Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft
File: lCWIuR2pzKgbSeYDqYjiseq93Jg.mft (raw, json)
Hash identifier: eeQpkGPQFodWrpmzmItL/jDWaEayLL3GILLK5fBdPR0=
Subject key identifier: BB:5A:20:E6:47:FB:32:A0:52:66:20:CA:E6:A3:39:0E:F0:63:30:10
Authority key identifier: 94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
Certificate issuer: /CN=942588b91da9cca81b49e603a988e2b1eabddc98
Certificate serial: 01964CD9A63EBA8BDFF638476CAAA6C77C9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft
Manifest number: 1540
Signing time: Sat 19 Apr 2025 07:00:54 +0000
Manifest this update: Sat 19 Apr 2025 07:00:54 +0000
Manifest next update: Sun 20 Apr 2025 07:00:54 +0000
Files and hashes: 1: lCWIuR2pzKgbSeYDqYjiseq93Jg.crl (hash: x/H5+JkZlGQ1UwaUA/5qf4f1na5UOhWKuNfGqW3w1oA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:d9:a6:3e:ba:8b:df:f6:38:47:6c:aa:a6:c7:7c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=942588b91da9cca81b49e603a988e2b1eabddc98
Validity
Not Before: Apr 19 07:00:54 2025 GMT
Not After : Apr 20 07:00:54 2025 GMT
Subject: CN=bb5a20e647fb32a0526620cae6a3390ef0633010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:80:9f:ee:52:f1:c7:ac:69:bc:3d:70:63:85:
f8:f1:1d:35:c6:29:1c:ca:46:35:16:4c:a1:6d:b7:
63:e6:cf:d9:69:36:64:e7:a6:88:35:e4:98:da:e2:
db:d6:a0:a8:f3:a3:1f:89:03:21:37:aa:ba:08:4e:
fe:cf:cc:cc:e3:99:af:15:75:aa:cd:9a:9e:bb:ec:
f3:ef:db:5a:ce:b2:9c:93:ae:80:f9:cf:1a:d5:bc:
a6:9f:32:24:2e:b5:eb:77:f8:3d:1c:4c:41:8d:58:
a7:2d:4f:10:00:50:ad:a4:99:99:9c:c7:74:f4:4b:
3d:a7:cd:72:4a:ac:6b:a3:8e:0a:e3:f4:80:88:24:
b4:11:16:74:dc:33:c2:e9:f9:d2:e1:84:a3:63:56:
b1:28:13:e2:a8:f2:47:fa:e6:ec:49:f0:6a:ec:2d:
4b:46:96:48:1b:c0:d2:5b:05:b1:d5:c0:29:98:ca:
70:90:53:84:63:71:88:12:95:99:c1:10:1f:30:49:
bf:57:f0:e8:1f:fd:f8:33:7b:ac:c6:48:b0:81:57:
a4:63:68:c6:94:8d:1d:f0:fe:8c:b3:35:2f:6f:e4:
4d:44:ef:44:9e:cd:0c:a3:32:fb:4a:fb:7d:99:69:
20:9a:e0:e8:5f:11:f0:72:b1:69:89:1d:26:15:bc:
13:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:5A:20:E6:47:FB:32:A0:52:66:20:CA:E6:A3:39:0E:F0:63:30:10
X509v3 Authority Key Identifier:
keyid:94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c6:ce:5d:6f:8f:e2:6c:da:42:4e:bd:f5:c5:f4:bc:e7:ba:
6e:dc:f6:d8:b5:d1:16:c1:4b:c1:c3:0f:53:40:b3:3d:a6:ca:
72:01:f3:3a:72:d5:05:5a:dc:8d:67:80:12:86:94:e7:01:d6:
f1:c7:a2:6a:d5:90:8f:82:df:4c:d4:a0:93:34:12:f2:3d:2f:
38:b8:09:c3:6b:33:28:4b:b6:0f:f3:52:3b:43:67:57:5b:03:
02:9a:dd:64:e0:62:93:fb:0d:b7:01:f7:b2:1c:5f:a5:7e:b9:
60:fb:dd:f2:10:39:95:4a:7d:5c:03:25:42:ae:3b:78:9b:8c:
08:54:2e:53:31:5b:3f:d2:88:4e:4d:23:f2:47:0e:3f:f9:85:
6e:4b:f0:0d:ee:79:e4:84:13:78:6f:54:1a:45:4c:65:58:82:
95:e8:c5:9b:d8:29:5a:6c:f9:f8:23:e5:ad:fa:25:16:48:ea:
68:ae:d0:fd:b1:a6:70:68:c3:75:69:cc:0b:04:52:8f:ca:7d:
82:92:6c:f9:75:5f:55:68:ae:df:54:7d:2e:33:4e:87:c5:11:
bc:72:7b:66:56:43:29:8e:96:1c:c8:5c:f8:b4:49:b6:e4:9c:
8a:71:9e:a4:34:3a:26:7e:3c:c9:71:19:6c:04:ad:ab:bb:97:
73:91:6a:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZM2aY+uovf9jhHbKqmx3yeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MjU4OGI5MWRhOWNjYTgxYjQ5ZTYwM2E5ODhlMmIxZWFi
ZGRjOTgwHhcNMjUwNDE5MDcwMDU0WhcNMjUwNDIwMDcwMDU0WjAzMTEwLwYDVQQD
EyhiYjVhMjBlNjQ3ZmIzMmEwNTI2NjIwY2FlNmEzMzkwZWYwNjMzMDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YCf7lLxx6xpvD1wY4X48R01xikc
ykY1Fkyhbbdj5s/ZaTZk56aINeSY2uLb1qCo86MfiQMhN6q6CE7+z8zM45mvFXWq
zZqeu+zz79tazrKck66A+c8a1bymnzIkLrXrd/g9HExBjVinLU8QAFCtpJmZnMd0
9Es9p81ySqxro44K4/SAiCS0ERZ03DPC6fnS4YSjY1axKBPiqPJH+ubsSfBq7C1L
RpZIG8DSWwWx1cApmMpwkFOEY3GIEpWZwRAfMEm/V/DoH/34M3usxkiwgVekY2jG
lI0d8P6MszUvb+RNRO9Ens0MozL7Svt9mWkgmuDoXxHwcrFpiR0mFbwTzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLtaIOZH+zKgUmYgyuajOQ7wYzAQMB8GA1UdIwQY
MBaAFJQliLkdqcyoG0nmA6mI4rHqvdyYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbENXSXVSMnB6S2diU2VZRHFZamlzZXE5M0pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC80YmJhN2MtYTgxZi00MGUxLTg4MTQt
NjVkYWFkNjMyOTU3LzEvbENXSXVSMnB6S2diU2VZRHFZamlzZXE5M0pnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC80YmJhN2MtYTgxZi00MGUxLTg4MTQtNjVkYWFkNjMyOTU3
LzEvbENXSXVSMnB6S2diU2VZRHFZamlzZXE5M0pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASsbOXW+P
4mzaQk699cX0vOe6btz22LXRFsFLwcMPU0CzPabKcgHzOnLVBVrcjWeAEoaU5wHW
8ceiatWQj4LfTNSgkzQS8j0vOLgJw2szKEu2D/NSO0NnV1sDAprdZOBik/sNtwH3
shxfpX65YPvd8hA5lUp9XAMlQq47eJuMCFQuUzFbP9KITk0j8kcOP/mFbkvwDe55
5IQTeG9UGkVMZViClejFm9gpWmz5+CPlrfolFkjqaK7Q/bGmcGjDdWnMCwRSj8p9
gpJs+XVfVWiu31R9LjNOh8URvHJ7ZlZDKY6WHMhc+LRJtuScinGepDQ6Jn48yXEZ
bAStq7uXc5Fqxg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:18:08 2025 by rpki-client