd:eb:0f:2a:63:bc:b3:6b:54:c4:f5:e6:
78:1a:81:32:66:d3:37:04:a2:98:77:31:b8:ab:c0:
1c:49:67:88:4d:52:50:5e:00:ab:d4:6a:16:56:1a:
44:50:72:ff:ec:4a:e4:00:0d:a9:f8:17:a9:3f:d2:
b2:56:91:6e:76:83:26:77:6a:78:5c:4d:99:b0:fd:
68:03:06:e3:00:99:bf:7f:4f:d4:04:1b:1d:82:e6:
94:27:6c:90:ad:87:13:20:3a:bf:30:53:31:b5:66:
74:8a:44:de:80:82:23:0b:e9:c5:ff:9f:b0:d5:37:
fc:6e:78:d4:8a:4f:78:da:52:92:68:b7:19:77:0b:
e8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E7:A5:9E:14:E8:2A:D2:9D:7B:C5:89:DD:96:F8:E3:C3:DA:CB:D9
X509v3 Authority Key Identifier:
keyid:2D:58:B6:BE:9C:6C:03:3B:3B:12:6F:27:7D:02:BC:05:44:99:FC:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/LVi2vpxsAzs7Em8nfQK8BUSZ_Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:95:8e:19:64:a8:32:76:9b:36:23:98:6c:ad:9b:dc:f4:62:
33:2d:7b:24:89:f2:4c:00:6a:f1:bd:b3:cf:89:48:5e:b0:0d:
7a:64:b0:4f:3c:f7:0e:e7:fe:dd:89:87:96:81:05:05:67:5d:
7e:9f:64:98:f3:16:c5:50:22:28:4d:e4:57:48:6e:36:f6:24:
e6:64:ae:d9:70:64:e1:8a:bc:7a:dc:f5:32:e3:e1:27:c0:85:
8f:70:39:f0:42:a1:78:95:3d:c9:0b:f6:5f:04:f5:85:97:cd:
8e:c7:af:2a:e6:a6:8b:15:07:ff:c3:f8:a2:88:78:fd:4a:dd:
52:4c:7f:a9:4b:66:93:9d:2f:85:bf:c7:fd:23:78:c0:90:8f:
c3:77:a5:b7:ad:83:ae:69:bf:b5:ce:d0:e7:62:df:b5:c6:16:
1e:1c:47:0d:5e:77:65:75:d0:27:6e:96:3f:11:dd:65:a2:a2:
24:67:bd:76:5a:29:70:f8:3c:11:ec:fb:69:99:b0:9c:5a:74:
ab:08:0b:9f:8c:3d:73:32:eb:cc:f6:75:0b:4b:4f:c5:6e:1f:
7d:14:a9:03:6b:bd:2c:37:91:1c:4f:c5:f1:7c:77:c0:fd:13:
83:5c:ea:07:2c:f7:71:fd:98:69:42:b9:26:59:e9:6f:cd:29:
88:e5:5b:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYWj6OIQlbZBApbF7VqItMcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNThiNmJlOWM2YzAzM2IzYjEyNmYyNzdkMDJiYzA1NDQ5
OWZjZmIwHhcNMjUwNDA4MTgwMDM0WhcNMjUwNDA5MTgwMDM0WjAzMTEwLwYDVQQD
Eyg4NGU3YTU5ZTE0ZTgyYWQyOWQ3YmM1ODlkZDk2ZjhlM2MzZGFjYmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwari+LATqzhP+1YdhQPLh9rAhsq
Ox2/FuAUOl9fpdcnFMSWJSZ5o+MCILoIh03PZJsiuHmrX1T8imSpOea/MeptdEj4
0C/QzSYr5pJBtqURrZkTEJdkyj87a208eRHq19iYJE720gheHXZqf8C9jJMMOmes
UJEjxgPd6w8qY7yza1TE9eZ4GoEyZtM3BKKYdzG4q8AcSWeITVJQXgCr1GoWVhpE
UHL/7ErkAA2p+BepP9KyVpFudoMmd2p4XE2ZsP1oAwbjAJm/f0/UBBsdguaUJ2yQ
rYcTIDq/MFMxtWZ0ikTegIIjC+nF/5+w1Tf8bnjUik942lKSaLcZdwvoxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFITnpZ4U6CrSnXvFid2W+OPD2svZMB8GA1UdIwQY
MBaAFC1Ytr6cbAM7OxJvJ30CvAVEmfz7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFZpMnZweHNBenM3RW04bmZRSzhCVVNaX1BzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8zNzk4ZDItMjhmMi00YjE4LWExN2Mt
Y2I4NmRiMzUwOTMxLzEvTFZpMnZweHNBenM3RW04bmZRSzhCVVNaX1BzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8zNzk4ZDItMjhmMi00YjE4LWExN2MtY2I4NmRiMzUwOTMx
LzEvTFZpMnZweHNBenM3RW04bmZRSzhCVVNaX1BzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVpWOGWSo
MnabNiOYbK2b3PRiMy17JInyTABq8b2zz4lIXrANemSwTzz3Duf+3YmHloEFBWdd
fp9kmPMWxVAiKE3kV0huNvYk5mSu2XBk4Yq8etz1MuPhJ8CFj3A58EKheJU9yQv2
XwT1hZfNjsevKuamixUH/8P4ooh4/UrdUkx/qUtmk50vhb/H/SN4wJCPw3elt62D
rmm/tc7Q52LftcYWHhxHDV53ZXXQJ26WPxHdZaKiJGe9dlopcPg8Eez7aZmwnFp0
qwgLn4w9czLrzPZ1C0tPxW4ffRSpA2u9LDeRHE/F8Xx3wP0Tg1zqByz3cf2YaUK5
Jlnpb80piOVbww==
-----END CERTIFICATE-----
Generated at Tue Apr 8 20:44:42 2025 by rpki-client