Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft
File: u2L-a389NkMyvNbg2veSJsz4CeI.mft (raw, json)
Hash identifier: 8nj6USVZcjUyYwDwGeIrnMJfIXGE62dPOuuaFBKve70=
Subject key identifier: 75:DA:7A:97:58:23:A7:52:B6:9C:FE:4C:20:21:63:E3:F2:9B:D6:C1
Authority key identifier: BB:62:FE:6B:7F:3D:36:43:32:BC:D6:E0:DA:F7:92:26:CC:F8:09:E2
Certificate issuer: /CN=bb62fe6b7f3d364332bcd6e0daf79226ccf809e2
Certificate serial: 01964BFE095C1B4767104430B0F4BAB1C292
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2L-a389NkMyvNbg2veSJsz4CeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft
Manifest number: 0F53
Signing time: Sat 19 Apr 2025 03:01:01 +0000
Manifest this update: Sat 19 Apr 2025 03:01:01 +0000
Manifest next update: Sun 20 Apr 2025 03:01:01 +0000
Files and hashes: 1: r_R3L74YEYwgwhUjmdIRM8Gt5Co.roa (hash: 3ISVt6WPiJRKb5tRNRRN7hMIBSFWG9w6qCsEMd5nA3Q=)
2: u2L-a389NkMyvNbg2veSJsz4CeI.crl (hash: vptgwMKfs/yu1FyIQAHRPXRn/NEmoKsKQ2ly5lGyo1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/u2L-a389NkMyvNbg2veSJsz4CeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 03:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fe:09:5c:1b:47:67:10:44:30:b0:f4:ba:b1:c2:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb62fe6b7f3d364332bcd6e0daf79226ccf809e2
Validity
Not Before: Apr 19 03:01:01 2025 GMT
Not After : Apr 20 03:01:01 2025 GMT
Subject: CN=75da7a975823a752b69cfe4c202163e3f29bd6c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f4:3f:7b:bd:be:96:d7:10:b0:98:e8:df:44:
0e:e8:66:9b:0f:7a:df:15:1f:47:5a:02:99:2f:e3:
a2:fe:d0:3a:80:87:9f:8e:9e:d3:d8:f9:8b:7c:18:
b0:ff:b8:da:3d:6e:14:37:b5:7d:d3:74:46:9b:d4:
f0:be:aa:09:60:17:1c:3a:b6:c6:da:41:cd:39:25:
9a:c7:f6:c6:01:a0:7c:20:a0:61:dd:97:2d:d3:53:
51:b2:b7:6c:e0:ff:fd:49:2a:aa:12:5f:62:ac:4e:
24:02:4e:43:e6:e9:ce:ab:8c:cf:be:f2:ae:a4:ad:
cb:3a:ce:33:9a:83:e5:a1:39:91:eb:64:73:c4:d3:
48:52:e7:e2:c8:61:07:0f:75:fd:e0:3d:84:13:dd:
47:ca:c6:12:80:c2:1e:20:8d:23:c5:88:ae:47:0c:
ee:47:1a:75:fb:f5:e8:c8:8b:43:89:6d:e1:b8:25:
f4:c6:b2:e0:d3:62:b0:00:87:30:04:16:f1:e2:d8:
6c:75:7d:93:36:8d:14:2c:6b:05:71:1d:62:14:0b:
89:62:c1:f8:35:06:0d:00:bc:56:ae:b8:39:d4:21:
58:70:68:ef:d6:d5:da:73:94:b4:04:8a:de:ce:e9:
87:c4:f4:1e:cf:2a:fb:69:16:dd:98:72:84:e0:e5:
72:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DA:7A:97:58:23:A7:52:B6:9C:FE:4C:20:21:63:E3:F2:9B:D6:C1
X509v3 Authority Key Identifier:
keyid:BB:62:FE:6B:7F:3D:36:43:32:BC:D6:E0:DA:F7:92:26:CC:F8:09:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2L-a389NkMyvNbg2veSJsz4CeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:a4:b4:e1:c1:cf:8f:36:9f:02:cc:92:8b:23:75:e5:6b:2f:
af:99:ff:cf:e5:e5:40:b6:8b:cb:08:bb:c9:b2:aa:47:d5:e5:
38:b8:b1:cb:0d:17:0c:c0:ac:49:2e:9c:bb:07:be:11:04:82:
a3:09:bf:8f:57:88:23:0e:9a:d0:3e:ee:72:8a:da:1e:b7:a6:
af:08:2a:55:ce:03:0f:ea:15:58:68:44:1a:c2:bb:3d:2a:cb:
25:c7:fa:cc:2f:44:a3:17:f0:cf:5b:be:45:04:46:13:ff:eb:
d4:17:c5:47:98:3c:17:3b:c6:f7:53:15:c9:e1:20:60:af:15:
71:e7:be:ac:7c:5d:c8:df:c5:1e:e5:0a:8d:a5:03:b6:97:4e:
da:58:7a:7d:d8:d5:fb:81:7a:8c:fa:05:9e:86:71:e0:4e:5b:
f2:bd:5f:cf:29:54:57:f7:87:91:3a:26:4e:ac:8a:e9:d6:b8:
c9:cd:05:fa:2d:f6:42:bc:86:ce:3e:0d:64:6b:d7:e8:2c:c7:
d3:d5:a8:7c:0c:ec:10:96:f0:ed:ab:c2:f5:fe:55:1c:f3:82:
7c:8d:a4:dc:a7:60:60:0f:55:13:f2:e9:bf:34:da:b8:00:57:
6f:63:72:d6:43:ff:80:39:51:a7:4f:eb:39:4a:c2:9f:ff:dd:
f5:85:a4:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZL/glcG0dnEEQwsPS6scKSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNjJmZTZiN2YzZDM2NDMzMmJjZDZlMGRhZjc5MjI2Y2Nm
ODA5ZTIwHhcNMjUwNDE5MDMwMTAxWhcNMjUwNDIwMDMwMTAxWjAzMTEwLwYDVQQD
Eyg3NWRhN2E5NzU4MjNhNzUyYjY5Y2ZlNGMyMDIxNjNlM2YyOWJkNmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6fQ/e72+ltcQsJjo30QO6GabD3rf
FR9HWgKZL+Oi/tA6gIefjp7T2PmLfBiw/7jaPW4UN7V903RGm9TwvqoJYBccOrbG
2kHNOSWax/bGAaB8IKBh3Zct01NRsrds4P/9SSqqEl9irE4kAk5D5unOq4zPvvKu
pK3LOs4zmoPloTmR62RzxNNIUufiyGEHD3X94D2EE91HysYSgMIeII0jxYiuRwzu
Rxp1+/XoyItDiW3huCX0xrLg02KwAIcwBBbx4thsdX2TNo0ULGsFcR1iFAuJYsH4
NQYNALxWrrg51CFYcGjv1tXac5S0BIrezumHxPQezyr7aRbdmHKE4OVypwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHXaepdYI6dStpz+TCAhY+Pym9bBMB8GA1UdIwQY
MBaAFLti/mt/PTZDMrzW4Nr3kibM+AniMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTJMLWEzODlOa015dk5iZzJ2ZVNKc3o0Q2VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9mZmJmMTgtYWEwMy00MzRjLThiYmQt
MTQxNDUwZjEwYTg1LzEvdTJMLWEzODlOa015dk5iZzJ2ZVNKc3o0Q2VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9mZmJmMTgtYWEwMy00MzRjLThiYmQtMTQxNDUwZjEwYTg1
LzEvdTJMLWEzODlOa015dk5iZzJ2ZVNKc3o0Q2VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi6S04cHP
jzafAsySiyN15Wsvr5n/z+XlQLaLywi7ybKqR9XlOLixyw0XDMCsSS6cuwe+EQSC
owm/j1eIIw6a0D7ucoraHremrwgqVc4DD+oVWGhEGsK7PSrLJcf6zC9Eoxfwz1u+
RQRGE//r1BfFR5g8FzvG91MVyeEgYK8Vcee+rHxdyN/FHuUKjaUDtpdO2lh6fdjV
+4F6jPoFnoZx4E5b8r1fzylUV/eHkTomTqyK6da4yc0F+i32QryGzj4NZGvX6CzH
09WofAzsEJbw7avC9f5VHPOCfI2k3KdgYA9VE/LpvzTauABXb2Ny1kP/gDlRp0/r
OUrCn//d9YWkjg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 11:37:35 2025 by rpki-client