Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft
File: LyRkddfJujmfB_hDYh9uCBNy11c.mft (raw, json)
Hash identifier: lreX1y6rxY4bsXdQj6JZ16hiyAzOogmIoM4ivGJ78CE=
Subject key identifier: BB:EB:72:E9:73:F0:95:AC:BF:0E:B3:FD:EA:1D:E2:8F:AD:6D:22:E6
Authority key identifier: 2F:24:64:75:D7:C9:BA:39:9F:07:F8:43:62:1F:6E:08:13:72:D7:57
Certificate issuer: /CN=2f246475d7c9ba399f07f843621f6e081372d757
Certificate serial: 0194C3BE72240E9A4625DFE97C64FBDD64FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyRkddfJujmfB_hDYh9uCBNy11c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft
Manifest number: 042C
Signing time: Sat 01 Feb 2025 23:00:25 +0000
Manifest this update: Sat 01 Feb 2025 23:00:25 +0000
Manifest next update: Sun 02 Feb 2025 23:00:25 +0000
Files and hashes: 1: LyRkddfJujmfB_hDYh9uCBNy11c.crl (hash: VpLVpw04HTDxLl8Fp6olM0c7BYaXV4kZ0hCqgbzpJ5A=)
2: z8hbBXfmR9_4TV0XIDvdhoDxJ88.roa (hash: K4bePDMQjgLCTnbt2B86qL8fK9bx5pvPhU5OtARItRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyRkddfJujmfB_hDYh9uCBNy11c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:72:24:0e:9a:46:25:df:e9:7c:64:fb:dd:64:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f246475d7c9ba399f07f843621f6e081372d757
Validity
Not Before: Feb 1 23:00:25 2025 GMT
Not After : Feb 2 23:00:25 2025 GMT
Subject: CN=bbeb72e973f095acbf0eb3fdea1de28fad6d22e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c7:6e:a7:08:0d:4d:fc:61:0b:23:fb:a2:5d:
71:ae:6c:10:7b:d6:89:7b:18:8a:ff:86:f5:ef:9d:
82:27:23:df:ae:2a:2f:1b:ae:d7:5f:6c:11:ed:10:
65:47:3e:7b:62:b3:53:88:d4:80:3c:23:3e:e6:f1:
f6:b8:ff:8b:3f:64:03:89:12:fe:81:46:fa:e2:e3:
dd:f8:4e:7e:32:88:bb:e8:75:25:fd:fc:9b:af:31:
b4:33:1e:75:62:11:20:0f:3e:a0:30:13:e6:55:44:
34:06:b1:d4:ed:77:3e:c5:2e:9c:0d:ac:7b:ac:03:
07:79:b7:cb:4b:c8:89:0a:ea:9c:ba:cd:e0:8d:70:
20:a9:85:ac:66:e8:25:4a:c0:cb:72:03:0e:05:40:
70:ca:fb:3c:1e:ab:03:ee:32:50:23:26:a7:62:da:
3b:28:fa:56:35:75:03:e0:0e:c3:4c:71:d5:dc:1e:
d9:28:c0:dd:b6:21:68:e5:09:d5:45:67:22:9f:2c:
74:f1:59:d3:6b:82:0f:ed:d4:71:11:b8:1d:2d:a1:
56:e6:90:1e:65:9d:4a:ea:ef:fd:9e:20:18:9f:af:
81:c7:1d:c3:fe:97:af:5b:da:3e:fc:04:b0:4c:1e:
bc:03:65:db:48:63:42:5b:cf:1a:20:45:82:69:e4:
ad:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:EB:72:E9:73:F0:95:AC:BF:0E:B3:FD:EA:1D:E2:8F:AD:6D:22:E6
X509v3 Authority Key Identifier:
keyid:2F:24:64:75:D7:C9:BA:39:9F:07:F8:43:62:1F:6E:08:13:72:D7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyRkddfJujmfB_hDYh9uCBNy11c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:7d:ce:54:b7:25:19:05:8f:95:88:e2:a0:5e:e1:b7:40:f5:
a1:c8:a0:e7:21:80:4f:83:68:ce:23:32:cb:5c:ca:f0:86:7d:
83:21:63:ed:26:5c:5e:82:8b:8f:f6:59:79:5c:51:57:41:7d:
ba:02:85:76:7c:54:dc:8b:fb:1f:fe:9f:5b:98:ad:28:b4:00:
20:94:37:7c:32:f6:20:c0:81:60:45:d1:33:cc:6e:c4:a9:6a:
b7:56:50:bc:f3:44:e3:9c:e8:f9:e7:7f:28:13:f7:99:81:ad:
26:e9:ff:fd:02:22:cf:5c:11:9c:2c:20:2b:14:e2:95:9a:e0:
6c:85:dc:ce:da:25:a3:38:0b:e1:81:17:f9:1e:60:20:52:b0:
91:e9:46:c8:b3:4e:21:97:13:73:b3:d4:04:85:d9:23:8a:ad:
b9:f9:08:d5:d5:bd:ac:4a:63:a7:fc:18:ad:40:b6:42:f7:e3:
41:dd:73:64:ac:ed:d7:26:68:b0:08:a9:a8:42:0c:04:2f:2f:
08:e7:80:6c:3a:7d:de:30:fb:fd:94:ba:2f:8d:11:8f:c4:f8:
f8:bf:94:9f:01:b7:28:77:41:23:2c:a4:9c:2b:8d:6a:5a:26:
b3:36:1f:fc:55:46:86:4d:ac:0f:f9:f1:a6:2b:d3:d8:2f:96:
be:16:6c:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDvnIkDppGJd/pfGT73WT/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMjQ2NDc1ZDdjOWJhMzk5ZjA3Zjg0MzYyMWY2ZTA4MTM3
MmQ3NTcwHhcNMjUwMjAxMjMwMDI1WhcNMjUwMjAyMjMwMDI1WjAzMTEwLwYDVQQD
EyhiYmViNzJlOTczZjA5NWFjYmYwZWIzZmRlYTFkZTI4ZmFkNmQyMmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsdupwgNTfxhCyP7ol1xrmwQe9aJ
exiK/4b1752CJyPfriovG67XX2wR7RBlRz57YrNTiNSAPCM+5vH2uP+LP2QDiRL+
gUb64uPd+E5+Moi76HUl/fybrzG0Mx51YhEgDz6gMBPmVUQ0BrHU7Xc+xS6cDax7
rAMHebfLS8iJCuqcus3gjXAgqYWsZuglSsDLcgMOBUBwyvs8HqsD7jJQIyanYto7
KPpWNXUD4A7DTHHV3B7ZKMDdtiFo5QnVRWcinyx08VnTa4IP7dRxEbgdLaFW5pAe
ZZ1K6u/9niAYn6+Bxx3D/pevW9o+/ASwTB68A2XbSGNCW88aIEWCaeStGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLvrculz8JWsvw6z/eod4o+tbSLmMB8GA1UdIwQY
MBaAFC8kZHXXybo5nwf4Q2IfbggTctdXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHlSa2RkZkp1am1mQl9oRFloOXVDQk55MTFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9kZjUyYTAtNTgyNC00MmFkLTliNGQt
ZDlhMWZhOTA4MTBmLzEvTHlSa2RkZkp1am1mQl9oRFloOXVDQk55MTFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9kZjUyYTAtNTgyNC00MmFkLTliNGQtZDlhMWZhOTA4MTBm
LzEvTHlSa2RkZkp1am1mQl9oRFloOXVDQk55MTFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAn3OVLcl
GQWPlYjioF7ht0D1ocig5yGAT4NoziMyy1zK8IZ9gyFj7SZcXoKLj/ZZeVxRV0F9
ugKFdnxU3Iv7H/6fW5itKLQAIJQ3fDL2IMCBYEXRM8xuxKlqt1ZQvPNE45zo+ed/
KBP3mYGtJun//QIiz1wRnCwgKxTilZrgbIXcztolozgL4YEX+R5gIFKwkelGyLNO
IZcTc7PUBIXZI4qtufkI1dW9rEpjp/wYrUC2QvfjQd1zZKzt1yZosAipqEIMBC8v
COeAbDp93jD7/ZS6L40Rj8T4+L+UnwG3KHdBIyyknCuNalomszYf/FVGhk2sD/nx
pivT2C+WvhZssw==
-----END CERTIFICATE-----
Generated at Sun Feb 2 07:03:10 2025 by rpki-client