Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.mft
File: li_WiB3GhZt6-qn3UKbdi71p6Zo.mft (raw, json)
Hash identifier: oKIwX4VP+NLHja3pz4BZRKHNzEdS48E9FImF2eV8QjQ=
Subject key identifier: 7D:A9:85:99:4B:B2:08:A6:6A:AF:A8:75:92:F9:A4:56:61:B0:18:81
Authority key identifier: 96:2F:D6:88:1D:C6:85:9B:7A:FA:A9:F7:50:A6:DD:8B:BD:69:E9:9A
Certificate issuer: /CN=962fd6881dc6859b7afaa9f750a6dd8bbd69e99a
Certificate serial: 01951090243381135035981783482D777AE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/li_WiB3GhZt6-qn3UKbdi71p6Zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.mft
Manifest number: 0731
Signing time: Sun 16 Feb 2025 21:00:36 +0000
Manifest this update: Sun 16 Feb 2025 21:00:36 +0000
Manifest next update: Mon 17 Feb 2025 21:00:36 +0000
Files and hashes: 1: VP1dVitGNzhgzlrIu_RUc35dU0g.roa (hash: 24LtlHsHu58mIGcYviemg+NoFfkkY936H7bROrCIBME=)
2: li_WiB3GhZt6-qn3UKbdi71p6Zo.crl (hash: z8seOZ0e5z+lTGC1BfjDPEzb+Ui0w6fis/+Kz9XoaYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/li_WiB3GhZt6-qn3UKbdi71p6Zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:90:24:33:81:13:50:35:98:17:83:48:2d:77:7a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962fd6881dc6859b7afaa9f750a6dd8bbd69e99a
Validity
Not Before: Feb 16 21:00:36 2025 GMT
Not After : Feb 17 21:00:36 2025 GMT
Subject: CN=7da985994bb208a66aafa87592f9a45661b01881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2a:0d:ad:a9:99:07:b5:26:ac:ef:09:5c:11:
59:c3:9d:54:bf:ce:d3:d7:17:74:24:ed:cc:e2:83:
55:a1:0f:a0:63:3f:ff:9c:52:78:5b:0d:89:23:3b:
41:7a:ce:de:7c:41:78:01:a3:eb:7a:b6:11:76:39:
1a:29:5f:13:50:cb:e2:67:41:ce:a7:83:80:89:b4:
94:e1:4b:46:cc:43:0a:9a:c2:a8:9f:cc:15:de:e8:
3c:96:4c:60:14:71:e6:2e:57:da:1c:19:92:52:87:
f9:8e:29:77:8e:55:e0:ad:19:0a:33:02:05:3f:77:
6e:e6:a9:37:d0:0a:86:1d:97:2b:9f:55:5a:17:b1:
5a:50:52:c0:e9:47:20:22:ed:14:86:61:bd:c7:f1:
bf:e0:5a:08:c5:d5:2f:f1:46:04:2a:b9:e6:1b:5a:
c2:24:cb:82:f8:19:ef:02:c4:10:b5:5b:26:c1:1a:
6a:b8:e2:8b:62:43:45:b3:07:e4:a3:e6:db:db:21:
5e:28:29:37:60:5e:a5:77:e9:1e:e5:dc:1a:39:e4:
e3:f9:8f:55:03:3c:90:cf:73:3e:43:d8:49:a8:d4:
81:7b:a2:70:5e:62:27:f2:7d:49:ec:0b:76:9a:06:
28:77:01:7d:af:8f:e3:05:02:cc:4e:c8:b5:69:4d:
99:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A9:85:99:4B:B2:08:A6:6A:AF:A8:75:92:F9:A4:56:61:B0:18:81
X509v3 Authority Key Identifier:
keyid:96:2F:D6:88:1D:C6:85:9B:7A:FA:A9:F7:50:A6:DD:8B:BD:69:E9:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/li_WiB3GhZt6-qn3UKbdi71p6Zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/446e9a-963f-44cb-a42d-48741009fc1e/1/li_WiB3GhZt6-qn3UKbdi71p6Zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:86:12:ed:f7:8f:1a:db:94:23:71:12:25:bf:49:56:a1:57:
8a:ee:c1:b9:0f:ad:d3:c0:41:d0:b5:9d:65:3b:db:9f:ce:e2:
88:e9:87:a0:60:6b:d4:73:56:d5:a1:6d:a5:35:c2:9b:48:b8:
12:a0:6e:cf:29:45:ca:76:04:9f:bd:35:c7:fc:73:3b:f2:db:
0b:15:dc:aa:ef:4f:20:85:a0:e3:d8:0c:3f:94:4f:60:49:28:
57:12:2e:5a:6e:f2:9b:64:81:11:cc:43:70:06:ae:48:14:64:
59:09:c5:55:c9:3f:8c:e3:41:0c:f1:30:e7:b5:56:b5:54:24:
43:b9:44:5b:28:bf:0e:5e:09:44:7f:eb:5f:a1:b2:77:7b:27:
d9:b5:98:e5:f7:eb:7c:c3:7f:5d:89:6a:f6:fe:9c:d0:89:66:
f8:44:ac:ed:64:61:a5:89:7b:14:4c:9d:ea:00:dd:5b:ab:9b:
83:55:a1:9f:d9:f7:60:63:d5:27:36:94:96:72:10:0c:20:26:
86:3e:2a:37:76:59:b7:3f:4c:f3:17:07:e9:dd:62:95:4a:2a:
28:d6:b5:c7:20:33:ba:3d:ee:45:3e:67:c0:cd:6b:b6:da:21:
6c:73:b9:b0:93:ff:6e:99:54:48:bf:97:2f:dd:25:37:de:1e:
60:bb:01:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQkCQzgRNQNZgXg0gtd3rlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MmZkNjg4MWRjNjg1OWI3YWZhYTlmNzUwYTZkZDhiYmQ2
OWU5OWEwHhcNMjUwMjE2MjEwMDM2WhcNMjUwMjE3MjEwMDM2WjAzMTEwLwYDVQQD
Eyg3ZGE5ODU5OTRiYjIwOGE2NmFhZmE4NzU5MmY5YTQ1NjYxYjAxODgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCoNramZB7UmrO8JXBFZw51Uv87T
1xd0JO3M4oNVoQ+gYz//nFJ4Ww2JIztBes7efEF4AaPrerYRdjkaKV8TUMviZ0HO
p4OAibSU4UtGzEMKmsKon8wV3ug8lkxgFHHmLlfaHBmSUof5jil3jlXgrRkKMwIF
P3du5qk30AqGHZcrn1VaF7FaUFLA6UcgIu0UhmG9x/G/4FoIxdUv8UYEKrnmG1rC
JMuC+BnvAsQQtVsmwRpquOKLYkNFswfko+bb2yFeKCk3YF6ld+ke5dwaOeTj+Y9V
AzyQz3M+Q9hJqNSBe6JwXmIn8n1J7At2mgYodwF9r4/jBQLMTsi1aU2ZfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH2phZlLsgimaq+odZL5pFZhsBiBMB8GA1UdIwQY
MBaAFJYv1ogdxoWbevqp91Cm3Yu9aemaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGlfV2lCM0doWnQ2LXFuM1VLYmRpNzFwNlpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS80NDZlOWEtOTYzZi00NGNiLWE0MmQt
NDg3NDEwMDlmYzFlLzEvbGlfV2lCM0doWnQ2LXFuM1VLYmRpNzFwNlpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS80NDZlOWEtOTYzZi00NGNiLWE0MmQtNDg3NDEwMDlmYzFl
LzEvbGlfV2lCM0doWnQ2LXFuM1VLYmRpNzFwNlpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaIYS7feP
GtuUI3ESJb9JVqFXiu7BuQ+t08BB0LWdZTvbn87iiOmHoGBr1HNW1aFtpTXCm0i4
EqBuzylFynYEn701x/xzO/LbCxXcqu9PIIWg49gMP5RPYEkoVxIuWm7ym2SBEcxD
cAauSBRkWQnFVck/jONBDPEw57VWtVQkQ7lEWyi/Dl4JRH/rX6Gyd3sn2bWY5ffr
fMN/XYlq9v6c0Ilm+ESs7WRhpYl7FEyd6gDdW6ubg1Whn9n3YGPVJzaUlnIQDCAm
hj4qN3ZZtz9M8xcH6d1ilUoqKNa1xyAzuj3uRT5nwM1rttohbHO5sJP/bplUSL+X
L90lN94eYLsBQg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:19 2025 by rpki-client