Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
File: lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft (raw, json)
Hash identifier: lwB6ZF1F2RRir+bEv+RMpIH6QRpOT0PpOV+3CKycSQc=
Subject key identifier: 6A:E9:66:94:30:19:62:12:36:15:D3:4D:8D:0B:9A:60:BF:7D:06:BF
Authority key identifier: 97:1A:79:9C:6A:66:34:39:D7:44:50:DF:B3:89:93:57:1F:98:E1:5D
Certificate issuer: /CN=971a799c6a663439d74450dfb38993571f98e15d
Certificate serial: 0194C4D133152A51BE5E16C17D732533A726
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
Manifest number: 1430
Signing time: Sun 02 Feb 2025 04:00:31 +0000
Manifest this update: Sun 02 Feb 2025 04:00:31 +0000
Manifest next update: Mon 03 Feb 2025 04:00:31 +0000
Files and hashes: 1: 1-y2wf-G4h6MfUPnkVrxK0Xw2vJg.roa (hash: x9mX2Y1MAhdwF1gl0VV9Ix6fABygQ0MjlMVoP/8g9iM=)
2: lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl (hash: zNloSUXbSVMA1qfk1rKZ88AeCYKDfdg82w1o7VaZ1+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:33:15:2a:51:be:5e:16:c1:7d:73:25:33:a7:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971a799c6a663439d74450dfb38993571f98e15d
Validity
Not Before: Feb 2 04:00:31 2025 GMT
Not After : Feb 3 04:00:31 2025 GMT
Subject: CN=6ae96694301962123615d34d8d0b9a60bf7d06bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3b:18:0d:82:9b:22:20:c7:c3:5c:fe:a2:d5:
2f:2b:6d:3f:5f:3e:60:61:9d:e5:1b:e4:13:77:bd:
41:98:ad:7d:5a:0b:19:f3:18:bc:ed:9c:e3:7d:92:
46:c3:1e:c7:f5:ec:35:26:66:40:4e:c3:da:64:1b:
80:00:21:e8:19:c0:ab:55:d8:c5:19:45:4a:45:42:
87:38:4c:b9:2c:3e:40:6a:d1:24:80:a3:b3:cb:70:
94:8a:6f:b3:9b:a6:90:4a:46:84:ae:b8:1c:26:35:
7f:27:2c:24:4d:8a:40:5d:12:be:03:e9:8d:1a:34:
b2:d6:48:f4:ee:c6:ed:79:17:91:42:e0:62:c7:df:
ed:38:91:80:70:bc:4a:52:a7:6a:46:e7:cd:3e:e7:
90:40:94:ab:a9:70:8d:62:c9:12:de:be:64:2c:c9:
04:a8:6b:24:af:d8:2c:23:77:c4:89:4b:b1:27:3f:
cd:1a:a0:ef:9a:4d:3a:f0:fd:5b:16:58:a4:06:38:
91:8d:d3:f2:33:64:77:86:9a:6f:6f:7c:33:97:fa:
95:3c:ce:89:14:b9:36:5e:dd:08:72:8d:eb:96:81:
af:ee:56:b3:41:8e:ec:dd:d7:03:5a:fa:1a:6c:d7:
8c:dd:f4:18:69:ab:14:e2:e0:82:39:3f:f3:73:a4:
24:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E9:66:94:30:19:62:12:36:15:D3:4D:8D:0B:9A:60:BF:7D:06:BF
X509v3 Authority Key Identifier:
keyid:97:1A:79:9C:6A:66:34:39:D7:44:50:DF:B3:89:93:57:1F:98:E1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:38:97:09:71:fc:a7:be:86:e7:7e:89:33:db:b9:9a:81:58:
42:69:17:5c:fa:1a:95:c9:ac:5c:c0:d7:e8:02:a6:7a:6d:e2:
54:de:bb:0b:5e:ee:f1:f5:37:2f:89:cf:e3:9c:53:13:ab:ba:
dc:d8:97:93:96:b8:18:f6:c0:2c:b2:b9:17:49:1b:b9:88:4f:
9f:a4:aa:a7:9f:db:63:db:bc:f8:4c:e5:3b:5b:78:5e:d6:a3:
d4:7f:ab:ad:77:e0:cd:31:1c:60:86:f7:5a:1f:15:60:89:e5:
2c:e1:8c:23:aa:5b:93:bf:66:d9:2f:67:24:54:2b:4c:b4:e0:
69:98:74:a1:c9:e5:d5:aa:27:41:d4:37:1c:47:af:ff:18:2c:
3c:b4:c5:3c:8f:b0:99:46:97:2d:bb:fe:c8:4b:08:24:79:f6:
33:36:57:62:43:c5:57:ce:f9:23:85:a5:67:9a:81:64:85:5c:
7e:13:78:4f:94:26:a9:c0:02:bb:a3:24:f9:a2:91:44:2e:19:
3e:0e:5c:a5:03:73:70:fa:04:32:0f:82:7f:e1:04:c3:4f:ad:
4d:48:6e:ae:91:b3:be:03:3c:e9:47:c9:cf:6c:50:54:c6:96:
e4:47:ff:56:93:47:ae:56:30:2c:8b:dd:9e:3f:30:43:11:fb:
60:b2:a8:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTE0TMVKlG+XhbBfXMlM6cmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MWE3OTljNmE2NjM0MzlkNzQ0NTBkZmIzODk5MzU3MWY5
OGUxNWQwHhcNMjUwMjAyMDQwMDMxWhcNMjUwMjAzMDQwMDMxWjAzMTEwLwYDVQQD
Eyg2YWU5NjY5NDMwMTk2MjEyMzYxNWQzNGQ4ZDBiOWE2MGJmN2QwNmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzsYDYKbIiDHw1z+otUvK20/Xz5g
YZ3lG+QTd71BmK19WgsZ8xi87ZzjfZJGwx7H9ew1JmZATsPaZBuAACHoGcCrVdjF
GUVKRUKHOEy5LD5AatEkgKOzy3CUim+zm6aQSkaErrgcJjV/JywkTYpAXRK+A+mN
GjSy1kj07sbteReRQuBix9/tOJGAcLxKUqdqRufNPueQQJSrqXCNYskS3r5kLMkE
qGskr9gsI3fEiUuxJz/NGqDvmk068P1bFlikBjiRjdPyM2R3hppvb3wzl/qVPM6J
FLk2Xt0Ico3rloGv7lazQY7s3dcDWvoabNeM3fQYaasU4uCCOT/zc6QkYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGrpZpQwGWISNhXTTY0LmmC/fQa/MB8GA1UdIwQY
MBaAFJcaeZxqZjQ510RQ37OJk1cfmOFdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHhwNW5HcG1ORG5YUkZEZnM0bVRWeC1ZNFYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS84ZTRiZGMtZTZlYi00MjA4LTliMTMt
YTJlZmFlM2Y5Y2FiLzEvbHhwNW5HcG1ORG5YUkZEZnM0bVRWeC1ZNFYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS84ZTRiZGMtZTZlYi00MjA4LTliMTMtYTJlZmFlM2Y5Y2Fi
LzEvbHhwNW5HcG1ORG5YUkZEZnM0bVRWeC1ZNFYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsDiXCXH8
p76G536JM9u5moFYQmkXXPoalcmsXMDX6AKmem3iVN67C17u8fU3L4nP45xTE6u6
3NiXk5a4GPbALLK5F0kbuYhPn6Sqp5/bY9u8+EzlO1t4Xtaj1H+rrXfgzTEcYIb3
Wh8VYInlLOGMI6pbk79m2S9nJFQrTLTgaZh0ocnl1aonQdQ3HEev/xgsPLTFPI+w
mUaXLbv+yEsIJHn2MzZXYkPFV875I4WlZ5qBZIVcfhN4T5QmqcACu6Mk+aKRRC4Z
Pg5cpQNzcPoEMg+Cf+EEw0+tTUhurpGzvgM86UfJz2xQVMaW5Ef/VpNHrlYwLIvd
nj8wQxH7YLKoFw==
-----END CERTIFICATE-----
Generated at Sun Feb 2 07:02:44 2025 by rpki-client