Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
File: IL3vO-tBFM_L_rn7TtjamPr0-ok.mft (raw, json)
Hash identifier: 7DSMXD08KyKea2GZ0DQ4+ZXAz+l5IP9RB8XSlWlFrmI=
Subject key identifier: 62:E3:7A:E1:97:FC:87:F3:6D:41:98:0C:B0:D4:27:FE:27:AE:63:98
Authority key identifier: 20:BD:EF:3B:EB:41:14:CF:CB:FE:B9:FB:4E:D8:DA:98:FA:F4:FA:89
Certificate issuer: /CN=20bdef3beb4114cfcbfeb9fb4ed8da98faf4fa89
Certificate serial: 019655380AEF1E9F5F2B7A5293C673B02C75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
Manifest number: 0348
Signing time: Sun 20 Apr 2025 22:00:58 +0000
Manifest this update: Sun 20 Apr 2025 22:00:58 +0000
Manifest next update: Mon 21 Apr 2025 22:00:58 +0000
Files and hashes: 1: IL3vO-tBFM_L_rn7TtjamPr0-ok.crl (hash: dsS2N63Jh8D02c80hatut0ZG1ERA8dRcLazLFxQnB8w=)
2: NaamLFW_oKTnWlrMvBxG2icERPo.roa (hash: jXRLqGssveFil7+PQTA0NwcnC6RLfG7kChNBk9BzBpk=)
3: liwLvjN0YzoFo1ERy-bzjz4VsTg.roa (hash: GDU7sYUZLvs8qPvsE64PL0ZAdRZi5E+mt7+6WSUX+BU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:0a:ef:1e:9f:5f:2b:7a:52:93:c6:73:b0:2c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20bdef3beb4114cfcbfeb9fb4ed8da98faf4fa89
Validity
Not Before: Apr 20 22:00:58 2025 GMT
Not After : Apr 21 22:00:58 2025 GMT
Subject: CN=62e37ae197fc87f36d41980cb0d427fe27ae6398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fc:eb:64:3f:44:a1:f5:d2:c5:58:d0:72:00:
89:26:59:24:9a:d5:df:46:33:8b:bc:22:c6:9a:f2:
4d:b7:f9:e1:ae:5a:90:e9:2f:bd:e7:4e:30:57:ec:
a1:07:79:0d:f6:ad:8e:61:6d:30:13:63:0a:1b:d6:
50:c5:4b:bb:3f:bc:08:7b:5a:16:40:b2:ca:fa:88:
8d:4e:22:97:ab:1c:61:2e:21:a6:01:3f:11:5a:1f:
90:e3:9f:46:25:a0:84:93:76:33:9c:d1:1f:d3:84:
81:6f:cb:4f:de:db:40:ee:50:de:76:e7:11:07:e9:
e8:37:04:44:96:f2:c9:3b:70:57:8b:f2:5d:40:3f:
b9:d9:fd:fa:3b:91:fc:95:03:1a:85:24:38:2b:eb:
9b:c2:18:fd:8d:3b:0c:84:54:d5:48:1c:43:79:29:
86:2d:f1:6e:e9:52:72:e8:68:76:d0:71:c2:4d:6b:
03:bb:63:9d:4d:09:0a:30:08:fd:af:79:ac:58:27:
4c:53:0b:88:21:3b:20:af:da:b5:ae:f0:68:04:d7:
c1:aa:94:9d:30:59:df:45:e3:04:6c:10:b9:28:af:
4b:c5:de:61:33:87:1a:56:30:a3:08:39:f6:75:d5:
55:64:bd:99:00:d3:b8:44:ef:19:63:06:01:c2:d7:
cf:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E3:7A:E1:97:FC:87:F3:6D:41:98:0C:B0:D4:27:FE:27:AE:63:98
X509v3 Authority Key Identifier:
keyid:20:BD:EF:3B:EB:41:14:CF:CB:FE:B9:FB:4E:D8:DA:98:FA:F4:FA:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:6c:20:d6:cb:f8:57:59:f2:1c:71:c4:7e:ee:14:13:1b:02:
35:59:93:7a:5d:f7:dc:6c:1a:04:5b:7d:b8:f5:1a:39:51:7b:
1f:a4:50:8e:c0:35:25:e9:02:3c:c2:c9:a1:8d:f1:70:c2:32:
1e:f7:8f:30:7f:14:65:01:e4:4b:1a:82:09:80:4d:c2:78:07:
97:70:9d:ad:ab:19:e8:f8:0f:e9:19:53:96:c1:e7:a9:6d:ea:
4c:a7:08:40:b6:60:07:bd:ab:43:d0:d6:13:ee:03:09:ff:0d:
53:8d:9c:3b:fa:1f:aa:f3:11:2a:8d:68:31:78:84:86:9f:15:
66:d4:62:b4:bb:7d:4c:48:d4:52:19:fe:c5:c1:d9:e0:01:08:
b9:2a:cc:d1:df:38:44:f8:4f:c6:00:f5:9a:b7:36:b1:de:ad:
3a:48:cc:2e:f1:6e:fd:6c:0a:01:92:1a:e3:03:70:25:6c:fe:
c4:a1:50:06:95:3b:97:1e:1b:58:af:43:59:35:eb:65:5c:9b:
b6:f7:76:c1:0c:db:32:bc:be:ef:61:f8:02:60:a3:6a:e1:fb:
52:d6:bb:69:17:95:0b:19:0c:db:1a:02:dc:43:f2:78:19:8a:
d8:b6:f8:03:01:53:37:9c:00:52:22:af:e3:b1:29:c0:a5:13:
9d:f7:8e:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVOArvHp9fK3pSk8ZzsCx1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYmRlZjNiZWI0MTE0Y2ZjYmZlYjlmYjRlZDhkYTk4ZmFm
NGZhODkwHhcNMjUwNDIwMjIwMDU4WhcNMjUwNDIxMjIwMDU4WjAzMTEwLwYDVQQD
Eyg2MmUzN2FlMTk3ZmM4N2YzNmQ0MTk4MGNiMGQ0MjdmZTI3YWU2Mzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfzrZD9EofXSxVjQcgCJJlkkmtXf
RjOLvCLGmvJNt/nhrlqQ6S+9504wV+yhB3kN9q2OYW0wE2MKG9ZQxUu7P7wIe1oW
QLLK+oiNTiKXqxxhLiGmAT8RWh+Q459GJaCEk3YznNEf04SBb8tP3ttA7lDeducR
B+noNwRElvLJO3BXi/JdQD+52f36O5H8lQMahSQ4K+ubwhj9jTsMhFTVSBxDeSmG
LfFu6VJy6Gh20HHCTWsDu2OdTQkKMAj9r3msWCdMUwuIITsgr9q1rvBoBNfBqpSd
MFnfReMEbBC5KK9Lxd5hM4caVjCjCDn2ddVVZL2ZANO4RO8ZYwYBwtfPJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGLjeuGX/IfzbUGYDLDUJ/4nrmOYMB8GA1UdIwQY
MBaAFCC97zvrQRTPy/65+07Y2pj69PqJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUwzdk8tdEJGTV9MX3JuN1R0amFtUHIwLW9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9hYjc4ZmMtMjVhOC00NmMxLTg2OTkt
MWQ4MmFiMTVjNDE1LzEvSUwzdk8tdEJGTV9MX3JuN1R0amFtUHIwLW9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9hYjc4ZmMtMjVhOC00NmMxLTg2OTktMWQ4MmFiMTVjNDE1
LzEvSUwzdk8tdEJGTV9MX3JuN1R0amFtUHIwLW9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWWwg1sv4
V1nyHHHEfu4UExsCNVmTel333GwaBFt9uPUaOVF7H6RQjsA1JekCPMLJoY3xcMIy
HvePMH8UZQHkSxqCCYBNwngHl3CdrasZ6PgP6RlTlsHnqW3qTKcIQLZgB72rQ9DW
E+4DCf8NU42cO/ofqvMRKo1oMXiEhp8VZtRitLt9TEjUUhn+xcHZ4AEIuSrM0d84
RPhPxgD1mrc2sd6tOkjMLvFu/WwKAZIa4wNwJWz+xKFQBpU7lx4bWK9DWTXrZVyb
tvd2wQzbMry+72H4AmCjauH7Uta7aReVCxkM2xoC3EPyeBmK2Lb4AwFTN5wAUiKv
47EpwKUTnfeO1g==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:31:28 2025 by rpki-client