Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft
File: L708fpx3-aiJSQVlDX9aQ5oHJl0.mft (raw, json)
Hash identifier: 1R//t7mZorul2gsKSThAbl7NemVvdw3XX2vB9XD+QXE=
Subject key identifier: FA:C0:CF:5D:E2:12:90:C4:68:0E:75:6B:FF:21:13:70:CA:28:35:13
Authority key identifier: 2F:BD:3C:7E:9C:77:F9:A8:89:49:05:65:0D:7F:5A:43:9A:07:26:5D
Certificate issuer: /CN=2fbd3c7e9c77f9a8894905650d7f5a439a07265d
Certificate serial: 019657948DE0D95BD0B652989E8703E71DB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L708fpx3-aiJSQVlDX9aQ5oHJl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft
Manifest number: 0B5A
Signing time: Mon 21 Apr 2025 09:01:15 +0000
Manifest this update: Mon 21 Apr 2025 09:01:15 +0000
Manifest next update: Tue 22 Apr 2025 09:01:15 +0000
Files and hashes: 1: L708fpx3-aiJSQVlDX9aQ5oHJl0.crl (hash: PLPIpXP+KWKFOcvHyNPwCrhV+qoyXeha4tn3OviNqFQ=)
2: poxmGDjmFhEykYFtUrK86QVNSBE.roa (hash: LiFoIRCZoOCJ6MEjwTK5FSST0U+wUgy2+UPXqJfWuqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/L708fpx3-aiJSQVlDX9aQ5oHJl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:94:8d:e0:d9:5b:d0:b6:52:98:9e:87:03:e7:1d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fbd3c7e9c77f9a8894905650d7f5a439a07265d
Validity
Not Before: Apr 21 09:01:15 2025 GMT
Not After : Apr 22 09:01:15 2025 GMT
Subject: CN=fac0cf5de21290c4680e756bff211370ca283513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:39:bd:2f:88:1e:f3:0d:36:88:1f:b6:07:3e:
65:97:b2:2d:9e:ff:bd:44:0e:42:60:26:d6:0e:2d:
c5:22:fb:c0:fc:ff:48:06:99:74:3d:d4:d0:96:4d:
fe:cd:1b:c5:dc:85:b1:b4:66:be:1e:dc:28:80:2c:
67:e0:66:dc:3f:d2:a7:88:db:c9:7b:1e:98:8e:80:
98:a0:fc:88:6c:b9:3e:05:bf:98:1b:f1:ab:36:2d:
f2:d3:02:e5:f1:1e:d5:e3:85:4e:63:f9:82:ec:36:
e4:9c:7a:d0:59:e0:fe:06:13:12:3f:02:92:12:23:
ee:fd:10:4f:0d:26:e8:ef:cb:bd:66:94:85:64:24:
bf:a5:00:be:8f:03:74:06:86:98:29:8d:70:12:f1:
92:a6:e2:6d:93:ec:4d:ab:52:09:c6:80:ca:d9:ab:
78:5e:3d:1b:b3:0c:a6:83:0d:91:5b:63:46:17:53:
26:1f:5f:46:bc:6e:86:b4:ba:e0:11:b6:a8:89:61:
aa:ac:e8:06:52:4d:fd:d1:49:53:c7:4a:ba:3b:e5:
be:c1:f2:6b:71:bf:c9:29:c3:8c:b3:11:7c:2d:ea:
02:e1:9a:32:5a:e6:ba:b9:40:b9:d0:03:6c:57:3f:
30:85:a5:a8:10:ce:d6:7e:51:a0:ce:d9:30:4d:28:
3c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C0:CF:5D:E2:12:90:C4:68:0E:75:6B:FF:21:13:70:CA:28:35:13
X509v3 Authority Key Identifier:
keyid:2F:BD:3C:7E:9C:77:F9:A8:89:49:05:65:0D:7F:5A:43:9A:07:26:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L708fpx3-aiJSQVlDX9aQ5oHJl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:af:1a:c4:82:6d:03:68:c5:93:34:90:6e:7f:e7:aa:ea:a2:
bc:cd:8c:6d:29:39:bf:d7:1a:1f:b8:0e:fc:1d:a4:94:78:15:
dd:f9:25:3c:00:e5:f1:44:de:92:ed:94:80:19:6a:f3:1b:cd:
60:c3:11:48:89:f7:a3:f2:f1:bc:45:38:7e:be:2d:80:19:d2:
c0:66:ad:e3:2a:71:9a:7a:d7:ef:b1:4f:0e:6e:98:f8:95:fe:
f5:75:9d:df:19:a8:b0:ce:4d:f8:b1:c9:08:4c:bf:43:ef:5d:
a6:e1:5f:57:6a:f9:9d:9e:25:7a:7d:12:e9:8e:eb:74:88:3a:
85:6c:cf:c5:d5:ff:82:91:22:6e:7d:bf:41:d7:6b:5b:72:4b:
30:27:75:02:ec:16:94:b9:bd:eb:d9:47:02:a9:bd:20:bf:87:
3e:cb:c2:c3:8e:b7:8c:1a:19:7e:86:60:ef:22:f7:e5:99:16:
c5:9e:9b:3d:63:da:65:a6:57:6f:05:13:6c:c3:68:a9:a8:f5:
c5:6c:39:1d:d3:14:d1:c9:05:f0:da:59:5c:d9:89:5f:81:5d:
25:89:59:45:b0:e3:49:b8:64:35:6d:cc:04:c4:ba:30:40:97:
fe:bb:28:cf:fd:7d:5e:6f:ff:53:80:7a:fc:47:c4:c2:b0:1a:
51:cc:40:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZXlI3g2VvQtlKYnocD5x2xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYmQzYzdlOWM3N2Y5YTg4OTQ5MDU2NTBkN2Y1YTQzOWEw
NzI2NWQwHhcNMjUwNDIxMDkwMTE1WhcNMjUwNDIyMDkwMTE1WjAzMTEwLwYDVQQD
EyhmYWMwY2Y1ZGUyMTI5MGM0NjgwZTc1NmJmZjIxMTM3MGNhMjgzNTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jm9L4ge8w02iB+2Bz5ll7Itnv+9
RA5CYCbWDi3FIvvA/P9IBpl0PdTQlk3+zRvF3IWxtGa+HtwogCxn4GbcP9KniNvJ
ex6YjoCYoPyIbLk+Bb+YG/GrNi3y0wLl8R7V44VOY/mC7DbknHrQWeD+BhMSPwKS
EiPu/RBPDSbo78u9ZpSFZCS/pQC+jwN0BoaYKY1wEvGSpuJtk+xNq1IJxoDK2at4
Xj0bswymgw2RW2NGF1MmH19GvG6GtLrgEbaoiWGqrOgGUk390UlTx0q6O+W+wfJr
cb/JKcOMsxF8LeoC4ZoyWua6uUC50ANsVz8whaWoEM7WflGgztkwTSg8BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPrAz13iEpDEaA51a/8hE3DKKDUTMB8GA1UdIwQY
MBaAFC+9PH6cd/moiUkFZQ1/WkOaByZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDcwOGZweDMtYWlKU1FWbERYOWFRNW9ISmwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9lZWJkY2QtODk2Zi00Njc1LWEyNDYt
NWRjYmJkZTM1ZGNkLzEvTDcwOGZweDMtYWlKU1FWbERYOWFRNW9ISmwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9lZWJkY2QtODk2Zi00Njc1LWEyNDYtNWRjYmJkZTM1ZGNk
LzEvTDcwOGZweDMtYWlKU1FWbERYOWFRNW9ISmwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnK8axIJt
A2jFkzSQbn/nquqivM2MbSk5v9caH7gO/B2klHgV3fklPADl8UTeku2UgBlq8xvN
YMMRSIn3o/LxvEU4fr4tgBnSwGat4ypxmnrX77FPDm6Y+JX+9XWd3xmosM5N+LHJ
CEy/Q+9dpuFfV2r5nZ4len0S6Y7rdIg6hWzPxdX/gpEibn2/QddrW3JLMCd1AuwW
lLm969lHAqm9IL+HPsvCw463jBoZfoZg7yL35ZkWxZ6bPWPaZaZXbwUTbMNoqaj1
xWw5HdMU0ckF8NpZXNmJX4FdJYlZRbDjSbhkNW3MBMS6MECX/rsoz/19Xm//U4B6
/EfEwrAaUcxA0Q==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:38:03 2025 by rpki-client