Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
File: LdWWwep-y7G-F3f8DTjtBspA6r4.mft (raw, json)
Hash identifier: PRRyG8rUoT7B0bksPIdXO8mEooelOCRFV6gDsm9YLhw=
Subject key identifier: F9:16:E1:AA:FD:90:51:32:F4:20:DF:93:58:51:8D:9A:49:6E:FF:FD
Authority key identifier: 2D:D5:96:C1:EA:7E:CB:B1:BE:17:77:FC:0D:38:ED:06:CA:40:EA:BE
Certificate issuer: /CN=2dd596c1ea7ecbb1be1777fc0d38ed06ca40eabe
Certificate serial: 019645C5149C75E0D632083B25E0F212A152
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
Manifest number: 0EB4
Signing time: Thu 17 Apr 2025 22:01:05 +0000
Manifest this update: Thu 17 Apr 2025 22:01:05 +0000
Manifest next update: Fri 18 Apr 2025 22:01:05 +0000
Files and hashes: 1: LdWWwep-y7G-F3f8DTjtBspA6r4.crl (hash: JE8RYsep7dGV0pbi8jfAXIBGl8XGXJLQGq8T1WCEVsA=)
2: OMnZiNHbw7E-f80Ik0oReEwyFs8.roa (hash: J4ZRlc9ZTuyWB+1e21hJBQgTzJ68vGeASJd7wVF5XJs=)
3: lPP1CTZE_I869rs5FvdeSS4FA3k.roa (hash: qLXwzivmvmSSh7sbcIlPZozy/8eLL4zZEt9Q9nGGudc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:c5:14:9c:75:e0:d6:32:08:3b:25:e0:f2:12:a1:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dd596c1ea7ecbb1be1777fc0d38ed06ca40eabe
Validity
Not Before: Apr 17 22:01:05 2025 GMT
Not After : Apr 18 22:01:05 2025 GMT
Subject: CN=f916e1aafd905132f420df9358518d9a496efffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:27:28:c6:bc:29:02:e6:3a:76:50:e4:f3:f6:
7d:8c:5d:f2:86:8d:95:18:f4:b5:8a:4b:71:5a:27:
c1:08:ca:4a:60:ae:96:ce:ad:49:65:47:7b:b1:20:
0f:b4:a3:08:c6:19:7c:05:3d:ec:80:41:45:b5:ad:
90:74:77:2d:29:aa:9a:17:47:f8:33:5c:49:e5:a9:
4f:95:10:84:e0:3a:2e:cb:73:ef:8b:ec:cb:9a:84:
e0:04:e8:4f:ab:f5:ea:01:e2:cf:e7:18:10:b1:6d:
9c:90:10:77:d4:48:9c:72:33:c4:23:ae:97:9d:05:
98:f3:8e:9d:f0:47:3f:f4:87:7d:e5:17:9e:af:dc:
40:e4:ad:be:fd:c8:77:58:33:6a:9b:cf:49:6d:b1:
c0:bd:8c:a8:56:b6:1d:8d:0c:e6:1f:7b:5f:e0:ff:
1a:d0:08:62:09:de:30:c1:da:dd:5e:05:0b:b9:61:
be:27:57:fd:35:bf:c9:8e:27:bc:30:20:ae:af:12:
d0:e9:7a:67:58:78:72:6f:4a:d1:e8:f8:37:16:29:
fd:35:c0:15:d4:24:35:fc:78:fd:bb:45:f0:21:b2:
d8:16:fc:0c:14:85:ba:03:5c:65:c3:7d:fb:e8:1d:
c3:66:d1:65:31:b8:73:75:7d:1c:22:e1:13:e7:29:
24:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:16:E1:AA:FD:90:51:32:F4:20:DF:93:58:51:8D:9A:49:6E:FF:FD
X509v3 Authority Key Identifier:
keyid:2D:D5:96:C1:EA:7E:CB:B1:BE:17:77:FC:0D:38:ED:06:CA:40:EA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:05:cb:1d:26:e9:04:ec:88:76:33:47:fe:82:e7:4a:b5:a8:
ee:4f:de:24:46:10:6a:23:4f:4f:79:42:50:01:79:e7:f0:2b:
48:c3:3f:77:25:fc:04:7d:13:f7:0c:01:34:36:e3:df:78:5f:
59:b3:eb:f7:bd:50:09:dd:ac:a5:6c:db:50:a2:95:71:dd:a1:
08:2a:f5:e9:7d:59:ce:88:14:12:73:67:71:c2:65:16:5e:3d:
1d:f2:a1:95:9a:bc:e7:74:ee:9a:68:15:2f:1d:ea:34:45:aa:
5f:1c:3e:09:1d:12:ee:fb:06:58:63:7e:9b:ff:d3:5e:2f:f6:
53:08:a8:2b:82:3e:bd:eb:a4:87:11:04:99:13:9e:ce:48:4e:
4e:41:ca:fa:a3:bc:67:3a:91:60:0c:91:72:6f:f1:dc:8e:0b:
39:11:e9:81:96:75:fd:62:2e:d8:53:d8:a7:aa:19:72:ea:6f:
76:d7:8f:15:75:6b:e0:30:80:fd:50:0e:fa:86:8b:1e:bf:91:
c1:4d:0d:80:53:d4:78:04:dd:76:82:84:83:e5:31:34:6a:66:
ab:a8:6a:1a:e2:c0:bc:d9:40:f0:9c:67:0b:3c:ba:59:17:cb:
65:98:a9:f9:6b:6e:5e:2b:fd:20:0a:90:61:4a:bd:36:13:51:
c4:e9:a9:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZFxRScdeDWMgg7JeDyEqFSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkZDU5NmMxZWE3ZWNiYjFiZTE3NzdmYzBkMzhlZDA2Y2E0
MGVhYmUwHhcNMjUwNDE3MjIwMTA1WhcNMjUwNDE4MjIwMTA1WjAzMTEwLwYDVQQD
EyhmOTE2ZTFhYWZkOTA1MTMyZjQyMGRmOTM1ODUxOGQ5YTQ5NmVmZmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmicoxrwpAuY6dlDk8/Z9jF3yho2V
GPS1iktxWifBCMpKYK6Wzq1JZUd7sSAPtKMIxhl8BT3sgEFFta2QdHctKaqaF0f4
M1xJ5alPlRCE4Douy3Pvi+zLmoTgBOhPq/XqAeLP5xgQsW2ckBB31EiccjPEI66X
nQWY846d8Ec/9Id95Reer9xA5K2+/ch3WDNqm89JbbHAvYyoVrYdjQzmH3tf4P8a
0AhiCd4wwdrdXgULuWG+J1f9Nb/Jjie8MCCurxLQ6XpnWHhyb0rR6Pg3Fin9NcAV
1CQ1/Hj9u0XwIbLYFvwMFIW6A1xlw3376B3DZtFlMbhzdX0cIuET5ykk2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPkW4ar9kFEy9CDfk1hRjZpJbv/9MB8GA1UdIwQY
MBaAFC3VlsHqfsuxvhd3/A047QbKQOq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGRXV3dlcC15N0ctRjNmOERUanRCc3BBNnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8zNjNlY2MtMmFhMS00MjgxLTk1YjEt
OGIwZmMwNzg1OGQ2LzEvTGRXV3dlcC15N0ctRjNmOERUanRCc3BBNnI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8zNjNlY2MtMmFhMS00MjgxLTk1YjEtOGIwZmMwNzg1OGQ2
LzEvTGRXV3dlcC15N0ctRjNmOERUanRCc3BBNnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlAXLHSbp
BOyIdjNH/oLnSrWo7k/eJEYQaiNPT3lCUAF55/ArSMM/dyX8BH0T9wwBNDbj33hf
WbPr971QCd2spWzbUKKVcd2hCCr16X1ZzogUEnNnccJlFl49HfKhlZq853TummgV
Lx3qNEWqXxw+CR0S7vsGWGN+m//TXi/2UwioK4I+veukhxEEmROezkhOTkHK+qO8
ZzqRYAyRcm/x3I4LORHpgZZ1/WIu2FPYp6oZcupvdtePFXVr4DCA/VAO+oaLHr+R
wU0NgFPUeATddoKEg+UxNGpmq6hqGuLAvNlA8JxnCzy6WRfLZZip+WtuXiv9IAqQ
YUq9NhNRxOmp8w==
-----END CERTIFICATE-----
Generated at Fri Apr 18 00:40:22 2025 by rpki-client