Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft
File: _L65swLOtvWNMntJTYFFlDO-c40.mft (raw, json)
Hash identifier: 9qt/icU41xy3nL5G6eBhAHCs2y+rnx5p3eeqLyIHUbc=
Subject key identifier: 04:3A:0C:52:74:32:C5:B3:DD:08:E0:BA:74:06:AE:33:E9:2C:BE:AB
Authority key identifier: FC:BE:B9:B3:02:CE:B6:F5:8D:32:7B:49:4D:81:45:94:33:BE:73:8D
Certificate issuer: /CN=fcbeb9b302ceb6f58d327b494d81459433be738d
Certificate serial: 01962AF2FFAE118A2BEBE13AF79AB94D6CEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_L65swLOtvWNMntJTYFFlDO-c40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft
Manifest number: 0EB4
Signing time: Sat 12 Apr 2025 17:01:30 +0000
Manifest this update: Sat 12 Apr 2025 17:01:30 +0000
Manifest next update: Sun 13 Apr 2025 17:01:30 +0000
Files and hashes: 1: 4FgyXjSTtWGyFOXdnX2-aAmOOA8.roa (hash: InpaFw/32Nb/Zr2vPmUWS5J9SJuIWTtmwm6Og2V6cjc=)
2: _L65swLOtvWNMntJTYFFlDO-c40.crl (hash: f/5AYd0ZbVIMrHNesw7rg5mzFMMccg6QZqy8O+QkP2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft
rsync://rpki.ripe.net/repository/DEFAULT/_L65swLOtvWNMntJTYFFlDO-c40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 17:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:f2:ff:ae:11:8a:2b:eb:e1:3a:f7:9a:b9:4d:6c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcbeb9b302ceb6f58d327b494d81459433be738d
Validity
Not Before: Apr 12 17:01:30 2025 GMT
Not After : Apr 13 17:01:30 2025 GMT
Subject: CN=043a0c527432c5b3dd08e0ba7406ae33e92cbeab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ac:ba:01:c4:af:a4:01:be:05:ac:3d:d3:b8:
ba:20:f2:7b:10:84:6b:ff:1a:7a:15:a8:55:7d:31:
89:51:a4:50:de:8c:d4:7f:68:97:d9:83:3f:7a:54:
9c:57:b2:f9:6a:60:27:87:2f:ca:19:89:f5:a6:b5:
b2:c5:85:04:5d:fd:8a:85:6b:83:e6:16:25:3e:cc:
15:e0:3d:d1:6f:80:ad:ae:3a:6a:31:bd:d7:bf:60:
a0:41:b6:bf:89:ec:78:fd:a4:4d:8c:b2:fc:0c:c4:
b6:72:69:22:2d:64:37:95:6b:7f:95:02:5b:73:62:
a3:18:ac:db:fd:66:77:74:49:4e:2c:7d:0d:14:37:
65:a2:0e:57:dd:37:01:39:c4:bd:81:57:05:f4:34:
28:4f:4b:d8:ff:01:72:18:bd:f5:22:c5:19:cb:f6:
9d:7f:72:11:77:2a:82:2a:7b:a0:cf:3c:e8:1f:a3:
71:78:5f:f1:a4:0e:68:76:2d:50:ba:2e:c5:aa:88:
ef:64:8c:e5:c7:2d:d4:8b:32:96:26:0c:57:81:50:
f1:8d:91:0a:ba:bf:9d:d9:25:57:1e:30:1f:65:01:
70:10:a6:e1:5d:7b:f4:b3:0b:43:cd:23:28:08:23:
e9:de:bd:a7:48:0c:df:92:d1:0d:08:04:c5:24:3f:
d1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:3A:0C:52:74:32:C5:B3:DD:08:E0:BA:74:06:AE:33:E9:2C:BE:AB
X509v3 Authority Key Identifier:
keyid:FC:BE:B9:B3:02:CE:B6:F5:8D:32:7B:49:4D:81:45:94:33:BE:73:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_L65swLOtvWNMntJTYFFlDO-c40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1c8b69-4b7b-4bfd-bce5-37afbdf4d847/1/_L65swLOtvWNMntJTYFFlDO-c40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:94:f5:be:d3:38:bd:55:05:3c:4e:b8:d1:be:61:4f:5d:bf:
5c:93:58:09:a9:da:88:4f:59:22:79:28:75:2f:02:19:86:46:
03:7d:f0:8d:1c:11:18:a9:c9:bd:03:a0:bd:af:90:11:b4:78:
1b:b0:2a:19:70:99:51:2b:d9:e0:84:a3:40:55:07:21:84:0d:
8b:0f:c3:b4:31:52:46:3f:e6:3f:2d:14:c2:11:4e:bd:8b:08:
f7:ff:6a:9c:a4:59:27:02:38:76:a6:1b:1f:61:fa:0b:73:a2:
66:f4:15:01:03:25:53:5d:31:8e:c4:44:d7:13:03:31:98:20:
7a:aa:33:f3:9e:4b:80:38:15:5a:32:e0:3e:27:ee:f8:21:ae:
fd:fe:7b:ef:84:3e:46:5f:5f:e0:0e:10:05:30:19:c7:79:42:
b4:93:10:b3:e1:2b:99:77:2d:4a:56:ee:40:0a:3b:4f:c1:f0:
03:14:28:35:be:dc:4f:10:26:cc:7b:0c:73:a0:3d:fa:0f:ce:
64:54:5b:56:f3:b4:25:69:ba:13:a0:50:0e:7f:68:82:25:52:
d4:96:e3:b4:9a:d7:d1:66:11:f1:45:e1:21:2f:37:48:1d:cc:
c9:8f:55:9b:30:82:71:d2:0a:5b:1a:1d:43:e7:12:6d:de:a9:
b1:3e:00:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYq8v+uEYor6+E695q5TWzvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjYmViOWIzMDJjZWI2ZjU4ZDMyN2I0OTRkODE0NTk0MzNi
ZTczOGQwHhcNMjUwNDEyMTcwMTMwWhcNMjUwNDEzMTcwMTMwWjAzMTEwLwYDVQQD
EygwNDNhMGM1Mjc0MzJjNWIzZGQwOGUwYmE3NDA2YWUzM2U5MmNiZWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKy6AcSvpAG+Baw907i6IPJ7EIRr
/xp6FahVfTGJUaRQ3ozUf2iX2YM/elScV7L5amAnhy/KGYn1prWyxYUEXf2KhWuD
5hYlPswV4D3Rb4CtrjpqMb3Xv2CgQba/iex4/aRNjLL8DMS2cmkiLWQ3lWt/lQJb
c2KjGKzb/WZ3dElOLH0NFDdlog5X3TcBOcS9gVcF9DQoT0vY/wFyGL31IsUZy/ad
f3IRdyqCKnugzzzoH6NxeF/xpA5odi1Qui7FqojvZIzlxy3UizKWJgxXgVDxjZEK
ur+d2SVXHjAfZQFwEKbhXXv0swtDzSMoCCPp3r2nSAzfktENCATFJD/RYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAQ6DFJ0MsWz3QjgunQGrjPpLL6rMB8GA1UdIwQY
MBaAFPy+ubMCzrb1jTJ7SU2BRZQzvnONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0w2NXN3TE90dldOTW50SlRZRkZsRE8tYzQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8xYzhiNjktNGI3Yi00YmZkLWJjZTUt
MzdhZmJkZjRkODQ3LzEvX0w2NXN3TE90dldOTW50SlRZRkZsRE8tYzQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8xYzhiNjktNGI3Yi00YmZkLWJjZTUtMzdhZmJkZjRkODQ3
LzEvX0w2NXN3TE90dldOTW50SlRZRkZsRE8tYzQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZJT1vtM4
vVUFPE640b5hT12/XJNYCanaiE9ZInkodS8CGYZGA33wjRwRGKnJvQOgva+QEbR4
G7AqGXCZUSvZ4ISjQFUHIYQNiw/DtDFSRj/mPy0UwhFOvYsI9/9qnKRZJwI4dqYb
H2H6C3OiZvQVAQMlU10xjsRE1xMDMZggeqoz855LgDgVWjLgPifu+CGu/f5774Q+
Rl9f4A4QBTAZx3lCtJMQs+ErmXctSlbuQAo7T8HwAxQoNb7cTxAmzHsMc6A9+g/O
ZFRbVvO0JWm6E6BQDn9ogiVS1JbjtJrX0WYR8UXhIS83SB3MyY9VmzCCcdIKWxod
Q+cSbd6psT4AJA==
-----END CERTIFICATE-----
Generated at Sun Apr 13 01:28:19 2025 by rpki-client