Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
File: l8AN4AfUqkpAMdR2ELObd0kIv0k.mft (raw, json)
Hash identifier: Q7CwnkTK+fPtpqQ5KNVIKAdwPwe6PkYEWNFp8PCkG2w=
Subject key identifier: 1E:87:4C:3D:4B:66:71:1A:F4:57:16:8E:C4:1B:03:0D:37:04:FC:04
Authority key identifier: 97:C0:0D:E0:07:D4:AA:4A:40:31:D4:76:10:B3:9B:77:49:08:BF:49
Certificate issuer: /CN=97c00de007d4aa4a4031d47610b39b774908bf49
Certificate serial: 01964D7DEB5470CEB7947BC85B867DE060E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
Manifest number: DF
Signing time: Sat 19 Apr 2025 10:00:19 +0000
Manifest this update: Sat 19 Apr 2025 10:00:19 +0000
Manifest next update: Sun 20 Apr 2025 10:00:19 +0000
Files and hashes: 1: 6v3xaZ7YrvMvQdKxxjWwKZ-HZN4.roa (hash: hWUPq5N6t+RwJdEvOikw63sUGiZaD6rAh+UZM/+TLZM=)
2: l8AN4AfUqkpAMdR2ELObd0kIv0k.crl (hash: u4rg+QmocYoG+D+j42664Ry5cE4SOhPsnOJiTo7XRPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7d:eb:54:70:ce:b7:94:7b:c8:5b:86:7d:e0:60:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c00de007d4aa4a4031d47610b39b774908bf49
Validity
Not Before: Apr 19 10:00:19 2025 GMT
Not After : Apr 20 10:00:19 2025 GMT
Subject: CN=1e874c3d4b66711af457168ec41b030d3704fc04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:32:f1:3f:40:dc:63:ca:f8:30:08:be:7a:f2:
4c:f1:aa:3c:89:46:77:c6:68:c5:50:bb:4e:86:c9:
fb:27:c3:72:14:bb:02:6e:41:15:3f:78:c0:66:ef:
1f:f5:d2:b3:f5:69:d2:a7:10:71:d4:93:b6:9c:ff:
70:ac:4b:f1:76:de:75:11:03:76:c8:02:07:67:d5:
27:5d:b0:c4:0f:69:f9:52:6a:79:cd:02:4b:b6:4e:
03:29:93:5c:72:5f:e5:32:e3:e2:e1:a4:9f:7a:00:
e7:60:b6:35:32:5b:0e:f6:8c:a4:bb:64:b3:23:d5:
82:47:52:d9:bd:7c:3e:a1:1d:8a:94:2e:88:3c:72:
5d:4d:51:d3:51:6e:40:03:7f:2d:57:b5:4e:9d:a9:
89:d1:be:8b:30:78:e2:16:91:6a:e8:b4:15:5a:d9:
80:f9:f1:d2:c4:e7:f7:4a:22:e9:d5:30:b7:16:83:
d7:b9:e4:80:90:7d:ef:4d:f1:05:86:b9:27:d6:8e:
49:d0:f0:a1:16:02:cf:d4:1d:e4:b8:fc:fc:22:d3:
b9:21:12:83:32:da:12:1c:a6:1c:4c:18:4d:be:a4:
08:39:b7:9c:4e:c5:b9:30:1a:2d:d5:e1:77:be:e9:
e7:42:d0:00:68:08:80:a9:35:95:5b:ac:78:28:a4:
29:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:87:4C:3D:4B:66:71:1A:F4:57:16:8E:C4:1B:03:0D:37:04:FC:04
X509v3 Authority Key Identifier:
keyid:97:C0:0D:E0:07:D4:AA:4A:40:31:D4:76:10:B3:9B:77:49:08:BF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ef:64:22:02:b7:6b:09:ee:b1:65:22:4d:ed:9a:11:06:cf:
97:7f:41:d2:73:18:78:74:f4:16:3c:c4:d9:c3:4e:bd:ef:cd:
61:65:57:22:be:c7:94:31:f5:8b:2b:eb:22:14:0d:bd:41:4e:
a0:60:f3:a8:0c:42:87:ad:7c:d6:c3:e0:6a:9d:a2:f2:56:2a:
93:26:27:01:e3:53:3f:6b:0b:0c:03:32:d0:c1:bf:4c:7d:a9:
fa:27:ec:e2:9f:06:d9:5f:84:c5:cf:44:1c:64:b7:ac:28:c6:
5c:c1:75:62:44:36:b7:f8:84:81:69:19:64:f5:25:22:b0:73:
ae:99:cf:85:3c:87:8c:33:b8:42:0b:e6:18:8f:2f:e0:04:2d:
21:37:36:de:0d:a9:c9:bd:ac:62:db:dc:61:bf:57:d0:26:ed:
b0:d1:3e:1b:a8:0a:62:84:ca:30:71:0e:1c:ab:e2:0a:a8:6b:
bb:a0:a6:d9:b7:11:a9:fb:35:e6:d5:03:2b:50:9a:d3:94:82:
5b:3c:a0:ee:47:5a:63:02:e5:40:cb:c3:cf:da:83:7d:46:97:
84:21:fa:ce:c6:8e:62:84:53:81:1d:e5:61:27:72:9c:b2:bf:
75:77:92:d0:b5:1b:63:f5:ce:a3:b4:d0:f2:07:9c:18:09:ce:
a1:ad:bf:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZNfetUcM63lHvIW4Z94GDhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3YzAwZGUwMDdkNGFhNGE0MDMxZDQ3NjEwYjM5Yjc3NDkw
OGJmNDkwHhcNMjUwNDE5MTAwMDE5WhcNMjUwNDIwMTAwMDE5WjAzMTEwLwYDVQQD
EygxZTg3NGMzZDRiNjY3MTFhZjQ1NzE2OGVjNDFiMDMwZDM3MDRmYzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDLxP0DcY8r4MAi+evJM8ao8iUZ3
xmjFULtOhsn7J8NyFLsCbkEVP3jAZu8f9dKz9WnSpxBx1JO2nP9wrEvxdt51EQN2
yAIHZ9UnXbDED2n5Ump5zQJLtk4DKZNccl/lMuPi4aSfegDnYLY1MlsO9oyku2Sz
I9WCR1LZvXw+oR2KlC6IPHJdTVHTUW5AA38tV7VOnamJ0b6LMHjiFpFq6LQVWtmA
+fHSxOf3SiLp1TC3FoPXueSAkH3vTfEFhrkn1o5J0PChFgLP1B3kuPz8ItO5IRKD
MtoSHKYcTBhNvqQIObecTsW5MBot1eF3vunnQtAAaAiAqTWVW6x4KKQpLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB6HTD1LZnEa9FcWjsQbAw03BPwEMB8GA1UdIwQY
MBaAFJfADeAH1KpKQDHUdhCzm3dJCL9JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDhBTjRBZlVxa3BBTWRSMkVMT2JkMGtJdjBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8wMDc3YzUtZjBiZS00NjNmLWFiNzUt
OGMzZGNjNDU5MDI2LzEvbDhBTjRBZlVxa3BBTWRSMkVMT2JkMGtJdjBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8wMDc3YzUtZjBiZS00NjNmLWFiNzUtOGMzZGNjNDU5MDI2
LzEvbDhBTjRBZlVxa3BBTWRSMkVMT2JkMGtJdjBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAje9kIgK3
awnusWUiTe2aEQbPl39B0nMYeHT0FjzE2cNOve/NYWVXIr7HlDH1iyvrIhQNvUFO
oGDzqAxCh6181sPgap2i8lYqkyYnAeNTP2sLDAMy0MG/TH2p+ifs4p8G2V+Exc9E
HGS3rCjGXMF1YkQ2t/iEgWkZZPUlIrBzrpnPhTyHjDO4QgvmGI8v4AQtITc23g2p
yb2sYtvcYb9X0CbtsNE+G6gKYoTKMHEOHKviCqhru6Cm2bcRqfs15tUDK1Ca05SC
Wzyg7kdaYwLlQMvDz9qDfUaXhCH6zsaOYoRTgR3lYSdynLK/dXeS0LUbY/XOo7TQ
8gecGAnOoa2/NQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:21:38 2025 by rpki-client