Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
File: L89hnM7Pg29WpyAQ6C-33SQEAvk.mft (raw, json)
Hash identifier: uAh2bHArVkY5mG7UOSPAPLoAZvVRJBhJrxXTiMTcviY=
Subject key identifier: 9F:38:C0:C5:A3:30:63:D8:F9:F9:A2:0F:4E:13:46:09:58:D6:53:E1
Authority key identifier: 2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
Certificate issuer: /CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
Certificate serial: 0196545C3F85B8FD058BB6252175B29060FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
Manifest number: 0612
Signing time: Sun 20 Apr 2025 18:00:53 +0000
Manifest this update: Sun 20 Apr 2025 18:00:53 +0000
Manifest next update: Mon 21 Apr 2025 18:00:53 +0000
Files and hashes: 1: L89hnM7Pg29WpyAQ6C-33SQEAvk.crl (hash: PoXwJtPC3YKohSHzGr1xLZbB7wDDqn/35VTe4osDQPE=)
2: jCfDa1o9-67BNQODivTRRldEbdY.roa (hash: 8Y6qhIf9Ka0kdUNg/SnNbfjipainSlycgW7SSV7AHSU=)
3: om141KzkG2-4eMZ-f0PthIkpE80.roa (hash: cw3Iskxz7drppI2oVPr2KEtsT6+wW7KALNNnzpIfPOQ=)
4: vA4JTCZBPjorS9CM--5uNxgqUOI.roa (hash: C8BQR0NQXngOUVQVK+k99B0pWs9mjN+aAreX6gH4h2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 18:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5c:3f:85:b8:fd:05:8b:b6:25:21:75:b2:90:60:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
Validity
Not Before: Apr 20 18:00:53 2025 GMT
Not After : Apr 21 18:00:53 2025 GMT
Subject: CN=9f38c0c5a33063d8f9f9a20f4e13460958d653e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9b:7e:fc:42:8a:aa:2a:c7:25:0b:12:c0:38:
ff:b9:46:8a:39:6a:45:29:36:12:72:f8:e9:88:b6:
07:c4:c8:aa:70:a1:14:b0:bf:a3:7a:69:f4:fe:7d:
48:8c:8e:f9:d7:97:20:32:26:71:89:a9:d7:26:93:
17:6b:cc:63:d2:5b:1a:66:ff:5c:de:bb:4d:16:0c:
d0:83:1a:89:53:6a:5b:db:77:67:40:e0:14:21:bf:
3c:9a:ea:50:6b:35:43:f5:a0:8a:b1:13:80:30:51:
e4:f2:31:83:4a:c7:bb:60:7d:38:2d:0e:c7:74:7d:
e2:4b:79:f4:5c:53:4b:84:e1:42:31:12:f8:8b:67:
00:4b:38:e8:fe:19:b4:1d:76:3d:a0:0a:b1:89:39:
34:21:1d:eb:41:66:9d:85:0a:59:87:51:6b:24:f8:
73:6c:70:d0:58:7d:1c:8d:6d:1e:b2:c6:d0:a9:e9:
39:fc:bb:91:c4:fc:44:3b:a2:e8:74:5b:a7:5b:f7:
f4:3b:3b:a6:bf:a5:8e:e6:49:11:bb:c7:45:bb:1a:
ef:f3:64:90:fd:ee:9d:82:19:46:95:24:ae:b7:57:
dc:0c:b8:8a:e0:0a:52:08:9d:bd:36:af:13:a3:98:
2c:f3:0e:55:20:7a:06:cd:3b:6f:fa:09:ae:b0:20:
59:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:38:C0:C5:A3:30:63:D8:F9:F9:A2:0F:4E:13:46:09:58:D6:53:E1
X509v3 Authority Key Identifier:
keyid:2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:6b:83:04:37:62:e7:38:f5:d9:88:69:7f:1a:52:5a:ed:00:
8a:d0:c6:9c:21:70:88:e5:f3:27:e6:80:f8:0a:93:d7:91:9f:
03:92:a9:2f:c2:c4:ab:3a:8a:54:fb:c5:36:30:d1:3f:d9:d8:
cf:7e:4f:8e:19:f4:0c:2a:ca:56:d8:65:65:ae:ad:4c:7a:ba:
cd:41:bc:88:23:4f:e7:05:16:a4:6b:6b:50:80:58:76:fe:b0:
df:ed:34:23:96:f5:0b:85:9e:4f:e5:cd:b6:84:51:b9:c7:47:
6d:f8:41:0f:af:7a:24:a8:c4:ab:8b:19:a1:04:e3:71:80:48:
a2:79:f2:b3:27:a2:fa:a6:da:61:77:93:c0:d8:88:b8:6a:16:
69:f2:ec:f6:67:4c:83:02:90:92:8f:84:07:7c:69:ca:8f:c8:
d5:e8:ea:55:6c:6c:83:57:9f:dd:f7:9b:39:14:77:8b:75:dc:
c2:3e:0b:44:58:dc:df:46:b7:a1:f1:52:16:b7:7d:b3:d3:94:
83:4c:c4:39:ec:59:6e:0b:b4:91:15:46:19:06:18:72:d2:da:
81:d4:a9:e4:ec:26:90:6d:3e:e8:60:a7:58:62:ff:2e:27:e0:
cc:8a:ea:b6:ca:ec:55:ca:31:b0:29:9a:ac:96:a1:20:5b:79:
b3:8f:42:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUXD+FuP0Fi7YlIXWykGD9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmY2Y2MTljY2VjZjgzNmY1NmE3MjAxMGU4MmZiN2RkMjQw
NDAyZjkwHhcNMjUwNDIwMTgwMDUzWhcNMjUwNDIxMTgwMDUzWjAzMTEwLwYDVQQD
Eyg5ZjM4YzBjNWEzMzA2M2Q4ZjlmOWEyMGY0ZTEzNDYwOTU4ZDY1M2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Zt+/EKKqirHJQsSwDj/uUaKOWpF
KTYScvjpiLYHxMiqcKEUsL+jemn0/n1IjI7515cgMiZxianXJpMXa8xj0lsaZv9c
3rtNFgzQgxqJU2pb23dnQOAUIb88mupQazVD9aCKsROAMFHk8jGDSse7YH04LQ7H
dH3iS3n0XFNLhOFCMRL4i2cASzjo/hm0HXY9oAqxiTk0IR3rQWadhQpZh1FrJPhz
bHDQWH0cjW0essbQqek5/LuRxPxEO6LodFunW/f0Ozumv6WO5kkRu8dFuxrv82SQ
/e6dghlGlSSut1fcDLiK4ApSCJ29Nq8To5gs8w5VIHoGzTtv+gmusCBZAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ84wMWjMGPY+fmiD04TRglY1lPhMB8GA1UdIwQY
MBaAFC/PYZzOz4NvVqcgEOgvt90kBAL5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDg5aG5NN1BnMjlXcHlBUTZDLTMzU1FFQXZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9jNWRjNzMtOWJlMi00NTAzLTgyODEt
NGIzNTBlYWNjODZiLzEvTDg5aG5NN1BnMjlXcHlBUTZDLTMzU1FFQXZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9jNWRjNzMtOWJlMi00NTAzLTgyODEtNGIzNTBlYWNjODZi
LzEvTDg5aG5NN1BnMjlXcHlBUTZDLTMzU1FFQXZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVWuDBDdi
5zj12YhpfxpSWu0AitDGnCFwiOXzJ+aA+AqT15GfA5KpL8LEqzqKVPvFNjDRP9nY
z35Pjhn0DCrKVthlZa6tTHq6zUG8iCNP5wUWpGtrUIBYdv6w3+00I5b1C4WeT+XN
toRRucdHbfhBD696JKjEq4sZoQTjcYBIonnysyei+qbaYXeTwNiIuGoWafLs9mdM
gwKQko+EB3xpyo/I1ejqVWxsg1ef3febORR3i3Xcwj4LRFjc30a3ofFSFrd9s9OU
g0zEOexZbgu0kRVGGQYYctLagdSp5OwmkG0+6GCnWGL/LifgzIrqtsrsVcoxsCma
rJahIFt5s49Ckw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:08:20 2025 by rpki-client