Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
File: 2KmU2EbLZpboicHMMiheCyOvx3c.mft (raw, json)
Hash identifier: InYhv9fefEiUrFHeHtXLKQcQqMJxGJKjyFtHsTHysM8=
Subject key identifier: FD:0A:36:2F:32:37:19:DA:3C:17:FB:DF:E6:EF:BB:1B:70:49:35:1C
Authority key identifier: D8:A9:94:D8:46:CB:66:96:E8:89:C1:CC:32:28:5E:0B:23:AF:C7:77
Certificate issuer: /CN=d8a994d846cb6696e889c1cc32285e0b23afc777
Certificate serial: 01965424EA27E54101FB481F6477637560B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
Manifest number: 13E7
Signing time: Sun 20 Apr 2025 17:00:27 +0000
Manifest this update: Sun 20 Apr 2025 17:00:27 +0000
Manifest next update: Mon 21 Apr 2025 17:00:27 +0000
Files and hashes: 1: 2KmU2EbLZpboicHMMiheCyOvx3c.crl (hash: 1izGk++H4SQwUs804FfjgXosWcZHeJALT27trj8eptw=)
2: UHp7t70IbcWp2bwKOGl-4b8ScF4.roa (hash: UvX//cn/2erRwYZHy/h/xPpeIQdcBl4GUvhBbyEANqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:24:ea:27:e5:41:01:fb:48:1f:64:77:63:75:60:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8a994d846cb6696e889c1cc32285e0b23afc777
Validity
Not Before: Apr 20 17:00:27 2025 GMT
Not After : Apr 21 17:00:27 2025 GMT
Subject: CN=fd0a362f323719da3c17fbdfe6efbb1b7049351c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:06:83:d9:58:6b:0e:aa:b0:39:c0:ef:84:be:
18:fe:e9:9a:86:fa:f7:6a:87:0a:c4:5f:b7:3b:40:
f0:6d:6f:86:9e:5f:27:f9:bf:a6:fc:28:cb:75:a3:
97:08:d3:10:82:3c:10:db:f0:cb:9c:28:98:9a:4f:
b0:9e:44:b2:9b:c7:86:da:71:02:6d:dd:0e:a3:5e:
0f:60:a4:7b:52:db:71:96:70:e8:0c:7b:77:21:de:
db:a1:36:4a:74:89:ea:2e:92:3f:05:4b:df:b2:da:
8e:83:5d:83:93:d8:84:13:7f:69:c8:b5:3a:e6:c1:
01:80:5c:30:33:43:62:17:3b:b5:06:73:48:5b:26:
71:3b:da:cf:a1:15:59:2e:04:b5:cf:1f:85:8d:87:
a7:a9:25:a4:ec:62:0b:6a:8a:c5:84:9c:52:8a:46:
ce:51:bc:5c:c9:f6:84:31:89:d2:40:d5:6b:d3:0c:
cf:a8:8d:a0:e7:07:49:9b:59:72:46:13:55:d1:36:
84:ca:02:95:ce:27:6e:e3:4d:08:52:04:33:27:34:
32:45:e6:07:ee:0a:99:7a:64:2d:1c:49:fb:17:d1:
1b:93:2d:09:84:db:d5:28:cd:06:fd:f9:78:ee:bf:
21:0f:7f:f4:36:34:96:9b:64:0f:e4:ff:23:98:d1:
b7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:0A:36:2F:32:37:19:DA:3C:17:FB:DF:E6:EF:BB:1B:70:49:35:1C
X509v3 Authority Key Identifier:
keyid:D8:A9:94:D8:46:CB:66:96:E8:89:C1:CC:32:28:5E:0B:23:AF:C7:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:73:f3:8d:ab:dc:01:fb:16:31:0f:e8:2b:84:88:ec:b1:cc:
c4:fd:3e:7a:08:3c:f8:07:39:8f:f7:99:f9:4e:88:3e:8b:48:
4c:1a:33:d9:a4:79:64:cf:f1:52:3d:b6:60:79:8d:55:80:a1:
cb:a7:e4:03:5b:f1:d7:9f:4e:96:3a:aa:1d:9d:6a:46:51:17:
69:2f:77:c3:f5:af:5b:62:0e:1c:5b:fe:55:ec:26:47:26:52:
0b:15:68:89:39:d1:80:2d:b1:49:83:b9:48:44:6a:7d:3d:7e:
1d:70:11:d8:58:20:3c:43:32:0d:75:03:3b:15:68:9e:57:45:
14:34:97:07:3c:bf:23:60:01:e5:61:bf:0f:d7:5f:7c:45:e7:
9c:e7:2a:30:c8:da:0e:11:bf:93:e7:2d:eb:25:44:2f:07:11:
8b:dd:26:67:96:6b:c9:bc:83:c1:91:93:68:6f:a6:28:fb:7a:
a5:a0:99:e5:8e:13:0f:cc:92:fa:9d:cb:3f:80:92:44:a5:cf:
e5:03:63:86:6d:76:4e:a1:17:1b:cf:b5:28:d0:01:17:66:d9:
c8:2c:53:e6:27:00:d4:7c:4b:7b:11:f5:24:e5:67:32:e3:31:
74:b8:24:6b:39:8a:7d:96:db:ad:30:31:dc:33:17:b0:e4:c3:
b9:7b:6d:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUJOon5UEB+0gfZHdjdWCxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4YTk5NGQ4NDZjYjY2OTZlODg5YzFjYzMyMjg1ZTBiMjNh
ZmM3NzcwHhcNMjUwNDIwMTcwMDI3WhcNMjUwNDIxMTcwMDI3WjAzMTEwLwYDVQQD
EyhmZDBhMzYyZjMyMzcxOWRhM2MxN2ZiZGZlNmVmYmIxYjcwNDkzNTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QaD2VhrDqqwOcDvhL4Y/umahvr3
aocKxF+3O0DwbW+Gnl8n+b+m/CjLdaOXCNMQgjwQ2/DLnCiYmk+wnkSym8eG2nEC
bd0Oo14PYKR7UttxlnDoDHt3Id7boTZKdInqLpI/BUvfstqOg12Dk9iEE39pyLU6
5sEBgFwwM0NiFzu1BnNIWyZxO9rPoRVZLgS1zx+FjYenqSWk7GILaorFhJxSikbO
UbxcyfaEMYnSQNVr0wzPqI2g5wdJm1lyRhNV0TaEygKVzidu400IUgQzJzQyReYH
7gqZemQtHEn7F9Ebky0JhNvVKM0G/fl47r8hD3/0NjSWm2QP5P8jmNG31QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP0KNi8yNxnaPBf73+bvuxtwSTUcMB8GA1UdIwQY
MBaAFNiplNhGy2aW6InBzDIoXgsjr8d3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkttVTJFYkxacGJvaWNITU1paGVDeU92eDNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9kZDA4ZjctYjZmNC00YjQyLTgxZDct
MjNhYjU5Nzk4NDIxLzEvMkttVTJFYkxacGJvaWNITU1paGVDeU92eDNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9kZDA4ZjctYjZmNC00YjQyLTgxZDctMjNhYjU5Nzk4NDIx
LzEvMkttVTJFYkxacGJvaWNITU1paGVDeU92eDNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARHPzjavc
AfsWMQ/oK4SI7LHMxP0+egg8+Ac5j/eZ+U6IPotITBoz2aR5ZM/xUj22YHmNVYCh
y6fkA1vx159OljqqHZ1qRlEXaS93w/WvW2IOHFv+VewmRyZSCxVoiTnRgC2xSYO5
SERqfT1+HXAR2FggPEMyDXUDOxVonldFFDSXBzy/I2AB5WG/D9dffEXnnOcqMMja
DhG/k+ct6yVELwcRi90mZ5ZrybyDwZGTaG+mKPt6paCZ5Y4TD8yS+p3LP4CSRKXP
5QNjhm12TqEXG8+1KNABF2bZyCxT5icA1HxLexH1JOVnMuMxdLgkazmKfZbbrTAx
3DMXsOTDuXtt3g==
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:12 2025 by rpki-client