Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft
File: ln4P5z7udZt3H7cgI8VKecCmFxc.mft (raw, json)
Hash identifier: 5rxPOUN9gnIfyVpU2H7cJAD2lsIaFMCYPJqyn2LjhiA=
Subject key identifier: D9:6D:58:3A:70:65:8E:96:5C:05:EC:CA:65:FF:7B:AB:F9:A9:E6:B6
Authority key identifier: 96:7E:0F:E7:3E:EE:75:9B:77:1F:B7:20:23:C5:4A:79:C0:A6:17:17
Certificate issuer: /CN=967e0fe73eee759b771fb72023c54a79c0a61717
Certificate serial: 0196568136B34C1F1532EC22B1336E2DAF8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ln4P5z7udZt3H7cgI8VKecCmFxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft
Manifest number: 02D7
Signing time: Mon 21 Apr 2025 04:00:30 +0000
Manifest this update: Mon 21 Apr 2025 04:00:30 +0000
Manifest next update: Tue 22 Apr 2025 04:00:30 +0000
Files and hashes: 1: CZTxdymHXJeNj0sHrlYmZG1IiYA.roa (hash: 1N/VlwYAeVpuFdfF49aCJDo/ioVhQJXBgZNT/IfXyjA=)
2: ln4P5z7udZt3H7cgI8VKecCmFxc.crl (hash: XZp7le9u1AtFyfuXL80X+jhaA+nPUH31nsKpf75spuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ln4P5z7udZt3H7cgI8VKecCmFxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:81:36:b3:4c:1f:15:32:ec:22:b1:33:6e:2d:af:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=967e0fe73eee759b771fb72023c54a79c0a61717
Validity
Not Before: Apr 21 04:00:30 2025 GMT
Not After : Apr 22 04:00:30 2025 GMT
Subject: CN=d96d583a70658e965c05ecca65ff7babf9a9e6b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8d:80:8b:d0:9f:4e:64:fb:2a:02:88:51:0b:
40:53:43:dc:37:94:b7:54:36:a9:3f:27:86:7b:b0:
b4:b8:e6:29:89:42:d1:0e:76:8d:ae:1a:9d:35:80:
20:13:a1:ca:17:57:d7:72:2c:f2:ca:97:84:4d:02:
40:90:b8:0d:c0:1e:ba:95:40:f6:14:37:cf:c0:7b:
c1:3f:ff:87:30:bf:d4:1a:bd:78:de:cf:e0:44:7a:
d3:87:ca:06:70:8b:2a:8d:ef:00:95:79:f2:8e:c0:
20:60:94:18:93:76:ec:60:7d:21:7b:ae:5b:6e:3c:
19:cc:2d:a5:5f:76:53:2c:27:c6:b2:88:08:62:0f:
06:01:50:45:1e:1a:08:7a:45:93:49:dc:cb:b2:b9:
c2:e9:a3:1d:78:af:d0:41:cd:54:d6:1e:8d:6a:94:
38:0b:41:e9:7c:fb:f8:f5:95:12:be:2f:84:66:8a:
e4:c4:54:63:24:9b:95:ba:0e:15:01:d8:3e:ee:0d:
ec:06:7e:6d:b5:c5:f4:c1:bb:d6:fe:4b:d7:09:9e:
0a:dd:b8:78:5f:e2:10:18:ef:13:22:84:66:53:48:
e3:f7:8d:d5:86:2f:6a:2a:9c:42:60:47:20:a1:d6:
38:b8:58:fb:db:b4:6a:ec:96:0a:25:a5:ca:9a:3d:
e1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6D:58:3A:70:65:8E:96:5C:05:EC:CA:65:FF:7B:AB:F9:A9:E6:B6
X509v3 Authority Key Identifier:
keyid:96:7E:0F:E7:3E:EE:75:9B:77:1F:B7:20:23:C5:4A:79:C0:A6:17:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ln4P5z7udZt3H7cgI8VKecCmFxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/94b7ba-d12e-4d92-8f31-7ae93fd2ad04/1/ln4P5z7udZt3H7cgI8VKecCmFxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:0e:43:32:ff:8b:84:fe:cf:f3:be:46:b7:49:ec:1d:c9:fb:
78:e1:05:07:f9:44:4c:62:97:92:f3:1e:b7:52:61:e2:6f:88:
03:f5:60:77:9c:18:3d:0d:d7:b4:1b:b1:15:05:f8:93:d1:b9:
b5:7b:ce:62:d0:4e:82:64:ef:32:26:11:1e:77:70:14:27:4e:
10:8c:3b:cf:2a:6c:ad:4a:5e:20:6f:4c:8b:d8:3c:72:0f:a3:
0c:3e:7d:f9:51:d7:c8:64:8c:b3:31:56:02:8c:1e:48:ff:32:
86:d7:d2:e7:36:d7:6b:f1:d9:39:a7:2c:42:f1:0a:a4:db:5e:
06:33:2f:ce:6a:0c:ab:7d:6e:ad:2d:93:bd:f7:48:e0:71:87:
cb:91:00:57:2c:f2:bf:d0:22:16:37:2e:30:78:ae:4f:1f:f7:
84:cd:df:9d:f2:2e:39:d4:ad:d9:94:79:29:c2:06:c1:cf:86:
e2:fc:3a:ff:10:52:7d:e6:b7:53:16:94:dc:12:80:9d:42:60:
d2:a9:c5:71:eb:bb:b8:07:fa:02:d5:59:12:2d:ee:91:2d:48:
52:44:2c:c0:73:6a:6c:1c:3d:03:4a:dc:c0:62:0f:ef:cd:cb:
b0:75:05:b9:a2:f2:34:f7:5f:e6:f9:ff:49:5f:3c:f4:58:56:
c5:6a:33:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZWgTazTB8VMuwisTNuLa+LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2N2UwZmU3M2VlZTc1OWI3NzFmYjcyMDIzYzU0YTc5YzBh
NjE3MTcwHhcNMjUwNDIxMDQwMDMwWhcNMjUwNDIyMDQwMDMwWjAzMTEwLwYDVQQD
EyhkOTZkNTgzYTcwNjU4ZTk2NWMwNWVjY2E2NWZmN2JhYmY5YTllNmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwI2Ai9CfTmT7KgKIUQtAU0PcN5S3
VDapPyeGe7C0uOYpiULRDnaNrhqdNYAgE6HKF1fXcizyypeETQJAkLgNwB66lUD2
FDfPwHvBP/+HML/UGr143s/gRHrTh8oGcIsqje8AlXnyjsAgYJQYk3bsYH0he65b
bjwZzC2lX3ZTLCfGsogIYg8GAVBFHhoIekWTSdzLsrnC6aMdeK/QQc1U1h6NapQ4
C0HpfPv49ZUSvi+EZorkxFRjJJuVug4VAdg+7g3sBn5ttcX0wbvW/kvXCZ4K3bh4
X+IQGO8TIoRmU0jj943Vhi9qKpxCYEcgodY4uFj727Rq7JYKJaXKmj3hDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNltWDpwZY6WXAXsymX/e6v5qea2MB8GA1UdIwQY
MBaAFJZ+D+c+7nWbdx+3ICPFSnnAphcXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbG40UDV6N3VkWnQzSDdjZ0k4VktlY0NtRnhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC85NGI3YmEtZDEyZS00ZDkyLThmMzEt
N2FlOTNmZDJhZDA0LzEvbG40UDV6N3VkWnQzSDdjZ0k4VktlY0NtRnhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC85NGI3YmEtZDEyZS00ZDkyLThmMzEtN2FlOTNmZDJhZDA0
LzEvbG40UDV6N3VkWnQzSDdjZ0k4VktlY0NtRnhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPg5DMv+L
hP7P875Gt0nsHcn7eOEFB/lETGKXkvMet1Jh4m+IA/Vgd5wYPQ3XtBuxFQX4k9G5
tXvOYtBOgmTvMiYRHndwFCdOEIw7zypsrUpeIG9Mi9g8cg+jDD59+VHXyGSMszFW
AoweSP8yhtfS5zbXa/HZOacsQvEKpNteBjMvzmoMq31urS2TvfdI4HGHy5EAVyzy
v9AiFjcuMHiuTx/3hM3fnfIuOdSt2ZR5KcIGwc+G4vw6/xBSfea3UxaU3BKAnUJg
0qnFceu7uAf6AtVZEi3ukS1IUkQswHNqbBw9A0rcwGIP783LsHUFuaLyNPdf5vn/
SV889FhWxWozfw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:47:20 2025 by rpki-client