Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.mft
File: l_RnToI2vdw9IyegKwq_unmlSDw.mft (raw, json)
Hash identifier: aR/ejNYh2W/99tBOi50kvjkCB9SeU87P7gAMYjvhA0o=
Subject key identifier: C2:B6:8B:2E:A3:FE:C0:90:C2:B6:A3:EB:EA:B7:9F:94:3C:F9:BD:85
Authority key identifier: 97:F4:67:4E:82:36:BD:DC:3D:23:27:A0:2B:0A:BF:BA:79:A5:48:3C
Certificate issuer: /CN=97f4674e8236bddc3d2327a02b0abfba79a5483c
Certificate serial: 01964E23444B2ACEE4A6275621DAB06557E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l_RnToI2vdw9IyegKwq_unmlSDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.mft
Manifest number: 14F9
Signing time: Sat 19 Apr 2025 13:00:56 +0000
Manifest this update: Sat 19 Apr 2025 13:00:56 +0000
Manifest next update: Sun 20 Apr 2025 13:00:56 +0000
Files and hashes: 1: QJQeMPlg9WGfXq72AZiCSewuDI8.roa (hash: r0Rvs4MlW/m7D+4R19PKkzv3HipqfF3UT75d6mitfBY=)
2: l_RnToI2vdw9IyegKwq_unmlSDw.crl (hash: ZJfrp7Wryq0E+bM0vzPgc8E/m7ZHf6i1It5jKoxcD7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/l_RnToI2vdw9IyegKwq_unmlSDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:23:44:4b:2a:ce:e4:a6:27:56:21:da:b0:65:57:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97f4674e8236bddc3d2327a02b0abfba79a5483c
Validity
Not Before: Apr 19 13:00:56 2025 GMT
Not After : Apr 20 13:00:56 2025 GMT
Subject: CN=c2b68b2ea3fec090c2b6a3ebeab79f943cf9bd85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:37:55:0b:2f:6f:65:c9:b4:e4:5b:d5:39:e4:
7c:ae:22:0e:bf:88:85:24:8e:07:52:8d:66:f3:cf:
12:8b:d6:ce:16:50:fc:75:d1:25:71:53:8e:f3:fa:
9d:04:03:94:e7:f7:d9:59:8f:59:99:59:58:41:8e:
22:46:d4:5c:2f:da:48:4e:1c:75:74:ed:30:16:f3:
fe:9f:62:b9:d4:81:df:0f:49:b8:dd:0c:a0:74:a7:
ea:5a:62:99:32:c6:a9:d5:b7:35:3c:35:10:72:68:
30:53:89:22:f6:62:aa:73:a0:12:52:61:45:6d:c8:
e1:28:6b:04:79:c2:f9:2b:a1:9a:27:1d:94:91:41:
14:c5:eb:e8:33:b8:02:d1:c5:73:1e:5f:48:f1:9f:
79:20:c8:3d:95:c8:6b:6e:bb:da:cd:4a:4a:cf:d3:
53:3f:11:67:97:6a:f9:28:40:2c:dd:92:fd:76:f7:
5a:e2:ef:3b:6c:85:d7:ba:56:88:f8:db:e7:be:48:
3d:0c:0d:5b:be:58:4f:06:43:15:82:ad:d0:b6:d6:
e1:35:bc:d1:d5:95:f8:75:4c:2b:e0:2c:7e:7e:b2:
be:24:8c:1c:66:31:20:3e:72:6f:9d:3f:1c:02:71:
94:9a:12:2e:f2:fb:21:77:ba:fe:7b:a2:e1:3f:b4:
00:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B6:8B:2E:A3:FE:C0:90:C2:B6:A3:EB:EA:B7:9F:94:3C:F9:BD:85
X509v3 Authority Key Identifier:
keyid:97:F4:67:4E:82:36:BD:DC:3D:23:27:A0:2B:0A:BF:BA:79:A5:48:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l_RnToI2vdw9IyegKwq_unmlSDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:88:4d:89:84:62:78:8d:3d:64:93:80:fb:bf:f2:0c:f5:d9:
14:71:38:cf:fb:f8:66:8d:72:35:bd:1d:0b:64:a8:65:6c:db:
54:fb:2c:74:81:a4:70:70:a8:53:19:07:bb:5d:60:4c:be:4a:
ef:3e:5a:2a:e2:24:40:cb:47:4f:73:8f:91:94:0e:c3:98:80:
2c:d8:52:43:1a:d7:6f:97:82:8c:72:92:d9:40:cb:0d:f4:d0:
6b:f9:16:e7:a8:c6:a1:ff:a6:9c:29:ea:d2:d6:50:c0:3c:51:
e3:e1:73:df:c0:16:57:10:48:1d:35:43:db:a9:ff:15:b6:5e:
0a:ca:a2:35:a4:d2:34:06:91:10:6a:ca:39:55:ae:60:2f:db:
f4:17:12:3d:67:45:23:57:31:bc:86:c9:c2:e7:fe:95:fa:4a:
bb:0c:c8:d1:81:f2:4f:30:4e:31:c6:51:de:1f:11:43:eb:08:
0b:cb:84:47:ad:ac:d7:ca:25:9c:c9:dd:65:bd:e8:36:d4:ac:
60:e8:b8:b6:4d:ad:b5:6d:7a:33:f7:9e:2a:ec:11:a5:b1:3e:
7f:79:34:d7:27:bb:2b:35:15:4f:74:61:e9:54:9f:4c:17:48:
4d:e1:fc:5b:ff:7a:0e:25:99:e6:e7:80:19:49:37:c9:f6:58:
7d:17:fd:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZOI0RLKs7kpidWIdqwZVfjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ZjQ2NzRlODIzNmJkZGMzZDIzMjdhMDJiMGFiZmJhNzlh
NTQ4M2MwHhcNMjUwNDE5MTMwMDU2WhcNMjUwNDIwMTMwMDU2WjAzMTEwLwYDVQQD
EyhjMmI2OGIyZWEzZmVjMDkwYzJiNmEzZWJlYWI3OWY5NDNjZjliZDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjdVCy9vZcm05FvVOeR8riIOv4iF
JI4HUo1m888Si9bOFlD8ddElcVOO8/qdBAOU5/fZWY9ZmVlYQY4iRtRcL9pIThx1
dO0wFvP+n2K51IHfD0m43QygdKfqWmKZMsap1bc1PDUQcmgwU4ki9mKqc6ASUmFF
bcjhKGsEecL5K6GaJx2UkUEUxevoM7gC0cVzHl9I8Z95IMg9lchrbrvazUpKz9NT
PxFnl2r5KEAs3ZL9dvda4u87bIXXulaI+Nvnvkg9DA1bvlhPBkMVgq3QttbhNbzR
1ZX4dUwr4Cx+frK+JIwcZjEgPnJvnT8cAnGUmhIu8vshd7r+e6LhP7QAUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMK2iy6j/sCQwraj6+q3n5Q8+b2FMB8GA1UdIwQY
MBaAFJf0Z06CNr3cPSMnoCsKv7p5pUg8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbF9SblRvSTJ2ZHc5SXllZ0t3cV91bm1sU0R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS83NWE5MjAtMmEzYS00MTI5LTgwMGUt
YWYyZWM1ZDhkYzNjLzEvbF9SblRvSTJ2ZHc5SXllZ0t3cV91bm1sU0R3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS83NWE5MjAtMmEzYS00MTI5LTgwMGUtYWYyZWM1ZDhkYzNj
LzEvbF9SblRvSTJ2ZHc5SXllZ0t3cV91bm1sU0R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPohNiYRi
eI09ZJOA+7/yDPXZFHE4z/v4Zo1yNb0dC2SoZWzbVPssdIGkcHCoUxkHu11gTL5K
7z5aKuIkQMtHT3OPkZQOw5iALNhSQxrXb5eCjHKS2UDLDfTQa/kW56jGof+mnCnq
0tZQwDxR4+Fz38AWVxBIHTVD26n/FbZeCsqiNaTSNAaREGrKOVWuYC/b9BcSPWdF
I1cxvIbJwuf+lfpKuwzI0YHyTzBOMcZR3h8RQ+sIC8uER62s18olnMndZb3oNtSs
YOi4tk2ttW16M/eeKuwRpbE+f3k01ye7KzUVT3Rh6VSfTBdITeH8W/96DiWZ5ueA
GUk3yfZYfRf9Lg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 18:04:08 2025 by rpki-client