Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
File: lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft (raw, json)
Hash identifier: iosWM+xPbErdCQsHRcQ0kkZmciUrnxlRPwKKPm7W7zc=
Subject key identifier: 98:E3:4C:24:0E:89:A9:AA:05:46:28:CD:4A:7E:1E:C7:92:73:4B:4C
Authority key identifier: 95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2
Certificate issuer: /CN=95461fbee1c06e3eafac0f2f95253ca8603accf2
Certificate serial: 01963E78C645B37FCC7580234C2D45B724FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
Manifest number: 0668
Signing time: Wed 16 Apr 2025 12:00:24 +0000
Manifest this update: Wed 16 Apr 2025 12:00:24 +0000
Manifest next update: Thu 17 Apr 2025 12:00:24 +0000
Files and hashes: 1: _HX0nKUguEjDK_UXSZxDRu7j10o.roa (hash: nDwDdh/G4BS8EpikB8I09Ea4NwJkgiqchJXpY1cDAL4=)
2: lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl (hash: kN36K5ZywC3Ad2kqUpSJSSaKdlWy5rs8GxtsVORcOIY=)
3: zuaQcYGr_SOorxrrm1R8vFKkh3o.roa (hash: +Frydy4vUNiwXuYX5nBMIXixa4+W5EMNDEkn6Iy0AhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 12:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:78:c6:45:b3:7f:cc:75:80:23:4c:2d:45:b7:24:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95461fbee1c06e3eafac0f2f95253ca8603accf2
Validity
Not Before: Apr 16 12:00:24 2025 GMT
Not After : Apr 17 12:00:24 2025 GMT
Subject: CN=98e34c240e89a9aa054628cd4a7e1ec792734b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0f:e4:aa:dd:ed:be:4a:97:61:dc:c9:93:27:
97:c4:e2:dc:7a:39:b1:26:dd:05:27:3f:48:39:d9:
aa:9b:1a:8a:75:90:75:00:61:52:20:2b:d8:b8:5c:
a1:b5:c9:af:e7:59:12:6e:17:48:92:bb:99:80:04:
99:e3:3c:27:67:a2:1f:6e:bb:49:55:c6:f6:7b:02:
20:66:08:76:71:f1:92:a6:8e:21:ab:62:ed:6a:f9:
b5:b3:ca:0f:55:99:d4:5c:88:ae:ef:9e:61:4d:c7:
5f:28:be:c3:ae:21:5e:c5:93:ef:48:f7:50:d1:04:
40:6b:2d:f3:db:e5:09:fb:fa:9b:b3:87:5f:0f:54:
f4:3c:ee:d0:db:81:91:47:3c:f5:c4:d5:b2:7e:8f:
22:d8:a4:c3:e4:f8:80:62:1c:79:18:79:80:86:d3:
aa:c9:52:55:63:33:0f:7a:60:7f:5d:d2:fe:54:03:
88:f6:06:61:5e:86:18:2c:19:4c:0a:c1:56:7b:0a:
0a:23:5e:d4:98:c5:48:ed:b0:60:3c:14:e6:82:c9:
8f:52:e7:15:64:4d:e5:75:22:65:5a:7f:64:b0:dd:
86:e4:96:77:bd:3e:f2:ac:81:61:24:2f:5e:ed:2b:
5e:de:f6:e6:43:37:0f:1d:ea:8f:21:3f:c6:e7:15:
c7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E3:4C:24:0E:89:A9:AA:05:46:28:CD:4A:7E:1E:C7:92:73:4B:4C
X509v3 Authority Key Identifier:
keyid:95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:16:f5:af:f0:05:d0:1a:c8:26:a1:ef:21:b8:4e:9c:68:d8:
4c:ba:a6:01:94:00:41:c5:28:81:7c:6d:13:ff:49:15:27:35:
64:95:39:7c:af:4f:ff:b0:38:6f:0e:7c:43:e0:45:ee:a6:2a:
24:51:79:8a:d9:96:1f:f4:ab:dc:85:a4:20:5b:44:01:09:e1:
9c:d0:4a:cc:c5:43:25:82:65:fc:5b:d4:31:27:41:8e:98:03:
51:6f:10:98:ea:c3:79:ab:56:06:8b:bd:e0:d3:f8:ce:21:eb:
a0:0d:4e:84:e8:01:88:7d:55:28:66:09:f3:d2:8a:17:8b:0e:
b5:1e:91:ce:29:e7:3e:ff:1d:5f:e5:de:ba:0a:d9:41:ca:b8:
c3:2f:20:25:e8:ca:84:9a:49:1c:f6:f8:92:1a:53:9b:8a:db:
5e:1c:12:b1:05:70:ad:eb:27:cf:7d:5d:ba:ea:ce:13:e2:0c:
35:a6:05:59:42:19:11:71:d8:bd:eb:c8:6b:6d:bb:cf:2f:f6:
2b:98:e2:8e:16:3f:4c:53:d8:8a:11:67:6f:53:ab:eb:9d:0d:
0b:17:5e:54:3d:b3:b4:18:6e:a7:d5:47:e4:65:a6:99:b9:91:
01:ba:43:5e:8a:9c:cd:c0:32:71:10:8c:57:08:f8:03:8b:ee:
1b:a4:5c:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY+eMZFs3/MdYAjTC1FtyT6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NDYxZmJlZTFjMDZlM2VhZmFjMGYyZjk1MjUzY2E4NjAz
YWNjZjIwHhcNMjUwNDE2MTIwMDI0WhcNMjUwNDE3MTIwMDI0WjAzMTEwLwYDVQQD
Eyg5OGUzNGMyNDBlODlhOWFhMDU0NjI4Y2Q0YTdlMWVjNzkyNzM0YjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAow/kqt3tvkqXYdzJkyeXxOLcejmx
Jt0FJz9IOdmqmxqKdZB1AGFSICvYuFyhtcmv51kSbhdIkruZgASZ4zwnZ6IfbrtJ
Vcb2ewIgZgh2cfGSpo4hq2Ltavm1s8oPVZnUXIiu755hTcdfKL7DriFexZPvSPdQ
0QRAay3z2+UJ+/qbs4dfD1T0PO7Q24GRRzz1xNWyfo8i2KTD5PiAYhx5GHmAhtOq
yVJVYzMPemB/XdL+VAOI9gZhXoYYLBlMCsFWewoKI17UmMVI7bBgPBTmgsmPUucV
ZE3ldSJlWn9ksN2G5JZ3vT7yrIFhJC9e7Ste3vbmQzcPHeqPIT/G5xXHwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJjjTCQOiamqBUYozUp+HseSc0tMMB8GA1UdIwQY
MBaAFJVGH77hwG4+r6wPL5UlPKhgOszyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFVZZnZ1SEFiajZ2ckE4dmxTVThxR0E2elBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9lNWNlOGYtNWVhMC00NzlmLTkzZTkt
ODlkNWM2MGY1MDFmLzEvbFVZZnZ1SEFiajZ2ckE4dmxTVThxR0E2elBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9lNWNlOGYtNWVhMC00NzlmLTkzZTktODlkNWM2MGY1MDFm
LzEvbFVZZnZ1SEFiajZ2ckE4dmxTVThxR0E2elBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFRb1r/AF
0BrIJqHvIbhOnGjYTLqmAZQAQcUogXxtE/9JFSc1ZJU5fK9P/7A4bw58Q+BF7qYq
JFF5itmWH/Sr3IWkIFtEAQnhnNBKzMVDJYJl/FvUMSdBjpgDUW8QmOrDeatWBou9
4NP4ziHroA1OhOgBiH1VKGYJ89KKF4sOtR6RzinnPv8dX+XeugrZQcq4wy8gJejK
hJpJHPb4khpTm4rbXhwSsQVwresnz31duurOE+IMNaYFWUIZEXHYvevIa227zy/2
K5jijhY/TFPYihFnb1Or650NCxdeVD2ztBhup9VH5GWmmbmRAbpDXoqczcAycRCM
Vwj4A4vuG6Rccw==
-----END CERTIFICATE-----
Generated at Wed Apr 16 21:38:25 2025 by rpki-client