Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
File: lDkZOu8f5NVwPLg033qrr4pL5Cw.mft (raw, json)
Hash identifier: i6KpKRWvQ8WysJl7B/re0mJbeuuA1CGOvtwKxbbQe/I=
Subject key identifier: 61:98:9F:84:F6:32:F3:23:19:26:94:FB:CF:A8:33:D3:09:6C:E2:7A
Authority key identifier: 94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C
Certificate issuer: /CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c
Certificate serial: 01964E5A5C3CC01394C171F4FD791AC9A383
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
Manifest number: 13DA
Signing time: Sat 19 Apr 2025 14:01:06 +0000
Manifest this update: Sat 19 Apr 2025 14:01:06 +0000
Manifest next update: Sun 20 Apr 2025 14:01:06 +0000
Files and hashes: 1: WNnJojurMk10LbGrLgZt0ifKwss.roa (hash: srIz81tLyVgircW7ks18A2CAzPVgxZ0XnEJTrVmvVb8=)
2: lDkZOu8f5NVwPLg033qrr4pL5Cw.crl (hash: xXtbU9h6dWAG8RQcYYg9VZFu0vGE6TMps95FMBDv3kU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:5a:5c:3c:c0:13:94:c1:71:f4:fd:79:1a:c9:a3:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c
Validity
Not Before: Apr 19 14:01:06 2025 GMT
Not After : Apr 20 14:01:06 2025 GMT
Subject: CN=61989f84f632f323192694fbcfa833d3096ce27a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:8d:e4:c0:19:96:0a:ad:bb:fc:aa:7b:cf:3e:
65:1a:2a:0d:e0:70:ca:78:d9:ea:4c:06:a5:22:38:
30:94:79:e2:ce:52:aa:08:b7:af:f3:19:b7:38:ae:
5d:f6:1a:0b:2e:59:b4:e9:50:de:fc:1a:bf:79:9b:
93:88:63:f9:7f:97:60:b5:f5:ab:45:02:3c:8c:bc:
c0:40:a1:29:6c:a3:ba:be:11:6a:cc:15:45:a8:02:
09:af:be:f0:cd:67:12:e7:55:70:30:f3:96:94:f2:
16:d7:c0:17:4a:85:03:55:44:20:d2:59:f6:f5:47:
86:50:a7:51:5a:3b:fe:45:fb:b7:62:a4:bf:c1:5b:
1b:1c:86:ff:40:24:d4:ec:b7:cb:3d:f5:96:d4:bb:
94:9d:c6:4f:bc:42:66:e2:cc:0e:2e:38:8f:43:09:
ae:2f:d3:c6:9b:01:c1:89:f3:61:7c:64:3c:9f:ac:
e4:c5:30:8a:cb:e3:5f:1c:f9:6b:4b:0c:d1:16:d9:
03:77:49:95:22:32:8e:ea:98:a9:9e:46:d3:26:4c:
64:59:b7:14:21:6b:27:dd:f6:24:e8:05:c1:35:5b:
f3:65:a5:20:46:44:51:d2:15:14:10:42:07:c8:e8:
f2:75:f5:c3:e3:66:87:e8:87:ae:41:58:41:75:b0:
6c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:98:9F:84:F6:32:F3:23:19:26:94:FB:CF:A8:33:D3:09:6C:E2:7A
X509v3 Authority Key Identifier:
keyid:94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:c8:d3:bc:33:4f:8f:9f:70:e4:e1:6e:a9:b7:b7:0e:c2:82:
c1:34:5b:83:3b:32:18:19:64:28:39:ad:27:fe:a1:f5:24:28:
70:19:61:ee:8d:87:80:30:7d:76:5a:ea:ce:94:45:ff:a8:52:
34:78:ae:13:41:f4:3f:1b:15:5b:b0:19:a0:2a:7d:de:8a:6e:
43:d3:bb:da:50:e7:46:e9:d4:d0:1a:7d:90:e3:14:cd:f2:1b:
10:d5:9d:60:b3:2b:22:5b:07:9f:11:34:e4:2d:d7:d4:55:72:
ea:3a:64:c8:10:39:60:ac:3e:2e:55:e2:1d:ce:bf:2a:52:21:
03:73:7b:e0:43:a6:a9:70:2f:8f:97:96:57:e7:b9:e6:ac:c0:
74:c0:37:e2:ff:a1:07:e2:1d:90:31:a6:0c:45:4e:58:11:78:
89:f7:fd:5d:c6:f1:45:f3:05:4d:77:8c:86:20:8e:5e:70:1c:
67:77:8c:47:a5:6b:15:d4:a5:aa:78:99:1c:14:e9:d5:62:e4:
cf:40:d1:9e:86:fa:64:59:b1:8d:4d:0b:05:71:bf:bb:21:5d:
42:2d:e0:e4:47:4c:d3:39:9d:14:e5:b0:1d:e9:8b:68:a0:13:
29:61:10:62:ce:4e:92:e8:f3:50:5f:cd:1b:e2:aa:d2:a1:b7:
c7:9b:ef:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZOWlw8wBOUwXH0/XkayaODMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MzkxOTNhZWYxZmU0ZDU3MDNjYjgzNGRmN2FhYmFmOGE0
YmU0MmMwHhcNMjUwNDE5MTQwMTA2WhcNMjUwNDIwMTQwMTA2WjAzMTEwLwYDVQQD
Eyg2MTk4OWY4NGY2MzJmMzIzMTkyNjk0ZmJjZmE4MzNkMzA5NmNlMjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAho3kwBmWCq27/Kp7zz5lGioN4HDK
eNnqTAalIjgwlHnizlKqCLev8xm3OK5d9hoLLlm06VDe/Bq/eZuTiGP5f5dgtfWr
RQI8jLzAQKEpbKO6vhFqzBVFqAIJr77wzWcS51VwMPOWlPIW18AXSoUDVUQg0ln2
9UeGUKdRWjv+Rfu3YqS/wVsbHIb/QCTU7LfLPfWW1LuUncZPvEJm4swOLjiPQwmu
L9PGmwHBifNhfGQ8n6zkxTCKy+NfHPlrSwzRFtkDd0mVIjKO6pipnkbTJkxkWbcU
IWsn3fYk6AXBNVvzZaUgRkRR0hUUEEIHyOjydfXD42aH6IeuQVhBdbBsmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGGYn4T2MvMjGSaU+8+oM9MJbOJ6MB8GA1UdIwQY
MBaAFJQ5GTrvH+TVcDy4NN96q6+KS+QsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbERrWk91OGY1TlZ3UExnMDMzcXJyNHBMNUN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mZmNlMGUtYzNhZC00YzhhLTk5MTQt
NzQ1Y2RlNzRkMDFiLzEvbERrWk91OGY1TlZ3UExnMDMzcXJyNHBMNUN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9mZmNlMGUtYzNhZC00YzhhLTk5MTQtNzQ1Y2RlNzRkMDFi
LzEvbERrWk91OGY1TlZ3UExnMDMzcXJyNHBMNUN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQMjTvDNP
j59w5OFuqbe3DsKCwTRbgzsyGBlkKDmtJ/6h9SQocBlh7o2HgDB9dlrqzpRF/6hS
NHiuE0H0PxsVW7AZoCp93opuQ9O72lDnRunU0Bp9kOMUzfIbENWdYLMrIlsHnxE0
5C3X1FVy6jpkyBA5YKw+LlXiHc6/KlIhA3N74EOmqXAvj5eWV+e55qzAdMA34v+h
B+IdkDGmDEVOWBF4iff9XcbxRfMFTXeMhiCOXnAcZ3eMR6VrFdSlqniZHBTp1WLk
z0DRnob6ZFmxjU0LBXG/uyFdQi3g5EdM0zmdFOWwHemLaKATKWEQYs5OkujzUF/N
G+Kq0qG3x5vvpQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 18:00:18 2025 by rpki-client