Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
File: LuKffz-qSKlAq42iErSxEWiD8nM.mft (raw, json)
Hash identifier: sHO4jCMvrc3cxHoYvkklppaBhyG+GbIB4/+U3TO2WCs=
Subject key identifier: BC:B0:2B:AC:35:57:26:57:87:EA:A2:77:BB:08:8E:7E:CC:7E:BA:C3
Authority key identifier: 2E:E2:9F:7F:3F:AA:48:A9:40:AB:8D:A2:12:B4:B1:11:68:83:F2:73
Certificate issuer: /CN=2ee29f7f3faa48a940ab8da212b4b1116883f273
Certificate serial: 0196523656517EE64C6E33A4AD64350C8364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
Manifest number: 1500
Signing time: Sun 20 Apr 2025 08:00:14 +0000
Manifest this update: Sun 20 Apr 2025 08:00:14 +0000
Manifest next update: Mon 21 Apr 2025 08:00:14 +0000
Files and hashes: 1: LuKffz-qSKlAq42iErSxEWiD8nM.crl (hash: Snya9c+V/NOBiBSID0n7+Jjow4msS72NpFKez//UdOA=)
2: YnocbPb6eCTl7D0AAtuW-w6T8XI.roa (hash: 0/3lBvSnn24lW/dA1E4Lwb6/p+92YZin4bwE+8xDWMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:56:51:7e:e6:4c:6e:33:a4:ad:64:35:0c:83:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee29f7f3faa48a940ab8da212b4b1116883f273
Validity
Not Before: Apr 20 08:00:14 2025 GMT
Not After : Apr 21 08:00:14 2025 GMT
Subject: CN=bcb02bac3557265787eaa277bb088e7ecc7ebac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8a:c0:0e:21:b5:e2:ea:87:b1:d8:a8:ae:41:
53:2b:2c:b1:cf:cd:be:f5:3e:a9:3f:e4:56:e7:8e:
fc:ce:b1:fb:4f:7c:af:5f:8d:f9:f9:38:b0:16:f5:
3f:17:84:2b:27:55:52:a6:2e:0e:0d:29:95:39:71:
1e:3a:1f:c3:8c:e2:12:31:60:1f:bd:eb:83:21:e7:
cf:18:9b:eb:28:0a:51:09:ca:5a:1a:8e:c0:cf:83:
6d:78:36:d9:17:0d:7f:19:5d:13:1e:8d:43:81:cd:
61:69:12:8a:62:90:d0:c5:2a:c9:b8:40:4a:b0:76:
68:aa:29:aa:22:74:e3:e6:f3:3f:5b:ee:a5:02:01:
35:d8:70:c2:0a:76:a7:5f:a1:18:88:12:36:19:3d:
cb:d9:cf:50:ce:a2:f6:7d:89:1d:58:c1:60:85:7f:
dc:43:b9:7e:82:6d:28:bc:1a:a6:d0:61:23:51:b0:
9a:2a:e1:a9:26:13:e0:7b:c3:f7:41:c0:3f:a6:41:
ad:43:fd:14:fd:b0:d0:46:20:43:8d:7f:63:7f:17:
6a:c2:b7:56:5c:42:fe:b0:6d:ac:4e:f3:74:7a:f5:
3d:7b:c9:e6:b1:b9:b2:c6:57:fb:85:f2:c6:ed:a9:
08:92:bf:22:0a:9e:44:ea:02:5f:68:da:53:e2:0b:
1f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B0:2B:AC:35:57:26:57:87:EA:A2:77:BB:08:8E:7E:CC:7E:BA:C3
X509v3 Authority Key Identifier:
keyid:2E:E2:9F:7F:3F:AA:48:A9:40:AB:8D:A2:12:B4:B1:11:68:83:F2:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:cf:95:7b:cc:72:e4:2b:cd:af:9d:4d:3c:a3:6d:51:01:e1:
09:3f:7d:29:0a:8d:23:30:a5:d4:37:ce:ba:15:12:48:19:62:
2e:f4:77:f5:b4:57:ce:d1:ba:72:59:08:78:f3:19:88:12:a3:
c1:51:6c:5a:75:e0:19:4f:66:e6:28:96:40:ab:c5:13:6a:98:
22:15:01:2e:07:a2:e9:3c:99:58:79:50:75:f4:44:60:72:59:
d6:f8:d8:ff:67:ca:7e:40:f8:84:02:88:ff:97:7f:fd:79:a9:
24:24:eb:11:41:9e:59:cf:93:80:fc:30:34:af:4e:5f:a6:0b:
f1:cf:e8:40:b7:25:5a:61:77:a2:94:0f:ae:eb:00:7c:c0:8d:
96:c3:93:25:21:d9:2d:68:bf:db:26:6a:f0:36:81:7b:80:ed:
df:db:27:4c:78:06:47:38:46:59:42:e0:c5:dc:6a:be:91:6b:
63:98:21:bb:b4:d3:1c:07:05:76:7a:70:79:f7:43:64:23:fb:
d2:cd:98:cd:41:7d:6d:82:6e:0e:59:0e:d0:f7:88:49:fe:d1:
2d:ec:2e:ab:6c:3c:a6:7e:23:d2:4b:60:24:f9:e7:e2:3d:64:
bc:6a:89:78:8f:30:43:5a:49:22:ee:41:29:1f:37:ed:6a:f0:
ef:2b:32:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZSNlZRfuZMbjOkrWQ1DINkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZTI5ZjdmM2ZhYTQ4YTk0MGFiOGRhMjEyYjRiMTExNjg4
M2YyNzMwHhcNMjUwNDIwMDgwMDE0WhcNMjUwNDIxMDgwMDE0WjAzMTEwLwYDVQQD
EyhiY2IwMmJhYzM1NTcyNjU3ODdlYWEyNzdiYjA4OGU3ZWNjN2ViYWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4rADiG14uqHsdiorkFTKyyxz82+
9T6pP+RW5478zrH7T3yvX435+TiwFvU/F4QrJ1VSpi4ODSmVOXEeOh/DjOISMWAf
veuDIefPGJvrKApRCcpaGo7Az4NteDbZFw1/GV0THo1Dgc1haRKKYpDQxSrJuEBK
sHZoqimqInTj5vM/W+6lAgE12HDCCnanX6EYiBI2GT3L2c9QzqL2fYkdWMFghX/c
Q7l+gm0ovBqm0GEjUbCaKuGpJhPge8P3QcA/pkGtQ/0U/bDQRiBDjX9jfxdqwrdW
XEL+sG2sTvN0evU9e8nmsbmyxlf7hfLG7akIkr8iCp5E6gJfaNpT4gsfVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLywK6w1VyZXh+qid7sIjn7MfrrDMB8GA1UdIwQY
MBaAFC7in38/qkipQKuNohK0sRFog/JzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHVLZmZ6LXFTS2xBcTQyaUVyU3hFV2lEOG5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC81Njc4NzYtOGQxNy00NmM2LThjZGQt
NGI4NDNlOWQwNGY4LzEvTHVLZmZ6LXFTS2xBcTQyaUVyU3hFV2lEOG5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC81Njc4NzYtOGQxNy00NmM2LThjZGQtNGI4NDNlOWQwNGY4
LzEvTHVLZmZ6LXFTS2xBcTQyaUVyU3hFV2lEOG5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhs+Ve8xy
5CvNr51NPKNtUQHhCT99KQqNIzCl1DfOuhUSSBliLvR39bRXztG6clkIePMZiBKj
wVFsWnXgGU9m5iiWQKvFE2qYIhUBLgei6TyZWHlQdfREYHJZ1vjY/2fKfkD4hAKI
/5d//XmpJCTrEUGeWc+TgPwwNK9OX6YL8c/oQLclWmF3opQPrusAfMCNlsOTJSHZ
LWi/2yZq8DaBe4Dt39snTHgGRzhGWULgxdxqvpFrY5ghu7TTHAcFdnpwefdDZCP7
0s2YzUF9bYJuDlkO0PeISf7RLewuq2w8pn4j0ktgJPnn4j1kvGqJeI8wQ1pJIu5B
KR837Wrw7ysyRw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:55:44 2025 by rpki-client