Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
File: L3oyxzesMHgHR2ppewuva5AEVo4.mft (raw, json)
Hash identifier: nk5PzsQmbfkEZctNfaHvlLTKP6Gi7AQvp+qk+zgBHLo=
Subject key identifier: 9D:F9:7F:7B:13:B3:29:B0:DD:0D:F5:BE:7F:ED:23:62:4C:0B:66:3A
Authority key identifier: 2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
Certificate issuer: /CN=2f7a32c737ac307807476a697b0baf6b9004568e
Certificate serial: 01960489EA3E3C6C2B7E854E5F25E2E57A83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
Manifest number: 031B
Signing time: Sat 05 Apr 2025 06:01:09 +0000
Manifest this update: Sat 05 Apr 2025 06:01:09 +0000
Manifest next update: Sun 06 Apr 2025 06:01:09 +0000
Files and hashes: 1: L3oyxzesMHgHR2ppewuva5AEVo4.crl (hash: 1jOVYWyyltCnlMz+ZekOx5yXmIW5bUzFmvtfwcZ8YAs=)
2: WxBvM9AzXvcGUxLQO7mjVfKZ8SI.roa (hash: MlBmuxBYdT/UhZRE0mpsF297g9H8Aa5t6UDiR3XGbFU=)
3: hGYvey0NL7kedoZnW8NGK9NdHUE.roa (hash: j/gjt7b1AkCBiDU1S/YvmfcXT2lTvik+0pgkIhPCV+w=)
4: zhUAq4pe-9N-dxfCl2d78EjPTb0.roa (hash: uyxGbVsUozb8CGUZeB9rmoW8CVbBZTPJHf+JK7e+rn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:04:89:ea:3e:3c:6c:2b:7e:85:4e:5f:25:e2:e5:7a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f7a32c737ac307807476a697b0baf6b9004568e
Validity
Not Before: Apr 5 06:01:09 2025 GMT
Not After : Apr 6 06:01:09 2025 GMT
Subject: CN=9df97f7b13b329b0dd0df5be7fed23624c0b663a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9f:e1:74:fd:37:0e:59:99:c2:d4:b1:96:b4:
3b:e7:4c:0b:30:63:e8:af:bd:91:aa:d5:7b:de:94:
05:01:97:22:c6:47:ff:f1:6f:55:ab:1a:db:4d:5a:
09:49:94:c6:9e:c1:3d:bc:67:57:65:22:af:4c:70:
6a:cb:e4:00:3f:e1:14:6f:c6:48:fc:20:1e:b0:75:
75:b3:91:d0:f6:f7:e8:db:21:80:53:ce:5e:0b:d7:
48:c8:0e:36:be:92:9b:3e:60:bb:7d:da:9d:ea:cb:
c2:60:ad:8e:7d:ee:5b:d8:f6:c3:18:42:76:6b:a6:
23:41:cf:b8:ea:a8:3d:42:19:5f:e7:9b:ad:cb:ac:
03:9c:db:28:b3:4c:b5:94:62:8c:f5:46:68:ed:a7:
b0:f2:c8:d7:e3:5b:2d:6d:dc:e8:e4:a1:04:9a:51:
89:a4:be:1f:24:28:31:d9:89:ac:3a:c5:51:67:e7:
06:43:5b:e0:96:92:d6:44:21:68:1a:3f:e0:ad:8d:
b6:83:66:6e:09:d2:a6:eb:a3:ba:9a:c2:16:d9:5d:
16:cf:54:38:ec:2b:03:10:04:02:5d:2c:d6:d0:04:
2b:82:53:bc:6c:e0:52:a8:3b:7c:2f:87:43:86:9a:
e0:cd:91:19:23:17:19:73:6d:d9:0d:bd:95:6a:31:
72:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F9:7F:7B:13:B3:29:B0:DD:0D:F5:BE:7F:ED:23:62:4C:0B:66:3A
X509v3 Authority Key Identifier:
keyid:2F:7A:32:C7:37:AC:30:78:07:47:6A:69:7B:0B:AF:6B:90:04:56:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3oyxzesMHgHR2ppewuva5AEVo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/24000c-b5d2-48dc-b959-e95a2496157e/1/L3oyxzesMHgHR2ppewuva5AEVo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:0d:2b:5b:9c:ab:e7:ca:09:62:4c:03:02:9d:83:81:f2:74:
20:ef:05:a1:1a:fb:a9:ac:5e:cc:d8:d7:c8:27:69:01:75:1c:
82:18:86:3d:4a:c4:30:fd:88:90:10:1d:84:b2:33:2e:46:7d:
a2:93:ab:88:77:76:94:b0:27:2b:86:a6:38:1b:3a:ec:49:a1:
fa:2d:2d:16:23:60:a8:c6:18:7f:f4:4a:48:6c:90:b9:0e:a4:
dc:a8:05:fb:a1:40:ed:1a:4c:ae:f0:d1:9e:fc:e0:f4:34:67:
30:00:3e:b6:31:08:92:1a:5b:aa:db:86:b8:56:dd:90:47:42:
7e:20:8d:dc:68:f6:43:75:b0:4f:24:f9:d3:c2:21:3d:07:3d:
47:d9:ba:73:01:3e:99:44:c7:b2:d4:dc:e2:3c:d1:90:52:4c:
0f:2a:60:2b:9c:3a:f7:27:d7:4b:00:1b:8f:33:15:54:15:e5:
c3:4c:b1:52:4e:3b:4f:34:13:07:7a:1e:b8:0c:3c:c1:af:36:
a7:65:37:4d:b6:62:74:55:ba:99:5d:e4:a7:95:4c:c3:58:00:
0e:27:2e:e9:c7:bb:04:49:70:94:67:17:75:b8:fb:7b:7a:41:
1a:ca:e3:d3:97:71:e9:fe:fc:82:c6:10:0b:4c:ff:2e:97:8f:
fc:4e:23:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYEieo+PGwrfoVOXyXi5XqDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmN2EzMmM3MzdhYzMwNzgwNzQ3NmE2OTdiMGJhZjZiOTAw
NDU2OGUwHhcNMjUwNDA1MDYwMTA5WhcNMjUwNDA2MDYwMTA5WjAzMTEwLwYDVQQD
Eyg5ZGY5N2Y3YjEzYjMyOWIwZGQwZGY1YmU3ZmVkMjM2MjRjMGI2NjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJ/hdP03DlmZwtSxlrQ750wLMGPo
r72RqtV73pQFAZcixkf/8W9VqxrbTVoJSZTGnsE9vGdXZSKvTHBqy+QAP+EUb8ZI
/CAesHV1s5HQ9vfo2yGAU85eC9dIyA42vpKbPmC7fdqd6svCYK2Ofe5b2PbDGEJ2
a6YjQc+46qg9Qhlf55uty6wDnNsos0y1lGKM9UZo7aew8sjX41stbdzo5KEEmlGJ
pL4fJCgx2YmsOsVRZ+cGQ1vglpLWRCFoGj/grY22g2ZuCdKm66O6msIW2V0Wz1Q4
7CsDEAQCXSzW0AQrglO8bOBSqDt8L4dDhprgzZEZIxcZc23ZDb2VajFykwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ35f3sTsymw3Q31vn/tI2JMC2Y6MB8GA1UdIwQY
MBaAFC96Msc3rDB4B0dqaXsLr2uQBFaOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDNveXh6ZXNNSGdIUjJwcGV3dXZhNUFFVm80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8yNDAwMGMtYjVkMi00OGRjLWI5NTkt
ZTk1YTI0OTYxNTdlLzEvTDNveXh6ZXNNSGdIUjJwcGV3dXZhNUFFVm80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8yNDAwMGMtYjVkMi00OGRjLWI5NTktZTk1YTI0OTYxNTdl
LzEvTDNveXh6ZXNNSGdIUjJwcGV3dXZhNUFFVm80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASw0rW5yr
58oJYkwDAp2DgfJ0IO8FoRr7qaxezNjXyCdpAXUcghiGPUrEMP2IkBAdhLIzLkZ9
opOriHd2lLAnK4amOBs67Emh+i0tFiNgqMYYf/RKSGyQuQ6k3KgF+6FA7RpMrvDR
nvzg9DRnMAA+tjEIkhpbqtuGuFbdkEdCfiCN3Gj2Q3WwTyT508IhPQc9R9m6cwE+
mUTHstTc4jzRkFJMDypgK5w69yfXSwAbjzMVVBXlw0yxUk47TzQTB3oeuAw8wa82
p2U3TbZidFW6mV3kp5VMw1gADicu6ce7BElwlGcXdbj7e3pBGsrj05dx6f78gsYQ
C0z/LpeP/E4j2g==
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:02:10 2025 by rpki-client