Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
File: lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft (raw, json)
Hash identifier: MoMiZSeI5wVBRpto0fFX6/0cGWywxwSa0aZTjZGfr0o=
Subject key identifier: 92:B9:AC:D9:54:88:13:2F:79:98:2B:3C:9E:FA:C9:C1:0A:B6:3B:95
Authority key identifier: 94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD
Certificate issuer: /CN=946733318c62c47920fe375ad99cb729ee90a1ad
Certificate serial: 01958B4D787DB0F41A515543AF50028E91B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
Manifest number: 1050
Signing time: Wed 12 Mar 2025 17:01:04 +0000
Manifest this update: Wed 12 Mar 2025 17:01:04 +0000
Manifest next update: Thu 13 Mar 2025 17:01:04 +0000
Files and hashes: 1: SH4rDP4bziCb5bkV8rhoTxfuNjk.roa (hash: vVCfK4MgaGYgFq117gziTiwL0UcNweWxSUnO8MCkGI8=)
2: SpTXo1fwWeGOWpTg6Zsx5tHHgL8.roa (hash: pd+04X0269GarNL7eAEgGDcIT45S+rvIYMVZpLeD2m8=)
3: lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl (hash: cBLgKvIjIspUR1MHSEp4l//bjxZLDeM2LLo9+PHPKio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 17:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:4d:78:7d:b0:f4:1a:51:55:43:af:50:02:8e:91:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=946733318c62c47920fe375ad99cb729ee90a1ad
Validity
Not Before: Mar 12 17:01:04 2025 GMT
Not After : Mar 13 17:01:04 2025 GMT
Subject: CN=92b9acd95488132f79982b3c9efac9c10ab63b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:58:e8:bd:ec:52:77:06:a9:9b:aa:49:61:4b:
47:21:8b:80:51:18:58:cf:c5:e6:02:36:86:29:f9:
c4:43:c7:e6:ec:34:47:07:cc:81:ba:3d:bb:be:ad:
41:69:63:38:32:9e:48:a3:d2:3a:55:c5:75:37:c0:
bb:02:97:b3:cb:74:43:88:fd:2a:4c:66:ee:ff:f1:
f8:a2:b8:fc:f8:21:94:d1:4b:57:f4:44:32:59:2f:
45:f6:6d:e4:ee:9a:cb:11:b5:42:c7:af:dd:51:8b:
2f:dd:4b:fe:61:f6:e3:9e:45:85:16:28:50:c2:26:
f5:0a:a0:f9:79:77:4e:55:ec:69:04:b8:65:d8:39:
8e:59:ac:9e:7f:22:b6:d3:57:92:7d:30:76:25:dc:
e9:cb:b0:52:ed:5e:2f:a5:13:14:1f:8b:bf:7f:23:
f4:b6:f7:31:19:35:4e:0a:6c:a9:25:b5:2e:cb:9c:
e5:e2:08:4c:18:44:8b:f5:87:c8:65:44:16:9d:f9:
f0:38:69:c1:c0:ec:6b:1c:76:0a:14:ea:bc:89:c0:
e6:7e:85:d7:88:c3:f8:db:b0:ed:76:25:a6:ab:be:
44:85:4e:f8:5b:c5:7c:40:71:20:60:89:24:48:c1:
17:ac:eb:4f:01:8d:ad:76:42:e8:d1:e9:3c:cb:b3:
34:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B9:AC:D9:54:88:13:2F:79:98:2B:3C:9E:FA:C9:C1:0A:B6:3B:95
X509v3 Authority Key Identifier:
keyid:94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:20:df:6b:64:47:49:bc:1f:dc:d4:7f:f4:b5:e5:74:39:2a:
62:52:09:5c:35:8b:dc:cf:25:4e:1c:21:1a:3f:78:92:b3:e4:
74:71:33:cf:6e:95:5f:02:31:c8:1b:b2:97:cd:f3:98:9e:e5:
1d:d8:40:16:23:eb:c8:3f:59:2c:76:d2:ec:d5:92:ee:97:9e:
db:f4:bd:a1:a3:f0:99:90:23:42:81:99:15:2c:e8:ac:7a:b0:
87:57:38:48:29:66:ad:40:be:1c:ea:cc:9a:0d:57:e6:a3:18:
29:a3:8f:46:48:b5:5e:90:f1:f5:72:1c:fd:ca:de:2e:ba:21:
32:bb:62:d6:85:54:8d:1b:8a:e8:53:35:b9:0a:bc:6f:8b:5d:
a4:a9:a6:fc:8f:f5:5e:3c:a5:f0:a8:5b:9d:c8:d2:d1:d5:ed:
de:ca:e6:fd:f8:1c:01:5d:2a:97:d8:9c:e6:95:29:a0:80:b7:
85:d3:91:24:e9:26:71:64:b0:34:02:c8:b2:4b:84:be:66:f1:
1e:c6:21:ad:cf:f5:22:e8:4e:b7:a0:14:55:61:df:37:87:e7:
05:f5:b2:4c:ab:c5:22:59:d4:60:7e:73:7f:29:da:81:d0:29:
4e:2e:1c:36:ac:0e:4b:f2:94:57:2b:a3:6b:c6:db:ad:b3:16:
ff:b2:7d:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWLTXh9sPQaUVVDr1ACjpG4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NjczMzMxOGM2MmM0NzkyMGZlMzc1YWQ5OWNiNzI5ZWU5
MGExYWQwHhcNMjUwMzEyMTcwMTA0WhcNMjUwMzEzMTcwMTA0WjAzMTEwLwYDVQQD
Eyg5MmI5YWNkOTU0ODgxMzJmNzk5ODJiM2M5ZWZhYzljMTBhYjYzYjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVjovexSdwapm6pJYUtHIYuAURhY
z8XmAjaGKfnEQ8fm7DRHB8yBuj27vq1BaWM4Mp5Io9I6VcV1N8C7Apezy3RDiP0q
TGbu//H4orj8+CGU0UtX9EQyWS9F9m3k7prLEbVCx6/dUYsv3Uv+YfbjnkWFFihQ
wib1CqD5eXdOVexpBLhl2DmOWayefyK201eSfTB2Jdzpy7BS7V4vpRMUH4u/fyP0
tvcxGTVOCmypJbUuy5zl4ghMGESL9YfIZUQWnfnwOGnBwOxrHHYKFOq8icDmfoXX
iMP427DtdiWmq75EhU74W8V8QHEgYIkkSMEXrOtPAY2tdkLo0ek8y7M0GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJK5rNlUiBMveZgrPJ76ycEKtjuVMB8GA1UdIwQY
MBaAFJRnMzGMYsR5IP43WtmctynukKGtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEdjek1ZeGl4SGtnX2pkYTJaeTNLZTZRb2EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9kNzYwOWUtNjM5Ni00MTU1LWFkMzUt
Yjc0MDg5ZDhlNTllLzEvbEdjek1ZeGl4SGtnX2pkYTJaeTNLZTZRb2EwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9kNzYwOWUtNjM5Ni00MTU1LWFkMzUtYjc0MDg5ZDhlNTll
LzEvbEdjek1ZeGl4SGtnX2pkYTJaeTNLZTZRb2EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWSDfa2RH
Sbwf3NR/9LXldDkqYlIJXDWL3M8lThwhGj94krPkdHEzz26VXwIxyBuyl83zmJ7l
HdhAFiPryD9ZLHbS7NWS7pee2/S9oaPwmZAjQoGZFSzorHqwh1c4SClmrUC+HOrM
mg1X5qMYKaOPRki1XpDx9XIc/creLrohMrti1oVUjRuK6FM1uQq8b4tdpKmm/I/1
Xjyl8KhbncjS0dXt3srm/fgcAV0ql9ic5pUpoIC3hdORJOkmcWSwNALIskuEvmbx
HsYhrc/1IuhOt6AUVWHfN4fnBfWyTKvFIlnUYH5zfynagdApTi4cNqwOS/KUVyuj
a8bbrbMW/7J9QQ==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:42 2025 by rpki-client