Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft
File: lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft (raw, json)
Hash identifier: k2CVQLmCtwlNlfph4jKRQYlIVnLW/tDXuGnfuv9E3jA=
Subject key identifier: 88:D4:DB:E4:7B:84:91:A3:A9:41:B1:56:DC:68:40:23:83:38:12:06
Authority key identifier: 96:C0:35:BC:8F:BF:67:63:C8:88:DB:34:4D:2A:B4:AE:62:94:66:65
Certificate issuer: /CN=96c035bc8fbf6763c888db344d2ab4ae62946665
Certificate serial: 0194C4D169291E0E7F402B40518A6A6A15A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft
Manifest number: 19
Signing time: Sun 02 Feb 2025 04:00:45 +0000
Manifest this update: Sun 02 Feb 2025 04:00:45 +0000
Manifest next update: Mon 03 Feb 2025 04:00:45 +0000
Files and hashes: 1: l8QB-PHUK_LEuNNWFKARbwIaMRU.roa (hash: W02KjqYvETrR9gAMAORKt4swyV9tqxzh/G6YzbTzQpY=)
2: lsA1vI-_Z2PIiNs0TSq0rmKUZmU.crl (hash: lKbfj83cDmwtdvQieVypXPSdShTyPgDq4MOI775Dev8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:69:29:1e:0e:7f:40:2b:40:51:8a:6a:6a:15:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96c035bc8fbf6763c888db344d2ab4ae62946665
Validity
Not Before: Feb 2 04:00:45 2025 GMT
Not After : Feb 3 04:00:45 2025 GMT
Subject: CN=88d4dbe47b8491a3a941b156dc68402383381206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d4:4e:e0:0a:63:7a:a6:54:c0:d9:61:2e:ea:
86:0d:64:e9:7f:45:29:28:d2:5c:19:55:d2:05:c4:
49:19:e5:76:e1:d9:49:61:0a:38:36:4f:a3:bd:3e:
a0:75:36:16:60:a6:ad:7e:0c:d0:91:81:b6:f5:7e:
f9:62:e7:36:d3:74:38:b6:ef:81:87:b5:66:18:0c:
3a:22:bb:ca:92:04:dd:26:bf:71:53:3e:ee:84:6a:
f5:a1:a5:e5:81:e8:cf:40:2b:2f:8f:83:e4:c7:68:
93:0b:00:e8:a2:dd:43:d5:f4:b4:37:89:ef:19:1f:
84:99:25:2c:3e:b6:e6:26:04:e7:87:2c:37:e7:ee:
dc:94:17:bb:3b:70:af:e0:cd:85:1c:b2:3a:64:ec:
30:ea:b1:dd:c9:e0:c1:69:05:59:76:f4:a2:6f:9d:
50:25:eb:8a:f5:11:da:e6:fe:df:78:69:54:1b:1a:
35:f4:94:a5:1d:0c:37:93:dd:4f:80:4f:e7:34:f4:
4a:5c:55:5b:45:a9:cf:aa:0a:fe:fa:6b:c4:db:36:
3c:90:26:0e:58:1a:ed:14:df:72:a4:21:44:5e:20:
a9:8c:3d:9b:17:f1:30:fd:a2:5b:a0:46:5e:64:65:
be:e5:c2:92:da:aa:10:31:c5:93:21:7a:86:67:fd:
d0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D4:DB:E4:7B:84:91:A3:A9:41:B1:56:DC:68:40:23:83:38:12:06
X509v3 Authority Key Identifier:
keyid:96:C0:35:BC:8F:BF:67:63:C8:88:DB:34:4D:2A:B4:AE:62:94:66:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:81:ca:41:14:3b:27:9b:4b:e6:1f:4f:1b:1d:f5:9b:ba:88:
e4:cc:6c:5b:72:e6:34:48:30:75:d6:88:6b:7f:93:4e:8b:d6:
4c:0d:fa:4e:d3:cc:64:e4:a8:ed:2d:4d:75:7f:1d:07:c6:d9:
56:a4:69:ce:f9:aa:ba:9a:34:bc:62:8f:2c:ff:ad:9a:bc:9c:
9e:fa:e4:e2:ab:b8:da:ed:33:0b:27:f8:1f:b5:48:53:c8:7e:
99:61:70:11:51:3a:e0:59:93:b1:4b:66:2a:8e:0c:dd:a3:3e:
97:7f:4c:42:16:2c:af:db:41:22:9d:ce:67:28:4d:e6:23:4e:
f3:6f:46:71:13:c8:6b:bb:7f:f5:55:00:a7:f1:cd:ac:75:82:
18:a6:a1:2f:7c:67:c3:e1:96:37:ff:24:17:80:f4:29:4f:5d:
fa:c7:0c:a2:c1:e2:05:03:0e:7d:2b:86:3a:97:63:3a:83:56:
50:cd:d3:5d:fe:cf:10:9d:33:81:ab:e3:29:d2:af:5e:32:75:
d3:b5:40:b4:87:5b:e5:ea:01:de:f2:fc:49:b2:ea:92:95:a6:
0c:f9:58:35:7f:70:46:3d:68:f0:83:fd:fa:b9:77:3b:83:f3:
1f:59:43:90:ee:d7:34:36:7e:77:0f:f3:6f:b4:c5:f9:1c:b5:
9a:64:e1:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTE0WkpHg5/QCtAUYpqahWkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2YzAzNWJjOGZiZjY3NjNjODg4ZGIzNDRkMmFiNGFlNjI5
NDY2NjUwHhcNMjUwMjAyMDQwMDQ1WhcNMjUwMjAzMDQwMDQ1WjAzMTEwLwYDVQQD
Eyg4OGQ0ZGJlNDdiODQ5MWEzYTk0MWIxNTZkYzY4NDAyMzgzMzgxMjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNRO4ApjeqZUwNlhLuqGDWTpf0Up
KNJcGVXSBcRJGeV24dlJYQo4Nk+jvT6gdTYWYKatfgzQkYG29X75Yuc203Q4tu+B
h7VmGAw6IrvKkgTdJr9xUz7uhGr1oaXlgejPQCsvj4Pkx2iTCwDoot1D1fS0N4nv
GR+EmSUsPrbmJgTnhyw35+7clBe7O3Cv4M2FHLI6ZOww6rHdyeDBaQVZdvSib51Q
JeuK9RHa5v7feGlUGxo19JSlHQw3k91PgE/nNPRKXFVbRanPqgr++mvE2zY8kCYO
WBrtFN9ypCFEXiCpjD2bF/Ew/aJboEZeZGW+5cKS2qoQMcWTIXqGZ/3QKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIjU2+R7hJGjqUGxVtxoQCODOBIGMB8GA1UdIwQY
MBaAFJbANbyPv2djyIjbNE0qtK5ilGZlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHNBMXZJLV9aMlBJaU5zMFRTcTBybUtVWm1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC82MDBiMzgtYmUzZC00YTM1LTgxODAt
ZDYzMDdlMmRhOWY3LzEvbHNBMXZJLV9aMlBJaU5zMFRTcTBybUtVWm1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC82MDBiMzgtYmUzZC00YTM1LTgxODAtZDYzMDdlMmRhOWY3
LzEvbHNBMXZJLV9aMlBJaU5zMFRTcTBybUtVWm1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg4HKQRQ7
J5tL5h9PGx31m7qI5MxsW3LmNEgwddaIa3+TTovWTA36TtPMZOSo7S1NdX8dB8bZ
VqRpzvmqupo0vGKPLP+tmrycnvrk4qu42u0zCyf4H7VIU8h+mWFwEVE64FmTsUtm
Ko4M3aM+l39MQhYsr9tBIp3OZyhN5iNO829GcRPIa7t/9VUAp/HNrHWCGKahL3xn
w+GWN/8kF4D0KU9d+scMosHiBQMOfSuGOpdjOoNWUM3TXf7PEJ0zgavjKdKvXjJ1
07VAtIdb5eoB3vL8SbLqkpWmDPlYNX9wRj1o8IP9+rl3O4PzH1lDkO7XNDZ+dw/z
b7TF+Ry1mmThHw==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:05:39 2025 by rpki-client