Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
File: lxru6oeY927JpDTnVjfs2IEJLsI.mft (raw, json)
Hash identifier: 45F3r4JsLcjUkldFil7iUWwko0/lLOGt+30FBqWvfoc=
Subject key identifier: F3:95:EF:E5:C2:6A:D3:D9:C2:30:95:17:7A:A9:2F:60:DD:DF:DB:48
Authority key identifier: 97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
Certificate issuer: /CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Certificate serial: 019629726B42051110AE5E903A6303692390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
Manifest number: 14EA
Signing time: Sat 12 Apr 2025 10:01:26 +0000
Manifest this update: Sat 12 Apr 2025 10:01:26 +0000
Manifest next update: Sun 13 Apr 2025 10:01:26 +0000
Files and hashes: 1: Ai3_NgCb2mwvHHHWVo7OjI6Wj04.roa (hash: mxmvKEH6k3H+fHWxr8AaesSD9p5zVNhT7qFX1XU+vIQ=)
2: EZLjMnt3YY1uGOfZ3nimgNl-yLU.roa (hash: Ko07ZGo7IwS8NL/yJPyHpJ9m0iW9ngaJs3DqWmHrpi0=)
3: RIQPOEjptB8udCiUyrk1eA7kGsQ.roa (hash: iUSixJ9qOvizzSlye8GPbxagX4TAp65dTuqFovVtZ00=)
4: lxru6oeY927JpDTnVjfs2IEJLsI.crl (hash: f8TrUNlD3QskF9SJV5wQ10oQxk7rTvgVvJYtjeTSaRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 10:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:29:72:6b:42:05:11:10:ae:5e:90:3a:63:03:69:23:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971aeeea8798f76ec9a434e75637ecd881092ec2
Validity
Not Before: Apr 12 10:01:26 2025 GMT
Not After : Apr 13 10:01:26 2025 GMT
Subject: CN=f395efe5c26ad3d9c23095177aa92f60dddfdb48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:08:18:5b:ba:03:2c:b2:93:58:53:6e:80:2c:
4f:b0:6d:21:ab:75:15:c8:38:9d:fa:54:ca:7e:88:
8f:1e:c9:43:c7:7b:49:91:44:2e:f4:49:da:6d:7b:
41:e8:b8:10:4b:54:79:2d:88:a1:58:29:bf:21:2b:
62:fe:31:3a:2f:46:2c:b4:79:22:49:e9:73:52:a2:
f5:e4:a7:c5:64:cb:2c:c7:6a:db:7c:ec:8e:9e:73:
33:50:fa:58:f3:bf:d3:41:4e:38:f6:97:c7:97:76:
78:c6:d5:ca:8f:8a:9e:85:cb:06:db:c0:43:bd:ab:
2d:29:ca:f7:e7:6c:5f:df:80:e6:50:e4:39:df:29:
76:6a:24:15:60:39:44:d6:19:3e:81:03:6d:c0:a1:
e7:b4:9b:7f:8c:0a:99:90:96:df:32:65:f7:29:c8:
86:6f:7f:a1:b2:d2:fb:e0:9b:98:c6:57:d6:27:9b:
bc:06:02:c2:c9:5f:f5:d3:3c:ad:46:8a:45:fa:5d:
ef:4a:0b:16:d1:47:21:1e:1c:78:1f:8c:1b:a7:e3:
47:ad:2b:d9:1c:a3:70:52:58:7f:59:c0:64:37:6b:
d0:96:a2:42:f9:3e:51:5b:bd:4c:26:6a:62:a6:a6:
a9:82:40:2b:29:5f:2d:a1:03:14:39:04:08:a7:2d:
54:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:95:EF:E5:C2:6A:D3:D9:C2:30:95:17:7A:A9:2F:60:DD:DF:DB:48
X509v3 Authority Key Identifier:
keyid:97:1A:EE:EA:87:98:F7:6E:C9:A4:34:E7:56:37:EC:D8:81:09:2E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxru6oeY927JpDTnVjfs2IEJLsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/166933-f68c-49a0-8869-bdf55db4a90a/1/lxru6oeY927JpDTnVjfs2IEJLsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:4d:80:e1:18:2a:08:df:88:eb:2b:1e:fd:a8:3b:d2:2c:d1:
6f:cb:a9:16:78:e9:fa:a8:3d:f8:61:fd:19:c1:9d:85:d8:a6:
67:47:33:67:b3:45:2e:91:7f:48:47:63:cd:69:de:5f:3a:c5:
5f:11:6e:a8:6f:3c:1b:64:84:68:38:33:77:55:d6:0e:53:96:
ed:4b:27:ec:d7:e5:d3:67:81:21:ed:99:c2:2b:a6:a7:f3:34:
0d:9c:c0:be:ae:d8:07:18:da:bb:77:40:38:c0:3b:06:37:4a:
f4:65:26:15:81:58:a3:22:c7:fb:d5:0b:ee:05:39:27:2a:59:
85:0a:02:4f:8a:d8:96:f3:a6:b2:11:5c:65:56:60:0b:96:08:
b1:a9:30:2d:bc:98:81:5c:88:2b:c0:b5:6e:6f:88:b4:b8:12:
8a:5a:21:0e:fb:9b:67:2c:ef:1c:34:51:3e:fe:a4:30:98:d2:
d5:a8:bb:2e:c3:de:22:49:67:fd:24:70:19:bd:74:7c:ad:73:
fe:5f:bd:84:f7:9e:09:47:21:da:85:da:c9:f1:7e:1e:1c:02:
0c:58:c9:ab:6f:f1:b6:95:be:a8:6b:aa:70:13:17:3d:9a:dd:
27:af:67:a6:86:a6:28:b4:47:b5:fd:36:87:65:4f:6e:20:ef:
d0:0e:4e:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYpcmtCBREQrl6QOmMDaSOQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MWFlZWVhODc5OGY3NmVjOWE0MzRlNzU2MzdlY2Q4ODEw
OTJlYzIwHhcNMjUwNDEyMTAwMTI2WhcNMjUwNDEzMTAwMTI2WjAzMTEwLwYDVQQD
EyhmMzk1ZWZlNWMyNmFkM2Q5YzIzMDk1MTc3YWE5MmY2MGRkZGZkYjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8wgYW7oDLLKTWFNugCxPsG0hq3UV
yDid+lTKfoiPHslDx3tJkUQu9EnabXtB6LgQS1R5LYihWCm/ISti/jE6L0YstHki
SelzUqL15KfFZMssx2rbfOyOnnMzUPpY87/TQU449pfHl3Z4xtXKj4qehcsG28BD
vastKcr352xf34DmUOQ53yl2aiQVYDlE1hk+gQNtwKHntJt/jAqZkJbfMmX3KciG
b3+hstL74JuYxlfWJ5u8BgLCyV/10zytRopF+l3vSgsW0UchHhx4H4wbp+NHrSvZ
HKNwUlh/WcBkN2vQlqJC+T5RW71MJmpipqapgkArKV8toQMUOQQIpy1UEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPOV7+XCatPZwjCVF3qpL2Dd39tIMB8GA1UdIwQY
MBaAFJca7uqHmPduyaQ051Y37NiBCS7CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHhydTZvZVk5MjdKcERUblZqZnMySUVKTHNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8xNjY5MzMtZjY4Yy00OWEwLTg4Njkt
YmRmNTVkYjRhOTBhLzEvbHhydTZvZVk5MjdKcERUblZqZnMySUVKTHNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi8xNjY5MzMtZjY4Yy00OWEwLTg4NjktYmRmNTVkYjRhOTBh
LzEvbHhydTZvZVk5MjdKcERUblZqZnMySUVKTHNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGE2A4Rgq
CN+I6yse/ag70izRb8upFnjp+qg9+GH9GcGdhdimZ0czZ7NFLpF/SEdjzWneXzrF
XxFuqG88G2SEaDgzd1XWDlOW7Usn7Nfl02eBIe2Zwiump/M0DZzAvq7YBxjau3dA
OMA7BjdK9GUmFYFYoyLH+9UL7gU5JypZhQoCT4rYlvOmshFcZVZgC5YIsakwLbyY
gVyIK8C1bm+ItLgSilohDvubZyzvHDRRPv6kMJjS1ai7LsPeIkln/SRwGb10fK1z
/l+9hPeeCUch2oXayfF+HhwCDFjJq2/xtpW+qGuqcBMXPZrdJ69npoamKLRHtf02
h2VPbiDv0A5OVw==
-----END CERTIFICATE-----
Generated at Sat Apr 12 20:28:56 2025 by rpki-client