Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
File: 2g_9vJMxeNehu_mWCOOpXU3uiuY.mft (raw, json)
Hash identifier: aZ3P5Gse6In44trI2wVFc2VEmAgW+PsEa4zw+Yhciss=
Subject key identifier: 56:22:BF:71:B1:BA:EB:FE:95:B0:7C:76:87:04:C8:C5:AB:28:38:84
Authority key identifier: DA:0F:FD:BC:93:31:78:D7:A1:BB:F9:96:08:E3:A9:5D:4D:EE:8A:E6
Certificate issuer: /CN=da0ffdbc933178d7a1bbf99608e3a95d4dee8ae6
Certificate serial: 0196120ECB3FC4BEB2502719CD4DE8AF1FBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
Manifest number: 06E0
Signing time: Mon 07 Apr 2025 21:01:21 +0000
Manifest this update: Mon 07 Apr 2025 21:01:21 +0000
Manifest next update: Tue 08 Apr 2025 21:01:21 +0000
Files and hashes: 1: 2g_9vJMxeNehu_mWCOOpXU3uiuY.crl (hash: PhyeuEUMFYcs0hkWCoXf3C6RvsjcOX2rEM98ni6zTAM=)
2: N6LVOXDpApHcakcmSkzmPFC6k_k.roa (hash: JBlMcthOLqVJmLIR25J/oCOwYGgINMhp1piHtiBmVPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:0e:cb:3f:c4:be:b2:50:27:19:cd:4d:e8:af:1f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0ffdbc933178d7a1bbf99608e3a95d4dee8ae6
Validity
Not Before: Apr 7 21:01:21 2025 GMT
Not After : Apr 8 21:01:21 2025 GMT
Subject: CN=5622bf71b1baebfe95b07c768704c8c5ab283884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:41:2d:e1:2e:e1:d0:27:fb:ca:3f:d9:6a:c8:
2d:7e:3b:b9:50:f5:11:4b:de:6d:6e:da:74:f1:ba:
f6:5b:3c:17:52:1b:69:d0:91:99:49:ea:be:dc:11:
6d:99:4e:d1:8a:0c:05:15:fc:3b:5d:1a:fb:d2:69:
a5:09:d8:83:1b:19:d7:f7:e3:0a:91:dc:83:9c:db:
40:28:fe:f2:e8:06:3a:4a:ab:6a:00:7c:1a:68:d0:
e0:9c:cb:75:22:99:1e:0d:8f:cb:ef:6f:cd:2c:8b:
8f:2a:76:72:ff:6a:8d:4a:48:1d:b1:24:a3:a2:a2:
86:3f:41:82:52:ac:62:11:80:b1:ff:25:08:c9:9e:
90:34:75:96:09:01:d5:9d:d2:b3:6a:ee:11:53:50:
2c:19:d0:7d:d9:e1:c0:63:8f:dd:d2:e5:79:fe:77:
b7:2b:4b:57:14:0e:b0:84:a1:c6:40:58:0f:31:5d:
24:16:fe:ea:5f:f9:4f:25:ca:9b:55:4f:16:eb:09:
3b:ff:11:c2:df:f4:0a:81:8e:68:34:fa:f6:b4:88:
25:38:7d:34:fb:16:69:aa:67:8d:a7:64:d3:4d:5e:
8e:44:5a:fa:3a:d8:cb:4b:59:4f:63:db:f0:1c:ae:
68:e2:14:a3:e6:02:11:0b:07:25:cc:65:0d:c6:0c:
f4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:22:BF:71:B1:BA:EB:FE:95:B0:7C:76:87:04:C8:C5:AB:28:38:84
X509v3 Authority Key Identifier:
keyid:DA:0F:FD:BC:93:31:78:D7:A1:BB:F9:96:08:E3:A9:5D:4D:EE:8A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:98:e5:94:f7:a5:32:f2:d3:4f:18:f4:8b:93:d8:b3:e4:04:
69:aa:e7:81:36:09:8d:79:bf:8f:0e:7b:dc:3a:05:60:93:d0:
a8:6f:e9:fd:46:24:2b:fd:70:2e:5f:0d:19:86:ab:b4:9a:55:
20:d8:a4:ba:7d:67:48:80:30:5c:0a:d8:cd:0f:5f:bf:14:08:
f5:71:cd:ed:6f:49:06:67:77:46:c4:e3:94:70:af:4c:02:f2:
d5:3e:76:68:05:7a:12:71:02:b6:c9:e9:08:ec:f5:60:14:34:
dc:a3:ee:7b:e2:14:b6:98:96:6f:e7:d5:18:33:db:03:a0:3f:
c8:f7:50:88:b4:23:ec:71:cc:9d:3c:51:8f:78:2f:c5:3e:59:
ec:1e:51:1b:b5:56:b7:65:36:35:fa:5e:27:6f:6b:54:c8:b3:
f2:82:1e:7f:f6:bd:65:62:e8:34:34:98:01:d1:27:5f:47:56:
e9:5a:8c:78:db:49:89:00:e0:2f:a9:06:3b:02:80:d8:e6:72:
b5:cd:b2:99:18:a9:79:ce:34:af:4f:77:ab:b4:9e:3d:2e:8e:
72:6e:9b:5e:da:3f:ec:1c:21:e5:f4:7c:1a:d5:f0:02:0f:ff:
4d:0e:01:9a:ea:4f:49:a6:6a:51:88:5e:4a:d7:e4:e7:48:c3:
22:15:47:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYSDss/xL6yUCcZzU3orx++MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMGZmZGJjOTMzMTc4ZDdhMWJiZjk5NjA4ZTNhOTVkNGRl
ZThhZTYwHhcNMjUwNDA3MjEwMTIxWhcNMjUwNDA4MjEwMTIxWjAzMTEwLwYDVQQD
Eyg1NjIyYmY3MWIxYmFlYmZlOTViMDdjNzY4NzA0YzhjNWFiMjgzODg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kEt4S7h0Cf7yj/Zasgtfju5UPUR
S95tbtp08br2WzwXUhtp0JGZSeq+3BFtmU7RigwFFfw7XRr70mmlCdiDGxnX9+MK
kdyDnNtAKP7y6AY6SqtqAHwaaNDgnMt1IpkeDY/L72/NLIuPKnZy/2qNSkgdsSSj
oqKGP0GCUqxiEYCx/yUIyZ6QNHWWCQHVndKzau4RU1AsGdB92eHAY4/d0uV5/ne3
K0tXFA6whKHGQFgPMV0kFv7qX/lPJcqbVU8W6wk7/xHC3/QKgY5oNPr2tIglOH00
+xZpqmeNp2TTTV6ORFr6OtjLS1lPY9vwHK5o4hSj5gIRCwclzGUNxgz0rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFYiv3Gxuuv+lbB8docEyMWrKDiEMB8GA1UdIwQY
MBaAFNoP/byTMXjXobv5lgjjqV1N7ormMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdfOXZKTXhlTmVodV9tV0NPT3BYVTN1aXVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lZmJlZDgtOWZmMC00NDU1LWEwN2Ut
M2NhZDM3MDY3NDA1LzEvMmdfOXZKTXhlTmVodV9tV0NPT3BYVTN1aXVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9lZmJlZDgtOWZmMC00NDU1LWEwN2UtM2NhZDM3MDY3NDA1
LzEvMmdfOXZKTXhlTmVodV9tV0NPT3BYVTN1aXVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhpjllPel
MvLTTxj0i5PYs+QEaarngTYJjXm/jw573DoFYJPQqG/p/UYkK/1wLl8NGYartJpV
INikun1nSIAwXArYzQ9fvxQI9XHN7W9JBmd3RsTjlHCvTALy1T52aAV6EnECtsnp
COz1YBQ03KPue+IUtpiWb+fVGDPbA6A/yPdQiLQj7HHMnTxRj3gvxT5Z7B5RG7VW
t2U2NfpeJ29rVMiz8oIef/a9ZWLoNDSYAdEnX0dW6VqMeNtJiQDgL6kGOwKA2OZy
tc2ymRipec40r093q7SePS6Ocm6bXto/7Bwh5fR8GtXwAg//TQ4BmupPSaZqUYhe
Stfk50jDIhVHzA==
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:03:34 2025 by rpki-client