Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft
File: dLA_BQyflGvisljcSWDsCQhfwVc.mft (raw, json)
Hash identifier: tLmfM72ZvSogWPqBE6sdirlNOph7xB+eaJs54SROxAI=
Subject key identifier: 77:8E:1B:0B:17:B4:FA:1E:6D:4C:36:FA:DB:F1:8D:2B:4D:16:3B:5A
Authority key identifier: 74:B0:3F:05:0C:9F:94:6B:E2:B2:58:DC:49:60:EC:09:08:5F:C1:57
Certificate issuer: /CN=74b03f050c9f946be2b258dc4960ec09085fc157
Certificate serial: 019630BE16529EC1C720B5F17C906D303A39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLA_BQyflGvisljcSWDsCQhfwVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft
Manifest number: 0301
Signing time: Sun 13 Apr 2025 20:01:25 +0000
Manifest this update: Sun 13 Apr 2025 20:01:25 +0000
Manifest next update: Mon 14 Apr 2025 20:01:25 +0000
Files and hashes: 1: 7ky7nj7F_jVbzl2sZpXMbb-mdKw.roa (hash: LY2VlTHDrXTzgp1AOuCkmRPYOmnqACU3YmdlJ3mfogY=)
2: dLA_BQyflGvisljcSWDsCQhfwVc.crl (hash: 31W5DMa0A2n1gwyumLBBfSZraV9UQ3evnhpWfLc1+20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLA_BQyflGvisljcSWDsCQhfwVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:30:be:16:52:9e:c1:c7:20:b5:f1:7c:90:6d:30:3a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b03f050c9f946be2b258dc4960ec09085fc157
Validity
Not Before: Apr 13 20:01:25 2025 GMT
Not After : Apr 14 20:01:25 2025 GMT
Subject: CN=778e1b0b17b4fa1e6d4c36fadbf18d2b4d163b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1e:74:b7:cc:9a:06:d3:31:b7:07:2d:34:8f:
4c:43:a1:31:4c:50:ab:ea:9b:cf:05:c9:d8:7c:68:
99:61:2f:c5:2a:19:fd:a3:15:57:d5:ce:a2:5d:e1:
05:e6:c2:b3:19:ac:e2:69:be:ce:bb:9c:4e:ba:6a:
23:cc:a1:58:61:f9:a0:6a:69:a6:ec:43:e5:44:a1:
df:95:7b:76:94:b1:75:2f:34:de:20:79:0a:81:4c:
11:6c:f1:ec:4f:3e:f9:23:65:fb:fa:d3:37:5c:c9:
c2:4c:14:6f:18:0c:88:53:14:cf:5e:7f:47:ba:f9:
3c:cc:8d:8b:df:1f:48:cb:1f:b3:f3:b9:41:b0:4a:
8a:62:24:50:bf:28:8f:89:c8:94:7e:eb:ac:42:77:
a8:6b:78:23:7f:0e:5b:81:e5:71:74:76:72:c4:f6:
ae:b1:77:e2:e8:92:61:9a:c0:02:1d:7d:59:0f:d3:
f2:41:8f:75:fe:55:6b:4b:2e:73:ca:a0:70:0e:93:
b3:53:2c:77:23:cb:0a:90:83:3e:28:75:3c:9d:61:
29:f3:cf:18:1c:15:c1:04:a4:92:67:f8:f0:23:09:
6f:c7:57:24:9f:93:06:8a:4c:6d:ec:e5:fb:d0:84:
84:7e:c1:96:89:73:22:52:2f:50:ec:b7:b7:65:7c:
ae:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:8E:1B:0B:17:B4:FA:1E:6D:4C:36:FA:DB:F1:8D:2B:4D:16:3B:5A
X509v3 Authority Key Identifier:
keyid:74:B0:3F:05:0C:9F:94:6B:E2:B2:58:DC:49:60:EC:09:08:5F:C1:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLA_BQyflGvisljcSWDsCQhfwVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:b8:58:45:27:cd:21:32:9f:79:c3:bc:35:a0:47:3d:b6:18:
97:c3:d4:d5:f4:1a:9a:21:3b:ee:ab:22:56:45:69:b3:2d:53:
8a:13:f4:98:5f:36:71:84:9d:68:26:17:0f:52:20:af:fb:de:
ae:db:67:e7:f3:c1:49:ca:6f:24:b8:5f:64:13:ac:12:a4:5f:
0e:11:be:a4:89:03:01:e8:04:8d:58:48:50:58:b8:c7:f1:ef:
50:bd:f0:5a:4f:0d:59:57:4f:4b:a1:74:48:90:77:35:8a:0a:
f9:a8:5d:9d:2f:c8:12:a6:a6:26:8f:63:81:8b:a6:27:23:ec:
9b:59:54:29:54:27:cf:7f:b8:2b:f4:d2:e3:74:9e:29:61:f9:
9c:cc:4b:c7:39:53:61:e3:bd:47:77:5a:1b:93:27:a5:84:3f:
b9:8d:bf:bb:c1:81:bb:5f:a6:d4:67:26:11:8a:d1:88:c4:03:
4f:b2:fe:a4:78:04:a4:8e:05:a2:13:fb:5d:dc:99:ff:68:99:
ab:31:3f:fd:69:ff:be:98:a5:f6:ff:6e:87:4c:da:9d:fe:2a:
9f:92:01:f3:09:34:e2:9b:47:50:b4:7a:e9:22:cd:a9:07:8c:
e5:9b:9e:ed:e3:77:15:ef:66:ec:f1:dd:39:18:4c:61:be:46:
0e:dc:4d:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYwvhZSnsHHILXxfJBtMDo5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YjAzZjA1MGM5Zjk0NmJlMmIyNThkYzQ5NjBlYzA5MDg1
ZmMxNTcwHhcNMjUwNDEzMjAwMTI1WhcNMjUwNDE0MjAwMTI1WjAzMTEwLwYDVQQD
Eyg3NzhlMWIwYjE3YjRmYTFlNmQ0YzM2ZmFkYmYxOGQyYjRkMTYzYjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoR50t8yaBtMxtwctNI9MQ6ExTFCr
6pvPBcnYfGiZYS/FKhn9oxVX1c6iXeEF5sKzGaziab7Ou5xOumojzKFYYfmgammm
7EPlRKHflXt2lLF1LzTeIHkKgUwRbPHsTz75I2X7+tM3XMnCTBRvGAyIUxTPXn9H
uvk8zI2L3x9Iyx+z87lBsEqKYiRQvyiPiciUfuusQneoa3gjfw5bgeVxdHZyxPau
sXfi6JJhmsACHX1ZD9PyQY91/lVrSy5zyqBwDpOzUyx3I8sKkIM+KHU8nWEp888Y
HBXBBKSSZ/jwIwlvx1ckn5MGikxt7OX70ISEfsGWiXMiUi9Q7Le3ZXyuAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHeOGwsXtPoebUw2+tvxjStNFjtaMB8GA1UdIwQY
MBaAFHSwPwUMn5Rr4rJY3Elg7AkIX8FXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZExBX0JReWZsR3Zpc2xqY1NXRHNDUWhmd1ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9jNzU3NTMtMTdjMi00MzI0LTgyNjQt
MzdjNzJhN2FjOGQxLzEvZExBX0JReWZsR3Zpc2xqY1NXRHNDUWhmd1ZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9jNzU3NTMtMTdjMi00MzI0LTgyNjQtMzdjNzJhN2FjOGQx
LzEvZExBX0JReWZsR3Zpc2xqY1NXRHNDUWhmd1ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH7hYRSfN
ITKfecO8NaBHPbYYl8PU1fQamiE77qsiVkVpsy1TihP0mF82cYSdaCYXD1Igr/ve
rttn5/PBScpvJLhfZBOsEqRfDhG+pIkDAegEjVhIUFi4x/HvUL3wWk8NWVdPS6F0
SJB3NYoK+ahdnS/IEqamJo9jgYumJyPsm1lUKVQnz3+4K/TS43SeKWH5nMxLxzlT
YeO9R3daG5MnpYQ/uY2/u8GBu1+m1GcmEYrRiMQDT7L+pHgEpI4FohP7XdyZ/2iZ
qzE//Wn/vpil9v9uh0zanf4qn5IB8wk04ptHULR66SLNqQeM5Zue7eN3Fe9m7PHd
ORhMYb5GDtxNoA==
-----END CERTIFICATE-----
Generated at Mon Apr 14 03:37:08 2025 by rpki-client