Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
File: LrqqxROYKzwk02DG1GXPgkIFaok.mft (raw, json)
Hash identifier: IgFq2EBsWdGSUcQoFsN2vRHTpNU5qvj6xBViMaP88Ew=
Subject key identifier: B4:D8:A3:34:0E:F9:FA:A4:D1:7A:E2:99:78:71:E7:53:58:AE:14:91
Authority key identifier: 2E:BA:AA:C5:13:98:2B:3C:24:D3:60:C6:D4:65:CF:82:42:05:6A:89
Certificate issuer: /CN=2ebaaac513982b3c24d360c6d465cf8242056a89
Certificate serial: 019651919657B41FF1F35AD8CC94912A3FC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 05:00:17 +0000
Manifest this update: Sun 20 Apr 2025 05:00:17 +0000
Manifest next update: Mon 21 Apr 2025 05:00:17 +0000
Files and hashes: 1: GY1X78tUCHALN-6VezXTntkS1S0.roa (hash: B4/LrjmuUdItXDnKDdePMAJjiq+F77UrPT1SZV8fodQ=)
2: LrqqxROYKzwk02DG1GXPgkIFaok.crl (hash: k+7doIemh9eKVTJOUAGoomRx+VNizyFnuexfPTiAc9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:91:96:57:b4:1f:f1:f3:5a:d8:cc:94:91:2a:3f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebaaac513982b3c24d360c6d465cf8242056a89
Validity
Not Before: Apr 20 05:00:17 2025 GMT
Not After : Apr 21 05:00:17 2025 GMT
Subject: CN=b4d8a3340ef9faa4d17ae2997871e75358ae1491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:42:5a:d5:b6:c8:90:f4:f4:35:c9:a8:75:00:
b3:f6:f8:c2:86:4d:74:e7:d7:2c:4a:d8:cb:23:17:
44:7c:eb:f5:4c:1d:6f:74:70:1c:6d:0b:2a:74:a2:
d0:f3:f3:2e:7f:2d:19:fb:9a:13:ad:3c:cc:be:04:
3b:f3:ee:53:20:90:b3:8c:69:03:df:a4:09:5c:19:
6e:4b:87:90:c2:b9:1a:ee:89:5f:6b:c4:7b:a0:e5:
43:7c:83:32:c9:cf:ad:54:38:49:1f:ca:28:55:21:
bb:e3:54:91:0c:49:9a:1b:a2:c6:ea:4c:30:27:6c:
4b:18:92:e1:1d:cf:5f:75:5b:6c:c0:51:eb:96:fc:
27:c8:d9:f7:3c:2e:7d:96:bb:36:db:aa:f9:c2:d0:
62:c1:be:c1:09:d7:1d:99:4f:79:b6:ef:81:e0:c8:
c9:60:0b:74:29:a2:7d:4d:5f:2c:eb:4a:f1:72:02:
bf:a1:3f:88:7f:b7:7c:9f:0d:0d:b4:a0:fb:eb:1b:
00:0f:a1:2f:e8:64:ca:da:a9:70:0a:b3:5e:3e:c3:
ad:4a:14:14:14:74:5d:13:09:4a:44:91:41:04:d3:
0b:a4:c8:76:19:63:aa:0b:fb:b6:b1:f1:20:54:aa:
c7:95:07:83:a3:5d:ca:87:0a:76:06:cf:14:aa:e1:
4a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D8:A3:34:0E:F9:FA:A4:D1:7A:E2:99:78:71:E7:53:58:AE:14:91
X509v3 Authority Key Identifier:
keyid:2E:BA:AA:C5:13:98:2B:3C:24:D3:60:C6:D4:65:CF:82:42:05:6A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:9c:c3:af:65:a3:f5:b5:ae:6c:22:27:b3:fa:6f:e5:ad:3a:
22:a3:b4:52:da:f7:92:e9:17:47:55:35:8d:ba:2e:4c:08:b5:
c0:eb:65:f1:07:7a:d8:c7:a8:f2:f4:39:c0:e2:a8:9e:c0:46:
1f:91:99:23:13:d3:69:81:ba:1b:22:99:17:40:b3:16:d7:c8:
3c:3f:9a:a3:d1:d9:42:28:ae:28:d3:f2:33:96:69:9a:27:31:
c9:4b:05:98:8b:90:15:67:1a:a5:e7:21:15:6e:98:2d:6f:8c:
10:c6:86:c7:16:6e:27:13:f2:5d:51:44:15:d9:51:96:b1:17:
3e:16:ba:d7:05:69:bb:f2:77:10:ef:e5:dd:a4:10:34:d4:94:
a2:92:95:cf:98:c1:b4:68:bc:df:a0:17:79:99:12:93:fb:91:
34:07:9d:63:ab:69:38:fe:7c:1b:b6:3a:89:8f:3d:bc:5f:a5:
11:42:b2:2f:f8:3e:9c:d1:b5:1c:bb:55:d1:3d:24:c5:73:f6:
1c:ca:be:a9:c6:fc:83:ea:61:01:23:c8:7f:96:cc:79:14:3d:
73:b1:c7:55:da:51:59:f8:43:90:3a:8a:34:07:93:91:f5:7e:
e6:09:01:79:d8:c1:18:7f:ba:7a:ab:54:03:97:a0:42:11:55:
fd:9f:18:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZRkZZXtB/x81rYzJSRKj/JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlYmFhYWM1MTM5ODJiM2MyNGQzNjBjNmQ0NjVjZjgyNDIw
NTZhODkwHhcNMjUwNDIwMDUwMDE3WhcNMjUwNDIxMDUwMDE3WjAzMTEwLwYDVQQD
EyhiNGQ4YTMzNDBlZjlmYWE0ZDE3YWUyOTk3ODcxZTc1MzU4YWUxNDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UJa1bbIkPT0NcmodQCz9vjChk10
59csStjLIxdEfOv1TB1vdHAcbQsqdKLQ8/Mufy0Z+5oTrTzMvgQ78+5TIJCzjGkD
36QJXBluS4eQwrka7olfa8R7oOVDfIMyyc+tVDhJH8ooVSG741SRDEmaG6LG6kww
J2xLGJLhHc9fdVtswFHrlvwnyNn3PC59lrs226r5wtBiwb7BCdcdmU95tu+B4MjJ
YAt0KaJ9TV8s60rxcgK/oT+If7d8nw0NtKD76xsAD6Ev6GTK2qlwCrNePsOtShQU
FHRdEwlKRJFBBNMLpMh2GWOqC/u2sfEgVKrHlQeDo13Khwp2Bs8UquFKVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLTYozQO+fqk0XrimXhx51NYrhSRMB8GA1UdIwQY
MBaAFC66qsUTmCs8JNNgxtRlz4JCBWqJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHJxcXhST1lLendrMDJERzFHWFBna0lGYW9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC80MmFkMDItZDQ4YS00MWFjLWE4MGIt
MjEwMmQ5NmVlMzU1LzEvTHJxcXhST1lLendrMDJERzFHWFBna0lGYW9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC80MmFkMDItZDQ4YS00MWFjLWE4MGItMjEwMmQ5NmVlMzU1
LzEvTHJxcXhST1lLendrMDJERzFHWFBna0lGYW9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASZzDr2Wj
9bWubCIns/pv5a06IqO0Utr3kukXR1U1jbouTAi1wOtl8Qd62Meo8vQ5wOKonsBG
H5GZIxPTaYG6GyKZF0CzFtfIPD+ao9HZQiiuKNPyM5ZpmicxyUsFmIuQFWcapech
FW6YLW+MEMaGxxZuJxPyXVFEFdlRlrEXPha61wVpu/J3EO/l3aQQNNSUopKVz5jB
tGi836AXeZkSk/uRNAedY6tpOP58G7Y6iY89vF+lEUKyL/g+nNG1HLtV0T0kxXP2
HMq+qcb8g+phASPIf5bMeRQ9c7HHVdpRWfhDkDqKNAeTkfV+5gkBedjBGH+6eqtU
A5egQhFV/Z8YzA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:07:44 2025 by rpki-client