Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.mft
File: _LwbYj6YBVnjKlodtYD4pzRBdwU.mft (raw, json)
Hash identifier: 6VWU9lDByhVPbCY6Bv0pIGG4JjFtjY3Q9pTNztaAjMg=
Subject key identifier: 12:18:37:D1:BB:42:6B:2A:F2:4C:96:95:F7:29:A4:EB:F5:65:52:94
Authority key identifier: FC:BC:1B:62:3E:98:05:59:E3:2A:5A:1D:B5:80:F8:A7:34:41:77:05
Certificate issuer: /CN=fcbc1b623e980559e32a5a1db580f8a734417705
Certificate serial: 019651FFE5DCC3BD49C3C32DD3710C9E56BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LwbYj6YBVnjKlodtYD4pzRBdwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.mft
Manifest number: 04A7
Signing time: Sun 20 Apr 2025 07:00:47 +0000
Manifest this update: Sun 20 Apr 2025 07:00:47 +0000
Manifest next update: Mon 21 Apr 2025 07:00:47 +0000
Files and hashes: 1: HY2qqakYUKmGxzXSwPgmmaqbnWQ.roa (hash: ijxTXIq4WZ5WszUemCRN8Fg/4BF4CCUnIK9TDQDj4gU=)
2: _LwbYj6YBVnjKlodtYD4pzRBdwU.crl (hash: SuMP4wm7p3kWPoHx0VsBMFE7gtaf4mmJOraf8+gQCz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_LwbYj6YBVnjKlodtYD4pzRBdwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:ff:e5:dc:c3:bd:49:c3:c3:2d:d3:71:0c:9e:56:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcbc1b623e980559e32a5a1db580f8a734417705
Validity
Not Before: Apr 20 07:00:47 2025 GMT
Not After : Apr 21 07:00:47 2025 GMT
Subject: CN=121837d1bb426b2af24c9695f729a4ebf5655294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:46:e5:fe:88:e2:6e:3d:95:5c:82:15:3f:b3:
d6:dc:14:90:59:17:63:78:0e:e3:db:9b:e9:dd:11:
15:c8:df:d3:5a:83:d5:26:67:bd:2f:f8:f6:5e:84:
65:b7:16:c4:63:67:19:34:ef:16:8b:67:05:e2:65:
46:ad:3a:bd:b5:57:5c:04:8e:73:c2:99:a5:45:40:
36:c2:79:df:cb:1a:8a:65:b3:e4:51:09:9a:57:fe:
30:e1:73:3a:72:5b:ff:75:04:04:d5:f9:84:18:67:
36:ff:cd:3a:2b:6b:ab:29:5e:36:ea:55:d1:72:85:
1b:67:77:df:f1:a0:7a:ee:16:36:bf:e0:cc:bf:e4:
fb:b9:cb:a3:87:5f:53:ea:e4:d2:05:b8:c9:3a:43:
b4:be:58:98:b2:41:ae:d9:69:bd:7e:3e:3c:63:67:
28:ec:4d:36:1b:e4:ed:d3:e6:46:69:57:ec:59:50:
19:74:e7:14:e6:26:91:e5:b5:6f:6c:90:96:05:f4:
00:f5:18:a4:08:ef:62:7c:e9:8e:29:70:2c:22:23:
96:fc:75:fd:56:c2:71:e9:4f:59:8f:e3:9a:80:dc:
25:2b:74:ee:ac:f6:d0:97:b2:c4:45:8e:5b:e5:71:
51:ae:bc:92:02:04:eb:be:12:d1:49:15:f4:7a:a6:
53:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:18:37:D1:BB:42:6B:2A:F2:4C:96:95:F7:29:A4:EB:F5:65:52:94
X509v3 Authority Key Identifier:
keyid:FC:BC:1B:62:3E:98:05:59:E3:2A:5A:1D:B5:80:F8:A7:34:41:77:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LwbYj6YBVnjKlodtYD4pzRBdwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:da:40:ba:6b:ea:04:af:50:bd:98:23:27:e8:08:63:72:29:
66:d0:6a:d8:3c:78:de:7b:f7:a0:74:ec:ef:ae:44:d6:8f:61:
e4:f8:0f:74:e0:23:77:ac:0c:14:f6:3f:d8:c4:93:91:f5:44:
b5:4c:f7:18:39:67:d4:c8:7c:3e:84:8c:fe:5e:20:4a:65:36:
28:f5:a6:b3:60:5d:f1:86:99:f8:36:8c:11:42:21:e9:3f:14:
51:d5:cb:77:57:ee:ae:5a:9a:a9:7b:82:57:e6:ec:e7:30:eb:
1b:74:6c:46:bc:bb:08:b3:81:e2:3d:e9:b6:61:ff:b9:e8:1b:
06:43:a3:6b:94:66:a5:ba:d3:78:c4:a5:f5:d6:02:9e:d3:c6:
31:86:4e:42:b2:16:43:ac:3d:fe:41:2e:03:ec:d3:b4:94:08:
cf:cd:bf:8b:6b:1a:ea:5e:8f:92:71:32:73:2a:6f:7b:fb:fc:
7a:68:9d:0a:89:b5:7b:52:82:be:70:08:51:37:3e:4c:32:9e:
1f:a3:3e:50:30:dd:32:6b:6a:81:40:e1:d7:96:cb:10:1d:9e:
72:59:8b:e0:26:12:e4:28:86:13:5d:fc:9b:e8:a9:90:20:0f:
d1:67:42:5c:25:2e:d8:92:27:75:81:09:e6:ed:62:e6:fb:0b:
c7:31:5a:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZR/+Xcw71Jw8Mt03EMnla+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjYmMxYjYyM2U5ODA1NTllMzJhNWExZGI1ODBmOGE3MzQ0
MTc3MDUwHhcNMjUwNDIwMDcwMDQ3WhcNMjUwNDIxMDcwMDQ3WjAzMTEwLwYDVQQD
EygxMjE4MzdkMWJiNDI2YjJhZjI0Yzk2OTVmNzI5YTRlYmY1NjU1Mjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUbl/ojibj2VXIIVP7PW3BSQWRdj
eA7j25vp3REVyN/TWoPVJme9L/j2XoRltxbEY2cZNO8Wi2cF4mVGrTq9tVdcBI5z
wpmlRUA2wnnfyxqKZbPkUQmaV/4w4XM6clv/dQQE1fmEGGc2/806K2urKV426lXR
coUbZ3ff8aB67hY2v+DMv+T7ucujh19T6uTSBbjJOkO0vliYskGu2Wm9fj48Y2co
7E02G+Tt0+ZGaVfsWVAZdOcU5iaR5bVvbJCWBfQA9RikCO9ifOmOKXAsIiOW/HX9
VsJx6U9Zj+OagNwlK3TurPbQl7LERY5b5XFRrrySAgTrvhLRSRX0eqZT6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBIYN9G7Qmsq8kyWlfcppOv1ZVKUMB8GA1UdIwQY
MBaAFPy8G2I+mAVZ4ypaHbWA+Kc0QXcFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0x3YllqNllCVm5qS2xvZHRZRDRwelJCZHdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8wMzJlYWItYzRjNy00YjZkLTlkNmQt
NzFhNzU0MmE2MDY2LzEvX0x3YllqNllCVm5qS2xvZHRZRDRwelJCZHdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8wMzJlYWItYzRjNy00YjZkLTlkNmQtNzFhNzU0MmE2MDY2
LzEvX0x3YllqNllCVm5qS2xvZHRZRDRwelJCZHdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALdpAumvq
BK9QvZgjJ+gIY3IpZtBq2Dx43nv3oHTs765E1o9h5PgPdOAjd6wMFPY/2MSTkfVE
tUz3GDln1Mh8PoSM/l4gSmU2KPWms2Bd8YaZ+DaMEUIh6T8UUdXLd1furlqaqXuC
V+bs5zDrG3RsRry7CLOB4j3ptmH/uegbBkOja5RmpbrTeMSl9dYCntPGMYZOQrIW
Q6w9/kEuA+zTtJQIz82/i2sa6l6PknEycypve/v8emidCom1e1KCvnAIUTc+TDKe
H6M+UDDdMmtqgUDh15bLEB2eclmL4CYS5CiGE138m+ipkCAP0WdCXCUu2JIndYEJ
5u1i5vsLxzFaiA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:59:40 2025 by rpki-client