Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
File: lWrZqVrBWALlg0GAigTeU9nPgvE.mft (raw, json)
Hash identifier: YZjsZovk/b++JOaCbNtuMuVtgBZdrNgXQ2vZyhOpxxM=
Subject key identifier: FE:AF:69:87:2F:E6:EE:8C:B6:D4:BD:56:AB:37:55:48:8A:FC:71:12
Authority key identifier: 95:6A:D9:A9:5A:C1:58:02:E5:83:41:80:8A:04:DE:53:D9:CF:82:F1
Certificate issuer: /CN=956ad9a95ac15802e58341808a04de53d9cf82f1
Certificate serial: 01964D7EC539E08E700B32A96C69F79BA0CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
Manifest number: 02D6
Signing time: Sat 19 Apr 2025 10:01:15 +0000
Manifest this update: Sat 19 Apr 2025 10:01:15 +0000
Manifest next update: Sun 20 Apr 2025 10:01:15 +0000
Files and hashes: 1: 4YBXe8RE4S0Fk9SfNj4wJTcLrVk.roa (hash: WUAHcqSoRFHEIzq6sNJ7rw55t9mNYQd5wmOKsglGkH0=)
2: lWrZqVrBWALlg0GAigTeU9nPgvE.crl (hash: sSGyt30L2QMlxHWk82FGZ9fkTS2iksFOTegWNR3PKYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:c5:39:e0:8e:70:0b:32:a9:6c:69:f7:9b:a0:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=956ad9a95ac15802e58341808a04de53d9cf82f1
Validity
Not Before: Apr 19 10:01:15 2025 GMT
Not After : Apr 20 10:01:15 2025 GMT
Subject: CN=feaf69872fe6ee8cb6d4bd56ab3755488afc7112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:81:60:49:c3:c7:5a:9b:4b:5a:bd:e2:a0:7f:
96:b1:cc:29:93:4a:cd:0c:07:2f:fb:c7:2a:e0:6d:
c4:40:5a:b7:f4:08:93:bb:f9:92:3c:b5:bf:c2:a5:
29:24:9a:d1:87:9d:7c:2e:b3:99:f1:3b:dd:e4:9a:
03:1a:34:5c:e0:11:c0:d8:d9:47:ce:34:bb:3c:3f:
c9:6f:52:2b:58:7d:63:93:5c:30:61:95:52:5a:b2:
20:4b:f0:d5:73:a2:6c:55:f4:84:31:08:b2:73:54:
0b:fe:78:7b:c1:cf:86:55:bf:d1:e6:81:39:50:3d:
4f:0c:32:cc:ef:17:03:3d:6e:82:71:73:cc:92:d2:
37:67:99:c0:83:e8:89:d5:4c:c2:da:25:c1:26:3f:
2d:f3:52:52:fd:7b:76:f4:e1:58:34:0c:d9:02:36:
79:71:98:06:8f:e5:a5:2f:60:c4:08:9f:f7:ec:d6:
da:89:17:34:c8:d4:7b:2c:64:70:02:6c:6c:f3:c0:
b8:04:f7:86:6d:32:2d:38:73:64:78:c1:ea:ee:2d:
5c:4f:0e:44:d4:7c:ee:a3:b6:44:65:8c:9b:95:99:
af:bf:0a:90:23:11:7a:61:4c:47:14:7b:ab:c5:a2:
65:cc:6a:7d:ad:38:63:96:1e:6f:c5:f7:b9:3f:82:
dd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:AF:69:87:2F:E6:EE:8C:B6:D4:BD:56:AB:37:55:48:8A:FC:71:12
X509v3 Authority Key Identifier:
keyid:95:6A:D9:A9:5A:C1:58:02:E5:83:41:80:8A:04:DE:53:D9:CF:82:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWrZqVrBWALlg0GAigTeU9nPgvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a413c6-08ba-42d8-94ca-d8721b80dd79/1/lWrZqVrBWALlg0GAigTeU9nPgvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:1d:47:92:a3:ff:1a:6f:a2:c2:59:42:3c:2a:c5:01:89:f5:
bf:90:b7:1e:d5:9b:4f:c2:5c:1f:8e:a8:db:7d:8b:37:1a:ab:
ea:09:f1:72:5f:ef:94:82:a9:df:f6:5f:7e:64:80:23:76:3b:
98:ce:a4:dc:22:53:68:72:ca:77:ec:ac:83:81:80:65:64:52:
e6:32:48:9c:85:c6:3b:ee:71:c5:ce:1c:38:f6:25:67:7c:70:
4d:e8:43:01:14:ee:67:c4:0b:d0:dc:ef:a1:59:92:dc:59:6a:
51:89:5a:52:45:36:27:a3:c5:3f:74:24:f9:45:8d:23:ca:30:
7c:bd:40:3f:85:39:58:7e:71:2c:c5:cd:02:45:a8:22:87:c2:
7f:9c:ae:ec:bf:af:6e:a4:59:33:69:cb:7c:ab:75:fd:b5:5a:
5e:3e:0b:9c:ce:84:f6:6f:ee:b6:c1:7e:0e:f8:69:a5:45:5d:
42:1c:84:a9:26:59:02:14:60:9f:89:c6:d0:f5:8b:18:de:6c:
08:3f:34:9a:8e:5b:71:79:75:a3:e2:d8:50:b6:1c:e9:18:09:
c3:88:74:79:d7:c8:66:85:70:c9:be:6e:ed:f0:59:8d:29:11:
ba:4a:96:af:0f:98:65:bb:4b:5c:65:79:94:09:0c:ec:20:fe:
01:75:3d:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZNfsU54I5wCzKpbGn3m6DMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NmFkOWE5NWFjMTU4MDJlNTgzNDE4MDhhMDRkZTUzZDlj
ZjgyZjEwHhcNMjUwNDE5MTAwMTE1WhcNMjUwNDIwMTAwMTE1WjAzMTEwLwYDVQQD
EyhmZWFmNjk4NzJmZTZlZThjYjZkNGJkNTZhYjM3NTU0ODhhZmM3MTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoFgScPHWptLWr3ioH+Wscwpk0rN
DAcv+8cq4G3EQFq39AiTu/mSPLW/wqUpJJrRh518LrOZ8Tvd5JoDGjRc4BHA2NlH
zjS7PD/Jb1IrWH1jk1wwYZVSWrIgS/DVc6JsVfSEMQiyc1QL/nh7wc+GVb/R5oE5
UD1PDDLM7xcDPW6CcXPMktI3Z5nAg+iJ1UzC2iXBJj8t81JS/Xt29OFYNAzZAjZ5
cZgGj+WlL2DECJ/37NbaiRc0yNR7LGRwAmxs88C4BPeGbTItOHNkeMHq7i1cTw5E
1Hzuo7ZEZYyblZmvvwqQIxF6YUxHFHurxaJlzGp9rThjlh5vxfe5P4LdzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP6vaYcv5u6MttS9Vqs3VUiK/HESMB8GA1UdIwQY
MBaAFJVq2alawVgC5YNBgIoE3lPZz4LxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFdyWnFWckJXQUxsZzBHQWlnVGVVOW5QZ3ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9hNDEzYzYtMDhiYS00MmQ4LTk0Y2Et
ZDg3MjFiODBkZDc5LzEvbFdyWnFWckJXQUxsZzBHQWlnVGVVOW5QZ3ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9hNDEzYzYtMDhiYS00MmQ4LTk0Y2EtZDg3MjFiODBkZDc5
LzEvbFdyWnFWckJXQUxsZzBHQWlnVGVVOW5QZ3ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACB1HkqP/
Gm+iwllCPCrFAYn1v5C3HtWbT8JcH46o232LNxqr6gnxcl/vlIKp3/ZffmSAI3Y7
mM6k3CJTaHLKd+ysg4GAZWRS5jJInIXGO+5xxc4cOPYlZ3xwTehDARTuZ8QL0Nzv
oVmS3FlqUYlaUkU2J6PFP3Qk+UWNI8owfL1AP4U5WH5xLMXNAkWoIofCf5yu7L+v
bqRZM2nLfKt1/bVaXj4LnM6E9m/utsF+DvhppUVdQhyEqSZZAhRgn4nG0PWLGN5s
CD80mo5bcXl1o+LYULYc6RgJw4h0edfIZoVwyb5u7fBZjSkRukqWrw+YZbtLXGV5
lAkM7CD+AXU9uA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 14:40:22 2025 by rpki-client