Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
File: LI5SR1LthVF1oBQSyzfEqeTbYXA.mft (raw, json)
Hash identifier: Zjv3KmiU6Gr4e32ZOoi/v2EXG0KGJoUFusABcAG2PWw=
Subject key identifier: ED:3A:62:8F:21:9D:CA:A1:21:C2:06:A4:7C:CF:46:CD:7D:6A:55:AC
Authority key identifier: 2C:8E:52:47:52:ED:85:51:75:A0:14:12:CB:37:C4:A9:E4:DB:61:70
Certificate issuer: /CN=2c8e524752ed855175a01412cb37c4a9e4db6170
Certificate serial: 01965613C32CB7A5291048C6038A8AEF2AA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI5SR1LthVF1oBQSyzfEqeTbYXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
Manifest number: 14FC
Signing time: Mon 21 Apr 2025 02:00:57 +0000
Manifest this update: Mon 21 Apr 2025 02:00:57 +0000
Manifest next update: Tue 22 Apr 2025 02:00:57 +0000
Files and hashes: 1: LI5SR1LthVF1oBQSyzfEqeTbYXA.crl (hash: Ack/G204IRY06xI3FLUcBv7/8gq1v4wLY51O9on5BIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LI5SR1LthVF1oBQSyzfEqeTbYXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:c3:2c:b7:a5:29:10:48:c6:03:8a:8a:ef:2a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c8e524752ed855175a01412cb37c4a9e4db6170
Validity
Not Before: Apr 21 02:00:57 2025 GMT
Not After : Apr 22 02:00:57 2025 GMT
Subject: CN=ed3a628f219dcaa121c206a47ccf46cd7d6a55ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6b:52:03:25:b1:29:c1:4c:58:cc:55:22:83:
84:86:ff:1f:3d:d2:f0:51:4d:9e:89:09:db:be:84:
9e:4c:e6:6e:df:6d:02:04:14:ce:dc:11:e5:b6:9c:
46:08:00:37:2c:33:48:74:55:ae:89:e7:48:26:32:
26:78:e5:09:a8:85:be:36:2e:ef:0c:17:12:fc:30:
f1:ab:f5:ef:68:7b:b5:72:57:f4:a7:a2:80:fc:16:
64:5a:2d:a4:76:e4:b6:c7:c1:c3:03:d1:50:2b:ff:
b1:b4:79:c3:32:7c:81:de:98:30:5d:c6:cd:1b:cf:
cf:df:53:0f:3d:25:12:6a:e7:d2:7c:71:7e:27:db:
a2:ae:8b:e2:05:00:76:32:66:86:af:f4:85:fc:a7:
ea:1a:e2:aa:fc:37:4e:d5:06:be:12:db:d2:6c:dc:
c0:42:f0:00:c9:00:54:98:54:5b:08:9e:9a:89:40:
1b:c5:13:09:af:8f:84:72:d7:33:90:ef:2f:1e:64:
9a:47:3b:4f:f8:53:cf:4b:d4:c0:50:81:ef:30:16:
8f:2e:d9:09:e7:ac:b2:58:0e:0e:9a:40:e2:9d:50:
f3:f7:a6:92:76:e9:26:63:b7:5f:2f:be:fd:e8:12:
a9:cd:89:bb:ad:01:2c:91:2b:4e:25:7d:ce:ee:45:
ec:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:3A:62:8F:21:9D:CA:A1:21:C2:06:A4:7C:CF:46:CD:7D:6A:55:AC
X509v3 Authority Key Identifier:
keyid:2C:8E:52:47:52:ED:85:51:75:A0:14:12:CB:37:C4:A9:E4:DB:61:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI5SR1LthVF1oBQSyzfEqeTbYXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:0e:58:1e:9e:ac:eb:ab:98:73:c2:e5:63:9d:ff:21:53:aa:
f5:17:40:f7:2d:59:55:e0:2a:14:c1:94:8e:b8:a0:59:be:f0:
74:ed:33:9b:4a:0e:2c:1e:78:c3:87:b7:d9:43:7f:8b:0a:58:
91:63:11:de:44:77:69:52:ed:02:23:9e:82:7c:8d:69:eb:42:
ef:46:00:b5:3a:10:de:ff:6a:18:d2:14:19:00:b8:2e:26:fa:
ee:6b:a7:12:42:c3:7c:1e:04:b8:fb:44:e9:16:38:5f:e7:f1:
5f:ad:95:6f:29:6e:04:5a:48:77:51:c3:57:ca:9a:03:13:9e:
97:f1:9a:23:0e:20:de:0a:2f:8c:94:bc:f6:41:bc:53:6f:c2:
79:fc:9f:a3:b0:ad:aa:7f:ae:11:fa:51:ec:d6:4c:a1:2d:d7:
7c:ad:5e:fe:1c:1a:68:7f:23:4f:e2:b0:5a:ae:08:92:8a:4b:
ac:27:33:fd:70:16:2d:7a:bf:1f:89:29:dd:b5:07:35:37:70:
af:ea:a9:b0:18:8b:ac:8a:41:0b:48:5e:06:c7:36:da:aa:b8:
4c:b1:6d:69:67:f5:1c:ab:54:36:21:0f:fa:30:a4:44:60:ae:
eb:d2:4c:3c:f6:a8:89:e5:1e:40:60:69:7c:16:de:32:74:ab:
b2:2d:13:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZWE8Mst6UpEEjGA4qK7yqjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjOGU1MjQ3NTJlZDg1NTE3NWEwMTQxMmNiMzdjNGE5ZTRk
YjYxNzAwHhcNMjUwNDIxMDIwMDU3WhcNMjUwNDIyMDIwMDU3WjAzMTEwLwYDVQQD
EyhlZDNhNjI4ZjIxOWRjYWExMjFjMjA2YTQ3Y2NmNDZjZDdkNmE1NWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumtSAyWxKcFMWMxVIoOEhv8fPdLw
UU2eiQnbvoSeTOZu320CBBTO3BHltpxGCAA3LDNIdFWuiedIJjImeOUJqIW+Ni7v
DBcS/DDxq/XvaHu1clf0p6KA/BZkWi2kduS2x8HDA9FQK/+xtHnDMnyB3pgwXcbN
G8/P31MPPSUSaufSfHF+J9uiroviBQB2MmaGr/SF/KfqGuKq/DdO1Qa+EtvSbNzA
QvAAyQBUmFRbCJ6aiUAbxRMJr4+EctczkO8vHmSaRztP+FPPS9TAUIHvMBaPLtkJ
56yyWA4OmkDinVDz96aSdukmY7dfL7796BKpzYm7rQEskStOJX3O7kXsBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO06Yo8hncqhIcIGpHzPRs19alWsMB8GA1UdIwQY
MBaAFCyOUkdS7YVRdaAUEss3xKnk22FwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEk1U1IxTHRoVkYxb0JRU3l6ZkVxZVRiWVhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC80MTExYTYtYjRjZC00NDE1LTg0YmQt
NTkzYjc3NGZiMDMwLzEvTEk1U1IxTHRoVkYxb0JRU3l6ZkVxZVRiWVhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC80MTExYTYtYjRjZC00NDE1LTg0YmQtNTkzYjc3NGZiMDMw
LzEvTEk1U1IxTHRoVkYxb0JRU3l6ZkVxZVRiWVhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAg5YHp6s
66uYc8LlY53/IVOq9RdA9y1ZVeAqFMGUjrigWb7wdO0zm0oOLB54w4e32UN/iwpY
kWMR3kR3aVLtAiOegnyNaetC70YAtToQ3v9qGNIUGQC4Lib67munEkLDfB4EuPtE
6RY4X+fxX62VbyluBFpId1HDV8qaAxOel/GaIw4g3govjJS89kG8U2/Cefyfo7Ct
qn+uEfpR7NZMoS3XfK1e/hwaaH8jT+KwWq4IkopLrCcz/XAWLXq/H4kp3bUHNTdw
r+qpsBiLrIpBC0heBsc22qq4TLFtaWf1HKtUNiEP+jCkRGCu69JMPPaoieUeQGBp
fBbeMnSrsi0T6w==
-----END CERTIFICATE-----
Generated at Mon Apr 21 11:05:51 2025 by rpki-client