Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft
File: lqSbOF03Of3SQ34K798iUc1dKlE.mft (raw, json)
Hash identifier: nG0rtv5+eOAKwngigdO3V7UfLljFedVt6+4hZ3RViVw=
Subject key identifier: A3:D6:55:E4:B8:A7:0F:E7:64:4A:A3:E3:D6:D2:96:3B:42:6D:6E:31
Authority key identifier: 96:A4:9B:38:5D:37:39:FD:D2:43:7E:0A:EF:DF:22:51:CD:5D:2A:51
Certificate issuer: /CN=96a49b385d3739fdd2437e0aefdf2251cd5d2a51
Certificate serial: 019578D8C8436B18F5B32A554614A597C0FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lqSbOF03Of3SQ34K798iUc1dKlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft
Manifest number: CE
Signing time: Sun 09 Mar 2025 03:00:27 +0000
Manifest this update: Sun 09 Mar 2025 03:00:27 +0000
Manifest next update: Mon 10 Mar 2025 03:00:27 +0000
Files and hashes: 1: lqSbOF03Of3SQ34K798iUc1dKlE.crl (hash: dCnVQrf9930hVtEPEX00XdZjseqHmsaWVHExPwpT9QU=)
2: vubvLlQ2em0JM0_rlFMoFCj2bxQ.roa (hash: zIY6VqnaaG5WqxBxNCQhDT3KHDCVyaR7TcUQuJEUhUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lqSbOF03Of3SQ34K798iUc1dKlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 03:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:78:d8:c8:43:6b:18:f5:b3:2a:55:46:14:a5:97:c0:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96a49b385d3739fdd2437e0aefdf2251cd5d2a51
Validity
Not Before: Mar 9 03:00:27 2025 GMT
Not After : Mar 10 03:00:27 2025 GMT
Subject: CN=a3d655e4b8a70fe7644aa3e3d6d2963b426d6e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e6:e2:b8:aa:0d:b9:85:34:45:69:94:ce:05:
1a:f1:a7:13:9d:43:a5:d3:4f:c8:04:f7:be:6c:56:
53:6c:32:ad:b8:1b:e2:2a:5e:3e:78:3d:9e:27:02:
e9:b7:9d:42:ae:27:77:ce:60:e8:7a:1c:c3:ff:c3:
89:d9:91:54:1a:f0:af:30:0f:cb:c6:2e:51:0f:f3:
6a:a4:df:d8:82:39:85:9a:26:53:d6:3e:77:f6:78:
78:45:39:37:35:d2:b5:31:c8:21:b1:b1:ba:19:b3:
31:23:62:6d:05:ef:ae:44:65:9d:f1:27:cf:da:21:
86:d5:40:ac:1c:47:9a:92:ea:3e:49:9d:05:7b:24:
cf:bf:7c:42:e1:d9:9d:a9:d7:b8:da:56:35:32:c3:
f7:db:a8:e5:f4:00:92:8d:45:e8:b6:19:e9:9e:a2:
25:fa:14:8f:5b:ef:8e:d1:cd:11:d8:05:72:bd:51:
0f:2b:ee:1e:4d:c5:c8:50:f5:55:ff:55:c5:07:df:
01:88:40:22:78:e3:4a:55:d9:69:7a:ac:6b:76:34:
d6:0f:63:cc:6d:b9:c6:e9:00:83:42:9f:92:4a:d1:
3a:63:44:5d:e5:7b:67:92:37:99:26:1e:dc:eb:c1:
03:a2:2b:a4:43:2d:a0:4b:b4:f2:95:97:b5:2d:a0:
2e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D6:55:E4:B8:A7:0F:E7:64:4A:A3:E3:D6:D2:96:3B:42:6D:6E:31
X509v3 Authority Key Identifier:
keyid:96:A4:9B:38:5D:37:39:FD:D2:43:7E:0A:EF:DF:22:51:CD:5D:2A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqSbOF03Of3SQ34K798iUc1dKlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/95f143-e9cd-4447-abea-fb4eaa5262f7/1/lqSbOF03Of3SQ34K798iUc1dKlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:dc:1e:de:ad:a7:48:2e:4e:23:d2:a4:7f:de:8e:c5:3c:f1:
f5:d1:87:8a:24:1e:8f:85:f0:54:18:ad:e0:ab:a5:86:79:9c:
df:b7:6c:d3:f6:51:1f:0b:0e:14:dc:9c:0e:47:65:9e:e7:e9:
4c:74:c2:48:3f:87:54:01:55:25:4c:b2:6f:4f:7e:af:bb:0d:
68:ce:c1:5a:8b:78:ed:58:b4:ce:a5:e9:0b:67:5b:39:0f:9b:
8b:13:85:27:a7:85:e2:db:64:c5:b9:3d:df:39:42:40:fe:48:
18:87:0e:2d:ef:2c:03:ea:2f:ab:b6:07:0b:b1:50:ed:fb:f7:
da:bb:df:3f:8a:02:5e:58:a9:74:63:78:eb:5c:07:b5:f1:46:
0d:31:8f:68:f6:7a:3e:f3:7c:3a:7e:c7:6d:9a:2c:97:b8:5d:
84:e0:31:7c:80:02:58:32:dd:df:eb:c9:62:17:08:1b:c8:4f:
d3:1b:75:8b:83:1c:b8:cd:54:ff:46:bb:95:8b:32:fd:28:06:
0c:91:a7:c9:d6:18:4d:ac:4c:62:99:f4:7e:6d:a7:78:ce:ec:
3f:4f:58:29:9c:e6:08:7f:0a:14:32:33:51:50:b7:0e:8c:62:
f8:09:bc:a8:e9:95:79:8d:c4:e9:1b:09:38:af:ce:3c:8d:97:
45:55:79:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZV42MhDaxj1sypVRhSll8D/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2YTQ5YjM4NWQzNzM5ZmRkMjQzN2UwYWVmZGYyMjUxY2Q1
ZDJhNTEwHhcNMjUwMzA5MDMwMDI3WhcNMjUwMzEwMDMwMDI3WjAzMTEwLwYDVQQD
EyhhM2Q2NTVlNGI4YTcwZmU3NjQ0YWEzZTNkNmQyOTYzYjQyNmQ2ZTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnebiuKoNuYU0RWmUzgUa8acTnUOl
00/IBPe+bFZTbDKtuBviKl4+eD2eJwLpt51Crid3zmDoehzD/8OJ2ZFUGvCvMA/L
xi5RD/NqpN/YgjmFmiZT1j539nh4RTk3NdK1McghsbG6GbMxI2JtBe+uRGWd8SfP
2iGG1UCsHEeakuo+SZ0FeyTPv3xC4dmdqde42lY1MsP326jl9ACSjUXothnpnqIl
+hSPW++O0c0R2AVyvVEPK+4eTcXIUPVV/1XFB98BiEAieONKVdlpeqxrdjTWD2PM
bbnG6QCDQp+SStE6Y0Rd5XtnkjeZJh7c68EDoiukQy2gS7TylZe1LaAuwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPWVeS4pw/nZEqj49bSljtCbW4xMB8GA1UdIwQY
MBaAFJakmzhdNzn90kN+Cu/fIlHNXSpRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHFTYk9GMDNPZjNTUTM0Szc5OGlVYzFkS2xFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC85NWYxNDMtZTljZC00NDQ3LWFiZWEt
ZmI0ZWFhNTI2MmY3LzEvbHFTYk9GMDNPZjNTUTM0Szc5OGlVYzFkS2xFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC85NWYxNDMtZTljZC00NDQ3LWFiZWEtZmI0ZWFhNTI2MmY3
LzEvbHFTYk9GMDNPZjNTUTM0Szc5OGlVYzFkS2xFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAItwe3q2n
SC5OI9Kkf96OxTzx9dGHiiQej4XwVBit4Kulhnmc37ds0/ZRHwsOFNycDkdlnufp
THTCSD+HVAFVJUyyb09+r7sNaM7BWot47Vi0zqXpC2dbOQ+bixOFJ6eF4ttkxbk9
3zlCQP5IGIcOLe8sA+ovq7YHC7FQ7fv32rvfP4oCXlipdGN461wHtfFGDTGPaPZ6
PvN8On7HbZosl7hdhOAxfIACWDLd3+vJYhcIG8hP0xt1i4McuM1U/0a7lYsy/SgG
DJGnydYYTaxMYpn0fm2neM7sP09YKZzmCH8KFDIzUVC3Doxi+Am8qOmVeY3E6RsJ
OK/OPI2XRVV57Q==
-----END CERTIFICATE-----
Generated at Sun Mar 9 10:19:27 2025 by rpki-client