Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
File: 2P9x8rGo1ir0Rqkror3qM_m2ndw.mft (raw, json)
Hash identifier: BrQdkHsnF001TAHScua1/DgBZ1YMFfc/BV9idaVV6GU=
Subject key identifier: 5D:B7:86:18:AA:94:A7:6D:44:88:9B:93:44:B4:E8:C4:46:4D:54:D1
Authority key identifier: D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
Certificate issuer: /CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Certificate serial: 019655DCED175DEFAA49CD4E9E743DEF64D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
Manifest number: 0C43
Signing time: Mon 21 Apr 2025 01:01:04 +0000
Manifest this update: Mon 21 Apr 2025 01:01:04 +0000
Manifest next update: Tue 22 Apr 2025 01:01:04 +0000
Files and hashes: 1: 0BDV4PoV5X4F__dwougvjtVPUss.roa (hash: 5WR5nSOIx+2EG8VqhNW6h1a6KSmwaUeuiPobGGbu1LU=)
2: 2P9x8rGo1ir0Rqkror3qM_m2ndw.crl (hash: ZvKyWR1BATgrm8PSwQYkNrhx7TWo2B8qX1leeeIxtlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:ed:17:5d:ef:aa:49:cd:4e:9e:74:3d:ef:64:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Validity
Not Before: Apr 21 01:01:04 2025 GMT
Not After : Apr 22 01:01:04 2025 GMT
Subject: CN=5db78618aa94a76d44889b9344b4e8c4464d54d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d0:db:d9:5f:17:aa:54:c3:57:64:09:3f:03:
ce:e5:40:5c:ed:2d:97:31:22:d1:9f:7e:c0:f4:ea:
56:c0:63:0a:33:eb:d8:80:ab:fc:54:a1:03:ac:59:
98:89:98:f0:91:05:8f:3c:21:21:65:8d:64:72:34:
b1:a7:0f:a4:28:f4:dc:66:bb:4a:d2:ea:6e:d2:98:
2f:97:c0:0c:f9:31:da:d0:64:50:6a:21:d6:85:65:
de:5c:49:48:f6:d7:f3:e0:32:f2:ba:45:a4:a0:34:
6a:64:ee:1d:e0:31:47:56:37:8c:e6:ea:82:c6:79:
a0:28:30:e9:e7:be:52:05:7d:4c:5b:68:8b:15:2a:
af:9b:69:1a:3f:b3:1e:31:b9:50:88:37:87:70:8d:
74:96:f6:6c:44:8f:67:86:b6:6d:72:c0:bf:95:c5:
2c:2d:bd:c8:55:59:88:3e:4f:85:04:c9:6b:61:ae:
65:c2:31:b8:12:9d:ca:4f:31:4d:9f:92:df:53:82:
86:0c:7b:bf:f2:e1:3e:54:bb:81:bb:a2:5d:5f:f3:
16:c3:1e:8c:f9:57:d0:2e:30:57:35:d0:6a:aa:c8:
9d:22:6f:e8:37:03:03:40:dd:66:aa:65:6a:5a:c2:
f0:d5:a8:7e:fd:6f:ba:ce:0f:5b:34:bc:d5:58:fd:
21:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B7:86:18:AA:94:A7:6D:44:88:9B:93:44:B4:E8:C4:46:4D:54:D1
X509v3 Authority Key Identifier:
keyid:D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:19:97:a2:0b:2a:3c:9b:87:31:fc:ab:a7:81:a2:29:df:6a:
8c:0f:64:8e:7f:3f:d2:c9:55:7b:3c:dc:59:05:39:cb:ce:06:
3c:e5:5c:f1:54:80:3a:56:56:62:5b:42:57:e9:c9:49:f3:ef:
a0:04:b4:3e:71:22:63:5f:c5:c9:be:74:3e:53:9f:0a:6a:ca:
d5:96:6c:68:11:58:87:d6:27:2f:ed:59:19:5a:7e:5f:cc:d2:
20:e0:be:5e:14:83:52:5e:d4:8d:2a:19:50:ae:24:c6:0a:cd:
16:a1:32:72:c0:ed:d3:2e:25:53:cc:bd:13:3b:43:37:cc:63:
95:6c:4b:c2:07:92:49:0e:89:53:26:8c:c0:29:5f:fc:f8:f9:
ca:50:38:1e:56:0e:f7:6a:59:c7:39:59:5a:59:bf:e7:5e:3d:
34:74:20:8e:fe:2c:dd:13:1f:80:78:10:09:4f:6a:5b:07:c4:
15:d2:a7:32:76:73:23:b6:ef:e8:cf:33:9d:cb:7c:57:76:59:
a7:cc:12:99:aa:79:e3:30:a6:06:6e:f8:4b:67:ba:cc:a0:fd:
ab:25:28:d6:08:d2:ed:ca:4d:cd:6e:b9:62:ad:db:9b:6e:34:
04:21:f5:08:ce:2d:57:59:fb:62:4b:88:06:2a:2d:d0:f2:2c:
1a:e1:21:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZV3O0XXe+qSc1OnnQ972TXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ZmY3MWYyYjFhOGQ2MmFmNDQ2YTkyYmEyYmRlYTMzZjli
NjlkZGMwHhcNMjUwNDIxMDEwMTA0WhcNMjUwNDIyMDEwMTA0WjAzMTEwLwYDVQQD
Eyg1ZGI3ODYxOGFhOTRhNzZkNDQ4ODliOTM0NGI0ZThjNDQ2NGQ1NGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9Db2V8XqlTDV2QJPwPO5UBc7S2X
MSLRn37A9OpWwGMKM+vYgKv8VKEDrFmYiZjwkQWPPCEhZY1kcjSxpw+kKPTcZrtK
0upu0pgvl8AM+THa0GRQaiHWhWXeXElI9tfz4DLyukWkoDRqZO4d4DFHVjeM5uqC
xnmgKDDp575SBX1MW2iLFSqvm2kaP7MeMblQiDeHcI10lvZsRI9nhrZtcsC/lcUs
Lb3IVVmIPk+FBMlrYa5lwjG4Ep3KTzFNn5LfU4KGDHu/8uE+VLuBu6JdX/MWwx6M
+VfQLjBXNdBqqsidIm/oNwMDQN1mqmVqWsLw1ah+/W+6zg9bNLzVWP0hqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF23hhiqlKdtRIibk0S06MRGTVTRMB8GA1UdIwQY
MBaAFNj/cfKxqNYq9EapK6K96jP5tp3cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlA5eDhyR28xaXIwUnFrcm9yM3FNX20ybmR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lYTcxZDQtNGRiYi00NDUxLWIyNmIt
M2I3NWE1NjdmNzNhLzEvMlA5eDhyR28xaXIwUnFrcm9yM3FNX20ybmR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9lYTcxZDQtNGRiYi00NDUxLWIyNmItM2I3NWE1NjdmNzNh
LzEvMlA5eDhyR28xaXIwUnFrcm9yM3FNX20ybmR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOhmXogsq
PJuHMfyrp4GiKd9qjA9kjn8/0slVezzcWQU5y84GPOVc8VSAOlZWYltCV+nJSfPv
oAS0PnEiY1/Fyb50PlOfCmrK1ZZsaBFYh9YnL+1ZGVp+X8zSIOC+XhSDUl7UjSoZ
UK4kxgrNFqEycsDt0y4lU8y9EztDN8xjlWxLwgeSSQ6JUyaMwClf/Pj5ylA4HlYO
92pZxzlZWlm/5149NHQgjv4s3RMfgHgQCU9qWwfEFdKnMnZzI7bv6M8znct8V3ZZ
p8wSmap54zCmBm74S2e6zKD9qyUo1gjS7cpNzW65Yq3bm240BCH1CM4tV1n7YkuI
Biot0PIsGuEhRg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:41 2025 by rpki-client