Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
File: 2jIgJypGmu1lzCp_bZf8qZH37IE.mft (raw, json)
Hash identifier: GYkkIgPzB0Fm9EddWfqEOvwrdyegPysOEytTjXuJInI=
Subject key identifier: 1D:62:B4:4A:79:CC:07:D0:F0:06:A6:F4:3D:32:D0:6F:05:C7:E7:0D
Authority key identifier: DA:32:20:27:2A:46:9A:ED:65:CC:2A:7F:6D:97:FC:A9:91:F7:EC:81
Certificate issuer: /CN=da3220272a469aed65cc2a7f6d97fca991f7ec81
Certificate serial: 019652A4C769A94C8C9E11D1FDD1AC0D9E30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
Manifest number: 14FB
Signing time: Sun 20 Apr 2025 10:00:52 +0000
Manifest this update: Sun 20 Apr 2025 10:00:52 +0000
Manifest next update: Mon 21 Apr 2025 10:00:52 +0000
Files and hashes: 1: 2jIgJypGmu1lzCp_bZf8qZH37IE.crl (hash: PCEKJeZF5zA35oQw+f3ku6FF9lsWYcYpUVVxIIwvwwA=)
2: G5AySBQmGTZguSR2UN46mLZeA6A.roa (hash: 6MYLur+lADg+zzLuGL4/PdmDjdeT2Db312IWeWciAtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:c7:69:a9:4c:8c:9e:11:d1:fd:d1:ac:0d:9e:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da3220272a469aed65cc2a7f6d97fca991f7ec81
Validity
Not Before: Apr 20 10:00:52 2025 GMT
Not After : Apr 21 10:00:52 2025 GMT
Subject: CN=1d62b44a79cc07d0f006a6f43d32d06f05c7e70d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:38:65:a3:14:03:b3:0a:e3:51:27:e7:97:8a:
36:21:19:82:c4:03:02:1f:1c:5a:ff:d5:ae:1c:81:
be:19:d1:ec:40:89:a3:ce:09:08:ae:7f:00:54:d8:
c4:05:dd:29:35:80:5c:85:ab:7b:3a:94:cd:26:e3:
02:9f:8b:c0:d1:f5:0f:ce:12:ef:44:ec:9c:b0:f0:
8e:72:b0:f0:51:a4:02:55:da:8c:22:6d:15:40:3a:
8b:c2:bf:d1:53:62:89:ff:55:22:23:ec:55:79:d3:
d6:ce:84:b5:95:c4:60:9f:90:ca:c1:53:0d:4f:57:
9a:db:16:41:3e:a0:0c:86:3f:92:23:59:65:98:13:
82:f6:59:f5:7d:b6:31:58:03:52:2f:7f:49:7d:52:
7e:7b:cc:04:86:ae:fb:a3:e2:db:bb:e5:5f:79:00:
70:2c:85:d6:6e:e6:d5:18:d7:43:17:72:c7:0f:59:
bf:c2:72:ae:b0:60:17:03:b0:51:55:a2:88:c7:7f:
c1:c3:76:78:f6:e1:bf:d2:5b:5e:42:3c:43:80:21:
01:a1:23:83:14:fb:d0:56:07:05:f6:24:d2:aa:93:
47:47:6c:6f:b5:2f:58:b2:62:74:b2:b7:83:dd:46:
b9:0d:41:14:9a:1a:a3:7e:a6:a4:2e:33:72:96:e2:
77:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:62:B4:4A:79:CC:07:D0:F0:06:A6:F4:3D:32:D0:6F:05:C7:E7:0D
X509v3 Authority Key Identifier:
keyid:DA:32:20:27:2A:46:9A:ED:65:CC:2A:7F:6D:97:FC:A9:91:F7:EC:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:5b:bf:e7:c9:50:d4:85:4e:2f:87:1f:c8:3d:29:06:e9:ae:
1b:7f:93:82:9e:5a:8d:9d:66:4d:6c:c7:4f:6d:ce:7a:a3:cf:
d6:77:a4:c3:29:5f:07:c9:da:08:cd:23:df:f6:dc:db:9b:66:
b5:f9:0b:d5:6b:cc:02:5b:0b:b6:82:31:d8:33:cd:76:e4:a1:
bd:95:aa:f3:e6:ec:c2:6d:18:43:83:f6:d2:55:fe:ec:8c:70:
e5:02:1c:63:76:57:9f:ef:fb:17:da:72:48:e9:cf:b2:20:09:
f7:eb:f5:a9:a2:8e:91:ed:97:1a:c0:bb:98:8b:7b:55:6a:5a:
74:cf:7b:11:bb:da:a2:a7:74:46:28:db:ce:c0:b5:80:cb:c8:
8f:4c:f3:e5:fc:a1:51:29:33:22:46:e4:21:24:95:ec:fd:76:
92:a9:55:12:78:18:16:e8:52:5c:89:57:78:ba:b7:fd:3f:7c:
c1:2b:5a:f8:2e:10:c2:ab:1e:b7:44:e3:36:e3:15:e0:99:53:
9c:cf:08:38:f5:02:8e:34:5c:7b:0c:2f:db:8d:e0:57:71:0e:
cc:04:88:d3:99:08:4e:c0:af:d5:56:5d:48:b8:ef:f1:53:08:
ef:51:f7:55:81:8a:3b:af:e6:6d:58:b5:69:b7:af:08:59:a9:
43:a4:eb:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZSpMdpqUyMnhHR/dGsDZ4wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMzIyMDI3MmE0NjlhZWQ2NWNjMmE3ZjZkOTdmY2E5OTFm
N2VjODEwHhcNMjUwNDIwMTAwMDUyWhcNMjUwNDIxMTAwMDUyWjAzMTEwLwYDVQQD
EygxZDYyYjQ0YTc5Y2MwN2QwZjAwNmE2ZjQzZDMyZDA2ZjA1YzdlNzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDhloxQDswrjUSfnl4o2IRmCxAMC
Hxxa/9WuHIG+GdHsQImjzgkIrn8AVNjEBd0pNYBchat7OpTNJuMCn4vA0fUPzhLv
ROycsPCOcrDwUaQCVdqMIm0VQDqLwr/RU2KJ/1UiI+xVedPWzoS1lcRgn5DKwVMN
T1ea2xZBPqAMhj+SI1llmBOC9ln1fbYxWANSL39JfVJ+e8wEhq77o+Lbu+VfeQBw
LIXWbubVGNdDF3LHD1m/wnKusGAXA7BRVaKIx3/Bw3Z49uG/0lteQjxDgCEBoSOD
FPvQVgcF9iTSqpNHR2xvtS9YsmJ0sreD3Ua5DUEUmhqjfqakLjNyluJ3FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB1itEp5zAfQ8Aam9D0y0G8Fx+cNMB8GA1UdIwQY
MBaAFNoyICcqRprtZcwqf22X/KmR9+yBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmpJZ0p5cEdtdTFsekNwX2JaZjhxWkgzN0lFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9mNDExNmEtN2Y0MC00NTI5LWEzY2Mt
MjQxZWVjZmY5YWIwLzEvMmpJZ0p5cEdtdTFsekNwX2JaZjhxWkgzN0lFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9mNDExNmEtN2Y0MC00NTI5LWEzY2MtMjQxZWVjZmY5YWIw
LzEvMmpJZ0p5cEdtdTFsekNwX2JaZjhxWkgzN0lFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADlu/58lQ
1IVOL4cfyD0pBumuG3+Tgp5ajZ1mTWzHT23OeqPP1nekwylfB8naCM0j3/bc25tm
tfkL1WvMAlsLtoIx2DPNduShvZWq8+bswm0YQ4P20lX+7Ixw5QIcY3ZXn+/7F9py
SOnPsiAJ9+v1qaKOke2XGsC7mIt7VWpadM97Ebvaoqd0RijbzsC1gMvIj0zz5fyh
USkzIkbkISSV7P12kqlVEngYFuhSXIlXeLq3/T98wSta+C4Qwqset0TjNuMV4JlT
nM8IOPUCjjRcewwv243gV3EOzASI05kITsCv1VZdSLjv8VMI71H3VYGKO6/mbVi1
abevCFmpQ6TrGA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:17:38 2025 by rpki-client