Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
File: L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft (raw, json)
Hash identifier: 5X5zkTPR60RM3xI/n7m4mykM6e9AxGoaPnNpVtXJIxM=
Subject key identifier: 82:6C:AF:91:A0:DD:EF:41:03:63:FC:F9:01:F5:01:11:57:48:5F:5E
Authority key identifier: 2F:C2:0B:E6:16:78:90:24:73:03:21:41:97:65:8C:A7:C9:67:61:50
Certificate issuer: /CN=2fc20be6167890247303214197658ca7c9676150
Certificate serial: 01962B29E0F3A649BE71713361DB89C01489
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
Manifest number: 14E4
Signing time: Sat 12 Apr 2025 18:01:26 +0000
Manifest this update: Sat 12 Apr 2025 18:01:26 +0000
Manifest next update: Sun 13 Apr 2025 18:01:26 +0000
Files and hashes: 1: 2iLiWe0BMpbPlHeRUZgf_7ggDIw.roa (hash: 5a6Nlx4knEH8VTjhj8RCsqY6ZT98S2ewOdcJJkdDglM=)
2: L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl (hash: hGHgyS4EdJj4hTBi1JXWhqVwz2nyAOBvff+VfkzGxb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2b:29:e0:f3:a6:49:be:71:71:33:61:db:89:c0:14:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fc20be6167890247303214197658ca7c9676150
Validity
Not Before: Apr 12 18:01:26 2025 GMT
Not After : Apr 13 18:01:26 2025 GMT
Subject: CN=826caf91a0ddef410363fcf901f5011157485f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c5:8f:50:23:d6:44:d8:66:60:a3:15:22:67:
bd:d0:54:d5:5e:e0:4c:bc:06:3e:4f:41:7c:bb:54:
20:ac:f9:d8:6a:08:49:4c:c0:fe:3a:50:1c:16:62:
65:2a:e0:8e:5c:23:a0:85:8f:f9:f4:a0:27:76:80:
58:34:b4:39:6e:c0:80:0a:dd:20:cf:0d:e3:86:50:
76:38:ea:30:6b:ab:3a:a4:0f:90:ed:c1:68:a4:4c:
58:cf:f4:1e:4a:0b:b4:a9:7b:3d:aa:48:fc:8b:b1:
be:df:31:be:4e:cb:1f:b3:d2:d0:22:62:bf:41:4e:
cd:e6:36:d2:dc:17:02:40:6b:03:5d:42:0c:64:9e:
dc:25:38:f2:71:55:fd:98:8d:5d:11:55:fc:a9:90:
15:b2:27:98:02:32:a4:09:21:b8:1d:be:69:23:c3:
c1:ac:90:14:4d:5a:71:18:c7:a6:7b:b3:16:87:a6:
05:ee:3c:2a:93:bd:be:48:8f:33:86:95:03:62:e5:
6f:85:2b:84:f9:d0:87:61:78:36:99:c2:09:e6:a9:
92:05:ed:7f:77:dd:5e:74:04:6e:ac:4c:d4:dc:dd:
12:06:e9:a2:18:29:39:a9:3c:e1:2e:7a:60:cb:5d:
b0:5b:a4:5c:e3:33:0e:23:33:14:40:80:d7:61:0a:
15:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:6C:AF:91:A0:DD:EF:41:03:63:FC:F9:01:F5:01:11:57:48:5F:5E
X509v3 Authority Key Identifier:
keyid:2F:C2:0B:E6:16:78:90:24:73:03:21:41:97:65:8C:A7:C9:67:61:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f4:e9:1a:6b:ef:67:1f:5b:56:9a:20:9e:74:73:47:c4:a1:
57:3d:f5:45:76:58:31:32:a4:d2:84:10:40:4e:c2:45:a2:bf:
ac:7e:77:b3:e4:a8:ae:5e:fd:3e:87:c9:72:97:e7:83:75:17:
e5:67:90:b7:76:27:8e:58:76:95:0f:bf:0f:02:42:ea:bc:3f:
e4:8b:a7:1b:91:30:9f:c4:8b:0a:8e:f8:ff:ae:d8:57:9b:44:
1a:c6:a6:1a:d4:d6:fc:34:36:db:13:08:9b:49:01:47:03:48:
0e:b5:3e:b4:61:ca:8e:88:1c:05:61:23:5f:cd:43:8b:2e:83:
8d:89:8d:67:43:97:89:f9:78:0d:f9:d1:03:20:3c:3e:09:99:
48:8f:4c:10:12:9c:b2:40:4b:df:a7:ac:0c:e6:67:dd:1e:72:
16:bd:59:bc:f5:4a:36:c6:39:de:a5:b5:e1:69:53:80:e8:8e:
1d:f9:e1:e2:0b:17:5d:7e:fd:2b:6d:02:07:56:6a:e0:cc:c4:
3b:c3:ad:6f:21:f4:66:33:4e:c5:96:c7:18:b0:ce:02:2d:26:
cc:7a:bd:30:55:94:fc:69:b1:b2:32:0a:e7:cf:8f:5e:aa:9f:
31:d0:71:ab:94:f3:62:bb:d5:f4:03:7a:91:16:a6:14:8b:d9:
9f:5f:e9:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYrKeDzpkm+cXEzYduJwBSJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYzIwYmU2MTY3ODkwMjQ3MzAzMjE0MTk3NjU4Y2E3Yzk2
NzYxNTAwHhcNMjUwNDEyMTgwMTI2WhcNMjUwNDEzMTgwMTI2WjAzMTEwLwYDVQQD
Eyg4MjZjYWY5MWEwZGRlZjQxMDM2M2ZjZjkwMWY1MDExMTU3NDg1ZjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcWPUCPWRNhmYKMVIme90FTVXuBM
vAY+T0F8u1QgrPnYaghJTMD+OlAcFmJlKuCOXCOghY/59KAndoBYNLQ5bsCACt0g
zw3jhlB2OOowa6s6pA+Q7cFopExYz/QeSgu0qXs9qkj8i7G+3zG+Tssfs9LQImK/
QU7N5jbS3BcCQGsDXUIMZJ7cJTjycVX9mI1dEVX8qZAVsieYAjKkCSG4Hb5pI8PB
rJAUTVpxGMeme7MWh6YF7jwqk72+SI8zhpUDYuVvhSuE+dCHYXg2mcIJ5qmSBe1/
d91edARurEzU3N0SBumiGCk5qTzhLnpgy12wW6Rc4zMOIzMUQIDXYQoV3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIJsr5Gg3e9BA2P8+QH1ARFXSF9eMB8GA1UdIwQY
MBaAFC/CC+YWeJAkcwMhQZdljKfJZ2FQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDhJTDVoWjRrQ1J6QXlGQmwyV01wOGxuWVZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9mNWZhZmMtNjY4ZC00YWRhLThlYzYt
MjQ0OWEzZWM5MjNlLzEvTDhJTDVoWjRrQ1J6QXlGQmwyV01wOGxuWVZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9mNWZhZmMtNjY4ZC00YWRhLThlYzYtMjQ0OWEzZWM5MjNl
LzEvTDhJTDVoWjRrQ1J6QXlGQmwyV01wOGxuWVZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXvTpGmvv
Zx9bVpognnRzR8ShVz31RXZYMTKk0oQQQE7CRaK/rH53s+Sorl79PofJcpfng3UX
5WeQt3Ynjlh2lQ+/DwJC6rw/5IunG5Ewn8SLCo74/67YV5tEGsamGtTW/DQ22xMI
m0kBRwNIDrU+tGHKjogcBWEjX81Diy6DjYmNZ0OXifl4DfnRAyA8PgmZSI9MEBKc
skBL36esDOZn3R5yFr1ZvPVKNsY53qW14WlTgOiOHfnh4gsXXX79K20CB1Zq4MzE
O8OtbyH0ZjNOxZbHGLDOAi0mzHq9MFWU/GmxsjIK58+PXqqfMdBxq5TzYrvV9AN6
kRamFIvZn1/pQA==
-----END CERTIFICATE-----
Generated at Sat Apr 12 22:37:06 2025 by rpki-client