Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
File: 2huf6PGjORf-5-Tb6fq5JeuGJak.mft (raw, json)
Hash identifier: njDLdXw29ZHukvEoBY1TarMtRZrCTc3zs0ACrO1ELHY=
Subject key identifier: EF:7B:68:E6:BC:70:7D:21:74:4B:E4:45:99:8C:8A:2C:62:F4:33:38
Authority key identifier: DA:1B:9F:E8:F1:A3:39:17:FE:E7:E4:DB:E9:FA:B9:25:EB:86:25:A9
Certificate issuer: /CN=da1b9fe8f1a33917fee7e4dbe9fab925eb8625a9
Certificate serial: 019644E91CD3C4E05F4F24AC17FB49F98BE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
Manifest number: 05A7
Signing time: Thu 17 Apr 2025 18:00:49 +0000
Manifest this update: Thu 17 Apr 2025 18:00:49 +0000
Manifest next update: Fri 18 Apr 2025 18:00:49 +0000
Files and hashes: 1: 2huf6PGjORf-5-Tb6fq5JeuGJak.crl (hash: XKCcV/1IP+V3EoQC7wOgzhDuEV652BYYVsfazHxRI+Y=)
2: qARNDLbWZGpXclqzpXtzfvYP72c.roa (hash: yeRNjTwXDaIWE/tdw8m2d67pmit4bLUSMZLje7zj8IA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:e9:1c:d3:c4:e0:5f:4f:24:ac:17:fb:49:f9:8b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1b9fe8f1a33917fee7e4dbe9fab925eb8625a9
Validity
Not Before: Apr 17 18:00:49 2025 GMT
Not After : Apr 18 18:00:49 2025 GMT
Subject: CN=ef7b68e6bc707d21744be445998c8a2c62f43338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:88:64:0c:2d:8a:33:c1:f5:79:14:bb:70:d3:
6d:19:79:0f:01:5d:63:9c:e5:98:19:be:e7:44:e3:
a7:bb:2a:50:80:d2:aa:9d:cb:2a:4c:f4:10:dc:88:
fa:b9:2b:21:41:fe:0f:31:9e:77:4e:86:0a:8e:a9:
1a:9d:6e:76:75:86:ac:a4:1a:aa:c4:fd:6a:7c:85:
30:6d:cd:82:62:9d:5d:4d:ee:9f:fc:43:ff:00:e5:
bb:29:49:55:62:ea:f7:ed:58:d5:c1:09:40:c7:61:
ee:22:e6:89:f1:e7:2c:b6:7c:c0:72:68:6d:83:83:
8e:2b:70:b1:fd:fa:af:33:6e:04:cb:b7:f0:f9:57:
fb:25:ac:2d:2b:46:ef:dd:8a:b3:8f:d2:ff:aa:f6:
0f:65:67:a2:f0:3e:3f:b0:92:1d:4f:f4:ab:7e:09:
d4:00:17:47:ba:91:e3:03:cb:50:2a:e4:a2:8c:c0:
bb:39:7d:cd:2d:02:b9:8c:19:b1:70:86:be:81:c1:
55:e7:d7:42:50:9e:bd:81:4c:72:39:eb:6f:19:ea:
0d:39:b7:a4:c4:e9:57:b1:dc:57:7f:b9:18:d0:ac:
63:3b:80:3d:be:e4:b5:4f:21:14:ba:a9:7b:d0:e6:
8e:24:50:e0:f3:eb:81:d9:05:84:0a:1e:3f:7f:31:
97:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:7B:68:E6:BC:70:7D:21:74:4B:E4:45:99:8C:8A:2C:62:F4:33:38
X509v3 Authority Key Identifier:
keyid:DA:1B:9F:E8:F1:A3:39:17:FE:E7:E4:DB:E9:FA:B9:25:EB:86:25:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2huf6PGjORf-5-Tb6fq5JeuGJak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/42a166-8a86-48da-bb96-79fd5023de36/1/2huf6PGjORf-5-Tb6fq5JeuGJak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:3f:51:7b:96:c2:14:f1:ce:a0:7d:81:f8:0d:15:f0:b2:67:
49:df:3a:26:08:d7:f8:86:43:bf:51:3d:02:34:1d:b3:c9:7a:
a2:cf:c7:f5:38:42:24:89:0e:b0:57:c0:5e:75:33:db:56:40:
54:62:67:f4:96:aa:b0:49:cc:ad:91:0d:a3:54:bf:cb:a3:0e:
30:f1:1e:79:68:56:8b:4b:fc:e9:c5:6a:25:54:cd:73:43:0e:
71:29:af:94:9b:8e:19:0c:fd:f6:9e:31:dc:c1:ae:70:ac:ae:
5f:65:67:3a:f9:f1:fc:b6:09:32:88:6f:e5:34:d6:4d:02:0c:
77:8f:d0:f6:7e:cd:68:6d:9a:21:4c:fb:22:fd:60:ec:d7:55:
6c:4c:25:91:01:1d:a6:f0:9a:ef:0a:13:e6:05:7a:75:57:6a:
cb:37:b2:13:ac:25:23:97:fb:e7:dc:c6:68:98:e3:c2:bc:67:
4b:5b:3f:8e:e0:4b:40:bb:2d:4a:44:c1:b9:1b:77:e0:a0:19:
14:1d:f6:c5:dd:a6:24:6e:3e:25:d0:5a:67:60:ef:4b:d3:59:
9a:83:d2:13:b6:00:3f:62:f0:99:c6:43:6e:d7:60:6e:e1:ef:
ef:00:69:15:e7:1e:39:f8:26:99:b6:29:a2:bb:5c:74:1c:ec:
3c:67:af:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZE6RzTxOBfTySsF/tJ+YvgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMWI5ZmU4ZjFhMzM5MTdmZWU3ZTRkYmU5ZmFiOTI1ZWI4
NjI1YTkwHhcNMjUwNDE3MTgwMDQ5WhcNMjUwNDE4MTgwMDQ5WjAzMTEwLwYDVQQD
EyhlZjdiNjhlNmJjNzA3ZDIxNzQ0YmU0NDU5OThjOGEyYzYyZjQzMzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsohkDC2KM8H1eRS7cNNtGXkPAV1j
nOWYGb7nROOnuypQgNKqncsqTPQQ3Ij6uSshQf4PMZ53ToYKjqkanW52dYaspBqq
xP1qfIUwbc2CYp1dTe6f/EP/AOW7KUlVYur37VjVwQlAx2HuIuaJ8ecstnzAcmht
g4OOK3Cx/fqvM24Ey7fw+Vf7JawtK0bv3Yqzj9L/qvYPZWei8D4/sJIdT/SrfgnU
ABdHupHjA8tQKuSijMC7OX3NLQK5jBmxcIa+gcFV59dCUJ69gUxyOetvGeoNObek
xOlXsdxXf7kY0KxjO4A9vuS1TyEUuql70OaOJFDg8+uB2QWECh4/fzGXPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO97aOa8cH0hdEvkRZmMiixi9DM4MB8GA1UdIwQY
MBaAFNobn+jxozkX/ufk2+n6uSXrhiWpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmh1ZjZQR2pPUmYtNS1UYjZmcTVKZXVHSmFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy80MmExNjYtOGE4Ni00OGRhLWJiOTYt
NzlmZDUwMjNkZTM2LzEvMmh1ZjZQR2pPUmYtNS1UYjZmcTVKZXVHSmFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy80MmExNjYtOGE4Ni00OGRhLWJiOTYtNzlmZDUwMjNkZTM2
LzEvMmh1ZjZQR2pPUmYtNS1UYjZmcTVKZXVHSmFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAET9Re5bC
FPHOoH2B+A0V8LJnSd86JgjX+IZDv1E9AjQds8l6os/H9ThCJIkOsFfAXnUz21ZA
VGJn9JaqsEnMrZENo1S/y6MOMPEeeWhWi0v86cVqJVTNc0MOcSmvlJuOGQz99p4x
3MGucKyuX2VnOvnx/LYJMohv5TTWTQIMd4/Q9n7NaG2aIUz7Iv1g7NdVbEwlkQEd
pvCa7woT5gV6dVdqyzeyE6wlI5f759zGaJjjwrxnS1s/juBLQLstSkTBuRt34KAZ
FB32xd2mJG4+JdBaZ2DvS9NZmoPSE7YAP2LwmcZDbtdgbuHv7wBpFeceOfgmmbYp
ortcdBzsPGevQw==
-----END CERTIFICATE-----
Generated at Fri Apr 18 02:42:49 2025 by rpki-client