Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
File: lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft (raw, json)
Hash identifier: D7JuZ9brfxhFuAgBQxyMyl/+9WEupHXyXtl3ElHdZuM=
Subject key identifier: 6D:DA:52:BF:6F:B1:63:0D:26:F9:98:10:8E:35:A9:2E:DA:94:2E:B6
Authority key identifier: 94:16:D8:E0:2B:5A:1A:75:85:9F:64:A0:5C:5A:8D:77:C8:4C:50:F1
Certificate issuer: /CN=9416d8e02b5a1a75859f64a05c5a8d77c84c50f1
Certificate serial: 0196029B64D4E439463881C18486300C1F75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
Manifest number: 11CF
Signing time: Fri 04 Apr 2025 21:01:00 +0000
Manifest this update: Fri 04 Apr 2025 21:01:00 +0000
Manifest next update: Sat 05 Apr 2025 21:01:00 +0000
Files and hashes: 1: 9xCRY7VEPmKHf0lyxzNpSutTsGY.roa (hash: 6rDekGO16wwWHoKHJkHXXHa8TG0Fv3Oiiu1rkWGfPt4=)
2: Z37vhTOIgXT7YFHlN3w9aL-lk5Y.roa (hash: iMlS4GRDszRpO6wfa87ZF07OseqOmumWVqUeyx1wi4Y=)
3: lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl (hash: yHFiMEtU70c8TWAKkMa/ngPQo2GC5fkpGW/HPiQhGIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 21:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:02:9b:64:d4:e4:39:46:38:81:c1:84:86:30:0c:1f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9416d8e02b5a1a75859f64a05c5a8d77c84c50f1
Validity
Not Before: Apr 4 21:01:00 2025 GMT
Not After : Apr 5 21:01:00 2025 GMT
Subject: CN=6dda52bf6fb1630d26f998108e35a92eda942eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:99:2a:16:7d:f9:84:e3:5e:a3:2b:6f:9e:f9:
da:b7:4f:5d:cf:d5:9d:02:ba:c3:41:08:a6:d7:02:
ea:7e:12:d7:78:09:28:94:58:a1:c3:c3:22:ac:98:
8a:df:ed:54:44:b2:a6:1b:c7:c5:73:ba:44:d4:bc:
7c:9a:79:55:27:6b:f4:9d:bd:c5:24:03:8a:40:1f:
9f:da:0b:36:1f:43:b9:d9:74:3b:24:a5:87:42:0c:
98:de:d6:74:3f:71:7e:6c:e0:bb:48:b4:d9:7e:33:
ea:8c:a4:d6:fd:13:ad:cb:09:2e:3e:50:a2:9a:4d:
81:27:47:25:92:d5:75:b1:a6:e3:02:22:e4:33:e4:
ab:31:a4:d4:a9:55:98:5a:da:18:2d:a7:59:8d:cc:
cd:fd:6b:fd:01:46:90:a4:1a:10:d0:dd:c9:6c:d9:
50:a4:3e:91:33:b6:aa:27:c8:b8:39:78:8b:12:3d:
6b:a4:24:af:39:cc:3f:89:a2:e7:d8:ae:20:b2:68:
1f:a0:1e:81:36:9c:28:5c:69:9f:0a:41:08:c0:a8:
88:c8:5f:ee:18:7f:2b:5c:08:56:1e:24:2d:fb:13:
33:25:bd:dd:3a:18:08:b3:9a:b8:94:cf:45:e9:6c:
90:aa:6b:2f:e4:34:02:d0:91:78:ee:eb:2b:f2:1f:
b5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:DA:52:BF:6F:B1:63:0D:26:F9:98:10:8E:35:A9:2E:DA:94:2E:B6
X509v3 Authority Key Identifier:
keyid:94:16:D8:E0:2B:5A:1A:75:85:9F:64:A0:5C:5A:8D:77:C8:4C:50:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:24:5f:7c:e9:04:32:78:a4:4d:3c:b0:75:59:d2:87:1c:8a:
af:98:df:7c:c4:18:41:78:dd:83:35:24:f7:83:32:f0:ba:b9:
f4:75:be:21:a2:76:3c:41:09:f7:54:c2:08:2c:6e:69:00:73:
62:1d:3e:09:60:26:10:ec:cc:88:e3:14:d7:41:65:90:cc:29:
7f:31:cf:09:f7:63:22:ab:33:cf:88:41:3f:57:17:7c:e6:6f:
00:9c:34:e8:97:8e:eb:4f:ef:19:52:35:75:ed:f4:b5:cc:3d:
26:c5:f4:5f:8c:32:a9:63:7a:2f:14:66:ca:cf:9f:0e:c1:36:
bc:c0:85:6f:93:c8:23:50:b8:45:13:87:c9:ef:ea:8a:c0:7f:
f4:ef:1a:ae:95:58:7c:a0:05:16:1d:47:f1:06:fa:93:89:20:
2c:7d:ad:67:05:be:8c:3d:34:bc:43:e7:b5:d2:a9:60:62:61:
b5:d1:71:76:98:09:97:d6:bb:86:f1:80:b9:ba:06:82:08:7c:
3e:fe:24:df:84:0a:02:1e:56:38:67:8a:62:18:50:04:87:2d:
34:ac:ce:88:27:3e:2e:60:da:33:e1:ff:16:9e:5f:a9:a2:d8:
a5:d2:ff:49:7c:95:5e:6c:61:79:83:f0:53:d4:49:08:c6:14:
3b:a4:70:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYCm2TU5DlGOIHBhIYwDB91MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MTZkOGUwMmI1YTFhNzU4NTlmNjRhMDVjNWE4ZDc3Yzg0
YzUwZjEwHhcNMjUwNDA0MjEwMTAwWhcNMjUwNDA1MjEwMTAwWjAzMTEwLwYDVQQD
Eyg2ZGRhNTJiZjZmYjE2MzBkMjZmOTk4MTA4ZTM1YTkyZWRhOTQyZWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJkqFn35hONeoytvnvnat09dz9Wd
ArrDQQim1wLqfhLXeAkolFihw8MirJiK3+1URLKmG8fFc7pE1Lx8mnlVJ2v0nb3F
JAOKQB+f2gs2H0O52XQ7JKWHQgyY3tZ0P3F+bOC7SLTZfjPqjKTW/ROtywkuPlCi
mk2BJ0clktV1sabjAiLkM+SrMaTUqVWYWtoYLadZjczN/Wv9AUaQpBoQ0N3JbNlQ
pD6RM7aqJ8i4OXiLEj1rpCSvOcw/iaLn2K4gsmgfoB6BNpwoXGmfCkEIwKiIyF/u
GH8rXAhWHiQt+xMzJb3dOhgIs5q4lM9F6WyQqmsv5DQC0JF47usr8h+13wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG3aUr9vsWMNJvmYEI41qS7alC62MB8GA1UdIwQY
MBaAFJQW2OArWhp1hZ9koFxajXfITFDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEJiWTRDdGFHbldGbjJTZ1hGcU5kOGhNVVBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wMTNjOTktN2Q3YS00ODJiLWJiNTEt
ZWI0ZTEzYmU1MDZhLzEvbEJiWTRDdGFHbldGbjJTZ1hGcU5kOGhNVVBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8wMTNjOTktN2Q3YS00ODJiLWJiNTEtZWI0ZTEzYmU1MDZh
LzEvbEJiWTRDdGFHbldGbjJTZ1hGcU5kOGhNVVBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbSRffOkE
MnikTTywdVnShxyKr5jffMQYQXjdgzUk94My8Lq59HW+IaJ2PEEJ91TCCCxuaQBz
Yh0+CWAmEOzMiOMU10FlkMwpfzHPCfdjIqszz4hBP1cXfOZvAJw06JeO60/vGVI1
de30tcw9JsX0X4wyqWN6LxRmys+fDsE2vMCFb5PII1C4RROHye/qisB/9O8arpVY
fKAFFh1H8Qb6k4kgLH2tZwW+jD00vEPntdKpYGJhtdFxdpgJl9a7hvGAuboGggh8
Pv4k34QKAh5WOGeKYhhQBIctNKzOiCc+LmDaM+H/Fp5fqaLYpdL/SXyVXmxheYPw
U9RJCMYUO6RwFA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:31:56 2025 by rpki-client