Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft
File: lV2-u8EHC5nk-zchF98mIAOGA-k.mft (raw, json)
Hash identifier: y6+I60pZMbL1TUQQMiC+NN/qmftFHKbQN7kMBFu/4EI=
Subject key identifier: 06:84:84:2B:9F:F2:88:08:AE:84:6D:D8:9E:61:7B:00:21:7D:88:13
Authority key identifier: 95:5D:BE:BB:C1:07:0B:99:E4:FB:37:21:17:DF:26:20:03:86:03:E9
Certificate issuer: /CN=955dbebbc1070b99e4fb372117df2620038603e9
Certificate serial: 01964DB4E15D2F386118877A723D9742149D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lV2-u8EHC5nk-zchF98mIAOGA-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft
Manifest number: 14FC
Signing time: Sat 19 Apr 2025 11:00:21 +0000
Manifest this update: Sat 19 Apr 2025 11:00:21 +0000
Manifest next update: Sun 20 Apr 2025 11:00:21 +0000
Files and hashes: 1: 6AoJ7puhHnYzj6v7_JPCzu5FfUo.roa (hash: 1YbtOUbaL4s5vaWRStnbRN7vJ3y+tKcYzUFA1VaqV5A=)
2: lV2-u8EHC5nk-zchF98mIAOGA-k.crl (hash: VFnbLM5aegPZcSIoEeB2pF/lvvEbzKwtfAGe3ArGnv8=)
3: lmbwAZhJDvn3ZO9Nd9ocA69o5Tk.roa (hash: XALuM5FnZ30/lTx91fKvaxUPWaZ9C/OPZUWSocftb+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/lV2-u8EHC5nk-zchF98mIAOGA-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 11:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:b4:e1:5d:2f:38:61:18:87:7a:72:3d:97:42:14:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=955dbebbc1070b99e4fb372117df2620038603e9
Validity
Not Before: Apr 19 11:00:21 2025 GMT
Not After : Apr 20 11:00:21 2025 GMT
Subject: CN=0684842b9ff28808ae846dd89e617b00217d8813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2f:9c:df:2d:60:81:ae:b7:c4:0a:4d:c3:e4:
1f:2a:0d:cc:e1:92:ea:82:b2:7b:aa:2d:0a:1b:2b:
eb:48:eb:a8:44:92:e0:6a:a6:b6:5e:02:8c:71:e9:
0c:7c:2a:e7:82:eb:40:da:55:88:e9:f7:f6:8b:b5:
52:f4:e5:13:ac:a8:72:44:e4:e8:aa:3a:bf:31:57:
69:c9:b5:dd:b4:e5:e4:48:d1:a3:c0:0a:b7:e3:89:
55:50:68:ed:12:24:30:d1:1a:ca:bb:e1:4e:9f:94:
74:6f:ec:05:fa:bc:94:e4:11:69:94:97:f4:e9:87:
b7:ce:aa:64:27:c0:4e:ae:1d:f1:eb:38:cb:78:a6:
09:6b:93:07:f5:dc:86:16:bc:fd:e1:b1:56:e0:3e:
12:4e:1d:43:06:01:89:3c:d2:03:a7:ec:25:ad:7b:
df:17:84:48:0d:4b:95:b3:9b:f0:40:7c:0c:5e:55:
0e:09:56:5a:8e:59:8c:2d:e9:d2:8d:8b:30:13:3b:
d9:b0:65:f3:92:b7:00:b1:c7:96:db:df:00:98:f3:
7b:cb:21:72:96:ee:e2:a2:58:4e:ac:d3:b2:0f:8c:
bd:e8:d5:93:b3:e3:98:38:8a:ad:f8:9e:14:a3:01:
a4:d9:1f:c2:b7:04:be:bf:0f:49:5c:f7:79:2f:47:
a2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:84:84:2B:9F:F2:88:08:AE:84:6D:D8:9E:61:7B:00:21:7D:88:13
X509v3 Authority Key Identifier:
keyid:95:5D:BE:BB:C1:07:0B:99:E4:FB:37:21:17:DF:26:20:03:86:03:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lV2-u8EHC5nk-zchF98mIAOGA-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ddac11-2e63-4aae-940f-023203947d9d/1/lV2-u8EHC5nk-zchF98mIAOGA-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:65:ab:1e:a3:b4:ca:d3:fb:7f:cf:f1:35:79:17:b6:01:f8:
11:46:20:74:11:3e:e3:a1:c8:a9:95:13:d6:41:90:5c:99:7d:
98:22:50:94:37:ee:f7:7e:4f:10:c9:c4:79:ad:60:c7:52:9e:
52:49:d2:27:03:22:00:c8:db:b7:8a:b3:84:b5:e4:e7:04:d0:
b7:1d:3f:99:07:60:a5:b4:75:13:80:0a:38:71:87:c2:b8:85:
31:0c:9b:8e:6a:8d:1c:7a:ad:0e:47:dc:fc:92:62:88:9c:f8:
74:bb:cf:c8:2a:cd:d2:d5:f5:d0:e6:74:d3:6e:58:dc:e1:99:
99:6e:80:5f:de:76:22:f7:34:9a:85:53:f0:84:52:62:ed:85:
b4:f8:87:a1:fe:6d:f7:5a:ff:c8:27:21:24:2a:a1:38:2d:9b:
c3:91:60:bf:02:cb:ba:b4:3d:7b:ef:a4:42:6c:22:f7:26:4c:
4f:71:ed:4f:96:55:60:7f:c9:5e:0e:fc:ac:2b:44:c8:13:0b:
bc:d8:0f:7d:fd:a7:d7:b5:ea:dc:7a:ec:47:b2:d1:f2:02:7e:
0a:5a:19:8d:2e:bc:7f:2f:40:68:d5:51:1e:7e:ad:f5:78:a1:
2e:ac:5c:32:9a:e7:c8:a4:7f:5f:08:53:fd:5c:49:19:46:32:
73:12:f1:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZNtOFdLzhhGId6cj2XQhSdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NWRiZWJiYzEwNzBiOTllNGZiMzcyMTE3ZGYyNjIwMDM4
NjAzZTkwHhcNMjUwNDE5MTEwMDIxWhcNMjUwNDIwMTEwMDIxWjAzMTEwLwYDVQQD
EygwNjg0ODQyYjlmZjI4ODA4YWU4NDZkZDg5ZTYxN2IwMDIxN2Q4ODEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmi+c3y1gga63xApNw+QfKg3M4ZLq
grJ7qi0KGyvrSOuoRJLgaqa2XgKMcekMfCrngutA2lWI6ff2i7VS9OUTrKhyROTo
qjq/MVdpybXdtOXkSNGjwAq344lVUGjtEiQw0RrKu+FOn5R0b+wF+ryU5BFplJf0
6Ye3zqpkJ8BOrh3x6zjLeKYJa5MH9dyGFrz94bFW4D4STh1DBgGJPNIDp+wlrXvf
F4RIDUuVs5vwQHwMXlUOCVZajlmMLenSjYswEzvZsGXzkrcAsceW298AmPN7yyFy
lu7iolhOrNOyD4y96NWTs+OYOIqt+J4UowGk2R/CtwS+vw9JXPd5L0einQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAaEhCuf8ogIroRt2J5hewAhfYgTMB8GA1UdIwQY
MBaAFJVdvrvBBwuZ5Ps3IRffJiADhgPpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFYyLXU4RUhDNW5rLXpjaEY5OG1JQU9HQS1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9kZGFjMTEtMmU2My00YWFlLTk0MGYt
MDIzMjAzOTQ3ZDlkLzEvbFYyLXU4RUhDNW5rLXpjaEY5OG1JQU9HQS1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9kZGFjMTEtMmU2My00YWFlLTk0MGYtMDIzMjAzOTQ3ZDlk
LzEvbFYyLXU4RUhDNW5rLXpjaEY5OG1JQU9HQS1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT2WrHqO0
ytP7f8/xNXkXtgH4EUYgdBE+46HIqZUT1kGQXJl9mCJQlDfu935PEMnEea1gx1Ke
UknSJwMiAMjbt4qzhLXk5wTQtx0/mQdgpbR1E4AKOHGHwriFMQybjmqNHHqtDkfc
/JJiiJz4dLvPyCrN0tX10OZ0025Y3OGZmW6AX952Ivc0moVT8IRSYu2FtPiHof5t
91r/yCchJCqhOC2bw5FgvwLLurQ9e++kQmwi9yZMT3HtT5ZVYH/JXg78rCtEyBML
vNgPff2n17Xq3HrsR7LR8gJ+CloZjS68fy9AaNVRHn6t9XihLqxcMprnyKR/XwhT
/VxJGUYycxLxWA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 19:03:17 2025 by rpki-client