Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
File: 2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft (raw, json)
Hash identifier: a++CQaEUfT4xRnvuIgdMrNCQqo+F7rKB6DCTNkIsFJ8=
Subject key identifier: 4B:F7:7B:16:EC:DB:18:EE:A3:17:C1:1B:8F:A4:5B:3A:14:8F:DF:D8
Authority key identifier: D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
Certificate issuer: /CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Certificate serial: 01958C296D13757CAC8CAB7AE6775C64D152
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
Manifest number: 03B0
Signing time: Wed 12 Mar 2025 21:01:19 +0000
Manifest this update: Wed 12 Mar 2025 21:01:19 +0000
Manifest next update: Thu 13 Mar 2025 21:01:19 +0000
Files and hashes: 1: 2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl (hash: htt81fkO5NlC2jl4FK41PNNEWxydRB0eYXp4kr82ldA=)
2: WmpFDBZIecoNLuE1fAPBucxb25s.roa (hash: CVFI0AtBd1CzpeCb3OrHxMzLwBv39HpruY5loDuWyFE=)
3: vjaYC5QF6rIZllWMVDm6c67Viv4.roa (hash: aqLWSry32Dj3VlqfXXySEidqvEjI8Fi4ZsxlYgK0OGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:29:6d:13:75:7c:ac:8c:ab:7a:e6:77:5c:64:d1:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Validity
Not Before: Mar 12 21:01:19 2025 GMT
Not After : Mar 13 21:01:19 2025 GMT
Subject: CN=4bf77b16ecdb18eea317c11b8fa45b3a148fdfd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ba:e6:2b:d0:35:e2:b7:21:90:8e:f8:bf:0c:
14:41:6d:f1:c1:db:25:81:1a:1d:01:aa:48:04:cb:
8f:27:65:55:6d:59:45:b5:e3:e3:f8:ac:7b:32:11:
11:04:71:8e:cd:02:5f:80:fe:9b:d7:9f:09:1d:19:
e1:d2:f5:e0:01:db:90:7c:96:e6:7c:7f:57:58:a5:
89:ee:d6:de:e5:da:42:cc:48:dc:0c:a4:b2:e5:42:
f7:70:aa:01:58:32:31:9b:0b:be:4b:01:db:a4:1c:
11:01:83:79:0f:57:64:41:67:b6:67:24:23:34:51:
45:fb:d8:f0:aa:16:2b:50:c5:e7:7f:e1:08:a6:25:
93:3a:6d:63:d2:f8:e6:b3:c9:f3:34:14:3f:27:e8:
1f:44:06:d6:4b:05:5f:e2:5e:7b:1d:65:f5:c3:2f:
91:ec:c2:b5:1d:47:e9:18:c3:d1:4e:a9:41:b4:21:
6c:82:7f:6a:8f:5a:db:b4:44:49:d2:fe:19:70:72:
9e:31:b9:5c:30:57:72:9d:9e:96:1c:99:3f:9d:8e:
9d:06:a1:4b:64:7f:2b:73:79:02:b5:30:25:21:b4:
6f:1b:1e:9c:b4:8a:bd:e1:ec:39:bc:ab:fd:b9:8a:
d9:27:c3:37:a8:67:75:82:61:51:4e:e6:95:e1:be:
31:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F7:7B:16:EC:DB:18:EE:A3:17:C1:1B:8F:A4:5B:3A:14:8F:DF:D8
X509v3 Authority Key Identifier:
keyid:D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:e2:b6:13:4d:d2:94:b0:06:b5:22:5d:95:a4:38:fc:1a:49:
59:34:ee:c5:d7:ec:46:44:a3:c5:1b:cc:19:38:11:22:20:20:
b8:1c:da:33:83:5d:04:4f:1b:c2:27:c6:5b:3e:83:f3:ae:3d:
60:35:b5:dd:d3:cc:01:f5:4e:69:0a:92:d8:ed:20:6a:9d:e1:
73:ab:e6:4d:eb:59:5e:7c:aa:61:24:4b:a6:ff:ea:5c:d7:c6:
1f:15:d5:32:b5:6b:14:d2:52:5f:36:67:7c:14:87:87:91:d6:
9a:16:fe:57:ba:7b:7a:ad:3c:7c:2f:50:35:36:83:74:39:01:
60:4e:65:db:cd:a6:e3:00:93:eb:fe:78:49:ba:6c:b7:bd:62:
98:ba:6c:b8:40:0c:3f:e6:d3:ed:fe:f2:d0:8e:a6:74:9b:be:
04:16:a0:75:f0:7e:fb:3a:f0:56:b5:58:30:23:fb:f5:3a:94:
06:b8:06:4a:c9:e7:af:5c:4a:74:d0:88:d8:dd:b4:4f:c7:35:
c2:a2:9d:ff:a8:a3:ee:de:11:9d:4f:72:2e:39:27:bf:29:0f:
2d:a2:4d:b9:2c:25:f7:34:69:74:45:bb:76:d7:91:5c:86:5a:
21:f1:83:15:aa:db:f2:96:c5:35:0a:e1:23:fe:ae:3b:aa:3f:
e0:55:d4:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWMKW0TdXysjKt65ndcZNFSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MDEyZmFmOTgyNzVhZTRmM2Y4ZDg3ZjA4NGVlNGZmODQy
MGM0ODUwHhcNMjUwMzEyMjEwMTE5WhcNMjUwMzEzMjEwMTE5WjAzMTEwLwYDVQQD
Eyg0YmY3N2IxNmVjZGIxOGVlYTMxN2MxMWI4ZmE0NWIzYTE0OGZkZmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3brmK9A14rchkI74vwwUQW3xwdsl
gRodAapIBMuPJ2VVbVlFtePj+Kx7MhERBHGOzQJfgP6b158JHRnh0vXgAduQfJbm
fH9XWKWJ7tbe5dpCzEjcDKSy5UL3cKoBWDIxmwu+SwHbpBwRAYN5D1dkQWe2ZyQj
NFFF+9jwqhYrUMXnf+EIpiWTOm1j0vjms8nzNBQ/J+gfRAbWSwVf4l57HWX1wy+R
7MK1HUfpGMPRTqlBtCFsgn9qj1rbtERJ0v4ZcHKeMblcMFdynZ6WHJk/nY6dBqFL
ZH8rc3kCtTAlIbRvGx6ctIq94ew5vKv9uYrZJ8M3qGd1gmFRTuaV4b4xoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEv3exbs2xjuoxfBG4+kWzoUj9/YMB8GA1UdIwQY
MBaAFNgBL6+YJ1rk8/jYfwhO5P+EIMSFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkFFdnI1Z25XdVR6LU5oX0NFN2tfNFFneElVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9mNjdhYTgtNTFjMi00M2IyLWIwMjIt
NmQ1NjBkZWJmN2IzLzEvMkFFdnI1Z25XdVR6LU5oX0NFN2tfNFFneElVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9mNjdhYTgtNTFjMi00M2IyLWIwMjItNmQ1NjBkZWJmN2Iz
LzEvMkFFdnI1Z25XdVR6LU5oX0NFN2tfNFFneElVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASuK2E03S
lLAGtSJdlaQ4/BpJWTTuxdfsRkSjxRvMGTgRIiAguBzaM4NdBE8bwifGWz6D8649
YDW13dPMAfVOaQqS2O0gap3hc6vmTetZXnyqYSRLpv/qXNfGHxXVMrVrFNJSXzZn
fBSHh5HWmhb+V7p7eq08fC9QNTaDdDkBYE5l282m4wCT6/54Sbpst71imLpsuEAM
P+bT7f7y0I6mdJu+BBagdfB++zrwVrVYMCP79TqUBrgGSsnnr1xKdNCI2N20T8c1
wqKd/6ij7t4RnU9yLjknvykPLaJNuSwl9zRpdEW7dteRXIZaIfGDFarb8pbFNQrh
I/6uO6o/4FXUnA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:56 2025 by rpki-client