Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
File: 2j0-lJKxHEZpFVt8juTxR1S4UiI.mft (raw, json)
Hash identifier: mDuH9AKgCmnxRrYBeR1qsH+1DMPwN6STwBc5QhnvJQU=
Subject key identifier: 7E:2B:DC:1F:B9:07:14:2D:B0:08:A6:50:20:EB:4A:EB:D6:06:E1:0C
Authority key identifier: DA:3D:3E:94:92:B1:1C:46:69:15:5B:7C:8E:E4:F1:47:54:B8:52:22
Certificate issuer: /CN=da3d3e9492b11c4669155b7c8ee4f14754b85222
Certificate serial: 019644B20FE8EFF97775498BDE3DA504AA18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
Manifest number: 0ACE
Signing time: Thu 17 Apr 2025 17:00:42 +0000
Manifest this update: Thu 17 Apr 2025 17:00:42 +0000
Manifest next update: Fri 18 Apr 2025 17:00:42 +0000
Files and hashes: 1: 2j0-lJKxHEZpFVt8juTxR1S4UiI.crl (hash: SyJP8H1zrElujktIby27wOiNfsCzalj+OhikEPpvqSg=)
2: 8A_vFBgMpFWglBEQF7o4I6LIqZI.roa (hash: RJK8dbnaebBPle7iamBGAEVJsY9JkiFkWcMwD2OIcfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:b2:0f:e8:ef:f9:77:75:49:8b:de:3d:a5:04:aa:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da3d3e9492b11c4669155b7c8ee4f14754b85222
Validity
Not Before: Apr 17 17:00:42 2025 GMT
Not After : Apr 18 17:00:42 2025 GMT
Subject: CN=7e2bdc1fb907142db008a65020eb4aebd606e10c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7d:6c:16:1f:82:41:38:96:1d:76:36:5a:ab:
71:77:f8:36:a8:a1:8b:13:81:39:65:63:97:0b:50:
9f:6f:0d:f6:67:c1:e2:28:ea:8f:82:27:fb:a6:a7:
8b:52:68:f9:fb:ff:7b:13:95:dc:d2:47:96:a4:f6:
bf:0b:1c:0c:a2:40:a4:c9:19:41:21:fe:84:d1:ca:
e3:33:5a:00:74:a0:c5:74:8f:a0:6f:6c:fd:b7:0e:
ee:96:2e:0a:1d:65:ef:96:4d:7e:ac:94:06:66:2b:
70:2c:ba:bc:ec:ab:4d:f8:21:34:03:15:d9:7e:1b:
43:19:a8:f3:a7:60:ca:b5:85:9f:9c:e0:1f:6f:8e:
82:49:7b:b4:ef:48:90:4d:b5:d4:17:26:63:bd:1b:
da:6e:75:0b:8e:2d:db:ec:d6:6c:c1:6b:ff:ef:80:
fd:73:4e:26:d6:f3:eb:4c:3d:9b:56:21:44:6b:fb:
73:0c:4c:53:d7:5f:d9:6c:8f:d8:a5:30:3b:bf:2d:
62:6f:6c:79:ec:66:d1:08:5a:85:96:92:31:e3:a6:
77:ab:e7:bb:58:af:fa:22:e2:13:bb:70:1e:8b:02:
99:d2:4f:f7:3f:0b:7a:9e:a2:b2:65:bd:81:80:e9:
c2:cb:8f:24:3c:a2:17:9f:35:2b:3d:2f:96:19:8b:
d0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2B:DC:1F:B9:07:14:2D:B0:08:A6:50:20:EB:4A:EB:D6:06:E1:0C
X509v3 Authority Key Identifier:
keyid:DA:3D:3E:94:92:B1:1C:46:69:15:5B:7C:8E:E4:F1:47:54:B8:52:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2j0-lJKxHEZpFVt8juTxR1S4UiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/629bb7-3cf8-4756-a90e-0414488ae082/1/2j0-lJKxHEZpFVt8juTxR1S4UiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:d4:9d:45:5f:d1:da:3b:36:87:cf:3b:a2:fa:e3:b2:97:04:
85:ed:0f:e3:b8:67:60:02:c3:b7:6a:b6:8c:49:96:c5:b8:72:
77:83:04:62:2f:02:89:77:e6:19:a5:0c:c0:51:a0:15:3f:77:
3a:a0:9a:57:db:62:02:de:42:a0:73:2c:bc:0b:61:12:6a:08:
0f:ab:1c:b3:10:bf:e1:d6:e8:43:1a:d7:f2:e7:64:bc:14:45:
72:aa:5e:08:6f:e1:af:d4:3b:dc:01:3b:54:d8:65:a7:08:1e:
93:c1:20:83:d7:4d:26:0c:b0:65:3b:44:11:de:33:b9:55:5a:
b6:08:4f:4e:58:b1:2d:6c:e4:2f:10:a1:5e:13:27:5e:96:18:
93:e7:e5:db:fc:a8:0a:fc:d5:a9:b4:96:8c:01:bc:bb:ab:35:
a9:a8:b8:18:17:66:17:cd:41:11:36:4e:0f:09:c0:6a:41:f8:
f5:01:fb:fb:bc:72:2e:ba:01:53:b8:df:3c:25:64:90:10:8c:
9f:9c:74:08:c6:66:05:ea:3a:dc:89:88:79:cc:82:88:2a:6d:
9e:77:80:2c:62:cc:5a:d1:60:60:3d:bb:45:4b:d2:2b:ed:6c:
e8:31:c8:f9:33:75:ad:38:c5:ab:b4:6e:14:0a:63:89:85:20:
4e:a4:42:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZEsg/o7/l3dUmL3j2lBKoYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhM2QzZTk0OTJiMTFjNDY2OTE1NWI3YzhlZTRmMTQ3NTRi
ODUyMjIwHhcNMjUwNDE3MTcwMDQyWhcNMjUwNDE4MTcwMDQyWjAzMTEwLwYDVQQD
Eyg3ZTJiZGMxZmI5MDcxNDJkYjAwOGE2NTAyMGViNGFlYmQ2MDZlMTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs31sFh+CQTiWHXY2Wqtxd/g2qKGL
E4E5ZWOXC1Cfbw32Z8HiKOqPgif7pqeLUmj5+/97E5Xc0keWpPa/CxwMokCkyRlB
If6E0crjM1oAdKDFdI+gb2z9tw7uli4KHWXvlk1+rJQGZitwLLq87KtN+CE0AxXZ
fhtDGajzp2DKtYWfnOAfb46CSXu070iQTbXUFyZjvRvabnULji3b7NZswWv/74D9
c04m1vPrTD2bViFEa/tzDExT11/ZbI/YpTA7vy1ib2x57GbRCFqFlpIx46Z3q+e7
WK/6IuITu3AeiwKZ0k/3Pwt6nqKyZb2BgOnCy48kPKIXnzUrPS+WGYvQHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH4r3B+5BxQtsAimUCDrSuvWBuEMMB8GA1UdIwQY
MBaAFNo9PpSSsRxGaRVbfI7k8UdUuFIiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmowLWxKS3hIRVpwRlZ0OGp1VHhSMVM0VWlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC82MjliYjctM2NmOC00NzU2LWE5MGUt
MDQxNDQ4OGFlMDgyLzEvMmowLWxKS3hIRVpwRlZ0OGp1VHhSMVM0VWlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC82MjliYjctM2NmOC00NzU2LWE5MGUtMDQxNDQ4OGFlMDgy
LzEvMmowLWxKS3hIRVpwRlZ0OGp1VHhSMVM0VWlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQNSdRV/R
2js2h887ovrjspcEhe0P47hnYALDt2q2jEmWxbhyd4MEYi8CiXfmGaUMwFGgFT93
OqCaV9tiAt5CoHMsvAthEmoID6scsxC/4dboQxrX8udkvBRFcqpeCG/hr9Q73AE7
VNhlpwgek8Egg9dNJgywZTtEEd4zuVVatghPTlixLWzkLxChXhMnXpYYk+fl2/yo
CvzVqbSWjAG8u6s1qai4GBdmF81BETZODwnAakH49QH7+7xyLroBU7jfPCVkkBCM
n5x0CMZmBeo63ImIecyCiCptnneALGLMWtFgYD27RUvSK+1s6DHI+TN1rTjFq7Ru
FApjiYUgTqRC9g==
-----END CERTIFICATE-----
Generated at Thu Apr 17 20:13:22 2025 by rpki-client